last executing test programs: 6m38.964677389s ago: executing program 1 (id=2069): openat$audio1(0xffffffffffffff9c, 0x0, 0x129202, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x8c, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0x40000) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14fc29", 0xb) 6m36.8173319s ago: executing program 1 (id=2070): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 6m33.962812095s ago: executing program 1 (id=2077): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x20, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}, @nested={0x4, 0x2}]}, 0x20}}, 0xc000) sendmsg(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001400)="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", 0xfd2}], 0x1, &(0x7f0000003240)=ANY=[], 0xe10}, 0x40000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 6m33.672886589s ago: executing program 1 (id=2078): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r5 = fsopen(&(0x7f0000000080)='cifs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000200)='source', &(0x7f0000000140)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae\x01\x91&6n \xf2<\xd6\xcf\x15\xd3\xd7\x1d\xa7=\xef\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\\b\xa0\xbbL}\xcc\'(;\xdcjN\xab\xcf\xa0\x1dN\xbeA\x17\n\f\xcd=\'\x11\x1b\b>Z\x8e\xb1\xc3j$v\xef,\x06/\x00\x00\x00\x00\x00\xc7\x0f\xab\t\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81\x00\x00\x00', 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r8 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ptype\x00') preadv(r8, &(0x7f0000000380)=[{&(0x7f0000000000)=""/57, 0x39}], 0x1, 0x33, 0x800) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0300000004000000040000000a000000000000002a5368d57334f43009d69dee96b717f676344d69e38b796c8339821a8d4f8b89d3dbbfe5395b0ae652b117c5b843427182b42304e49f0d65132ee2ea18b3e26b318dece9184e074f692d0d63704c2d7092146806397792b8ccc05b6cfb148c970c9c1bd21a8638277f046760225a68ba7d17e912808f2cb3ea78d53e2043d4f6795eb597b521a8b81821cb77ccc1c9bcfc470f4ea6443384684cf6e2d7891becbe19a39eec5994e3dbda0c", @ANYRES32, @ANYBLOB='\f\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000200"/28], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r2, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xb3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x1}, 0x50) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(r12, 0xffffffffffffffff, 0x0) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000580)={0xffffffffffffffff, 0xe, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x1e, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000b1000000000c00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000084803000100000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000018220000", @ANYRES32=r9, @ANYBLOB="00000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000060000008500000006000000bf91000000000000b7020000023d00008500000084000000b7000000000000004c3d000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x1, '\x00', r10, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x5, 0x1, 0x7, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r4, r4, r11, 0xffffffffffffffff, r12, r13, 0xffffffffffffffff], 0x0, 0x10, 0xfffffff1}, 0x94) sendmsg$NL80211_CMD_GET_MPP(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x1c, r7, 0x1, 0x0, 0xffffffff, {{0x11}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xec0}, 0x0) 6m29.734840942s ago: executing program 1 (id=2084): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002d40)={0x2020}, 0x2020) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x28880) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000000a00)=[{{&(0x7f0000000240)={0xa, 0x4e30, 0xc52, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f00000004c0)="f3", 0x1}], 0x1}}], 0x1, 0x4000841) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004300)="00e7a0633e8438bafa888b9b02144af32e296a0a01dc194d649b6fa26d6d5e63bac4a04baeeb8aacb22c6eec461b67db6a737737c6d2687acb00572f92e3fdb5d0cb2f11121c557a943020200755bcab77b39c406b733239e2bb1175b9322ba39dc7d67da8f77aed1714dae2e6c24c3ea96be9d151c6ab7b3c54bbe507b8b2461fb4be8dc90042184af6d48f8ace16abb5e3fc943cf61cdb75624a259bdb5f7829b9775820f85f2d1a6ee6c6c2af4fd41ab8a41ecb2612abf13cd2c6f9f3e6db505e4bbe68cc000cf5fa6d5636191a4b366ab59af52132a3f9678d4ed1bd577bacffb3b52850804005eebf3dfa4763168ff30490a11acdbbf4c3312a45f30139f6b72b1e7cdec185006bb30e0e8fa88da2cefc718cae7e9830f7ca101e4e23c6bd16bfacf4a9927fb13af4b79c86ab999beda4ad396abdda354a42fb4ef21d6749175dc21a0cf9191aa4f90d274b50370a580ad8dcd166d2b06c0d8b071973c3fde30f7e2bc371a51ca5866bf8b24eaac75bf482dd4436b214ff62d32e20df223b0b680ede28b3a49e66e330a8a3ecace0db9855d235d5ff23765e742d1a739c2ac8743f4c62664a3b347279da55a1a5b16e1e2828b584a013577d50f890e3894d9e8d6bfccdfb2b70221f12a7fac24b7a8818edce72b65f622c77bf1312771a2c0d805ec9a25c536c91868762032255be78903b77b2c1a773a03996fabba69214e76f5df6df0375b592692a2c3c86c75a3be56fe598ddaea0b9901d20db7e43e128e04e5509283f833c24c625887288459db5727210ba9a301fb8c934dd1d8dca68039fe5b2e1a8d7cdfc6d875e5851098100c3cd42544ed90bb55b58d20a501fabbc485d148c615a3b070fa0520da2ed68ee115a4411d5418b47f3d95616096f67a7a36d68f1e8df82eca8ef96fb4a96b3422fe046a37ea5f5967513a559bd770fecab7228b0692f439765c9e9c6ea4fc608e0b27f9b49064daa2bac06f83f6d87ebc61fa3a29bb5ed39641245ce8cf43770df32a84838802b0827ca5a40e2003915e2ed108a005637bb028d29bd2cfd28a1bd55e67ed1b6b7b72163c27c4b0e36d1b134d6dfdb165a66fb46498fc04bb8053b84098af5b18758631d1318d625a6fa4d3ce5a4d3a90e10c6363a26b5ae96c2d56f87ad21a6118af6847d041f88f852ddc3f250c088ef5cb31198f3ac81cff9a5bab26ed56c09f8416188974e08349f7da28fc754b98c1ac4ea0060ac1e1b1c49f7dbadbc59254b265dc418cab9ac14e2bbecc4c3103543e37984efb1f61315e10d2b422732217d3a9b0cfe4561f3765d3bda60be239e02bdc164dd631582e8c87dd8fa60d63dcf9e7f3dadc4ce5e4433a42425b8ee8cb8a2defab0bf9b6109c90b5655b79b18c06884f2670a985d454e08e54de69f645cb0cbb70620bd988ee717c310ae77b4abe81c01c6e7f47268ee20bc30b9062830917705682eba2c5ef966b877f33294aa5f8b29d3dd5ed92302087f34fa18d19a005de05f925e3e93c8c0f24507ff20cd23d9ae5452c32ff58c78ccdb1ab32c98edfaa6d2c3971934ca8f849ac360c286566eb72b0793f12cef84bd282368d533247ee750f18aeda484167f3d680e4aaa3aa0694441d4ff6a71531f1a30f87eeb71afd04c5d686e1f86f27586f4e2c8ff77c09612ba1af9b3fb93efd31af42f8e0498f35d07c662b743a08f2839cad8f95b90cbb4fc0ed2ca45dd093a549cde4c6ff08ce09a2cbc6f9f78b6f96643357f92f8f403202742057731fd3e343a87c0affe803cfdbddb8c2694ab63f2dc35da705624747e30a943000fc82c40f10e1975d2e2ec15aefd531b6dbc053606b054dc976f44d5b5a5f37e9c08532ce16cf8bca55ab6c814ceb855ab50b8b52620f8645a9dc25fcb732080d84bf39c3ebb235b4d96da527b64ec4b72f69e91d16a4efcaf76f2e1f968ca68a06f60b01ec7becc9ffd7877c0992cb0f80fb3daabc039513896bd7697843be06aba53e7761e11e075c61ef2d897d4d9f90041c14283746feeb3f0d456ba4be27843350fe43e7c1110b4439489139f6dae01c43f23ec71f08d3042663c65e059d368e4e2c6e49de45bf078d3182a1bc1208bc59379e705aa3309579947409f2a8b3d79099c8619f916e7a6fa333d2312a274247156b8c25cbcfcc59ef13339c700f56a8691dff39bd4338789001872c0d90929037dc0ad99b380a6ba73f331f73f9274f4c2bf5233d7482edf37bf6ffed4f2c0ee44a1d57cae0d644f25591dc03bf837571a82d0c31b61be7ff85a5b3843e8f96a50eaa43f5c137ecfc4e4530d08a2afa4ba02fcc50117a4ad0d5862302017639344c82749f673dbd650e49b35302d0acbab45c0973198291bb42b4cfcd3b0c272074341ea8eca19e122cd234da6d41bf5eedb706e16c17687ed8b84db67130796d26b94eac83bbcd785b603242bd6252c155711efd7dd22cc54e1eaf6d910d0f22c701f3d4da0314dd2829c6ee13bbcbd126558b47b8066bf0766c792a012315bd29bfeda8f28a2c1f4e638b701758e19a0e5bd5b4f19048b00a877d956292e345f8a3a8367892f955bcb5e50ca145ec5e2c9309e25941bd277e393aaad38f9b72a42514b27da6856223c37a1fc1327fa760551d3fdeb0b222ab180b16c9eea138cf4f327e88fdfee293c5b6b007028eb796a60772148282dcd17ffc1c90ed8b6540ede933545ed5a5301d6ff39734444ff3d85cda4ac3befa5083a4685e9e231eba4a91a35f4f7f48fd5ac2447c64c010e2a9f8e80691c95460e1995444466ec5f3cd71fe509a26ff0b7f3254bc8c3255e903834e841b37c70b267fb33deb0d1ed4ea84a869453ba508fc255b12cf847103d5195046c930ae4a75c956f22fcfe4186d547686b54bd7a534940d5d62216994eac0e8ed3bd2bd59354e6b9c6b5b10511d54a8b928040f1e1024a423b0cf519fc6e9673df5c48c0778c7edb8fa8d8ace77463a77d2d6313160e1ee72742953e433b6732ced59c93464fd91520847db238610ed0c289fc55647881a7d6257cf28090c75a6f19df079cfd35742a74a5ab270314f7c8039c20ff0f3f543d029b75a741b5dc6425241ac2ffabf1f96288e6d4ba34da09fb6049c2c8753fbd41fdb4bc68c57bf374ef4feb0df00c41319debb26afba2ff39e1799a1c2137f4e920ee5b02d93789b6b0c853e8143dae5b08ee85da2ea7c31803610ce797293ea95c16ade6dae2afb008e59d8b9505737f008b5227df5f1e4eb5d707f502698a17ead9b1f5ec09dff34248ff2fb153dc6df4812e39754a4baa42e1d8b77fbddef3ca091701ac28ae5fd422dbd8db5b122d3965383abc37a52d2fca5ce56eba974dba3d059cefe40e3c35c9daa8ae31198214303c1dcb90d58fc983ccfd504fa43925636f94b128d44e8aa5cd3ecfabd50a84062d03f7508a0575ab65ecc749d3ef566fdbc529a8139b7a7fb3a9bd784df52cddc6f2699044ba47615163fbbe19f3d88d38a8b71fe52b2611ca74341429d1cef1a7e350545be29d2caa560e60352cab074c298c44ca2c07f9795ce52f10aa3e2fcdef371f24e309b19e52218881f25a4674527edbe3b3bd0b9b536d810c6f9500c0c81bcfd9a440dd91c1d35c52758d2b2ae1a8497bb394c4f09d3947cf777727b0d1daf5ac4fe4fa3c247a791702cb84b96321b7fec81bf549d4eb5d6dafe019b26187417c68b064e4308908535a3e77b6cd3e28caaf12d726f15590b7958e40134d045a38cbb689131a7e85532f1c63dd4bac9e4d00645cd7b2b71704563f3738b92044a8153f6ba717800ab7cb238175c376d7add2c5ec38e4c856f1ab9c3ee33f6ca6d576ae908dd290e4bae23470182e253765e04e8eb02a791c4396a511ef467879a9e2818b8a4b1b0b39a6c44e816e3ebf6e3be93929dfcb38d5dad7d20b60215447674d0608b8b02331ac20e57083cb9b4449fecbb149441aea0ad82f00a82d87d743fc80d410922bc20923516885440f43c9f32beb81ce148def6140952583a7825c2d2fe012d52d30ef66d32a8a0864ac5c1737e2506228d41ff0515ee80be4cf012927dde0fd2a07cac68eff8c4437f2844d4df07936fd8753e5909f962c5c767f8719cc295bdfa8a16f3f36ff56e34d7b14b6b8c46d5af248b04a9c5396f84990e23d145670950bce5f5638e5e2cea37c371a4483729338f1305cbb32fa1c05dd9d21d2a69e5fa3abe9a2dad2237be20b4088393c04aa66cf13718de4bffac72f641a8c017a1d5568fa15a6a06e4dc833874ec95af6f115bdadf15179bfc8c4e3e64f26f1299e282c4ab397340934efc1e601afc630fe195e8ae7d8da1310568cab4f2fad085d0ec39710d8b7c812b3fd55c6f50925bcfc90fbcb35b8daa0f1e1f69d82fae2034039f7ad6921694ed48a55a68bc541e6d86f1e33c261a92d48b50eb58a03d8e31b2f6564a4ddc3ee988d0dc47b4b610a9a9dcb87571b5c1edb3362df0ec3d58872157e0f7247dfa8100b4478b705702a5620c9201010f40232327550db333e845dbecd6aadbd0a94c064862b1100b4dd45ece811b8c0275e3753e11b4bcd8bc5ed7668e72afa5bc5cc17b4c313273755f532ecfdefdf2d5c47999453a3b7c158d98332f0bd3a820cfb2c8c3bcd43197e7395a032cec6e41662079f2f654965aebc393e22b5c8516d9b8ad01e33ee481a4ac46a2df304dadeaa9e5274d340aaebe14dcea315fe1279f1a41a5c7aa8c94bf4b3d48757503171f53488e01210145e62c0de7c39737848dbdb1b207d4d33b8de180b020e8a76b1b521905e5e3ce97292f8558fb68efdee774681bfffcf1dc3eef35f660dd1659a32950de2d50e762313beee330d9c2a9fe8ce5e4e61ddd86378d3551335f6ef62053d3b248a8c33a11abdf3f3aa1975a15f4a6957a13d5b12a44d0f2b52b9a2d996e98c630c0f2abca80c7ae89efcf81ae284a0d19582cb1319d207077e5657d245533181ed6e07e0f7647123fc46c37bd75b4f4d181112b4a08acdcf445332cb9dde69a0923dd9244dd2ecd818b19588939922e3b2d8dd9d9fed95fa55b0e4564b38aca2c4d24eebc634664400177fbdeaeb278bb1d8eb11baf4be5c87d4f8d9a855bfa75df4c51fb4eec87a27c59df9a47d82523b08022a1c0fb22ff6f93c3d2cc22a4111a6ec5be428cba33617be65739c2240248f3a02d01ddf2d6aca9e537a2296b16d082d2b868504371dd5e41898885b03ebfaca73b40e8924ece83c1c80de6ce14943e1199c6f81bf359f44c3ed5ae3c6eacb730b1039f0b6555347bd566dfff45a7a2176420ab2b40916a73b66a3ad07af6e1ac5597393d203fa1ad34d4564af956a0a3e2997e27a4e5eff67dd89cce8875d995e00c1858234f149f6ad4cac2b8056966f726df57b8c4ee8f22f23097ba1471b1f1036e3a499400fccdb75b56eb13e9eca1407d5bff4b075b06d00fcbfcafc28431eb33156232e73c6577e3eca437330c494ede57b9609e1f40634918dea767338b5542197410cdc000143ace89ca0b7bf645b3267f74767d7c7fce05d2f59c137204e56bfa711f66903c511f681cf7a1b4f9fc0f42b7c438ff8957e1059375321df5b0c5c884f46d94c21686e1300582d34928bc398653118f79bfeea2e7cfbbf31a7718f4aab50fae57db94203d43e060365c9a7455241be03d828ffc3783d0f6aa170c0866eb0dad07485831526922d8348a7a16e2e9903a2ac93c58c6dce83127fab17703ec004a519ae5675baffb31bf4b52f9ca992a84017a44d68dc693abd829947342f277fdcbc87168bcc03c32b8b1e81a1915af2517c464af07d52b79d1b0e53164c82ba049f81e92ed1dc20a88fd72e9ce7aa4b22a7cc57dc5527d14f62bc29cfc9d57ed26fd523cac39ac00ba12d3a49d694709924275fc0793d56acf9558818dc9eb210649fa5307d45886b879257d627cee0542b51c2ce6ce134100efb47c92456ece5b73cdc051f570810a8d534222649eb56cf73a377162b753de6c282bcd4a25dda21dd10901bd8dfe8fd4ba8a70811c39707beded23dd60f23e2933372e3a6bce099899b07f0a4c4956fd98e956a8649622c77717de099463c0c6c9389ab4a1ae10f8ddd086d876af2943ee0b6b402ae5f89e09922e8c510ec0caa0a83e366e916400bfec88a52ab457037a35ddc6a8e2289c33684a5915c37bf5d227cbc65a737b52bdcb4fbbb7b4e7f965db116b46044d0870846c730dce12e120b1fe6dd5798ced24cad72c59a3f44de4978b8bc05a1dbeb766be6e2abf6ef46c67a58a370e54e92d89e5f44525e82b94a388d8d0cb20c3469a258c1633c9dddb6854aee255f93f59435ff317622f6899250aa185c207644275278580c5d32401741fe264a2e03b80f442ed58fd0704ebac923ac6a5abb7f0c695252f82e3fbcf2b99d721589a8fe3fad4d5926aee3d7bfafb6739e525faae3d25b12841fa2cc61dddc44d36acb9a8b72d60ecdd9c8cf04f9bac341b5e0f9bc59042db8126324888b07afe72b18cce36d61eec975b6b4ef5dc4a16ac14440cf770599bd4db630bd110eb63a03a80cd95c16d314a4de60cc5115bf0754cb7ab84a827ecefafa96069c721a5979f227fdc2467b4cd1975dafb5b28e1d6f3c1c3a2816ad831dd98c1378a03798c128f176426eaa0e361571e758d54bf4ec2c988355f016e16d6cd5cf97bb4891ab33f5623b7e796af313cc7a9e2f9510cd2bead1ea5dd080d9de1f595b2629ebccf69a0feaed3963ae8a6c89edd66fbf6e566379898185828925f8669668d6bddff961b08aaedbbe7fc196931a887ec740da6bcdab8f826a34aa2aa1e406a258558f3baf022a64222df4d6ee8726c79ba3dd6e11a19e4b4bb49b4a8cd99c189e6392f08ad731e415b65d0ccb919dca46efe9f79e21437111ab09e926d3038182044ae047bf1cc92e2d2644c528985719667a1a8abaf65d0f211172ea789b2fa016e1a88325d1ed706239da4dbb9e2079e3598b4ae5885667587ba1e0921c9ba55d7a3be4c47bc2f2f3547ce9efe32e5a22855f761bd4cbe1cd9337eda4bd7d82a918084d7e116b656104ca87e64b1b8c62323c3c296c5b5b98051feb607b872edf9f789744aff710c4b7279711182bcac6b76c05f5cd982f52f451e7e29046550e012e01d8cdd3e305427030f4247488c9136303084c12175c5c781cdd08aede5a356ea0ccdd05a460be3c7b4bfd62c3ce9ab68e285a36c1546d0b18edad71f69f5bedb340772e1bbb035514b085067259e39f59dc292a12557350c66904b253efee29a5eb7a6920f583c899dc46a1d3e2af2db3a3d1a0e8d1f98722a16c6cc1e401058d60c8c436d8f1166ba53bdde5810f9d0288528affd486c266546a864c92af3df8abd451cc1e0d6bfea534865cea9d49b3ea5e390fa823118df8a61e31022f5fbb8ceee870bf2e60890263c4d14e24d053d0fddf665ff80a66fa00a5957f8a30fe82a4b82cf2f6b4d49def98f66bfcdaa0aef13314e950ca9f3849b1edf3b82eaf74a0dbcf45c3dba9bd2d853281a78484f1efaf4150da1207ec3cb61fbcbf759f8182b7052b28d7164b73197b0a440759fe9d5ddf827f1897a174e82fb968a9a07c61bee44bc1f7f9ee5c6de04c02d57735c5fab741b36aec7c8642e56cba932a08b8e8a9d3eb066a4ee7cbf22e5abbd4346de59eca1f24ad9f7f9ff7621e5f30dd08f4cddda8e80e496908109f5212a72bab1378d1237def07bdda4178719975346c68405de15153031fb17535894e5e3c1de6fdd507333f0226b78ba7cae509cfb48d6735ede9392650bf85ac1db919b1e9fe0a823119d8253204dbb2f7a8f524be6d419f3a45c5051a7a88ef0bd41586d90c11a894d647f03895f671a6e19f1c70e32668653aba8366a3d372522f49844081a9637db080663ab02f4a8af502955d5411461b62f85308c91852f8fb9f0bdddd500b4a133791d3a2f91a82dc4b09f5ad2196a9172ab0cd3fafe7266e9f6d159110d99ca8da8a34b17be17a04ad4509a9fffab1e45e10f10e0cf9cfbd9c761ad044064c07e473fdc626289cfb88b13a11455c069b70aa02426d9119ac878a14c9483be9c0d5bcbb5fa76c8d06531f59c7cf7c26372e750e2f332418ca769e5e7fbeb3ada7bb58b573a0635e2e3ad9a53ddb809ea01086a3fa993ad57e89da6f9c5e61bd0f8ba69212a386b2aa1ae17520d7fb989dbe14021885eb50fa3048aebd42c861a09a308b660d382c0480ead8a52a1a14927c7c77957f94bb59ccfd557f8c4a7af23360a298a603d20ebc386db041d8c306b3e32b0bff541bdec5ff75c3b40950815cf9f89d48a382f67e44c409d046c01fb1262aca0df6f5238a3c3c09977261494f7361ba326815d6e23f49e4d6d4b54665081067332265fff59cf54af9da0db9d19bc611cbcb6e6f3f1e2e1ffb6cdd6253578d78d06a2ff5f9250f1994c5749e3ce49231fbd63bba28e948f9150933e3ae31299babaa41043b181a100882e613b4b4b8f49ceeb742d22f860853a9b917f5a323a8a1fb1f3363a7be4407fba44b408f259b5db79a055b92ce3d7a0649cc59f4afa2b1f69959d5c6f5eef1fa7987a47bee4491f685c52e9db1ee1a231ab5a4bae1019c97868a409dd0d57b32525394a233023c4a7ac429808bbcb57a34b41883202744c3bdebc0a637773273f19c2be6e806bef7fc1002846db762ee4e16867773808c5477987d5851d5b1641d070feabc203cb3d7943ffb206272fcac1bccb616352d85975f5a22c0f247548535ad9fb83fb2be17689453f10691143c060cd964df63c3c70e7b1cfc7e2b468015f327f9869353477bfeeed330b03ddd9e4e0a2441182244da283d7a59d2b2b20e6de3e3a47c26aeef4944c1190bba674523a6c3c4ed6bac53b9edffcb0e9fb19d8bf36949d03ef6a7e59eb903a00d9614f642d1932c766421906f5b177963c71e881453560e3ffcec792e8dc46b1832a8fcb2ab2268a9c1fb648d1c6fa1c8cbd50d5a2d8264fbc6c063e6daac5519d362da389dcd3d12c8039f991de91e728abf5bab95c3aef66dd8cc36c60e73cb10afb02eff6df20ff12c59b142b07fc48fe94612de80b8b958f78256fd7cf3c6f79a83867f3bb5f70da392957badadecefdf7b6e4ebd39ff945397c7d302ca0a5a3918d8abb893cd9cdd680916a50fe19699ff0476ad82e6ba46523f26ccc5eb65313c1df1077c8876d2b73bf86ba311862d12b0c557a92ef827197121512e87f817167d4b17c7e225a48b3f8fbbf4187438e0e9b78e905cdbeb72e80dfb37ec0104f5186b39b4ff34f0cdf4b74dc915acd3f98874cd6a67308d0ad9697121ac477550b1affe004f433705933f9647522be65cb5a7471120ec942aeb956f195be0c1783102cf7d842f2968222ae1a7fa6513f200d3fa85d71724956ed697f0673ee3b40a4d46ba4850439ec125b708ed52b52b9f72906477d520c90a9f5dd49a7a33a328537a183f439895532b78ae451a8c3db789bc862fbc37241d523027e1a008629c969380f6eb55f9cf3f0675bca6851f00df6aaf90de9f62d5c179945ef81d1073850301f97e379ea415d830e3f3751cf83e2dba541cb6cdd89e6b674f2c53e329e5f3dd418d534ada6469a5b3bca5b7cfbdfdd6df4abaf77d4520d0311e801145c91b52586a56086e663841b702f52cef9fff8cfb7b33dfa125688ba6b4fadd1dca8defaf4259ca85323b23d3bbb45933562c25af3e8d7bc6ad4a50ae974f8d207994b3bd74a6812ab6a40fcaf96bb4e17bd20d742b14c72226caef3e0f5c56c4930071e9f9a894f18650fbb785c6f707605c86b634c9722c8690cf3a954f68d7c2db3a257339ade67a41259f6f878dd0ab7876deffa77f6f00819282a8f4c4da84c6cf4f335cd0410770a2b1a1fbb3f85f4489eeceb78bbfddb2d1866c57b41f6ed179a0bc3750a486403d23473f2feef43ebc5af1018d9c20089e277d77fb9c34f425c8f8af4c49864b57572fa8c232e61ef37194251a1ddc2f73ffecd57e638751cb72bcb2c40d22540166ca1e8588f24b010c9fbd962e3a2c23a7e93f131df61b8703ce326ed80cc87912d3c6aaa27574bbe8d65bcaecd660c31cead132a44b1d0e4a53cacc0b82a263c4e7783944af0af08ea9e68e8e25ed9111cfef841f1b2fd24164f9097f70efe09b1109e5cb91fe68a2760381fd63a7fd422dd578a60661abc9ee3a5db1c2cde2fb21f2040f1ed3fc27b99e254256949d0560e8b98fa028fca50768caa951a87bf8969af498d50a9ee773c9caa7d9f7d8e1955506013f198cda316d79b177e59f233b98f727afd2494fc18642f0015adab756ea6742690c7d00f28655b915ce4eb8b3ba2e8559ba23e1ff1ccc9f79ae2df85f924459c56715dec78ef4592352eb1a850cd65ecd36e1a9121e888586b7b2fa84da920b8cf44480433e61ab076b10171c0537524bb170a4b99b0b0c437418a665b7ef909652b6483b20362e557c1480c2a2a0efa221fc59054a48122b52d38245f9bd026001635be5b155f5c766a59306fbde231fa72b4d74449a2fe8fb969496ee26af5881adaafb4189b439877ab8f78709cfd32c10ea576a010bfc137b7a4aae137ea3d29070ce3bc8dbe6655e967115ca3461ad9d28b9cf8af07441e68a54ec5e889846f3978f07ba51f7d5af5da78c5c675dc5d0c1a4a399ff4247203573a46fb903eaf7bc886e6cbd3126fa4a3fe3bb13bbdfea7da871f6563aa750f6ad7895b34b2809563dcf5ed30f1c60cef4138aa49d4f55e396534ed10cf4d857723a2b442f47d79de162c30ec6c4daf939b4c88649494e3682d1da81b4a5928d8e18a16c46707a685305e592589acb484e28e9d5af89c44b6e563d125ec97c0155410527406d94b90bc9576a662db99da1cb82b04d610d02187ce08f22ea0e8fd31919d53fa6aaf980e31ca7f8610e695a41919c24136a8406c62d5f15fca36507002b54ece17664b5247583ad60d863f283f3c288946139575dcaedc978762e85f534e56334ef0221c34ffae054ddf79339b8f08701e9699b11041df8f518dd33203363c8098fbefb01555bcc2542422777b38d8dff11b15aadb0c251ce2c5b32f8735b3cb784f2e5731b48feb5a0e791a1106abdea0f7d1f087737cbe7fdf523fa14c9be2a2987511004c5b7ac1814ef6961db16799698242452c469a07c30e4a1f73193c74a41bdd88aef50035e4648bc9dfa276951798420a45e4085932bdb9381af3cc4678bd962af616549e4020d2c9fd25e2117a6d8934fde2218273d7833d60ea492e251417a27e7fb32012a940a6b6487af4b64958bf05f1b1107732149d227eeda5ca5a43cf583dc297d66072a1acd75e93a7caefd36a0d581e21d5cb08654c4ecef46ebac5391546e0b7d2a6418548d8f816446bcf237f676e873e6bae9107234abe5ab24c53ea472ad10653cef068fd9f4e729fc0d526e489f8df13af5575f1e70e0ec22899728b0659d70fc2dd509d9df3ec170638f89e540f4d3f02aa9b1b1819f84da596e0d7b45a5818061728f8eeccd2bea0f460dd7e18cb95f2364c50e351f0690e184eb63ebbb14a0b4b2117e44f3b2b3", 0xb5, 0x0) read$FUSE(r3, &(0x7f0000006300)={0x2020}, 0x402) ioctl$FBIO_WAITFORVSYNC(r3, 0x40044620, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x5, 0x303080) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x40, 0x0, 0x917, 0x70bd2a, 0x0, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x7}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x13}}]}, 0x40}}, 0x24004810) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010000180040003000800"], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x30, r6, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x4}]}, 0x30}}, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)=0xffb) r7 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101180, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r7, 0xc0040d07, &(0x7f0000000040)=0x121) 6m24.034508705s ago: executing program 1 (id=2092): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x8cf, &(0x7f00000001c0)={0x0, 0xb0a8, 0x80, 0x1, 0x118}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r1, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000c80)=[{0x10, 0x1, 0x4}, {0x10, 0x111, 0xbe35}, {0x10, 0x117, 0x3}, {0x10, 0x109, 0xa}], 0x40}}) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0xa964c761d5ec79d1, 0x31, 0xffffffffffffffff, 0xcee90000) syz_open_dev$loop(&(0x7f0000000140), 0x8, 0x8a242) memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\'5\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfWsz\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\x05\x00\x9c\xabf\x1daCS2\x02\xb0\xef\xa8\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x8cf, &(0x7f00000001c0)={0x0, 0xb0a8, 0x80, 0x1, 0x118}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r1, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000c80)=[{0x10, 0x1, 0x4}, {0x10, 0x111, 0xbe35}, {0x10, 0x117, 0x3}, {0x10, 0x109, 0xa}], 0x40}}) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0xa964c761d5ec79d1, 0x31, 0xffffffffffffffff, 0xcee90000) syz_open_dev$loop(&(0x7f0000000140), 0x8, 0x8a242) memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\'5\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfWsz\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\x05\x00\x9c\xabf\x1daCS2\x02\xb0\xef\xa8\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x20000000) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r4, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 5m6.207230001s ago: executing program 4 (id=2191): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') socket(0x10, 0x3, 0x0) r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close(r5) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000600)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x104) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000d40)=ANY=[], 0x210) syz_open_dev$sndpcmp(&(0x7f0000001480), 0x0, 0x101000) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000380)=0x11) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) 5m3.929028355s ago: executing program 4 (id=2193): bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0xa, 0x4, 0x8, 0x8}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x20, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}, @nested={0x4, 0x2}]}, 0x20}}, 0xc000) sendmsg(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000640)="3013f93f6a23826aeaa571d88a1fc628ec108a5ce411744d4e3ae79c5374eb3bdc7564d840b7d870c0da80f54b31a033a88be722054380d976", 0x39}, {&(0x7f00000006c0)="ac5bf07dfbe37df362733fa6e33fcfe007a76905029bf5f167a7418ebe47895ee8a38f7c4ae25d6ae91633bc0b5bcd5572d067fa7af73dfb4605ec2b21cbe0ca844c8033fe927cd5f154695e5c65c966e80d4a08ff27a975d2ae54226a99d873d2ad6297b9e8c1365a36ae", 0x6b}, {&(0x7f0000001400)="9e74720b4949dd14b726badb57f016c3874d42340685e5af37d9d352ac739667546ab1897ec0f2fca33e402e62684d6f1f7bd3b281c17ff2b9575e88ed0264d35a6a10a5635b3b95fdd129d8a7f19bfc456f92098237f0e6fadce260d131a520b26d86390dbb99fcfbb9c5716a8134f0e1df76c45f10c57c8c658c3b76a7f84ff9d6d0964edecac3bc88d2b73051513a74ac758e7bb09e11f4cf999a486c5a8c34406d79ce51b790ac546521582bc2a9ad6167d7c5b9edd962d693e080a314bd31180ff59d7ec6b77bd6036817ab9e6f175736046c9f1d0997b9902c1a1201a446bf707bd2af47ec19dc8c97dfa73e532cada9a36f3bee55f1008ead64c640830d5eb5f047ad731713100ee3aa8d7c1fb0619c254d98ac0267df6e1dd3838cb31020af60b073376c1a08800fdf3d35720041f2aa74795ed3dbdb87631bfaddbb2da8f08fcde8d868070fbe7776073fe53b582e60b2bc1a84ba46c13227852dc9a65944e9186b7278973a36d17afa6181a2cc7539b32bfb64baceffbe3fd05efc088099d1ac62d2d5b062ecb3dc9dfdae20400a0ac09418013f02eeb3407e816534b4179810e59b4382cc59b86171586b1790257fed1b9ff27748a7d90d9407380e85a21faf357ac75a5821c581b34ca0a5531d527676f4e377f056a6dd574c7ac05d16fed626083bd8206ed32289bf5d94c3ba54f9c611ba2bbfc0cc66c0aee6bd32af449860a3969680bed537c3afe4128aa9984db297894bd01b69b1ffff4c86abdb946349deb1ee92013afd9d08d933431e41dd86648bd57965e6d9452542bd09411954ea4b0c27fe46203c8fcd8a1dc462d95003420f170bed4f4353ffde59ad6378aa90d1d2aa752218233d49b416e98d4a6ffd1baa526a8ce3451162b5eb5355f3faa6289ea2fbfd61278d407e77dc321b922c548c2d0eebd9b64071581830e66d65fb2a16d268db95a4db7bc7d4c7bd9ad000cb9520642c2bea06910ad99eca323b86189aab3db9125b4285e818854a012f74b2062de694986c7a03457775e96b30403ab06c4aa786f82e92c02635ec91ae7437fc0b71bbb73f7d15f39e023c88a5b156bd0f91e119f729695c48250975fe853a056c2a603f794b80e0fc22804616136912604e3833154f6f16a4bdaf48338152756a7fbf1b4cff414e98a4bff1f024727e676210448d189952ef67acb055433f3d0cb5abaae77c12dbe9d3b4a986c31b562025ef97dcc073b03ff6d3b010569238b11892f59caff159d4c54a3ebda66936b2d37a6c207a8362f7defeca6d5879037a2a5f195c04486d27686bff036b955c9beb8561e1f625acb04791992a8080e45c939a021bd2a4212018b0d605437962cf5736a7264b8734d74ed87e5e36ebd369aafbf9e2ba3f8d69b156f763024a6268199a70356a2824868180a9ff494179b35afde7047a94c7753dcefd7649b8b9c8642a1c2998e82d83c4812aa445a3ce06b76befadfe6278e1ea44b9ab784d945e8df0e2f3c6ec25341975f6bc0af7e102b6f5168b62c92f74babb856e3bbd2a96d952e1a40c5dd61252f8b9b701df9e3d272e77043cff57849fac4511f8d9d6bdcb8be26d96612565926b025c1d4d66263c8fa097dc0dfa5b1b8a36f9ef0881cbb3538f93a488259df30727c422313faf17ba54b246bd416b38f853b4b965a101c04a9ba8298f66318a41bc03467bac68893bc9b5e1d47f5913bf3b29fb522a597facbd406486bb0bae631fd321eecccc5c3a7bb8880073882c42d22487d58ece660c23862239b7699ccde923b88f777053f351b1a6c241546cefe6a52a6013e18ef0a2c37f41688e33d79efe41dfd81df58f1423baa3c1cc4ef7bcb1bde04e0bc0c9c63233e77afd2ceb742e5e7e7a7af2265c5cf70c639b1d84a637f7bb632baa3cee451e23f065614c6afaa637c89c5191925ebafffcd84fdb9e6a0ebfee2f1f4026a16e98477c8e15aacb4bfe45011e0a052eee775d48e6d88216c52fadb55f6fa4ef07f3b1b70b63beb74c6473008bcfa08fd4f320c95de4f74c37a098a1c05c486c4b98ada818e94d96f4f67257ad6a3218ba047839e634c8801e9c9bd157211889299114752cc3cf92bc340443eb74486d32be5b8055ed20c53d58a0a047c85bf63ceaf75286f6af2b9e8a50b82d7f6828cf90611fd59cd155b8152b63f6b5d447d6527288e5051966250ebda77c910b7468a162813f09dde277a4ae30539db55fabee7a10a4cc55f39c9049f907baac8171c0502c54234f7679c1e79415635cc6851b92e51cc784f078706ebe29924169d9e5982d335ec2b4b35f002cc66eba2b47e883c05a7980e30dddc6a59a0fee2403e77a31c147c12319e05cd3f101fecb1a14ab77bddd958d0da63263aa75fb07b936686c7391d1f97576fb4d526d73acecab0573c2179cf92bd5dec0d03861846ca31d4c555efa4670cab43de38fd8c979e06a0ba5e990e5cd84c3d760f8b8f59623ed2f0063bdbe9b3d00b7967b08edf6575c4f887db243f77d07b85a9b7aa2b37d562f4adaab6891408c1003c82891b736c2eb61919f17d0657eb49fbf6bb51c56ac8547212f15b950683c533ad170fb23ac11e55eddffd044710a6bcf563e601e77a75277f1dcc92a5fb0052b41cebb282aecf93d460706f1323b8766140389c66ffed5026daf508c52fcaecb55c1aa4273cb05d25d04938c7df6bcda9174cf08b4d2b7172a3dc45ce9866e6141210c7ee5a61d35751fa2945a4ff94e5df5d77eb0c9fc63148c4871d2dca098bb192aa99ccab8dd8b78313d124cdfe5cc2eabe884554f6081abb91904fe01f6d9d01cb320ab62002a4644b5ccd248e8bec740d72851e328ff55157b39234705e8bfe947daf892be1a09230f3d8b86360adce01621ba347fc9e9e4901fc815a208c63a60266f1998709f5f03983a7b35e0e2963070a91f2912beb46c36d6d5b748944630ccd84917b3eb4abd9353b19ca8042f57a401fe05241b5771e4b8d3c7c592295771fe9e02a2906719e38d306e53105f1c48ff88cb93ff1d315428f15baeeb56fb4f5504ef6993bd0d33ce8dba40be620dc4b2d5e3b5d5a941bcd194723a3c634a19599e0d0bc7ce0d55f1411ae3b2e25caa39c96cacefe08a2870b25615e3106a64cc9181548cfcb62ffc6fe10294fec2d7d0297b913fd7326ad8bb991113172fa8dececf448f887fbf9f0def1bddb796e5e1f323234326a089bed346b3d8dcec4ee52e78b50dfc48dee499420ca1f652b34d8a64b890801e5c90f8fae2f688e68ae3d1d079f4bfc350ef007626746958ad7bcd13dee16913407bc953ff5ac3013b1592b00fdf43784497ce8eaddfb7345fcd3b07d64e284a7529cfb9899e5b8ca62c7eb1491b985f2a3f544d6978107f87bcd8496a34d0f429e65558000b472108a99028e263649be5f3e75c10ca4102819776330423e3264a87095f2b3be20e1ea911b2e285191a4c27a0eab19a5bdbf26bd08fead4f22ebe5b1c82e99edb0c49a4770f74b2e012c5b0d6c6599eaa7f6939cffe30a4184fb3dec8c5a2acd6718edda3867f25cb552926b34c0ee01ccc0160f6f90d08eb72062d014e11285b9c3d02176942c6d881ef830c313b8b578cb54a494205fe7ecf257f7d545c374b931c6c2b15dceacd926b3b76c5298edf0c3bd943537c320ec4c151e6d94743288a030f7cf759229736e68963871b3f31eb521f3e9106255a7c9b8b9db64e9627922df28b5610fa5d66d6fc5fd9966ab57c46daac489b2dabb7273fe15c14a4d837efa05449e8ca37682ea41c363b963cb7ca27d3a2e697d09b71bbab30f157fb0edbcaaf291e4ee0777afb24b1645b9286101daf36cd3af7fed31fee657ddaf2cdd9906d732051eed5bbeec96f9348ba230bd26f0a0f91e3353ab70c85b1af9af9d56d283992eeb24c1e4199088305ba9b2463c0585b28678726bd99ee89722a3525a06d01c0dc1641634748e401f38506d5066ec458235001f1a1d921154cf5bb5946cb9dcf02b5adcb94607fe95af9226346e7bd55b41d376b27d587d840be88eb0aa988e205b1cd63ce4102b7feda0d6bf632a03b80c320f4bacf1660f72c7fd18098f39e026d396135ceaa5844e8dae0b75644e69019baf7cff642d01e503f6017ab253d5af0fca728b608d17dfc86b3bcb4332a52de77e3f8f81b90fe9877cc5cd8e382290f1433404a5810a88c5bdb16d28578479956a049b4ad4fbfe739b38fcef8516699213d276d58de8e5a7989b1dad8a7f04617bb1146c97bda69c2cd9cfa526d742dc92822", 0xbd9}], 0x3, &(0x7f0000003240)=ANY=[], 0xe10}, 0x40000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 5m3.660072224s ago: executing program 4 (id=2197): socket$packet(0x11, 0x2, 0x300) syz_init_net_socket$netrom(0x6, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x7fff, 0x9, 0xfffff801, 0x10, 0xd, "07056b66d288c6a8271b542f1a8ad7f5a8b371"}) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x10, 0x2, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = memfd_create(&(0x7f00000025c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1cs1F59\xcdR\xc1\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9b\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\xe7\xd6\xa3', 0x6) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r2, 0x0) socket$xdp(0x2c, 0x3, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 4m57.430915002s ago: executing program 4 (id=2205): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000002900000000000014000000000000002900000034000000fdffffff00000000180000000000000029000000040000000400000000000000d80000000000000029000000360000005e17000000000000000100000100010800000000000000000728000000030800ff0f660900000000000007"], 0x188}}], 0x1, 0x810) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xd4}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000640)="3013f93f6a23826aeaa571d88a1fc628ec108a5ce411744d4e3ae79c5374eb3bdc7564d840b7d870c0da80f54b31a033a88be722054380", 0x37}, {&(0x7f0000001400)="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", 0x30b}], 0x2, &(0x7f0000000340)=ANY=[@ANYBLOB="10000000001d83000744d63c000100000008"], 0x10}, 0x40000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4m55.027662001s ago: executing program 4 (id=2210): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = fsopen(&(0x7f0000000200)='affs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) fremovexattr(r1, &(0x7f00000000c0)=@known='system.posix_acl_access\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x12840, 0x116) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000002000010327bd7000ffdbdf2502000000000081001e0000000800"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r6 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000300)="8869757b7c49a5b97bd8512b3b17c7152248b738d5f5f293ff7672ec16d5dad814b9e18a2e9c93aed92e7af68f7abd89a09c4d147d7c987a66e2649047548a30623bd1d72a031e4dd5adeccf6eed2f0c67ad7250d4e0bd5c2bafcf35efd2a2a5df69f9ccebebb1b9184908cc9947de11", 0x70}], 0x1}, 0x4048043) 4m39.904960303s ago: executing program 33 (id=2210): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = fsopen(&(0x7f0000000200)='affs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) fremovexattr(r1, &(0x7f00000000c0)=@known='system.posix_acl_access\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x12840, 0x116) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000002000010327bd7000ffdbdf2502000000000081001e0000000800"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r6 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000300)="8869757b7c49a5b97bd8512b3b17c7152248b738d5f5f293ff7672ec16d5dad814b9e18a2e9c93aed92e7af68f7abd89a09c4d147d7c987a66e2649047548a30623bd1d72a031e4dd5adeccf6eed2f0c67ad7250d4e0bd5c2bafcf35efd2a2a5df69f9ccebebb1b9184908cc9947de11", 0x70}], 0x1}, 0x4048043) 2m33.445525536s ago: executing program 2 (id=2510): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102392, 0x18ff8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x0, 0x20000000, @remote, 0x1}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) sendto$inet6(r1, 0x0, 0x0, 0x20004002, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 2m30.958804142s ago: executing program 2 (id=2516): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 2m30.808449188s ago: executing program 2 (id=2519): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r1}) 2m30.479990962s ago: executing program 2 (id=2521): bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0xa, 0x4, 0x8, 0x8}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0xc000) sendmsg(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000640)="3013f93f6a23826aeaa571d88a1fc628ec108a5ce411744d4e3ae79c5374eb3bdc7564d840b7d870c0da80f54b31a033a88be722054380d976", 0x39}, {&(0x7f00000006c0)="ac5bf07dfbe37df362733fa6e33fcfe007a76905029bf5f167a7418ebe47895ee8a38f7c4ae25d6ae91633bc0b5bcd5572d067fa7af73dfb4605ec2b21cbe0ca844c8033fe927cd5f154695e5c65c966e80d4a08ff27a975d2ae54226a99d873d2ad6297b9e8c136", 0x68}], 0x2, &(0x7f0000003240)=ANY=[], 0xe10}, 0x40000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2m29.244076604s ago: executing program 2 (id=2525): socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r4, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000180)) 2m26.780948597s ago: executing program 2 (id=2528): open(&(0x7f0000000480)='./file0\x00', 0x800, 0x180) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff038}, {0xb1, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) 2m11.036200784s ago: executing program 34 (id=2528): open(&(0x7f0000000480)='./file0\x00', 0x800, 0x180) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff038}, {0xb1, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) 16.353068815s ago: executing program 5 (id=2762): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="0015b3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r2, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8044) readv(r3, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/145, 0x91}], 0x1) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000701fe0f02bf411228a8d07c0000040042800c00018006000600800a000014001d80100014800c0016800800b60088480000"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'dvmrp1\x00'}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[], 0x17) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x80002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x5, 0x0, 0x4}, 0x10) 12.530792665s ago: executing program 5 (id=2767): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x50) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xb, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, 0xffffffffffffffff, 0x40000007}}, 0x48) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r1, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) 10.937089177s ago: executing program 5 (id=2770): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="0015b3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r2, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8044) readv(r3, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/145, 0x91}], 0x1) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000701fe0f02bf411228a8d07c0000040042800c00018006000600800a000014001d80100014800c0016800800b60088480000"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'dvmrp1\x00'}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[], 0x17) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x80002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x5, 0x0, 0x4}, 0x10) 9.760490769s ago: executing program 0 (id=2771): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x20, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}, @nested={0x4, 0x2}]}, 0x20}}, 0xc000) sendmsg(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001400)="9e74720b4949dd14b726badb57f016c3874d42340685e5af37d9d352ac739667546ab1897ec0f2fca33e402e62684d6f1f7bd3b281c17ff2b9575e88ed0264d35a6a10a5635b3b95fdd129d8a7f19bfc456f92098237f0e6fadce260d131a520b26d86390dbb99fcfbb9c5716a8134f0e1df76c45f10c57c8c658c3b76a7f84ff9d6d0964edecac3bc88d2b73051513a74ac758e7bb09e11f4cf999a486c5a8c34406d79ce51b790ac546521582bc2a9ad6167d7c5b9edd962d693e080a314bd31180ff59d7ec6b77bd6036817ab9e6f175736046c9f1d0997b9902c1a1201a446bf707bd2af47ec19dc8c97dfa73e532cada9a36f3bee55f1008ead64c640830d5eb5f047ad731713100ee3aa8d7c1fb0619c254d98ac0267df6e1dd3838cb31020af60b073376c1a08800fdf3d35720041f2aa74795ed3dbdb87631bfaddbb2da8f08fcde8d868070fbe7776073fe53b582e60b2bc1a84ba46c13227852dc9a65944e9186b7278973a36d17afa6181a2cc7539b32bfb64baceffbe3fd05efc088099d1ac62d2d5b062ecb3dc9dfdae20400a0ac09418013f02eeb3407e816534b4179810e59b4382cc59b86171586b1790257fed1b9ff27748a7d90d9407380e85a21faf357ac75a5821c581b34ca0a5531d527676f4e377f056a6dd574c7ac05d16fed626083bd8206ed32289bf5d94c3ba54f9c611ba2bbfc0cc66c0aee6bd32af449860a3969680bed537c3afe4128aa9984db297894bd01b69b1ffff4c86abdb946349deb1ee92013afd9d08d933431e41dd86648bd57965e6d9452542bd09411954ea4b0c27fe46203c8fcd8a1dc462d95003420f170bed4f4353ffde59ad6378aa90d1d2aa752218233d49b416e98d4a6ffd1baa526a8ce3451162b5eb5355f3faa6289ea2fbfd61278d407e77dc321b922c548c2d0eebd9b64071581830e66d65fb2a16d268db95a4db7bc7d4c7bd9ad000cb9520642c2bea06910ad99eca323b86189aab3db9125b4285e818854a012f74b2062de694986c7a03457775e96b30403ab06c4aa786f82e92c02635ec91ae7437fc0b71bbb73f7d15f39e023c88a5b156bd0f91e119f729695c48250975fe853a056c2a603f794b80e0fc22804616136912604e3833154f6f16a4bdaf48338152756a7fbf1b4cff414e98a4bff1f024727e676210448d189952ef67acb055433f3d0cb5abaae77c12dbe9d3b4a986c31b562025ef97dcc073b03ff6d3b010569238b11892f59caff159d4c54a3ebda66936b2d37a6c207a8362f7defeca6d5879037a2a5f195c04486d27686bff036b955c9beb8561e1f625acb04791992a8080e45c939a021bd2a4212018b0d605437962cf5736a7264b8734d74ed87e5e36ebd369aafbf9e2ba3f8d69b156f763024a6268199a70356a2824868180a9ff494179b35afde7047a94c7753dcefd7649b8b9c8642a1c2998e82d83c4812aa445a3ce06b76befadfe6278e1ea44b9ab784d945e8df0e2f3c6ec25341975f6bc0af7e102b6f5168b62c92f74babb856e3bbd2a96d952e1a40c5dd61252f8b9b701df9e3d272e77043cff57849fac4511f8d9d6bdcb8be26d96612565926b025c1d4d66263c8fa097dc0dfa5b1b8a36f9ef0881cbb3538f93a488259df30727c422313faf17ba54b246bd416b38f853b4b965a101c04a9ba8298f66318a41bc03467bac68893bc9b5e1d47f5913bf3b29fb522a597facbd406486bb0bae631fd321eecccc5c3a7bb8880073882c42d22487d58ece660c23862239b7699ccde923b88f777053f351b1a6c241546cefe6a52a6013e18ef0a2c37f41688e33d79efe41dfd81df58f1423baa3c1cc4ef7bcb1bde04e0bc0c9c63233e77afd2ceb742e5e7e7a7af2265c5cf70c639b1d84a637f7bb632baa3cee451e23f065614c6afaa637c89c5191925ebafffcd84fdb9e6a0ebfee2f1f4026a16e98477c8e15aacb4bfe45011e0a052eee775d48e6d88216c52fadb55f6fa4ef07f3b1b70b63beb74c6473008bcfa08fd4f320c95de4f74c37a098a1c05c486c4b98ada818e94d96f4f67257ad6a3218ba047839e634c8801e9c9bd157211889299114752cc3cf92bc340443eb74486d32be5b8055ed20c53d58a0a047c85bf63ceaf75286f6af2b9e8a50b82d7f6828cf90611fd59cd155b8152b63f6b5d447d6527288e5051966250ebda77c910b7468a162813f09dde277a4ae30539db55fabee7a10a4cc55f39c9049f907baac8171c0502c54234f7679c1e79415635cc6851b92e51cc784f078706ebe29924169d9e5982d335ec2b4b35f002cc66eba2b47e883c05a7980e30dddc6a59a0fee2403e77a31c147c12319e05cd3f101fecb1a14ab77bddd958d0da63263aa75fb07b936686c7391d1f97576fb4d526d73acecab0573c2179cf92bd5dec0d03861846ca31d4c555efa4670cab43de38fd8c979e06a0ba5e990e5cd84c3d760f8b8f59623ed2f0063bdbe9b3d00b7967b08edf6575c4f887db243f77d07b85a9b7aa2b37d562f4adaab6891408c1003c82891b736c2eb61919f17d0657eb49fbf6bb51c56ac8547212f15b950683c533ad170fb23ac11e55eddffd044710a6bcf563e601e77a75277f1dcc92a5fb0052b41cebb282aecf93d460706f1323b8766140389c66ffed5026daf508c52fcaecb55c1aa4273cb05d25d04938c7df6bcda9174cf08b4d2b7172a3dc45ce9866e6141210c7ee5a61d35751fa2945a4ff94e5df5d77eb0c9fc63148c4871d2dca098bb192aa99ccab8dd8b78313d124cdfe5cc2eabe884554f6081abb91904fe01f6d9d01cb320ab62002a4644b5ccd248e8bec740d72851e328ff55157b39234705e8bfe947daf892be1a09230f3d8b86360adce01621ba347fc9e9e4901fc815a208c63a60266f1998709f5f03983a7b35e0e2963070a91f2912beb46c36d6d5b748944630ccd84917b3eb4abd9353b19ca8042f57a401fe05241b5771e4b8d3c7c592295771fe9e02a2906719e38d306e53105f1c48ff88cb93ff1d315428f15baeeb56fb4f5504ef6993bd0d33ce8dba40be620dc4b2d5e3b5d5a941bcd194723a3c634a19599e0d0bc7ce0d55f1411ae3b2e25caa39c96cacefe08a2870b25615e3106a64cc9181548cfcb62ffc6fe10294fec2d7d0297b913fd7326ad8bb991113172fa8dececf448f887fbf9f0def1bddb796e5e1f323234326a089bed346b3d8dcec4ee52e78b50dfc48dee499420ca1f652b34d8a64b890801e5c90f8fae2f688e68ae3d1d079f4bfc350ef007626746958ad7bcd13dee16913407bc953ff5ac3013b1592b00fdf43784497ce8eaddfb7345fcd3b07d64e284a7529cfb9899e5b8ca62c7eb1491b985f2a3f544d6978107f87bcd8496a34d0f429e65558000b472108a99028e263649be5f3e75c10ca4102819776330423e3264a87095f2b3be20e1ea911b2e285191a4c27a0eab19a5bdbf26bd08fead4f22ebe5b1c82e99edb0c49a4770f74b2e012c5b0d6c6599eaa7f6939cffe30a4184fb3dec8c5a2acd6718edda3867f25cb552926b34c0ee01ccc0160f6f90d08eb72062d014e11285b9c3d02176942c6d881ef830c313b8b578cb54a494205fe7ecf257f7d545c374b931c6c2b15dceacd926b3b76c5298edf0c3bd943537c320ec4c151e6d94743288a030f7cf759229736e68963871b3f31eb521f3e9106255a7c9b8b9db64e9627922df28b5610fa5d66d6fc5fd9966ab57c46daac489b2dabb7273fe15c14a4d837efa05449e8ca37682ea41c363b963cb7ca27d3a2e697d09b71bbab30f157fb0edbcaaf291e4ee0777afb24b1645b9286101daf36cd3af7fed31fee657ddaf2cdd9906d732051eed5bbeec96f9348ba230bd26f0a0f91e3353ab70c85b1af9af9d56d283992eeb24c1e4199088305ba9b2463c0585b28678726bd99ee89722a3525a06d01c0dc1641634748e401f38506d5066ec458235001f1a1d921154cf5bb5946cb9dcf02b5adcb94607fe95af9226346e7bd55b41d376b27d587d840be88eb0aa988e205b1cd63ce4102b7feda0d6bf632a03b80c320f4bacf1660f72c7fd18098f39e026d396135ceaa5844e8dae0b75644e69019baf7cff642d01e503f6017ab253d5af0fca728b608d17dfc86b3bcb4332a52de77e3f8f81b90fe9877cc5cd8e382290f1433404a5810a88c5bdb16d28578479956a049b4ad4fbfe739b38fcef8516699213d276d58de8e5a7989b1dad8a7f04617bb1146c97bda69c2cd9cfa526d742dc92822131d50f2b1", 0xbde}], 0x1, &(0x7f0000003240)=ANY=[], 0xe10}, 0x40000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 9.46205976s ago: executing program 0 (id=2774): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, 0x0, 0x140404c0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4001, @private=0xa010102}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x2, 0x180000, 0x1}, 0x1c) recvmsg$unix(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) shutdown(r0, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x20040006) syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) 7.082441074s ago: executing program 5 (id=2778): syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwrite64(r0, &(0x7f0000000800)='[', 0x1, 0x7) 6.810648043s ago: executing program 6 (id=2780): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x48, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0x7003f00) 5.644870859s ago: executing program 6 (id=2782): sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r0, r0, &(0x7f0000000080), 0x7f03) 5.230253557s ago: executing program 3 (id=2783): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x20, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}, @nested={0x4, 0x2}]}, 0x20}}, 0xc000) sendmsg(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001400)="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", 0xbde}], 0x1, &(0x7f0000003240)=ANY=[], 0xe10}, 0x40000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 5.226915738s ago: executing program 6 (id=2784): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000002900000000000014000000000000002900000034000000fdffffff00000000180000000000000029000000040000000400000000000000d80000000000000029000000360000005e17000000000000000100000100010800000000000000000728000000030800ff0f66090000000000000700000000000000010000000000000001000000000000000864c8a11099"], 0x188}}], 0x1, 0x810) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xd4}}, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 5.093298448s ago: executing program 0 (id=2785): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r0, 0x4004743a, 0x0) 5.020396313s ago: executing program 0 (id=2786): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x1}, 0x50) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wrr\x00', 0xe, 0x400eeb4, 0x14}, 0x2c) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4060}, 0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r4, &(0x7f0000000380)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a03760760beeab91e8ff0055e5c0d48bd63ffdb93bd43a847a1597c8ef03da5be42200", 0x37}, 0x60) close_range(r3, 0xffffffffffffffff, 0x3f00000000000000) 4.998892073s ago: executing program 3 (id=2787): bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff, 0x5, 0x0, @val=@netfilter={0x5, 0x1, 0x64d8}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0xb}}], 0x4000000000002d9, 0x10022, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000300)="09000000e700140000007ef52f555f2a0c6712", 0x13, 0x24000801, &(0x7f0000000080)={0x11, 0x88a8, r3, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, 0x14) 4.904008194s ago: executing program 6 (id=2788): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902380001000000"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000d80)=ANY=[@ANYBLOB]) 3.886217533s ago: executing program 3 (id=2789): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x30000000, 0x40, 0x7, 0xb, 0x40, 0x100, 0x80, 0x9}}}}]}, 0x58}}, 0x4000010) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={r4, 0xf}, 0x8) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38) write$binfmt_script(r6, &(0x7f0000000500)={'#! ', './file0'}, 0xb) writev(r6, &(0x7f0000000100)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) close_range(r5, r6, 0x0) 3.653336602s ago: executing program 5 (id=2790): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x30000000, 0x40, 0x7, 0xb, 0x40, 0x100, 0x80, 0x9}}}}]}, 0x58}}, 0x4000010) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={r4, 0xf}, 0x8) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) close_range(r5, r6, 0x0) 3.64998486s ago: executing program 0 (id=2791): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x30000000, 0x40, 0x7, 0xb, 0x40, 0x100, 0x80, 0x9}}}}]}, 0x58}}, 0x4000010) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={r4, 0xf}, 0x8) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, &(0x7f0000000240)=0x40) writev(r6, &(0x7f0000000100)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) close_range(r5, r6, 0x0) 2.765195495s ago: executing program 3 (id=2792): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wrr\x00', 0xe, 0x400eeb4, 0x14}, 0x2c) 2.524101058s ago: executing program 3 (id=2793): bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff, 0x5, 0x0, @val=@netfilter={0x5, 0x1, 0x64d8}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4b2dfe21750f744b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0xb}}], 0x4000000000002d9, 0x10022, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000300)="09000000e700140000007ef52f555f2a0c6712", 0x13, 0x24000801, &(0x7f0000000080)={0x11, 0x88a8, r4, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, 0x14) 1.536080316s ago: executing program 5 (id=2794): bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) 1.260948664s ago: executing program 0 (id=2795): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x1}, 0x50) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wrr\x00', 0xe, 0x400eeb4, 0x14}, 0x2c) syz_emit_ethernet(0x3e, &(0x7f0000000bc0)=ANY=[], 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r4, &(0x7f0000000380)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a03760760beeab91e8ff0055e5c0d48bd63ffdb93bd43a847a1597c8ef03da5be42200", 0x37}, 0x60) close_range(r3, 0xffffffffffffffff, 0x3f00000000000000) 369.049652ms ago: executing program 3 (id=2796): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x7) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e6400"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) r5 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}}, 0x884) 113.413988ms ago: executing program 6 (id=2797): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="7542473782798be019c27ed30b", 0xd}, {&(0x7f0000000740)="b176d469f44ff7e206a24a3a5f3a112da355134ae64fde53dc0e681885ead332aa45811c0070066fb0e5cf5a9a4965475953e2a028f7dd4a6ed8b33465fd161cd8dce309f6be32236cf8e07a5506acb719304ebc71b2a3756cb0832d928d432d1506d368e2b001a8b392dad3dc2916376732339a20db54405b716ea85c9a4d8f232138345947e47c80f23fcac5422ee2fcf8bf7ef306ed29b3045ee6f25c76fbc9e85a5bdf3be0a386a5afc9b5b11cece3aeed4bf8daf0394e72f5775c4916db082e98ad", 0xc4}], 0x2}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e5", 0xb1}, {&(0x7f0000000d00)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba9547e1e343b451d9025c4e153612d4674b9411fb4de295599abbcb388d291aa839ab0954e6a8dfc19c3c1533a11d81e03a4879bd736f1caacc2bbf1194598a652677efb930a5b6ee292c57402e0cc07a9a26ee794e46e604a9aec550d12af09f782e1f6a996f0756604847689d37ee3047e61531a8672447cb501b2560bc0e0c5fb2c9f341ed3972b30190e930af94642ab1557e286442cfa6a84ad931e99549640705cd6261ca7094910df055747e2e2ae170e7850093bf0aa3370e03222b5de4597ca76f3193d4a45e424b540f292", 0x146}, {0x0}], 0x3}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac47", 0x1e}, {&(0x7f00000003c0)}, {0x0}], 0x3}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 0s ago: executing program 6 (id=2798): ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000640), 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000480)={0x0, 0x300000, 0x20}, &(0x7f0000000600)=0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x40c}}, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc) kernel console output (not intermixed with test programs): ous mode [ 826.361713][ T7272] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 826.416304][ T7272] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 827.740880][ T7272] team0 (unregistering): Port device team_slave_1 removed [ 827.813467][ T7272] team0 (unregistering): Port device team_slave_0 removed [ 828.423837][T11960] geneve2: entered promiscuous mode [ 828.423867][T11960] geneve2: entered allmulticast mode [ 828.649214][T11997] netlink: 'syz.1.1380': attribute type 1 has an invalid length. [ 829.905595][T12022] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1387'. [ 830.226042][T11691] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 830.421112][T12024] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 830.466093][T11691] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 830.540020][T11691] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 830.675701][T11691] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 831.235133][T11691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 831.262587][T11691] 8021q: adding VLAN 0 to HW filter on device team0 [ 831.268043][ T7236] bridge0: port 1(bridge_slave_0) entered blocking state [ 831.268123][ T7236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 831.282143][ T7236] bridge0: port 2(bridge_slave_1) entered blocking state [ 831.282223][ T7236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 832.503947][T11691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 833.950413][T11691] veth0_vlan: entered promiscuous mode [ 834.011960][T11691] veth1_vlan: entered promiscuous mode [ 834.167132][T11691] veth0_macvtap: entered promiscuous mode [ 834.187155][T11691] veth1_macvtap: entered promiscuous mode [ 834.200204][ T5917] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 835.532842][ T5917] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 835.532877][ T5917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 835.532904][ T5917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 835.532927][ T5917] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 835.532967][ T5917] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 835.532988][ T5917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.556298][ T5917] usb 5-1: config 0 descriptor?? [ 835.752127][T11691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 835.805952][T11691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 835.954274][ T103] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.954751][ T103] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.954997][ T103] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.955572][ T103] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.100813][ T5917] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 836.120201][ T1236] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 836.296100][ T1236] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 836.296131][ T1236] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 836.309299][ T1236] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 836.309340][ T1236] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 836.331803][ T1236] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 836.331823][ T1236] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 836.414072][ T1236] usb 4-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 836.414104][ T1236] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.414123][ T1236] usb 4-1: Product: syz [ 836.414135][ T1236] usb 4-1: Manufacturer: syz [ 836.414148][ T1236] usb 4-1: SerialNumber: syz [ 836.495206][ T1236] usb 4-1: config 0 descriptor?? [ 836.508080][ T1236] ti_usb_3410_5052 4-1:0.0: required endpoints missing [ 836.621950][ T808] usb 5-1: USB disconnect, device number 25 [ 836.716577][ T7214] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 836.716598][ T7214] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 836.976062][ T103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 836.976083][ T103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 837.551509][ T6064] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 837.749596][T12127] geneve2: entered promiscuous mode [ 837.749613][T12127] geneve2: entered allmulticast mode [ 837.800149][ T6064] usb 1-1: Using ep0 maxpacket: 16 [ 837.818481][ T6064] usb 1-1: unable to get BOS descriptor or descriptor too short [ 837.821071][ T6064] usb 1-1: config 4 has an invalid interface number: 127 but max is 0 [ 837.821098][ T6064] usb 1-1: config 4 has no interface number 0 [ 837.821129][ T6064] usb 1-1: config 4 interface 127 has no altsetting 0 [ 837.825287][ T6064] usb 1-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=2b.48 [ 837.825324][ T6064] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.825346][ T6064] usb 1-1: Product: syz [ 837.825360][ T6064] usb 1-1: Manufacturer: syz [ 837.825374][ T6064] usb 1-1: SerialNumber: syz [ 838.104963][T12121] bridge1: entered allmulticast mode [ 838.205427][ T6064] usbhid 1-1:4.127: couldn't find an input interrupt endpoint [ 838.240764][ T6064] usb 1-1: USB disconnect, device number 36 [ 839.017533][T12143] bridge1: left allmulticast mode [ 839.520676][T12150] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 839.563494][ T1236] usb 4-1: USB disconnect, device number 38 [ 840.646003][T12173] ptrace attach of "./syz-executor exec"[12174] was attempted by "./syz-executor exec"[12173] [ 843.097493][T12188] geneve2: entered promiscuous mode [ 843.097520][T12188] geneve2: entered allmulticast mode [ 844.428655][T12204] geneve2: entered promiscuous mode [ 844.428673][T12204] geneve2: entered allmulticast mode [ 845.220697][T12222] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 846.056767][T12237] netlink: 'syz.4.1452': attribute type 1 has an invalid length. [ 847.780909][T12274] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1465'. [ 848.538410][T12293] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1472'. [ 848.812997][ T7214] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 848.813379][ T7214] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 848.813421][ T7214] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 848.813456][ T7214] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 848.820284][ T1236] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 848.825248][T12293] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1472'. [ 848.970922][ T1236] usb 1-1: Using ep0 maxpacket: 16 [ 848.986045][ T1236] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 848.986062][ T1236] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 848.986072][ T1236] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 848.989678][ T1236] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 848.989707][ T1236] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.989727][ T1236] usb 1-1: Product: syz [ 848.989741][ T1236] usb 1-1: Manufacturer: syz [ 848.989755][ T1236] usb 1-1: SerialNumber: syz [ 849.485109][ T1236] usb 1-1: 0:2 : does not exist [ 849.511293][ T1236] usb 1-1: 1:0: failed to get current value for ch 0 (-22) [ 849.606342][ T1236] usb 1-1: USB disconnect, device number 37 [ 849.775518][T11898] udevd[11898]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 849.854103][T12317] 9p: Bad value for 'rfdno' [ 852.539402][ T1236] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 852.710538][ T1236] usb 2-1: Using ep0 maxpacket: 16 [ 852.714581][ T1236] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 852.714606][ T1236] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 852.714625][ T1236] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 852.719033][ T1236] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 852.719061][ T1236] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.719080][ T1236] usb 2-1: Product: syz [ 852.719094][ T1236] usb 2-1: Manufacturer: syz [ 852.719108][ T1236] usb 2-1: SerialNumber: syz [ 852.739371][T12378] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1507'. [ 853.273442][ T1236] usb 2-1: 0:2 : does not exist [ 853.310982][ T1236] usb 2-1: 1:0: failed to get current value for ch 0 (-22) [ 854.024475][T12386] ptrace attach of "./syz-executor exec"[12387] was attempted by "./syz-executor exec"[12386] [ 855.886930][ T1236] usb 2-1: USB disconnect, device number 34 [ 859.613479][T12452] netlink: 'syz.4.1532': attribute type 1 has an invalid length. [ 862.314761][T12496] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1552'. [ 862.351163][T12489] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1547'. [ 862.352152][T12489] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1547'. [ 862.792144][T12502] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1550'. [ 862.792404][T12502] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1550'. [ 862.933058][T12502] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1550'. [ 862.933777][T12502] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1550'. [ 863.455334][ T5920] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 863.631066][ T5920] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 863.631116][ T5920] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 863.631139][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.636199][ T5920] usb 1-1: config 0 descriptor?? [ 863.683060][ T5920] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 864.875184][T12555] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1574'. [ 865.360241][ T5917] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 865.510237][ T5917] usb 5-1: Using ep0 maxpacket: 16 [ 865.516187][ T5917] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 865.516212][ T5917] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 865.516232][ T5917] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 865.519126][ T5917] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 865.519155][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.519176][ T5917] usb 5-1: Product: syz [ 865.519191][ T5917] usb 5-1: Manufacturer: syz [ 865.519206][ T5917] usb 5-1: SerialNumber: syz [ 866.020173][ T5917] usb 5-1: 0:2 : does not exist [ 866.029467][ T5917] usb 5-1: 1:0: failed to get current value for ch 0 (-22) [ 866.150447][ T5917] usb 5-1: USB disconnect, device number 26 [ 866.205382][T12572] udevd[12572]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 866.219332][ T1236] usb 1-1: USB disconnect, device number 38 [ 866.829328][T12596] ptrace attach of "./syz-executor exec"[12597] was attempted by "./syz-executor exec"[12596] [ 869.311081][T12620] geneve2: entered promiscuous mode [ 869.311111][T12620] geneve2: entered allmulticast mode [ 869.385222][T12635] vivid-007: ================= START STATUS ================= [ 869.385237][T12635] vivid-007: Enable Output Cropping: true grabbed [ 869.385254][T12635] vivid-007: Enable Output Composing: true grabbed [ 869.385267][T12635] vivid-007: Enable Output Scaler: true grabbed [ 869.385280][T12635] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 869.385292][T12635] vivid-007: Transmit Mode: HDMI grabbed [ 869.385314][T12635] vivid-007: Hotplug Present: 0x00000000 [ 869.385324][T12635] vivid-007: RxSense Present: 0x00000000 [ 869.385334][T12635] vivid-007: EDID Present: 0x00000000 [ 869.385345][T12635] vivid-007: ================== END STATUS ================== [ 870.233443][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.233512][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.078758][ T5920] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 872.257881][ T5920] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 872.258000][ T5920] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 872.258029][ T5920] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 872.258070][ T5920] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 872.258083][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.296716][ T5920] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 872.300904][ T5920] usb 5-1: invalid MIDI out EP 0 [ 872.920855][ T5920] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 872.960548][ T5920] usb 5-1: USB disconnect, device number 27 [ 874.640138][ T5920] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 874.792632][ T5920] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 874.792669][ T5920] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 874.792708][ T5920] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 874.792731][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.806947][T12724] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 874.840550][ T5920] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 875.178938][ T5920] usb 1-1: USB disconnect, device number 39 [ 875.300171][ T9] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 875.482004][ T9] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 875.482037][ T9] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 875.482080][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 875.482101][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.493148][T12742] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 875.508466][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 875.749266][ T9] usb 4-1: USB disconnect, device number 39 [ 876.229296][T12766] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1657'. [ 877.438342][T12774] ptrace attach of "./syz-executor exec"[12775] was attempted by "./syz-executor exec"[12774] [ 880.140336][T12798] ptrace attach of "./syz-executor exec"[12800] was attempted by "./syz-executor exec"[12798] [ 883.822630][T12866] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1693'. [ 883.822649][T12866] openvswitch: netlink: Flow key attr not present in new flow. [ 884.209368][T12876] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1696'. [ 884.263107][T12867] geneve2: entered promiscuous mode [ 884.263137][T12867] geneve2: entered allmulticast mode [ 885.238373][T12892] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 885.490827][T12884] syz.4.1698 (12884) used greatest stack depth: 17888 bytes left [ 885.930184][ T1236] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 886.082040][ T1236] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 886.082076][ T1236] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 886.082097][ T1236] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 886.082135][ T1236] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 886.082157][ T1236] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.187074][ T1236] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 886.418088][T12918] netlink: 'syz.1.1711': attribute type 1 has an invalid length. [ 886.588945][ T1236] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 886.592966][ T1236] usb 5-1: USB disconnect, device number 28 [ 886.634695][T12923] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1711'. [ 886.733041][T12904] udevd[12904]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 888.961017][T12964] vivid-007: ================= START STATUS ================= [ 888.961037][T12964] vivid-007: Enable Output Cropping: true grabbed [ 888.961064][T12964] vivid-007: Enable Output Composing: true grabbed [ 888.961086][T12964] vivid-007: Enable Output Scaler: true grabbed [ 888.961109][T12964] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 888.961132][T12964] vivid-007: Transmit Mode: HDMI grabbed [ 888.961153][T12964] vivid-007: Hotplug Present: 0x00000000 [ 888.961172][T12964] vivid-007: RxSense Present: 0x00000000 [ 888.961190][T12964] vivid-007: EDID Present: 0x00000000 [ 888.961209][T12964] vivid-007: ================== END STATUS ================== [ 896.150133][ T1236] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 896.325895][ T1236] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 896.325936][ T1236] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 896.325963][ T1236] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 896.325985][ T1236] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 896.326027][ T1236] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 896.326050][ T1236] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.339358][ T1236] usb 2-1: config 0 descriptor?? [ 896.761207][ T1236] usbhid 2-1:0.0: can't add hid device: -71 [ 896.761338][ T1236] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 896.770684][T13105] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1778'. [ 896.770706][T13105] openvswitch: netlink: Flow key attr not present in new flow. [ 896.783735][ T1236] usb 2-1: USB disconnect, device number 35 [ 897.157540][T13104] geneve2: entered promiscuous mode [ 897.157567][T13104] geneve2: entered allmulticast mode [ 901.632089][T13210] vivid-007: ================= START STATUS ================= [ 901.632136][T13210] vivid-007: Enable Output Cropping: true grabbed [ 901.632192][T13210] vivid-007: Enable Output Composing: true grabbed [ 901.632214][T13210] vivid-007: Enable Output Scaler: true grabbed [ 901.632235][T13210] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 901.632258][T13210] vivid-007: Transmit Mode: HDMI grabbed [ 901.632280][T13210] vivid-007: Hotplug Present: 0x00000000 [ 901.632298][T13210] vivid-007: RxSense Present: 0x00000000 [ 901.632316][T13210] vivid-007: EDID Present: 0x00000000 [ 901.632334][T13210] vivid-007: ================== END STATUS ================== [ 903.380113][ T31] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 903.572717][ T31] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 903.572776][ T31] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 903.572799][ T31] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 903.572828][ T31] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 903.572843][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.620097][ T31] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 903.769462][T13074] udevd[13074]: setting mode of /dev/mixer3 to 020660 failed: No such file or directory [ 903.769646][T13074] udevd[13074]: setting owner of /dev/mixer3 to uid=0, gid=29 failed: No such file or directory [ 903.874048][ T31] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 903.899521][ T31] usb 1-1: USB disconnect, device number 40 [ 904.075580][T13085] udevd[13085]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 905.951983][T13286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1851'. [ 905.958115][T13286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1851'. [ 906.900193][ T5814] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 906.943838][T13314] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1862'. [ 907.063416][ T5814] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 907.063471][ T5814] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 907.063499][ T5814] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 907.063539][ T5814] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 907.063561][ T5814] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.169484][ T5814] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 907.171907][ T5814] usb 5-1: invalid MIDI out EP 0 [ 907.299553][T13329] vivid-007: ================= START STATUS ================= [ 907.299573][T13329] vivid-007: Enable Output Cropping: true grabbed [ 907.299600][T13329] vivid-007: Enable Output Composing: true grabbed [ 907.299622][T13329] vivid-007: Enable Output Scaler: true grabbed [ 907.299643][T13329] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 907.299666][T13329] vivid-007: Transmit Mode: HDMI grabbed [ 907.299688][T13329] vivid-007: Hotplug Present: 0x00000000 [ 907.299706][T13329] vivid-007: RxSense Present: 0x00000000 [ 907.299724][T13329] vivid-007: EDID Present: 0x00000000 [ 907.299744][T13329] vivid-007: ================== END STATUS ================== [ 907.614930][ T5814] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 907.641944][ T5814] usb 5-1: USB disconnect, device number 29 [ 909.519340][T13369] ptrace attach of "./syz-executor exec"[13370] was attempted by "./syz-executor exec"[13369] [ 910.181572][T13368] netlink: 'syz.0.1887': attribute type 1 has an invalid length. [ 911.491155][ T31] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 911.642250][ T31] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 911.642306][ T31] usb 2-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 911.642348][ T31] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 911.642372][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.705128][ T31] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 911.723970][T13398] netlink: 'syz.0.1901': attribute type 1 has an invalid length. [ 911.826798][ T31] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 911.856301][T13085] udevd[13085]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 911.950106][ T9] usb 2-1: USB disconnect, device number 36 [ 913.299092][T13434] ptrace attach of "./syz-executor exec"[13435] was attempted by "./syz-executor exec"[13434] [ 914.396024][T13442] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1917'. [ 914.396057][T13442] openvswitch: netlink: Flow key attr not present in new flow. [ 914.617761][T13444] geneve2: entered promiscuous mode [ 914.617778][T13444] geneve2: entered allmulticast mode [ 916.287174][T13480] vivid-007: ================= START STATUS ================= [ 916.287188][T13480] vivid-007: Enable Output Cropping: true grabbed [ 916.287203][T13480] vivid-007: Enable Output Composing: true grabbed [ 916.287216][T13480] vivid-007: Enable Output Scaler: true grabbed [ 916.287227][T13480] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 916.287239][T13480] vivid-007: Transmit Mode: HDMI grabbed [ 916.287250][T13480] vivid-007: Hotplug Present: 0x00000000 [ 916.287260][T13480] vivid-007: RxSense Present: 0x00000000 [ 916.287269][T13480] vivid-007: EDID Present: 0x00000000 [ 916.287279][T13480] vivid-007: ================== END STATUS ================== [ 916.352547][T13479] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1930'. [ 916.352570][T13479] openvswitch: netlink: Flow key attr not present in new flow. [ 916.500131][ T31] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 916.550908][T13479] geneve2: entered promiscuous mode [ 916.550986][T13479] geneve2: entered allmulticast mode [ 916.940314][ T31] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 916.940567][ T31] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 916.940833][ T31] usb 4-1: config 0 has no interface number 0 [ 916.941054][ T31] usb 4-1: config 0 interface 106 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 916.941077][ T31] usb 4-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 916.941213][ T31] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 916.941236][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.082926][ T31] usb 4-1: config 0 descriptor?? [ 917.170156][ T31] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 918.321281][ T103] usb 4-1: Failed to submit usb control message: -110 [ 918.321317][ T103] usb 4-1: unable to send the bmi data to the device: -110 [ 918.321334][ T103] usb 4-1: unable to get target info from device [ 918.321350][ T103] usb 4-1: could not get target info (-110) [ 918.321367][ T103] usb 4-1: could not probe fw (-110) [ 919.000449][T13509] ptrace attach of "./syz-executor exec"[13510] was attempted by "./syz-executor exec"[13509] [ 920.640581][ T5814] usb 4-1: USB disconnect, device number 40 [ 920.860264][ T31] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 921.012372][ T31] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 921.012411][ T31] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 921.012451][ T31] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 921.012474][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.074722][T13523] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 921.098445][ T31] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 921.678545][T13537] ptrace attach of "./syz-executor exec"[13538] was attempted by "./syz-executor exec"[13537] [ 922.570124][ T1236] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 922.594188][ T31] usb 5-1: USB disconnect, device number 30 [ 922.761532][ T1236] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 922.761566][ T1236] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 922.761592][ T1236] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 922.761614][ T1236] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 922.761656][ T1236] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 922.761678][ T1236] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.909578][ T1236] usb 1-1: config 0 descriptor?? [ 923.182482][T13549] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1943'. [ 923.182508][T13549] openvswitch: netlink: Flow key attr not present in new flow. [ 923.364941][ T1236] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 923.364979][ T1236] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 923.365005][ T1236] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 923.365031][ T1236] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 923.365055][ T1236] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 923.375779][ T1236] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 923.477655][T13549] geneve2: entered promiscuous mode [ 923.477681][T13549] geneve2: entered allmulticast mode [ 926.337578][T13603] binder: 13602:13603 ioctl c0306201 0 returned -14 [ 926.456602][ T31] usb 1-1: USB disconnect, device number 41 [ 927.100213][ T31] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 927.252754][ T31] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 927.252790][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 927.252816][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 927.252838][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 927.252882][ T31] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 927.252905][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.426509][ T31] usb 2-1: config 0 descriptor?? [ 927.872866][ T31] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 927.872903][ T31] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 927.872930][ T31] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 927.872956][ T31] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 927.872991][ T31] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 927.965280][ T31] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 928.497874][T13659] ptrace attach of "./syz-executor exec"[13660] was attempted by "./syz-executor exec"[13659] [ 929.289674][ T5850] Bluetooth: hci5: command 0x0406 tx timeout [ 930.763469][ T1236] usb 2-1: USB disconnect, device number 37 [ 932.154491][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.154557][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.193522][T13687] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2012'. [ 932.193547][T13687] openvswitch: netlink: Flow key attr not present in new flow. [ 932.402414][T13687] geneve2: entered promiscuous mode [ 932.402440][T13687] geneve2: entered allmulticast mode [ 932.837915][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 932.847627][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 932.848888][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 932.852322][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 932.853801][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 934.400195][ T5904] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 934.550141][ T31] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 934.600133][ T5904] usb 1-1: Using ep0 maxpacket: 8 [ 934.602240][ T5904] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 934.602295][ T5904] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 934.602312][ T5904] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 934.602325][ T5904] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 934.602338][ T5904] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 934.602363][ T5904] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 934.602375][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.734045][ T31] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 934.734080][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 934.734134][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 934.734147][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 934.734173][ T31] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 934.734185][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.739167][ T31] usb 4-1: config 0 descriptor?? [ 934.851755][ T5904] usb 1-1: usb_control_msg returned -32 [ 934.851806][ T5904] usbtmc 1-1:16.0: can't read capabilities [ 934.870153][ T5850] Bluetooth: hci1: command tx timeout [ 935.226753][ T31] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 935.226790][ T31] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 935.226819][ T31] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 935.226846][ T31] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 935.226872][ T31] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 935.265425][T13726] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 935.277227][ T5904] usb 1-1: USB disconnect, device number 42 [ 935.341799][ T31] plantronics 0003:047F:FFFF.000B: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 935.691386][T13733] dummy0: left allmulticast mode [ 935.797348][T13733] bridge1: left allmulticast mode [ 935.797656][T13733] bridge2: left allmulticast mode [ 935.797753][T13733] bridge3: left allmulticast mode [ 935.797852][T13733] bridge4: left allmulticast mode [ 935.797960][T13733] bridge5: left allmulticast mode [ 936.072272][T13696] chnl_net:caif_netlink_parms(): no params data found [ 936.811252][T13696] bridge0: port 1(bridge_slave_0) entered blocking state [ 936.814071][T13696] bridge0: port 1(bridge_slave_0) entered disabled state [ 936.814243][T13696] bridge_slave_0: entered allmulticast mode [ 936.817240][T13696] bridge_slave_0: entered promiscuous mode [ 936.834348][T13696] bridge0: port 2(bridge_slave_1) entered blocking state [ 936.840247][T13696] bridge0: port 2(bridge_slave_1) entered disabled state [ 936.840492][T13696] bridge_slave_1: entered allmulticast mode [ 936.843014][T13696] bridge_slave_1: entered promiscuous mode [ 936.941065][ T7236] bridge_slave_1: left allmulticast mode [ 936.941092][ T7236] bridge_slave_1: left promiscuous mode [ 936.941322][ T7236] bridge0: port 2(bridge_slave_1) entered disabled state [ 936.950271][ T5850] Bluetooth: hci1: command tx timeout [ 937.026107][ T7236] bridge_slave_0: left allmulticast mode [ 937.026136][ T7236] bridge_slave_0: left promiscuous mode [ 937.026376][ T7236] bridge0: port 1(bridge_slave_0) entered disabled state [ 937.339772][ T9] usb 4-1: USB disconnect, device number 41 [ 938.140655][ T7236] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 938.203785][ T7236] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 938.221107][ T7236] bond0 (unregistering): Released all slaves [ 938.342693][T13696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 938.395250][T13696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 938.585496][T13696] team0: Port device team_slave_0 added [ 939.050121][ T5850] Bluetooth: hci1: command tx timeout [ 939.161346][T13786] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2034'. [ 939.161370][T13786] openvswitch: netlink: Flow key attr not present in new flow. [ 939.233316][T13790] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2037'. [ 939.363951][T13696] team0: Port device team_slave_1 added [ 939.748347][T13808] netlink: 'syz.0.2039': attribute type 1 has an invalid length. [ 939.964550][T13809] macvlan2: entered promiscuous mode [ 939.964567][T13809] macvlan2: entered allmulticast mode [ 939.965465][T13809] bond1: (slave macvlan2): Opening slave failed [ 940.311442][T13696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 940.311460][T13696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 940.311485][T13696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 940.313687][T13696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 940.313700][T13696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 940.313726][T13696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 941.115307][ T5850] Bluetooth: hci1: command tx timeout [ 941.229689][ T7236] hsr_slave_0: left promiscuous mode [ 941.384156][ T7236] hsr_slave_1: left promiscuous mode [ 941.385157][ T7236] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 941.483269][ T7236] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 942.311299][ T7236] team0 (unregistering): Port device team_slave_1 removed [ 942.350780][ T7236] team0 (unregistering): Port device team_slave_0 removed [ 942.604373][T13696] hsr_slave_0: entered promiscuous mode [ 942.605117][T13696] hsr_slave_1: entered promiscuous mode [ 947.085877][T13903] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2058'. [ 947.085902][T13903] openvswitch: netlink: Flow key attr not present in new flow. [ 949.683077][T13903] geneve2: entered promiscuous mode [ 949.683105][T13903] geneve2: entered allmulticast mode [ 953.059115][T13936] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2070'. [ 953.857634][T13696] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 955.800448][T13696] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 956.060131][T13696] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 956.125430][T13696] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 957.307539][T13696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 957.376286][T13696] 8021q: adding VLAN 0 to HW filter on device team0 [ 957.414726][ T7236] bridge0: port 1(bridge_slave_0) entered blocking state [ 957.427633][ T7236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 957.447455][ T103] bridge0: port 2(bridge_slave_1) entered blocking state [ 957.447583][ T103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 962.210998][T13696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 962.410630][T14032] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2088'. [ 962.422588][T14032] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2088'. [ 962.590422][T14032] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2088'. [ 962.593952][T14032] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2088'. [ 962.660598][T13696] veth0_vlan: entered promiscuous mode [ 962.687112][T13696] veth1_vlan: entered promiscuous mode [ 962.960923][T13696] veth0_macvtap: entered promiscuous mode [ 963.010918][T13696] veth1_macvtap: entered promiscuous mode [ 963.266266][T13696] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 963.307114][T13696] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 963.329300][ T5872] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.352020][ T5872] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.366592][ T5872] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.536029][ T5872] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.717221][ T7233] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 966.717243][ T7233] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 967.746393][T14074] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2092'. [ 968.212775][T14074] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2092'. [ 968.621333][T14074] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2092'. [ 968.682845][T14074] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2092'. [ 968.703835][ T5872] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 968.703853][ T5872] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 986.281391][ T5112] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 986.288155][ T5112] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 986.304278][ T5112] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 986.321041][ T5112] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 986.321758][ T5112] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 988.560065][ T5850] Bluetooth: hci0: command tx timeout [ 989.036879][T14182] can0: slcan on ttyS3. [ 989.226893][T14150] chnl_net:caif_netlink_parms(): no params data found [ 989.254566][T14186] can0 (unregistered): slcan off ttyS3. [ 991.438656][ T5850] Bluetooth: hci0: command tx timeout [ 993.117982][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.118024][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.526153][ T5850] Bluetooth: hci0: command tx timeout [ 995.256034][ T7236] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 995.256072][ T7236] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.986221][ T5850] Bluetooth: hci0: command tx timeout [ 998.208066][T14150] bridge0: port 1(bridge_slave_0) entered blocking state [ 998.208260][T14150] bridge0: port 1(bridge_slave_0) entered disabled state [ 998.218240][T14150] bridge_slave_0: entered allmulticast mode [ 998.220805][T14150] bridge_slave_0: entered promiscuous mode [ 998.225403][T14150] bridge0: port 2(bridge_slave_1) entered blocking state [ 998.225537][T14150] bridge0: port 2(bridge_slave_1) entered disabled state [ 998.225712][T14150] bridge_slave_1: entered allmulticast mode [ 998.228047][T14150] bridge_slave_1: entered promiscuous mode [ 998.596255][ T7236] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 998.596279][ T7236] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.791840][T14150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 998.804924][T14150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1002.255938][T14257] delete_channel: no stack [ 1002.409262][ T7236] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1002.409299][ T7236] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.468361][T14150] team0: Port device team_slave_0 added [ 1002.476378][T14150] team0: Port device team_slave_1 added [ 1004.581663][ T7236] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1004.581686][ T7236] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.323131][T14150] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1005.323173][T14150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1005.323224][T14150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1005.997659][T14150] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1005.997676][T14150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1005.997703][T14150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1006.198756][T14285] netlink: 'syz.0.2145': attribute type 9 has an invalid length. [ 1006.198781][T14285] netlink: 'syz.0.2145': attribute type 11 has an invalid length. [ 1006.198796][T14285] netlink: 'syz.0.2145': attribute type 12 has an invalid length. [ 1006.198813][T14285] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.2145'. [ 1006.198984][T14285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2145'. [ 1006.544886][T14150] hsr_slave_0: entered promiscuous mode [ 1006.556954][T14150] hsr_slave_1: entered promiscuous mode [ 1006.557915][T14150] debugfs: 'hsr0' already exists in 'hsr' [ 1006.557940][T14150] Cannot create hsr debugfs directory [ 1007.167159][T14295] netlink: 'syz.2.2148': attribute type 1 has an invalid length. [ 1008.819282][T14150] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1008.869622][T14150] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1009.343270][T14150] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1009.660099][ T5920] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1009.831134][T14150] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1009.832930][ T5920] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1009.832986][ T5920] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1009.833009][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.866029][ T5920] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1010.228132][ T5920] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1012.184355][ T5920] usb 1-1: USB disconnect, device number 43 [ 1014.331901][T14337] can0: slcan on ttyS3. [ 1018.699325][ T7236] bridge_slave_1: left allmulticast mode [ 1018.699349][ T7236] bridge_slave_1: left promiscuous mode [ 1018.699530][ T7236] bridge0: port 2(bridge_slave_1) entered disabled state [ 1018.783059][T14339] can0 (unregistered): slcan off ttyS3. [ 1021.242649][ T7236] bridge_slave_0: left allmulticast mode [ 1021.242680][ T7236] bridge_slave_0: left promiscuous mode [ 1021.242936][ T7236] bridge0: port 1(bridge_slave_0) entered disabled state [ 1027.816773][T13608] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1028.392607][T13608] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1028.392665][T13608] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1028.392689][T13608] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.413532][T13608] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1028.474070][T13608] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1028.492032][T14401] udevd[14401]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1028.605455][T13608] usb 5-1: USB disconnect, device number 31 [ 1028.692813][ T7236] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1028.750677][ T7236] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1028.772155][ T7236] bond0 (unregistering): Released all slaves [ 1028.777562][ T7236] bond1 (unregistering): Released all slaves [ 1028.803539][ T7236] bond2 (unregistering): Released all slaves [ 1028.825618][ T7236] bond3 (unregistering): Released all slaves [ 1028.844745][ T7236] bond4 (unregistering): Released all slaves [ 1028.866048][ T7236] bond5 (unregistering): Released all slaves [ 1028.878181][ T7236] bond6 (unregistering): Released all slaves [ 1028.895584][ T7236] bond7 (unregistering): Released all slaves [ 1028.910319][ T7236] bond8 (unregistering): Released all slaves [ 1029.169001][ T7236] tipc: Disabling bearer [ 1029.169171][ T7236] tipc: Left network mode [ 1029.502539][T14150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1031.284450][T14150] 8021q: adding VLAN 0 to HW filter on device team0 [ 1031.372050][ T7233] bridge0: port 1(bridge_slave_0) entered blocking state [ 1031.372985][ T7233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1036.415317][T14456] delete_channel: no stack [ 1036.706820][ T7274] bridge0: port 2(bridge_slave_1) entered blocking state [ 1036.706957][ T7274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1044.049849][ T5112] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1044.059765][ T5112] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1044.063022][ T5112] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1044.066650][ T5112] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1044.068922][ T5112] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1046.394801][ T5850] Bluetooth: hci2: command tx timeout [ 1046.999909][ T7236] hsr_slave_0: left promiscuous mode [ 1047.049059][ T7236] hsr_slave_1: left promiscuous mode [ 1047.060148][ T7236] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1047.060373][ T7236] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1047.211470][ T7236] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1047.211496][ T7236] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1048.330423][ T7236] veth1_macvtap: left promiscuous mode [ 1048.330619][ T7236] veth0_macvtap: left promiscuous mode [ 1048.330900][ T7236] veth1_vlan: left promiscuous mode [ 1048.333156][ T7236] veth0_vlan: left promiscuous mode [ 1049.270091][ T5850] Bluetooth: hci2: command tx timeout [ 1051.350078][ T5112] Bluetooth: hci2: command tx timeout [ 1052.793639][ T37] audit: type=1326 audit(1773388904.757:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14564 comm="syz.3.2204" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd9182cc799 code=0x0 [ 1053.012600][ T7236] team0 (unregistering): Port device team_slave_1 removed [ 1053.051775][ T7236] team0 (unregistering): Port device team_slave_0 removed [ 1053.431921][ T5112] Bluetooth: hci2: command tx timeout [ 1054.094704][T14571] delete_channel: no stack [ 1054.571654][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.571723][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.920070][ T5850] Bluetooth: hci1: command 0x0406 tx timeout [ 1057.021517][T14578] delete_channel: no stack [ 1063.310104][T14639] delete_channel: no stack [ 1063.396210][T14515] chnl_net:caif_netlink_parms(): no params data found [ 1066.817006][T14515] bridge0: port 1(bridge_slave_0) entered blocking state [ 1066.817207][T14515] bridge0: port 1(bridge_slave_0) entered disabled state [ 1066.817448][T14515] bridge_slave_0: entered allmulticast mode [ 1066.867055][T14515] bridge_slave_0: entered promiscuous mode [ 1066.886690][T14515] bridge0: port 2(bridge_slave_1) entered blocking state [ 1066.898305][T14515] bridge0: port 2(bridge_slave_1) entered disabled state [ 1066.898563][T14515] bridge_slave_1: entered allmulticast mode [ 1066.922687][T14515] bridge_slave_1: entered promiscuous mode [ 1070.567415][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1070.587777][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1070.589042][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1070.607177][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1070.607995][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1075.704248][T14515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1075.735538][T14515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1076.405811][T14709] can0: slcan on ttyS3. [ 1076.688083][T14515] team0: Port device team_slave_0 added [ 1076.692053][T14711] can0 (unregistered): slcan off ttyS3. [ 1078.017018][ T5850] Bluetooth: hci0: command tx timeout [ 1078.604691][T14515] team0: Port device team_slave_1 added [ 1079.965673][T14515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1079.965691][T14515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1079.965717][T14515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1079.991083][T14515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1079.991101][T14515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1079.991128][T14515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1080.070092][ T5850] Bluetooth: hci0: command tx timeout [ 1080.169821][T14515] hsr_slave_0: entered promiscuous mode [ 1080.179370][T14515] hsr_slave_1: entered promiscuous mode [ 1080.206052][T14515] debugfs: 'hsr0' already exists in 'hsr' [ 1080.206081][T14515] Cannot create hsr debugfs directory [ 1083.725730][ T5850] Bluetooth: hci0: command tx timeout [ 1086.247130][ T5850] Bluetooth: hci0: command tx timeout [ 1086.872261][T13608] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1087.037133][T13608] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1087.037191][T13608] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1087.037218][T13608] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1087.037260][T13608] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1087.037283][T13608] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1087.115042][T13608] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1087.126915][T13608] usb 3-1: invalid MIDI out EP 0 [ 1087.464906][ T7236] bridge_slave_1: left allmulticast mode [ 1087.464935][ T7236] bridge_slave_1: left promiscuous mode [ 1087.465193][ T7236] bridge0: port 2(bridge_slave_1) entered disabled state [ 1087.537948][ T7236] bridge_slave_0: left allmulticast mode [ 1087.537981][ T7236] bridge_slave_0: left promiscuous mode [ 1087.538247][ T7236] bridge0: port 1(bridge_slave_0) entered disabled state [ 1087.605019][T13608] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1087.617606][T13608] usb 3-1: USB disconnect, device number 31 [ 1088.441191][ T7236] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1088.520729][ T7236] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1088.567398][ T7236] bond0 (unregistering): Released all slaves [ 1088.907002][T14813] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 1089.043751][ T7236] hsr_slave_0: left promiscuous mode [ 1089.108561][ T7236] hsr_slave_1: left promiscuous mode [ 1089.109529][ T7236] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1089.139670][T14801] delete_channel: no stack [ 1089.147165][ T7236] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1089.673667][ T7236] team0 (unregistering): Port device team_slave_1 removed [ 1089.721889][ T7236] team0 (unregistering): Port device team_slave_0 removed [ 1089.988697][T14691] chnl_net:caif_netlink_parms(): no params data found [ 1090.310041][ T5814] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1090.612881][ T5814] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1090.612918][ T5814] usb 3-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1090.612955][ T5814] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1090.612980][ T5814] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.048796][ T5814] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1091.049744][ T5814] usb 3-1: invalid MIDI out EP 0 [ 1091.735403][T14789] udevd[14789]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1091.864820][ T5814] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1091.878563][ T5814] usb 3-1: USB disconnect, device number 32 [ 1093.480508][T14691] bridge0: port 1(bridge_slave_0) entered blocking state [ 1093.480631][T14691] bridge0: port 1(bridge_slave_0) entered disabled state [ 1093.480874][T14691] bridge_slave_0: entered allmulticast mode [ 1093.483512][T14691] bridge_slave_0: entered promiscuous mode [ 1093.714766][T14691] bridge0: port 2(bridge_slave_1) entered blocking state [ 1093.714916][T14691] bridge0: port 2(bridge_slave_1) entered disabled state [ 1093.715191][T14691] bridge_slave_1: entered allmulticast mode [ 1093.717802][T14691] bridge_slave_1: entered promiscuous mode [ 1094.283686][T14691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1094.570312][T14691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1094.795348][T14691] team0: Port device team_slave_0 added [ 1094.824536][T14851] delete_channel: no stack [ 1094.831667][T14691] team0: Port device team_slave_1 added [ 1095.293750][T14691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1095.293768][T14691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1095.293788][T14691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1095.441960][T14691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1095.441973][T14691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1095.441988][T14691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1095.851809][T14873] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1095.851839][T14873] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1095.892528][T14873] vhci_hcd vhci_hcd.0: Device attached [ 1096.155557][ T5814] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 1097.059618][ T7236] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1097.059657][ T7236] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1098.003883][T14691] hsr_slave_0: entered promiscuous mode [ 1098.027877][T14691] hsr_slave_1: entered promiscuous mode [ 1098.028520][T14691] debugfs: 'hsr0' already exists in 'hsr' [ 1098.028536][T14691] Cannot create hsr debugfs directory [ 1098.354382][ T7236] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1098.354407][ T7236] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1098.425058][T14902] delete_channel: no stack [ 1098.860902][ T5920] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1099.031973][ T5920] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1099.032002][ T5920] usb 1-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1099.032024][ T5920] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1099.032036][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.089055][ T5920] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1099.089608][ T5920] usb 1-1: invalid MIDI out EP 0 [ 1099.136769][ T7236] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1099.136805][ T7236] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.235012][T14875] vhci_hcd: connection reset by peer [ 1099.278275][ T7234] vhci_hcd vhci_hcd.2: stop threads [ 1099.279200][ T7234] vhci_hcd vhci_hcd.2: release socket [ 1099.279660][ T7234] vhci_hcd vhci_hcd.2: disconnect device [ 1099.442392][ T5920] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1099.447059][ T5920] usb 1-1: USB disconnect, device number 44 [ 1099.549270][T14789] udevd[14789]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1099.553292][T14515] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1100.304248][T14515] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1100.533733][ T7236] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1100.533770][ T7236] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.618080][T14515] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1100.820600][T14515] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1101.280264][ T5814] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1102.332877][ T7236] bridge_slave_1: left allmulticast mode [ 1102.332897][ T7236] bridge_slave_1: left promiscuous mode [ 1102.333035][ T7236] bridge0: port 2(bridge_slave_1) entered disabled state [ 1102.412004][ T7236] bridge_slave_0: left allmulticast mode [ 1102.412034][ T7236] bridge_slave_0: left promiscuous mode [ 1102.412287][ T7236] bridge0: port 1(bridge_slave_0) entered disabled state [ 1104.260418][ T5814] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1104.421494][ T5814] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1104.421532][ T5814] usb 3-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1104.421575][ T5814] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1104.421599][ T5814] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1104.497205][ T5814] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1104.507897][ T5814] usb 3-1: invalid MIDI out EP 0 [ 1104.722901][ T5112] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1104.732181][ T5112] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1104.737130][ T5112] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1104.742555][ T5112] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1104.744507][ T5112] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1104.847737][ T5814] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1104.862021][ T5814] usb 3-1: USB disconnect, device number 33 [ 1107.030411][ T5850] Bluetooth: hci4: command tx timeout [ 1108.005232][T15001] delete_channel: no stack [ 1108.230740][ T7236] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1108.290499][ T7236] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1108.311931][ T7236] bond0 (unregistering): Released all slaves [ 1108.317233][ T7236] bond1 (unregistering): Released all slaves [ 1108.326543][ T7236] bond2 (unregistering): Released all slaves [ 1108.335831][ T7236] bond3 (unregistering): Released all slaves [ 1108.346417][ T7236] bond4 (unregistering): Released all slaves [ 1108.359337][ T7236] bond5 (unregistering): Released all slaves [ 1108.412568][T15012] can0: slcan on ttyS3. [ 1108.617545][T15015] can0 (unregistered): slcan off ttyS3. [ 1108.938850][T14691] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1109.178326][ T5850] Bluetooth: hci4: command tx timeout [ 1110.880145][ T5920] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1111.032927][ T5920] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1111.032965][ T5920] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1111.032988][ T5920] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1111.033025][ T5920] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1111.033049][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.168413][ T5920] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1111.274093][ T5850] Bluetooth: hci4: command tx timeout [ 1112.122474][ T5920] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 1112.164899][ T5920] usb 1-1: USB disconnect, device number 45 [ 1112.174999][T14691] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1112.348758][T15042] delete_channel: no stack [ 1112.810303][T14691] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1113.350044][ T5850] Bluetooth: hci4: command tx timeout [ 1113.579752][T15055] delete_channel: no stack [ 1113.715286][T14691] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1114.132144][ T7236] hsr_slave_0: left promiscuous mode [ 1114.170114][ T7236] hsr_slave_1: left promiscuous mode [ 1114.171326][ T7236] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1114.171353][ T7236] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1114.215652][ T7236] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1114.215682][ T7236] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1114.683320][ T7236] veth1_macvtap: left promiscuous mode [ 1114.683426][ T7236] veth0_macvtap: left promiscuous mode [ 1114.683668][ T7236] veth1_vlan: left promiscuous mode [ 1114.683831][ T7236] veth0_vlan: left promiscuous mode [ 1115.997171][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.997241][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.341615][ T7236] team0 (unregistering): Port device team_slave_1 removed [ 1116.406198][ T7236] team0 (unregistering): Port device team_slave_0 removed [ 1117.377569][T14989] chnl_net:caif_netlink_parms(): no params data found [ 1117.596637][T14691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1117.845338][T14989] bridge0: port 1(bridge_slave_0) entered blocking state [ 1117.845564][T14989] bridge0: port 1(bridge_slave_0) entered disabled state [ 1117.845832][T14989] bridge_slave_0: entered allmulticast mode [ 1117.848359][T14989] bridge_slave_0: entered promiscuous mode [ 1117.938219][T14989] bridge0: port 2(bridge_slave_1) entered blocking state [ 1117.938341][T14989] bridge0: port 2(bridge_slave_1) entered disabled state [ 1117.938543][T14989] bridge_slave_1: entered allmulticast mode [ 1117.941547][T14989] bridge_slave_1: entered promiscuous mode [ 1118.032630][T14691] 8021q: adding VLAN 0 to HW filter on device team0 [ 1118.038610][T14989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1118.068385][T14989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1118.193135][T14574] bridge0: port 1(bridge_slave_0) entered blocking state [ 1118.219547][T14574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1118.286264][T14989] team0: Port device team_slave_0 added [ 1118.353049][ T7282] bridge0: port 2(bridge_slave_1) entered blocking state [ 1118.353181][ T7282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1118.356451][T14989] team0: Port device team_slave_1 added [ 1118.487060][T14989] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1118.487077][T14989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1118.487101][T14989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1118.548844][T14989] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1118.548862][T14989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1118.548887][T14989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1118.710664][T15165] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2329'. [ 1118.717634][T14989] hsr_slave_0: entered promiscuous mode [ 1118.718967][T14989] hsr_slave_1: entered promiscuous mode [ 1118.719837][T14989] debugfs: 'hsr0' already exists in 'hsr' [ 1118.719869][T14989] Cannot create hsr debugfs directory [ 1126.574957][T15224] delete_channel: no stack [ 1126.765013][T14691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1127.757436][ T37] audit: type=1326 audit(1773388979.687:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15254 comm="syz.3.2347" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd9182cc799 code=0x0 [ 1127.867021][ T7236] bridge_slave_1: left allmulticast mode [ 1127.867050][ T7236] bridge_slave_1: left promiscuous mode [ 1127.867304][ T7236] bridge0: port 2(bridge_slave_1) entered disabled state [ 1127.951861][ T7236] bridge_slave_0: left allmulticast mode [ 1127.951890][ T7236] bridge_slave_0: left promiscuous mode [ 1127.952161][ T7236] bridge0: port 1(bridge_slave_0) entered disabled state [ 1129.070290][ T7236] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1129.200763][ T7236] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1129.287510][ T7236] bond0 (unregistering): Released all slaves [ 1130.255482][ T7236] hsr_slave_0: left promiscuous mode [ 1130.346949][ T7236] hsr_slave_1: left promiscuous mode [ 1130.347544][ T7236] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1130.533744][ T7236] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1131.289375][T15321] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1131.328794][T15321] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1131.339004][T15321] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1131.349161][T15321] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1131.356302][T15321] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1131.863119][ T7236] team0 (unregistering): Port device team_slave_1 removed [ 1131.922076][ T7236] team0 (unregistering): Port device team_slave_0 removed [ 1133.432874][T15321] Bluetooth: hci2: command tx timeout [ 1135.512411][T15321] Bluetooth: hci2: command tx timeout [ 1135.581541][T15320] chnl_net:caif_netlink_parms(): no params data found [ 1135.813699][T15384] fuse: Unknown parameter 'user_id00000000000000000000' [ 1136.527846][T14989] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1136.643906][T14989] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1136.701791][T15320] bridge0: port 1(bridge_slave_0) entered blocking state [ 1136.701914][T15320] bridge0: port 1(bridge_slave_0) entered disabled state [ 1136.702150][T15320] bridge_slave_0: entered allmulticast mode [ 1136.703987][T15320] bridge_slave_0: entered promiscuous mode [ 1136.981554][T14989] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1137.023232][T15320] bridge0: port 2(bridge_slave_1) entered blocking state [ 1137.023372][T15320] bridge0: port 2(bridge_slave_1) entered disabled state [ 1137.023537][T15320] bridge_slave_1: entered allmulticast mode [ 1137.025142][T15320] bridge_slave_1: entered promiscuous mode [ 1137.107635][T14989] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1137.152916][T15417] macvlan2: entered promiscuous mode [ 1137.152934][T15417] macvlan2: entered allmulticast mode [ 1137.155585][T15417] bond1: (slave macvlan2): Opening slave failed [ 1137.476644][T15320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1137.492420][T15320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1137.590075][T15321] Bluetooth: hci2: command tx timeout [ 1137.714851][T15320] team0: Port device team_slave_0 added [ 1137.718601][T15320] team0: Port device team_slave_1 added [ 1137.798877][T15320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1137.798889][T15320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1137.798904][T15320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1137.806155][T15320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1137.806173][T15320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1137.806199][T15320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1137.950215][T15320] hsr_slave_0: entered promiscuous mode [ 1137.951724][T15320] hsr_slave_1: entered promiscuous mode [ 1137.952624][T15320] debugfs: 'hsr0' already exists in 'hsr' [ 1137.952643][T15320] Cannot create hsr debugfs directory [ 1139.347799][T15434] delete_channel: no stack [ 1139.368640][T15442] delete_channel: no stack [ 1139.670171][T15321] Bluetooth: hci2: command tx timeout [ 1142.241715][ T7236] bridge_slave_1: left allmulticast mode [ 1142.241735][ T7236] bridge_slave_1: left promiscuous mode [ 1142.241882][ T7236] bridge0: port 2(bridge_slave_1) entered disabled state [ 1142.360786][ T7236] bridge_slave_0: left allmulticast mode [ 1142.360807][ T7236] bridge_slave_0: left promiscuous mode [ 1142.360955][ T7236] bridge0: port 1(bridge_slave_0) entered disabled state [ 1143.105155][ T7236] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1143.180874][ T7236] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1143.232328][ T7236] bond0 (unregistering): Released all slaves [ 1146.140065][ T7236] hsr_slave_0: left promiscuous mode [ 1146.164767][ T7236] hsr_slave_1: left promiscuous mode [ 1146.165418][ T7236] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1146.190819][ T7236] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1146.414141][T15477] delete_channel: no stack [ 1147.890343][T15498] delete_channel: no stack [ 1148.234808][ T7236] team0 (unregistering): Port device team_slave_1 removed [ 1148.323637][ T7236] team0 (unregistering): Port device team_slave_0 removed [ 1148.870926][T14989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1149.049100][T14989] 8021q: adding VLAN 0 to HW filter on device team0 [ 1149.140299][T15516] can0: slcan on ttyS3. [ 1149.214377][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state [ 1149.214578][ T5872] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1149.217809][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state [ 1149.217883][ T5872] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1149.261411][T15516] can0 (unregistered): slcan off ttyS3. [ 1149.594445][T15529] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2404'. [ 1149.694842][T15532] macvlan2: entered promiscuous mode [ 1149.694858][T15532] macvlan2: entered allmulticast mode [ 1149.695957][T15532] bond2: (slave macvlan2): Opening slave failed [ 1151.343080][ T37] audit: type=1800 audit(1773389003.297:148): pid=15547 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.2406" name="bus" dev="overlay" ino=1898 res=0 errno=0 [ 1152.322328][ T37] audit: type=1800 audit(1773389004.187:149): pid=15568 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.2408" name="bus" dev="overlay" ino=1912 res=0 errno=0 [ 1153.317658][T15320] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1153.354103][T14989] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1153.367920][T15320] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1153.448627][T15320] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1153.707070][T15320] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1155.729262][T15320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1155.775978][T15320] 8021q: adding VLAN 0 to HW filter on device team0 [ 1155.798669][ T7282] bridge0: port 1(bridge_slave_0) entered blocking state [ 1155.798780][ T7282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1155.856550][ T7216] bridge0: port 2(bridge_slave_1) entered blocking state [ 1155.856689][ T7216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1156.893221][ T37] audit: type=1800 audit(1773389008.617:150): pid=15623 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.2417" name="bus" dev="overlay" ino=1942 res=0 errno=0 [ 1157.141023][T14989] veth0_vlan: entered promiscuous mode [ 1157.222170][T14989] veth1_vlan: entered promiscuous mode [ 1157.346065][T14989] veth0_macvtap: entered promiscuous mode [ 1157.358680][T14989] veth1_macvtap: entered promiscuous mode [ 1157.398797][T14989] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1157.429308][T14989] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1157.446213][ T7214] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1157.447248][ T7214] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1157.447291][ T7214] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1157.447326][ T7214] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1159.293951][ T7282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1159.293972][ T7282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1159.342869][T15320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1160.123041][ T7214] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1160.123063][ T7214] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1162.826475][T15320] veth0_vlan: entered promiscuous mode [ 1162.908436][T15320] veth1_vlan: entered promiscuous mode [ 1164.057564][T15320] veth0_macvtap: entered promiscuous mode [ 1164.543382][T15320] veth1_macvtap: entered promiscuous mode [ 1164.585937][T15320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1164.605289][T15320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1164.623615][ T103] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1164.624211][ T103] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1164.627104][ T103] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1164.627144][ T103] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1166.003623][ T103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1166.003644][ T103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1166.179970][ T7216] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1166.179991][ T7216] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1176.686171][T15826] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1177.622121][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.623745][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1179.603061][T14282] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1179.780035][T14282] usb 4-1: Using ep0 maxpacket: 16 [ 1179.791683][T14282] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1179.791739][T14282] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1179.791765][T14282] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1179.791783][T14282] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1179.791806][T14282] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1179.800430][T14282] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1179.800460][T14282] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1179.800479][T14282] usb 4-1: Manufacturer: syz [ 1181.251630][T14282] usb 4-1: config 0 descriptor?? [ 1181.554724][T14282] usb 4-1: can't set config #0, error -71 [ 1182.570355][T14282] usb 4-1: USB disconnect, device number 42 [ 1191.810060][ T5904] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1191.960005][ T5904] usb 3-1: Using ep0 maxpacket: 32 [ 1191.965855][ T5904] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1191.965882][ T5904] usb 3-1: config 0 has no interface number 0 [ 1191.968821][ T5904] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1191.968850][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1191.968870][ T5904] usb 3-1: Product: syz [ 1191.968884][ T5904] usb 3-1: Manufacturer: syz [ 1191.968899][ T5904] usb 3-1: SerialNumber: syz [ 1192.060303][T15954] netlink: 'syz.5.2497': attribute type 2 has an invalid length. [ 1192.060327][T15954] tipc: Started in network mode [ 1192.060343][T15954] tipc: Node identity 1340008, cluster identity 4711 [ 1192.060355][T15954] tipc: Node number set to 20185096 [ 1192.141861][ T5904] usb 3-1: config 0 descriptor?? [ 1192.163483][ T5904] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1192.163575][ T5904] usb 3-1: selecting invalid altsetting 1 [ 1192.163596][ T5904] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1193.001761][ T5904] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1193.002239][ T5904] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1193.002297][ T5904] usb 3-1: media controller created [ 1193.066333][ T5904] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1193.280016][ T6064] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1193.301863][ T5904] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1193.301988][ T5904] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1193.302564][ T5904] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1194.771430][ T6064] usb 6-1: Using ep0 maxpacket: 16 [ 1194.776105][ T6064] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1194.776160][ T6064] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1194.776188][ T6064] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1194.776210][ T6064] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1194.776232][ T6064] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1194.777497][ T6064] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1194.777524][ T6064] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1194.777544][ T6064] usb 6-1: Manufacturer: syz [ 1194.821852][ T6064] usb 6-1: config 0 descriptor?? [ 1194.874293][ T5904] usb 3-1: USB disconnect, device number 34 [ 1195.403077][ T6064] rc_core: IR keymap rc-hauppauge not found [ 1195.403097][ T6064] Registered IR keymap rc-empty [ 1195.404012][ T6064] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1195.613357][ T6064] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1196.275560][ T6064] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1196.278787][ T6064] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input10 [ 1196.420775][ T6064] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1196.440086][ T6064] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1196.460053][ T6064] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1196.480076][ T6064] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1196.500816][ T6064] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1196.520078][ T6064] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1196.540186][ T6064] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1196.560110][ T6064] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1196.580061][ T6064] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1196.600084][ T6064] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1196.625661][ T6064] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1196.625687][ T6064] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1196.656933][ T6064] usb 6-1: USB disconnect, device number 2 [ 1198.384081][T16010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2513'. [ 1200.447859][T16035] netlink: 'syz.0.2522': attribute type 2 has an invalid length. [ 1200.447880][T16035] tipc: Started in network mode [ 1200.447892][T16035] tipc: Node identity 1340008, cluster identity 4711 [ 1200.447914][T16035] tipc: Node number set to 20185096 [ 1200.561877][T16039] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1201.285544][T16052] overlayfs: failed to resolve './file0': -2 [ 1203.743584][T16081] overlayfs: failed to resolve './file0': -2 [ 1206.672739][T16105] genirq: Flags mismatch irq 4. 00202000 (pcl818) vs. 00202080 (ttyS0) [ 1209.027968][T16133] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2547'. [ 1217.190644][T16188] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2559'. [ 1220.008949][T15321] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1220.030126][T15321] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1220.031399][T15321] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1220.032697][T15321] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1220.034247][T15321] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1222.365901][T16242] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1222.561169][ T6064] IPVS: starting estimator thread 0... [ 1222.921122][T16244] IPVS: using max 8 ests per chain, 19200 per kthread [ 1225.827923][ T7282] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1226.050050][ T5917] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1226.119601][ T7282] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1226.200001][ T5917] usb 7-1: Using ep0 maxpacket: 16 [ 1226.203777][ T5917] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1226.203801][ T5917] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1226.203820][ T5917] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1226.206019][ T5917] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1226.206048][ T5917] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1226.206065][ T5917] usb 7-1: Product: syz [ 1226.206074][ T5917] usb 7-1: Manufacturer: syz [ 1226.206081][ T5917] usb 7-1: SerialNumber: syz [ 1227.629102][T16296] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2582'. [ 1228.903793][ T5917] usb 7-1: 0:2 : does not exist [ 1229.353566][ T5917] usb 7-1: 1:0: failed to get current value for ch 0 (-22) [ 1230.234065][ T5917] usb 7-1: USB disconnect, device number 2 [ 1230.427457][T16297] udevd[16297]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1230.781936][T16312] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1230.917133][T15321] Bluetooth: hci4: command 0x0406 tx timeout [ 1231.344773][ T7282] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1231.371927][T16214] chnl_net:caif_netlink_parms(): no params data found [ 1231.392501][T16245] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 1231.555243][T16245] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1231.555371][T16245] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1231.555503][T16245] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1231.555538][T16245] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1231.555601][T16245] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1231.559359][T16245] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1231.559413][T16245] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1231.559437][T16245] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1231.559457][T16245] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1231.559480][T16245] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1231.633946][T16245] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1231.634058][T16245] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1231.634085][T16245] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1231.634110][T16245] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1231.634136][T16245] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1232.065676][T16245] usb 6-1: string descriptor 0 read error: -22 [ 1232.066212][T16245] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1232.066236][T16245] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1232.120435][T16315] IPVS: set_ctl: invalid protocol: 1 224.0.0.2:0 [ 1232.919121][T16245] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1233.125702][T16245] usb 6-1: USB disconnect, device number 3 [ 1234.733200][T16308] syz.3.2586 (16308): drop_caches: 2 [ 1234.837267][ T7282] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1235.166391][T16337] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1235.392496][T16336] netlink: 'syz.0.2591': attribute type 2 has an invalid length. [ 1237.283430][T16346] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1238.557698][T16214] bridge0: port 1(bridge_slave_0) entered blocking state [ 1238.557949][T16214] bridge0: port 1(bridge_slave_0) entered disabled state [ 1238.558118][T16214] bridge_slave_0: entered allmulticast mode [ 1238.604944][T16214] bridge_slave_0: entered promiscuous mode [ 1238.721443][T16214] bridge0: port 2(bridge_slave_1) entered blocking state [ 1238.809580][T16214] bridge0: port 2(bridge_slave_1) entered disabled state [ 1238.830568][T16214] bridge_slave_1: entered allmulticast mode [ 1238.923091][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.923268][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.960704][T14344] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1238.969393][T16214] bridge_slave_1: entered promiscuous mode [ 1239.128912][T14344] usb 4-1: Using ep0 maxpacket: 16 [ 1239.143921][T14344] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1239.143976][T14344] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1239.144004][T14344] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1239.144025][T14344] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1239.144047][T14344] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1239.188318][T14344] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1239.188344][T14344] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1239.188360][T14344] usb 4-1: Manufacturer: syz [ 1239.270096][T14344] usb 4-1: config 0 descriptor?? [ 1240.053932][T16368] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1240.232421][T16214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1240.318136][ T5904] IPVS: starting estimator thread 0... [ 1240.400227][T16370] IPVS: using max 8 ests per chain, 19200 per kthread [ 1240.904307][T16214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1241.372744][T16214] team0: Port device team_slave_0 added [ 1241.391295][T14344] rc_core: IR keymap rc-hauppauge not found [ 1241.391315][T14344] Registered IR keymap rc-empty [ 1241.391437][T14344] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1241.398890][T16214] team0: Port device team_slave_1 added [ 1241.412439][T14344] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1241.432042][T14344] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1241.435056][T14344] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input11 [ 1241.448848][T14344] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1241.480396][T14344] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1241.511514][T14344] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1241.540149][T14344] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1241.560119][T14344] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1241.581780][T14344] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1241.600896][T14344] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1241.632052][T14344] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1241.633953][T16377] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1241.651689][T14344] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1241.680171][T14344] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1242.505245][T14344] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1242.505270][T14344] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1242.519944][T14344] usb 4-1: USB disconnect, device number 43 [ 1242.571036][T16214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1242.571053][T16214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1242.571079][T16214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1242.596590][T16214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1242.596607][T16214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1242.596632][T16214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1242.710868][ T7282] bridge_slave_1: left allmulticast mode [ 1242.710896][ T7282] bridge_slave_1: left promiscuous mode [ 1242.711150][ T7282] bridge0: port 2(bridge_slave_1) entered disabled state [ 1242.750359][T16379] 9pnet: p9_errstr2errno: server reported unknown error 0x000 [ 1242.819577][ T7282] bridge_slave_0: left allmulticast mode [ 1242.819605][ T7282] bridge_slave_0: left promiscuous mode [ 1242.857232][ T7282] bridge0: port 1(bridge_slave_0) entered disabled state [ 1243.961464][T16387] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1245.960209][ T37] audit: type=1800 audit(1773389097.607:151): pid=16412 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.2606" name="bus" dev="overlay" ino=1236 res=0 errno=0 [ 1247.178862][T16418] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1247.206123][ T5904] IPVS: starting estimator thread 0... [ 1247.639802][T16420] IPVS: using max 8 ests per chain, 19200 per kthread [ 1248.572985][ T7282] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1249.090098][ T7282] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1249.174834][ T7282] bond0 (unregistering): Released all slaves [ 1249.209134][ T7282] bond1 (unregistering): Released all slaves [ 1249.278789][ T7282] bond2 (unregistering): Released all slaves [ 1249.498102][T16433] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2613'. [ 1251.580147][T16443] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2613'. [ 1251.636162][T16433] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2613'. [ 1251.660409][T16214] hsr_slave_0: entered promiscuous mode [ 1251.661133][T16214] hsr_slave_1: entered promiscuous mode [ 1251.661608][T16214] debugfs: 'hsr0' already exists in 'hsr' [ 1251.661623][T16214] Cannot create hsr debugfs directory [ 1251.664034][ T7274] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1251.666303][T16443] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2613'. [ 1251.668481][T16439] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2615'. [ 1251.673564][ T7274] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1251.732207][ T7274] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1251.737754][ T7274] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1251.851419][ T5917] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1251.895064][ T7274] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1252.009969][ T5917] usb 6-1: Using ep0 maxpacket: 8 [ 1252.027384][ T5917] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 1252.027413][ T5917] usb 6-1: config 0 has no interface number 0 [ 1252.029740][ T5917] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1252.029757][ T5917] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1252.029768][ T5917] usb 6-1: Product: syz [ 1252.029776][ T5917] usb 6-1: Manufacturer: syz [ 1252.029784][ T5917] usb 6-1: SerialNumber: syz [ 1252.095009][ T5917] usb 6-1: config 0 descriptor?? [ 1252.230129][T16245] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1252.620533][ T5917] uvcvideo 6-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1252.620918][ T5917] uvcvideo 6-1:0.31: Entity type for entity Output 32774 was not initialized! [ 1252.621569][ T5917] uvcvideo 6-1:0.31: Failed to create links for entity 5 [ 1252.621587][ T5917] uvcvideo 6-1:0.31: Failed to register entities (-22). [ 1252.687605][ T5917] usb 6-1: USB disconnect, device number 4 [ 1252.716821][T16245] usb 4-1: Using ep0 maxpacket: 16 [ 1252.739969][T16245] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1252.739996][T16245] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1252.740014][T16245] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1252.745095][T16245] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1252.745123][T16245] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1252.745142][T16245] usb 4-1: Product: syz [ 1252.745157][T16245] usb 4-1: Manufacturer: syz [ 1252.745171][T16245] usb 4-1: SerialNumber: syz [ 1252.944166][ T7274] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1253.027293][ T7274] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1253.089781][ T7274] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1253.090017][ T808] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1253.249993][ T808] usb 7-1: Using ep0 maxpacket: 32 [ 1253.253989][ T808] usb 7-1: config 2 has an invalid interface number: 88 but max is 0 [ 1253.254016][ T808] usb 7-1: config 2 has no interface number 0 [ 1253.254060][ T808] usb 7-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 1253.254087][ T808] usb 7-1: config 2 interface 88 has no altsetting 0 [ 1253.256616][ T808] usb 7-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 1253.256644][ T808] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.256664][ T808] usb 7-1: Product: syz [ 1253.256678][ T808] usb 7-1: Manufacturer: syz [ 1253.256692][ T808] usb 7-1: SerialNumber: syz [ 1253.334618][T16245] usb 4-1: 0:2 : does not exist [ 1253.340032][T16245] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 1253.353755][T16458] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1253.567094][T16458] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1253.594337][T16245] usb 4-1: USB disconnect, device number 44 [ 1253.715760][T16456] udevd[16456]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1253.971132][ T808] asix 7-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1253.971298][ T808] asix 7-1:2.88: probe with driver asix failed with error -71 [ 1254.012549][ T808] usb 7-1: USB disconnect, device number 3 [ 1255.070446][T16474] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 1255.148258][ T7282] hsr_slave_0: left promiscuous mode [ 1255.180280][ T7282] hsr_slave_1: left promiscuous mode [ 1255.180964][ T7282] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1255.180981][ T7282] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1255.591163][ T7282] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1255.591190][ T7282] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1255.877137][ T808] IPVS: starting estimator thread 0... [ 1255.881158][T16488] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1255.913765][ T7282] veth1_macvtap: left promiscuous mode [ 1255.915609][ T7282] veth0_macvtap: left promiscuous mode [ 1255.919392][ T7282] veth1_vlan: left promiscuous mode [ 1255.923315][ T7282] veth0_vlan: left promiscuous mode [ 1256.010987][T16490] IPVS: using max 8 ests per chain, 19200 per kthread [ 1257.121129][T15321] Bluetooth: hci2: command 0x0406 tx timeout [ 1260.363846][T16515] syz.0.2631 (16515): drop_caches: 2 [ 1260.437682][T16512] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2632'. [ 1260.467554][ T7282] team0 (unregistering): Port device team_slave_1 removed [ 1260.510859][ T7282] team0 (unregistering): Port device team_slave_0 removed [ 1260.665052][T16517] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2633'. [ 1260.801516][T16518] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2633'. [ 1261.074175][T16517] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2633'. [ 1261.095019][T16518] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2633'. [ 1265.028882][T16557] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1265.722017][T16214] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1265.787904][T16214] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1265.887904][T16214] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1265.943785][T16214] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1266.413913][ T808] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1267.047966][ T808] usb 7-1: Using ep0 maxpacket: 32 [ 1267.077100][ T808] usb 7-1: config 2 has an invalid interface number: 88 but max is 0 [ 1267.077126][ T808] usb 7-1: config 2 has no interface number 0 [ 1267.077172][ T808] usb 7-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 1267.077196][ T808] usb 7-1: config 2 interface 88 has no altsetting 0 [ 1267.086645][ T808] usb 7-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 1267.086675][ T808] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1267.086693][ T808] usb 7-1: Product: syz [ 1267.086707][ T808] usb 7-1: Manufacturer: syz [ 1267.086720][ T808] usb 7-1: SerialNumber: syz [ 1267.106838][T16580] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1267.208793][T16581] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2648'. [ 1267.287108][T16581] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2648'. [ 1267.466820][T16580] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1267.541841][T16581] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2648'. [ 1267.572192][T16581] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2648'. [ 1267.932359][T16214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1268.004143][T16214] 8021q: adding VLAN 0 to HW filter on device team0 [ 1268.193170][ T808] asix 7-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1268.193449][ T808] asix 7-1:2.88: probe with driver asix failed with error -71 [ 1268.238172][ T808] usb 7-1: USB disconnect, device number 4 [ 1268.241930][ T7272] bridge0: port 1(bridge_slave_0) entered blocking state [ 1268.261659][ T7272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1268.899047][ T7272] bridge0: port 2(bridge_slave_1) entered blocking state [ 1268.900278][ T7272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1269.121912][T16214] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1270.246849][T16616] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1270.932135][T16619] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1274.115385][T16214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1276.052015][ T1236] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1277.050150][ T1236] usb 6-1: Using ep0 maxpacket: 16 [ 1277.072649][ T1236] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1277.072809][ T1236] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1277.072880][ T1236] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1277.072932][ T1236] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1277.072956][ T1236] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1277.154055][ T1236] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1277.154094][ T1236] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1277.154144][ T1236] usb 6-1: Manufacturer: syz [ 1277.502555][ T1236] usb 6-1: config 0 descriptor?? [ 1277.709385][ T37] audit: type=1800 audit(1773389129.667:152): pid=16668 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.2666" name="bus" dev="overlay" ino=1320 res=0 errno=0 [ 1277.759755][T16656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1277.767499][T16656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1277.901271][ T1236] rc_core: IR keymap rc-hauppauge not found [ 1277.901291][ T1236] Registered IR keymap rc-empty [ 1277.901434][ T1236] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1277.924361][ T1236] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1277.944468][ T1236] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1277.948164][T16214] veth0_vlan: entered promiscuous mode [ 1277.955881][ T1236] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input12 [ 1277.970464][ T1236] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1277.990936][ T1236] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1278.007922][T16214] veth1_vlan: entered promiscuous mode [ 1278.012345][ T1236] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1278.031517][ T1236] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1278.050026][ T1236] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1278.070304][ T1236] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1278.106131][ T1236] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1278.120849][ T1236] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1278.147763][ T1236] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1278.227316][T16214] veth0_macvtap: entered promiscuous mode [ 1278.229649][ T1236] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1278.579237][T16214] veth1_macvtap: entered promiscuous mode [ 1278.607871][ T1236] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 1278.607897][ T1236] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1278.638019][T16214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1278.656766][T16214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1278.680434][ T1236] usb 6-1: USB disconnect, device number 5 [ 1278.729974][ T7274] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.730635][ T7274] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.730934][ T7274] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.731150][ T7274] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1280.269258][T15484] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1280.270867][T15484] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1280.276742][T15484] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1280.283024][T15484] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1281.582202][T15321] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1282.523310][ T37] audit: type=1800 audit(1773389133.667:153): pid=16727 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.6.2678" name="bus" dev="overlay" ino=386 res=0 errno=0 [ 1282.542513][T15321] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1282.550673][T15321] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1282.551851][T15321] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1282.553228][T15321] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1283.914661][T16740] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1284.684930][T15321] Bluetooth: hci0: command tx timeout [ 1284.935229][ T37] audit: type=1800 audit(1773389136.887:154): pid=16748 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.2685" name="bus" dev="overlay" ino=1354 res=0 errno=0 [ 1286.147140][ T7236] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1286.399953][ T808] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1286.709988][T15321] Bluetooth: hci0: command tx timeout [ 1286.977495][T16766] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1287.646856][ T808] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1287.646963][ T808] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1287.647035][ T808] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1287.647368][ T808] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1287.647447][ T808] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1288.011005][ T808] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1288.011037][ T808] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1288.011058][ T808] usb 4-1: Product: syz [ 1288.011072][ T808] usb 4-1: Manufacturer: syz [ 1288.035039][ T808] cdc_wdm 4-1:1.0: skipping garbage [ 1288.035060][ T808] cdc_wdm 4-1:1.0: skipping garbage [ 1288.040797][ T808] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1288.040840][ T808] cdc_wdm 4-1:1.0: Unknown control protocol [ 1288.792450][T15321] Bluetooth: hci0: command tx timeout [ 1288.877443][ T7236] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1288.980158][ T7282] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1289.076874][ T7282] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1289.185438][ T7282] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1289.199360][ T7282] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1289.667091][ T5814] usb 4-1: USB disconnect, device number 45 [ 1289.789125][ T7236] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1289.893548][T16794] 9pnet: p9_errstr2errno: server reported unknown error 0x000 [ 1289.908324][T16720] chnl_net:caif_netlink_parms(): no params data found [ 1291.055682][T15321] Bluetooth: hci0: command tx timeout [ 1293.015822][ T7236] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1294.251088][T16720] bridge0: port 1(bridge_slave_0) entered blocking state [ 1294.251225][T16720] bridge0: port 1(bridge_slave_0) entered disabled state [ 1294.251793][T16720] bridge_slave_0: entered allmulticast mode [ 1294.254386][T16720] bridge_slave_0: entered promiscuous mode [ 1294.258086][T16720] bridge0: port 2(bridge_slave_1) entered blocking state [ 1294.258278][T16720] bridge0: port 2(bridge_slave_1) entered disabled state [ 1294.258457][T16720] bridge_slave_1: entered allmulticast mode [ 1294.317602][T16720] bridge_slave_1: entered promiscuous mode [ 1294.472123][T16720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1294.476135][T16720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1295.610293][T16829] syz.0.2702 (16829): drop_caches: 2 [ 1295.732167][T16789] syz.5.2693 (16789): drop_caches: 2 [ 1297.768854][T16720] team0: Port device team_slave_0 added [ 1297.807855][T16720] team0: Port device team_slave_1 added [ 1298.125814][T16720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1298.125832][T16720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1298.125857][T16720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1298.188161][T16720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1298.188178][T16720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1298.188203][T16720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1298.550011][T14344] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1298.595528][T16720] hsr_slave_0: entered promiscuous mode [ 1298.614697][T16720] hsr_slave_1: entered promiscuous mode [ 1298.702249][T14344] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD6, changing to 0x86 [ 1298.702286][T14344] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 255, changing to 11 [ 1298.702314][T14344] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 59391, setting to 1024 [ 1298.707132][T14344] usb 1-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 1298.707163][T14344] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1298.707192][T14344] usb 1-1: Product: syz [ 1298.707207][T14344] usb 1-1: Manufacturer: syz [ 1298.707222][T14344] usb 1-1: SerialNumber: syz [ 1298.801132][T16866] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2710'. [ 1298.952193][T14344] usb 1-1: config 0 descriptor?? [ 1298.954647][T16860] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1299.369224][T14344] powermate: unknown product id 0240 [ 1299.369244][T14344] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 1300.315075][T14344] input: Griffin SoundKnob as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input13 [ 1300.492871][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.493249][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.597125][ C0] powermate: config urb returned -71 [ 1300.599310][ C0] powermate: config urb returned -71 [ 1300.599478][ C0] powermate: config urb returned -71 [ 1300.599641][ C0] powermate: config urb returned -71 [ 1300.778105][T16883] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1307.700189][T14344] usb 1-1: USB disconnect, device number 46 [ 1307.700273][ C0] powermate 1-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 1314.196617][T16925] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1316.251989][ T7236] bridge_slave_1: left allmulticast mode [ 1316.252016][ T7236] bridge_slave_1: left promiscuous mode [ 1316.252261][ T7236] bridge0: port 2(bridge_slave_1) entered disabled state [ 1317.480792][T16952] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1317.624383][ T7236] bridge_slave_0: left allmulticast mode [ 1317.624443][ T7236] bridge_slave_0: left promiscuous mode [ 1317.627327][ T7236] bridge0: port 1(bridge_slave_0) entered disabled state [ 1319.258107][T16972] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1320.192777][T16974] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1321.601211][T16990] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1323.707506][T17008] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 1325.260777][T17016] syz.0.2742 (17016): drop_caches: 2 [ 1325.403350][T17013] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1326.215504][T17021] 9p: Bad value for 'wfdno' [ 1327.533989][ T7236] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1327.610937][ T7236] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1327.646114][ T7236] bond0 (unregistering): Released all slaves [ 1328.074805][T17049] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1328.545854][T17050] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1330.684120][ T7236] hsr_slave_0: left promiscuous mode [ 1330.940195][ T7236] hsr_slave_1: left promiscuous mode [ 1330.942337][ T7236] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1330.942362][ T7236] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1331.035860][T17075] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1331.764733][T17069] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1331.931349][ T7236] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1331.931376][ T7236] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1332.295546][ T7236] veth1_macvtap: left promiscuous mode [ 1332.295654][ T7236] veth0_macvtap: left promiscuous mode [ 1332.295898][ T7236] veth1_vlan: left promiscuous mode [ 1332.296047][ T7236] veth0_vlan: left promiscuous mode [ 1333.031075][ T7236] team0 (unregistering): Port device team_slave_1 removed [ 1333.100491][ T7236] team0 (unregistering): Port device team_slave_0 removed [ 1333.693002][T17103] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1336.746141][T17106] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1337.122476][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1337.356519][T17111] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2766'. [ 1337.500358][T17117] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1338.985051][T17128] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1339.510042][ T5917] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1339.698714][ T5917] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1339.698772][ T5917] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1339.698833][ T5917] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1339.698948][ T5917] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1339.699003][ T5917] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1339.889181][ T5917] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1339.889242][ T5917] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1339.889292][ T5917] usb 6-1: Product: syz [ 1339.889307][ T5917] usb 6-1: Manufacturer: syz [ 1340.007884][ T5917] cdc_wdm 6-1:1.0: skipping garbage [ 1340.007905][ T5917] cdc_wdm 6-1:1.0: skipping garbage [ 1340.032258][ T5917] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1340.032279][ T5917] cdc_wdm 6-1:1.0: Unknown control protocol [ 1341.590667][ T5814] usb 6-1: USB disconnect, device number 7 [ 1341.939912][T17163] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1342.569324][T17159] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1342.698477][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1342.726385][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1342.727825][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1342.735600][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1342.736952][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1344.121442][ T5904] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 1344.202723][T17162] chnl_net:caif_netlink_parms(): no params data found [ 1344.224331][ T37] audit: type=1800 audit(1773389196.177:155): pid=17186 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.6.2782" name="bus" dev="overlay" ino=577 res=0 errno=0 [ 1344.367576][ T5904] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1344.367605][ T5904] usb 6-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 1344.369726][ T5904] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1344.369753][ T5904] usb 6-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 1344.391756][ T5904] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1344.391783][ T5904] usb 6-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 1344.396277][ T5904] usb 6-1: string descriptor 0 read error: -22 [ 1344.396410][ T5904] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1344.396432][ T5904] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1344.402348][ T5904] usb 6-1: rejected 3 configurations due to insufficient available bus power [ 1344.402375][ T5904] usb 6-1: no configuration chosen from 3 choices [ 1344.794722][ T5850] Bluetooth: hci1: command tx timeout [ 1345.016461][T17209] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1345.896493][ T6354] bridge_slave_1: left allmulticast mode [ 1345.896520][ T6354] bridge_slave_1: left promiscuous mode [ 1345.896747][ T6354] bridge0: port 2(bridge_slave_1) entered disabled state [ 1346.070314][T14344] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1346.108627][ T5904] usb 6-1: USB disconnect, device number 8 [ 1346.143641][ T6354] bridge_slave_0: left allmulticast mode [ 1346.143669][ T6354] bridge_slave_0: left promiscuous mode [ 1346.143937][ T6354] bridge0: port 1(bridge_slave_0) entered disabled state [ 1346.380179][T14344] usb 7-1: Using ep0 maxpacket: 16 [ 1346.858642][T14344] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1346.858671][T14344] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1346.887920][T14344] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1346.887952][T14344] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1346.887972][T14344] usb 7-1: Manufacturer: syz [ 1346.923344][T14344] usb 7-1: config 0 descriptor?? [ 1346.955988][ T5850] Bluetooth: hci1: command tx timeout [ 1347.026618][T17221] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1348.706793][T17233] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1349.032806][ T5850] Bluetooth: hci1: command tx timeout [ 1349.060797][ T6354] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1349.636946][T17235] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2796'. [ 1349.650599][ T5904] usb 7-1: USB disconnect, device number 5 [ 1349.729647][ T6354] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1349.820259][ T5904] ================================================================== [ 1349.820271][ T5904] BUG: KASAN: vmalloc-out-of-bounds in __list_add_valid_or_report+0x4e/0x130 [ 1349.820379][ T5904] Read of size 8 at addr ffffc9000e7bb008 by task kworker/1:4/5904 [ 1349.820388][ T5904] [ 1349.820406][ T5904] CPU: 1 UID: 0 PID: 5904 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1349.820418][ T5904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1349.820426][ T5904] Workqueue: usb_hub_wq hub_event [ 1349.820476][ T5904] Call Trace: [ 1349.820482][ T5904] [ 1349.820487][ T5904] dump_stack_lvl+0xe8/0x150 [ 1349.820527][ T5904] print_report+0xba/0x230 [ 1349.820544][ T5904] ? __list_add_valid_or_report+0x4e/0x130 [ 1349.820555][ T5904] kasan_report+0x117/0x150 [ 1349.820613][ T5904] ? __list_add_valid_or_report+0x4e/0x130 [ 1349.820626][ T5904] __list_add_valid_or_report+0x4e/0x130 [ 1349.820638][ T5904] kcov_remote_stop+0x457/0x680 [ 1349.820668][ T5904] hub_event+0x49d8/0x4f60 [ 1349.820688][ T5904] ? __pfx_hub_event+0x10/0x10 [ 1349.820700][ T5904] ? process_scheduled_works+0xa25/0x1830 [ 1349.820724][ T5904] ? process_scheduled_works+0xa25/0x1830 [ 1349.820737][ T5904] process_scheduled_works+0xb02/0x1830 [ 1349.820756][ T5904] ? __pfx_process_scheduled_works+0x10/0x10 [ 1349.820770][ T5904] ? assign_work+0x3d5/0x5e0 [ 1349.820784][ T5904] worker_thread+0xa50/0xfc0 [ 1349.820803][ T5904] kthread+0x388/0x470 [ 1349.820813][ T5904] ? __pfx_worker_thread+0x10/0x10 [ 1349.820827][ T5904] ? __pfx_kthread+0x10/0x10 [ 1349.820837][ T5904] ret_from_fork+0x51e/0xb90 [ 1349.820858][ T5904] ? __pfx_ret_from_fork+0x10/0x10 [ 1349.820871][ T5904] ? __switch_to+0xc7d/0x1450 [ 1349.820889][ T5904] ? __pfx_kthread+0x10/0x10 [ 1349.820900][ T5904] ret_from_fork_asm+0x1a/0x30 [ 1349.820913][ T5904] [ 1349.820916][ T5904] [ 1349.820919][ T5904] The buggy address belongs to a vmalloc virtual mapping [ 1349.820930][ T5904] Memory state around the buggy address: [ 1349.820936][ T5904] ffffc9000e7baf00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1349.820943][ T5904] ffffc9000e7baf80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1349.820949][ T5904] >ffffc9000e7bb000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1349.820955][ T5904] ^ [ 1349.820960][ T5904] ffffc9000e7bb080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1349.820967][ T5904] ffffc9000e7bb100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1349.820972][ T5904] ================================================================== [ 1349.820987][ T5904] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1349.820995][ T5904] CPU: 1 UID: 0 PID: 5904 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1349.821007][ T5904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1349.821013][ T5904] Workqueue: usb_hub_wq hub_event [ 1349.821023][ T5904] Call Trace: [ 1349.821027][ T5904] [ 1349.821031][ T5904] vpanic+0x56c/0xa60 [ 1349.821047][ T5904] ? __pfx_vpanic+0x10/0x10 [ 1349.821063][ T5904] panic+0xc5/0xd0 [ 1349.821084][ T5904] ? __pfx_panic+0x10/0x10 [ 1349.821098][ T5904] ? __list_add_valid_or_report+0x4e/0x130 [ 1349.821109][ T5904] ? rcu_is_watching+0x15/0xb0 [ 1349.821131][ T5904] ? __list_add_valid_or_report+0x4e/0x130 [ 1349.821141][ T5904] check_panic_on_warn+0x89/0xb0 [ 1349.821160][ T5904] ? __list_add_valid_or_report+0x4e/0x130 [ 1349.821171][ T5904] end_report+0x73/0x180 [ 1349.821207][ T5904] ? __list_add_valid_or_report+0x4e/0x130 [ 1349.821218][ T5904] kasan_report+0x128/0x150 [ 1349.821227][ T5904] ? __list_add_valid_or_report+0x4e/0x130 [ 1349.821240][ T5904] __list_add_valid_or_report+0x4e/0x130 [ 1349.821251][ T5904] kcov_remote_stop+0x457/0x680 [ 1349.821268][ T5904] hub_event+0x49d8/0x4f60 [ 1349.821303][ T5904] ? __pfx_hub_event+0x10/0x10 [ 1349.821324][ T5904] ? process_scheduled_works+0xa25/0x1830 [ 1349.821348][ T5904] ? process_scheduled_works+0xa25/0x1830 [ 1349.821371][ T5904] process_scheduled_works+0xb02/0x1830 [ 1349.821401][ T5904] ? __pfx_process_scheduled_works+0x10/0x10 [ 1349.821416][ T5904] ? assign_work+0x3d5/0x5e0 [ 1349.821430][ T5904] worker_thread+0xa50/0xfc0 [ 1349.821448][ T5904] kthread+0x388/0x470 [ 1349.821458][ T5904] ? __pfx_worker_thread+0x10/0x10 [ 1349.821471][ T5904] ? __pfx_kthread+0x10/0x10 [ 1349.821481][ T5904] ret_from_fork+0x51e/0xb90 [ 1349.821496][ T5904] ? __pfx_ret_from_fork+0x10/0x10 [ 1349.821508][ T5904] ? __switch_to+0xc7d/0x1450 [ 1349.821521][ T5904] ? __pfx_kthread+0x10/0x10 [ 1349.821531][ T5904] ret_from_fork_asm+0x1a/0x30 [ 1349.821543][ T5904] [ 1349.821828][ T5904] Kernel Offset: disabled