last executing test programs: 25m54.452448944s ago: executing program 0 (id=35): inotify_init() r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) openat$vcs(0xffffffffffffff9c, 0x0, 0x101402, 0x0) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x20000000000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, &(0x7f0000000040)) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f00000000c0)=0x4, 0x4) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r2, &(0x7f0000000440)={0xa, 0x4e26, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x11}, 0x1c) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) listen(r3, 0x2) listen(r3, 0x5) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="74000000040a01010000000000000000010000090400048050000480080002401bbf2c220800024068ec1c94140003006970766c616e310000000000000000001400030076657468305f746f5f62726964676500140003"], 0x74}, 0x1, 0x0, 0x0, 0x2040005}, 0x40000) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [], {0x14}}, 0x28}}, 0x0) 25m52.023719706s ago: executing program 0 (id=39): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000c40)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}, 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(0x0, 0x1, 0x2603) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000100)={0x0, 0x6, 0x2, &(0x7f0000000240)={0x2b, "1a9c66bf2f615e427b2644e953449f6c12f206b2855cd8c82b1b9951cf5e1dee93"}}) 25m47.14600619s ago: executing program 0 (id=45): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000140)={0x80, 0x6, 0x7ff, 0x0, 0x0, 0x0, 0x0}) 25m46.43021514s ago: executing program 2 (id=49): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) io_uring_setup(0x67d, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0x14, &(0x7f0000003480)={0x1, 0x0, 0x4, &(0x7f00000001c0)=[{0x0}], 0x0}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f000053e000/0x1000)=nil, 0x1000, 0x1000002, 0x11012, r3, 0x0) munmap(&(0x7f000053c000/0x4000)=nil, 0x4000) 25m46.058327035s ago: executing program 0 (id=50): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x1ae, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e40)=ANY=[], 0x20}}, 0x8080) sendmmsg$inet6(r1, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="cd", 0x1}], 0x1}}], 0x1, 0x8001) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/151, 0x97, 0x1, 0x0}, &(0x7f0000000180)=0x40) 25m45.116012493s ago: executing program 2 (id=52): sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x3c}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x4, 0x10cba, 0x1, {0x6, @sliced={0x7072, [0x5, 0x2, 0x5, 0xe93, 0xa5ee, 0x4cd, 0x6, 0x7, 0x8, 0x3, 0xc, 0x57, 0x42d1, 0x6, 0x5, 0x101, 0x2d, 0xfffd, 0x5, 0x3e7, 0x7, 0xffff, 0x6, 0x0, 0x1, 0x5, 0x7, 0x2, 0x32, 0xffff, 0x9a, 0xff, 0x3, 0xff5a, 0x9, 0x9, 0x4, 0x1c, 0x5, 0x5, 0xf, 0x8, 0xfa3e, 0xebf4, 0x7, 0x0, 0xce, 0xfff], 0xa}}, 0x40004}) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000480)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) ioctl$HCIINQUIRY(r4, 0x400448ca, 0x0) r5 = openat$dlm_control(0xffffff9c, &(0x7f0000000040), 0xa0701, 0x0) pwritev2(r5, &(0x7f0000000140)=[{&(0x7f00000001c0)='W', 0x1}], 0x2, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0xa, 0x0, r5, 0x7fffffff, '\x00', 0x0, r3, 0x1, 0x1, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000200000000000000ac0a000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000038902000000000eabe91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) sendto(0xffffffffffffffff, &(0x7f0000000000)="6f6e0239b1b2d920cc6edcd1498d4c7d21d2ad1bfbb070d9ca9412650ed8d941", 0x20, 0x2000c841, &(0x7f0000000040)=@in6={0xa, 0x4e21, 0x80000001, @private1, 0x8000}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) 25m43.49589219s ago: executing program 2 (id=53): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_sctp(0xa, 0x1, 0x84) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6, 0x0, 0x9, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(0x0, 0x80) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r3, 0xffffffffffffffff, 0xffffffffffffffff) 25m43.492482095s ago: executing program 0 (id=54): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) mremap(&(0x7f0000b2e000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000842000/0x1000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x29) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') syz_fuse_handle_req(r3, &(0x7f0000000cc0)="f773091228a43a58c864f1e0366b07de21fe64fbd0bf85a894f8d30ff6cc5256c4d3abd726c119dbebd0ddca6ad62fdbc55f46668ec0858ba96bf6733f0be147e9108ebf89278ca74e07fed107889459c0a5e30616db71c6973818d14e3571c410aef47e6e54ba02e48ec733ebc921795a1f431faeecbc65696ffb9e08760f45650f650d24af651d9986b956d8dd66017f17012f2358b5f69dd63f9aa5fad2ab7ee6df7c99f0b5601e1dab2ed5ca6aa237c52a838d7d51293628dde608fc4ec691b6e2023ff6a6813c505fc81bd0a0de800a5bd701a401ed07139dfa917e524c7d8fd47094122e9acb0382682d0b2adc54ab61c2d9aac6b5b0d50623187e31ca089585dab35411759db09bc44178011883cd0d5ab3fc6f8be3d0e71f083fb911a229995801eeab83581aa5bde0db85ff5c77aa311fdc9f9b4b4de0a96d371b6371ace3923e5557c7e911f522e132bae799ec6d11a43ff7420d4833d306f261ab6636b1f7d250829700456e3aa69bdfa28f24acd27b4df16cf417a7bbb852fe7b50e3841708110ab82af1e1145c542afb83cd7b542c6e310a86cdb76d492955312ae6665c95f36a0683bd12a394d6a45a0f38fcde7d665c4afbb329f3486e1b21af321b3f933d585d885485e6d9448b35e0f8d825365ce26af6cb8fb7466b66491e34b5313019beb3b2934b369daaa16b73734d3f787dcbe3115a3da3804aca82335ac9b20823728a6ee0d292dbcebb103ecdec0d27ae3a3ad5e0040cb78abfddfe16f98397c5f1f910372454722a612a0cc91ea8f709544f22c4e3bd70840745638d83b74197c0b22331e3b107af26097a37c8dd2b91e5156af1a33e06846eb15aa2fe95b6df98bfa7fe28693e0ed082aacb3181b657f81790d4556506f8f2a3753bfbd2949429dc3cd1e11291e82dc3db974a13d88d9cb4242165201f3d9b130c128d057bb9167f12859fbef6de8216d70eec7d3706b9013f9b8f61d8059ab50904b66a32376840d8c3e714bd6ae87640f352ca2b4fa2c1cd83f28d5de889f1454605fdd49c7a7cf1af226895ad6ce6612063d88ae60f5b8af22ef1306f55205152f0e72f2edee901bd89136eebed01475edd572f5a4da8b34bc6db8f29944cc720cf2b03cd2f768a34a81fdd58693fe859edfb2799b3f90cae32b6d2c577dfb9e03ab2bb25a41f53a42c11c89a615bf1c44f5c61084c70882a55fb3039792e9fff127b323c0783c506b6e4b7079cf27f67fdb191256b7c908e1e30a8f72072ac4323337062da5132369135408bf74e1b1f6c1bae332f75291d7a4f4aad4b9f70be298868305486c519434652da2535ff7924324472fb23c84558a5b1578ae94c8805becdb99eba47add535fcb7a72ad9b5d631b824a35d58807ea066bbe53859c50b5adb3508ccb3ae974ee187e40dbfc09a326b06a6004aa81c6c91eadf97ccc77cf9ccf4ed92199d95c2c8d5c965594e306d4e8b78d99d2ab0d282890c9d34639d719488b8d5fd3832a01f1a5f75449f460688e63825421aecef8a43a187739d8b1e14e54c658d57e4cf607430ea530720b3308609b57a9148ad5b921d94b6bb775880d492bb515bbd30caeb4ab8fc8b0c392a6c76dc63ca136d6e76e49a0878ea9577831e7bb3b4e3915b09222d3ccbec1b3dc4b1fd1515f302ba48d15adb9fd7aeb26fe553a60dcf82ff70b6c5d7389c54194e46bf7768584acbc18c7fd7fe0fdb11dd32a322f0ae97b481da34b47d0abc16c6d12f8e9d12db2dee5a1d66d5876bc6e100e02f3a921088947fc1d0a4d8e4e878e92cee18ceb78c7d9bf0204cc515eb8185b985e967134a1400b6a5b945b3ff86f62c2da8fe6dc8628ad36910b863a4b7cc519d853e6e3c6aff4d91862dc8c1364a8559f0c58f88a90ca4bc4a9d1aa2026229d46482819df72902a8d77615042340d758bb49153eb695823d43ef50e10e700a7303a4b798499464f39412a7b2cd7c460717364c595f3711d9ccb710075ae301100ce9f0c5d8b6ccf4f673112e2a7c2b29e56ab556d3e9dc0e777da840e1e304a24227bc9d1ba3c31f2bfc39b6ffe06e7dfc08ffbb799f56c5e9b4ce9120d10bc52d4d105167b30be7d4afa0007c59c3324121568fd4f48778d7b17a1ef117036520d25367253d763dd2f1369ef6562afeaa89dcbdd433ef80f92c41143cfeaf46325f2191b1b29b6a457e0a88e7a54dfede8e186ad4fd4d3eab77136d9e403dda03ddfb24708d648840427087481424d21b25a52922a359129ce109fec903fd33f03ea6176cb7cb64567d08204902acd1f1d0146c7c8ef5ca24d04209f2b55974ed7e11eb081beed06eb03ddb5ae80e3424d52741a5e7c8c89006a62f6ba37a7e39b75566b8d57cb11fd23ff73f7f251bfcfb74336760296a801488f77a8f0a830eb4ca2987be3ce42e2aad2f4a975d95eaf0834fbab05a7e97837c0d49ba31c93b2cd3ea05319ce1d223df3a08fc35d6d99bbc863602bc84d26926241ff70d7715d27d60b201315264f2ee3ed0ee2d1959228d9b388019151580a4a68449fd37cd2c894d749a0a281c4e458f5bfc76189e7c2ae21e318a99792090e7bb8bc73ead76439a4408b2ca49678ed93ececfdaedde0bea7f8df33910ab08518829435e642bad3aa9e373fdeb80c981e8f6f11602a8cb23b25dd718296c698aa602889638041b286c3234ae10d7d0c8ff1fe301735a467475db85fe88d155f4a8ac86937392129141f2784ff559c7dc79f0fc6a43c940fe735d91c74e3975415969548a9d7e996b5d6a0801e09519ab3852e8c5cc23f380be09fb7fd37e0cbc9f540a613aa289cce31fa3ee913e364a8a8fc1490087863222160b6899e32a391e090d41bfc961943d03f7b2f8e49750a04a20f2e2ca2951498e0fa8cf0d33d022d490704015c0a83ffb9f44114e37a386f2c7f940cce802edca5ff4ddeae0666167c2a466aecd919629185f491a210d407ebd09600406178ecc818a7cc4867ff14234efad41453027f6cbc62b4649fea7b227ede841e9816d98636c2a2c950680983d2375233a7dd64dc71c9733f5502ff4016724506ff026ba71df2623446f083df9e6df6e7fb701da63c640f8599e09cd7ea1b818bc34349a051430fe5791df7724eda9eae0adb53ec1e844565abe44063a465bb2ea15fa53342cd1229f0b6092c7d544dd0ffb9cadda6930115a66a5ae892f3661e32eb3ace734f4386da1ed040dfb0155ee3f079ec72a3bd8da69b943250a3d33fdc8f4666d77c680db12e0aacd2ea7adf4b00f86733ed27d3c7d677f6a7b60c3657a599a7a36c88e5c805eb7bc022613b6ed3489ac3217bc25e862973d9b3f2235049452aeeac96f3e40044df6d2dbde64b819bf1ee67c6a03566e1e5c8d123adc7eb0410be047cfecce48a5eaf41a718f5d1b78c17fbb6fbcf003f6b1dba0a00558ae60e6413c271bb0dbf733aedd68eab4f8d884bb46b5fd833dd718e6c4ea58ff44f4137372494ae1c74d2ce3cd66526518a798f095fa804088d18d2695740e930b8d57eb55ade001c1cc9c734b77da57482e024503a1ea9e2a43943a308b5285d622ab623b860603122b41fcc249f224212cfbdc8dbc15e791ea6f51c44154619c98661664b11a34d20ecec388d69f5b32fc674d0ddf2b1365c8709a529b2eb3ba0a0547bdde3adcd272e0a41de9904999fd890b75fed8e60f1f00bc8aac46d8043ff2451541f644f270d9fc65a0b772078b05a6ce60c0df8b2540d89d052fae472867edf3b03a252bfe8e9ca3d2e31c7950851d2e7e7273c0109f2ac002747d277b6c9e6a9bd51d57c59b178a6e329c81c7bf2f5c5d345b2e990093b2e47f79807a62017fcd34efc671c7c6270a1a80f60fba3fbabb48f294ee3b1425b6e8c0fe7b14c31c2b0100d8c5f50349cff1e4e0d3aaee1f4afe10f5c234c1c4ba670111ba0d29694811f3dc242a73a9b042535f3ae8ec5b94240fd091cdfa157e7d27bf26412cdbe54ef55eb5d7183ca5ef0a9f5e81aa6dbf705e3a0d542a7573ec99ae67293970aceb8ca52c9eb5786196cb61947436581745df8a5ca11706001844f581317d43e29fc6eb1d1b011278eb4d77cc6a2e1defabaf87177a162f6269abd97503cc26aa73a18a5954e88692b63e34ba673a6b302ea2a59679ef60094c3db6f3874dab8affd12a7d12c53e77efa807d3ad845b908438b59461da39c072c6ef2fb1889f9a9e39a9256bdc71179c98399e60df6b8224a30e22ffd9010488cbc101ef020ea78a90977fe35586b4140339bffbcf32d81b04f789a195a44f289f44c714e6163afada072871122aaf6f60da967554de66cc4ecbf50aef5d02af874873ae5a36a576eb5dfd749b6168e395ce5817d6275b25d6c6ecdc6d8c4a39fa98f749d6584ec0312bd781a0a14fca35c8b0ac2cdb5a4b15d03966ce40cae66ded0cf7afbc5f1a580bcc596360f9253a70f05ebf3a58ca30b05b6edf4367d988e6dde2cedf37237ebd56da02edcebd9ba841c210ab52bdd869fbf3a783b44670483a012419a50c0114863a97d9f152e63a3ffffc4c83710ef02a3a9c718450f4e8f918c2c551d477a88e91c67bf1337a52f4d680e9607a295feafe09e1a0c5e3c1a18c5390a6a84fa19dbfa2abe421021b471f1e80811a4ba036a9a457fa323b7fa65e666a08f673ca92a02c03d6eba96604f770444b96297307bc23f6a928f0da3d97f522125592c092bb32f97882a59603b268167e970bda981299524929e111e31b3301285cfd9bbbf0263d7e2e19cd42e56920565eb5f45f99455b0851dcefd6d91575ec4e273afaad0f7e831d46a8d5f95244e06febe9d9c76fe2de20e561b11d39a4884d29e68773aa85327279e667884f8d4f965e8b12815076da686c02d17a32bc97de630508b06b091a7fa705bd705a3b5e85975db69d4198f23547686cbd42dfeb495d2c0c2c4c155dd1c8c0522836b271015c8f23a5c129e49c0def56c0fd2a5d010583b4d2849b97dffa9d28dbf783be484de51b8c1facf821d8f6a295caa97f5245c8b3fbe71b47a3390f2c2ab9f6ee41ab082c6ddaed769ddbd9188c970be2843f4fdfe32d3b9242628e3a1d037746b564b4bf6cbc37824444a78605c010a00f2f8abded984e664c63a10cb24e0c1d2d53873d519475651d73e1e228fba31b3165de6572c3f4ca692b73652bb77c423a191d45e90b122e0a66b956302ff7bacccce85e7428d8c574ef3d78884495c95f1416c3f500f5be2c0a70303ee19d4e81c1360db322a0400f311caffe568d07adaf9d6bd6f136f0886db4fc6c2cb956b79064b61afe3abd2ca638c62bf89ba91cfab89aeb6fb4eee6b8a6a321076ed5efbeb369259390e780454eb1666c4fe8366b00765b5639e20827349f4df49c90bf5dd320b36510fedf5c18f59ee14e1a8e436f02506d6c6c3c8c3328eff00bcb66ea3a99f2e9cb20f0efcfb09876f7860ce4294de8c5ce007604031a8dadaa20955701736218a159845f8cc7a485412bebaf653462459380a2cb0900721d570391f8e62869546a610e8478d9536d473945a46d9a89686d1dba43690a5a4dcad2d4fbacd877e38495d4a1696bbf46ae8fc6a764faf7c67101a785d259ac8a6df1c7fbd006e9327e24d8fa4c569a5e37fc047521cf520e2bf11dff07f6c47442db2fe7a94a7b557454363043ad4fb00d2842a16a2b25fcdd5aa38d585600cf81e9d202822c4571a12668cc202ef3af5704337bd134b99c6df8538316c9e423032e4c3b73b1e26571b9890ee5a5f9885321281c1371614b57464647c8d5387dcc9878ba4f9c4f65cb3d34fcde5b5fa1610c28f50ddf5a1ccd682ddf4590adc3d3f98b8f98fcd1845dadfb142dde12116bf36d7b738d930e10c3317a0222914e059370b463611c7e8d37bab1f834ba690c98af9924540256cb073ce89d05715e50cb79948451c8c4fbb07f497e860ed293803689ba1895af65c8d97c276e2cd0e7bdbe50655293462dbe64499184a7b8a89a454e38219b5e979c98badc75513d7a6862e2db939347d9941d906432ae41b67df54c2c92568d847fbaef8773dd466bdaf52bffde53fdc2514ae006e19a9599e0fde9c5772c3b30ce30d8fd5e0f91fdd8c66a8884575adc7d2970321520722ab1ddeaa64aa21855f9263d0b51d2b2df0ab28cd32d709c0984ed7f0ef4ced427e99230553a0b0453b1f6daa0ff63cd7750cbdb5f3373ea044ead7c91acfcfdac09648c06f4520a6766d530b37ad2aea22b50419b26f3a40df01f4970a104df6893d6e0b6b3cf88eac9c3edd9e724c5357283e933173dce77bbf70c99367b68e55cb0a3e16d1696c571b483640c33b9f229d837fd1d303608ea286643ccf46dfbd26d2484c79827c6cf896e4904a1febc39932c76a17606c0a62010932fe29877c00dcf7d65fb006594d8869bbe7f78138a78a125a475da225920235b47ba8bd631815926f7a5c4ff69d61c39b26b078760dbceefaea9aa5f08c97d2e97bd478d014ee739db93824bfa7d3167f789624e5a98873422a0176c8b2a69eb5a01dfdb22ac1cb7f9294df6ac1245d50ec44fbdfaeb145c9bacad2abc7e160993afbad2abcb9c1019cfe0e358d1c44676cf002cf844d83de959c3c3f074bad5ac0326d0ca4864b2fd724beb5338e81fa81fd178e14e267c06189ac51fc6a248398986d25d6791c98d330b37a59b3d9c46f94e6170ec499fb3f27443c185e261761d9fac5fa44bc4912c41f93a642b89d51afa016c87d086a145255e808082a2036ead976bd2b78079f8410dfd8fbd15048e3264f15491204529f6b0e5dd560caa9113f9491433b9ba54dba2fcd648928717a1499582e6acba3dd28364b368a1e16b13a2cdaf13ef8b0d4046f8c2a5f280d538b0efe3297bcc226c17688be16315383fe043a7c51a8bb02497277bb1dcc9a16db9d04dabfb0bf6eb9f408d18266fa45d2fbbe3b18b89d6dc7c5b947b741925ac93991554216773ac5e0dc903d966e8fab10ae2eb22e002aebdea2d800ba75fe33082561b9222997bcfd8d246dcee7c46ba0a12a361880b6c4bbcf966a2ac0600d69d39c6c43c783859e5212dea9944a658c6fcf33df2be59da18f1385d3425bfcafda04071b83539311884d4cc8db5838dd84c3d8355292fee226e5a69c6c9a31f1b5406cebd486ffd050928f3916d748f159436fe37dbef68656842624063833cd1811151e9f05dc5ca63191587f51274b6ba07ad44e104a20dd2fc6d43e0274c35f926b56591cee7670856d5d5194df8bdbf608f77cd8701f0ef26a0e38e4cca58e4cc699065d27eb74bd6f89755779f3b2a73a3a0d0f655755dc7cb91772bbe0b89d360353335e545d8c3133260b2ade1814e2fb4e9bea7db3e30fb62c936544a91170ec2f86e3ae75319da0d873a05dc9f0e14bc709028e11da854a03d3941a51e6f3e0d363528c9d203fa5166d9aba23a49df941d5c902aaa68a3b99a709e9d9e3adc96b581494fd2c7e4605af5891261533ee403218c6901a37dec5e2d65dcfec9449cefef4eb4c4b793f34c9b0187ac1e9302c880149843a66feddfcfe47c5e33eaf1ab1eb0ed48cab980df0fe3e11c46a27d2be9972af5ecef3081f77ffb8640a8f3694085228f7400dbf177931fed7a9fada79fcb76251e5b64087e3e4d4fe0a5b86d7e6ddf47fcd131f68796de8c9e86bd6b08cf54ffdd5e10389e0d2122d72de173535a09defea837a519f96e1e795e6e767a2ea7ebcb44e96a11a2910bfc1b5221012732bca14534a2a97afb0faca2bee78f96b59930e27b7b410b53889a190ba70fd1b5fa4418f8fe6df52457a9f814eab291bd45471c20fdf973c0f75bb052417b69592e83cf8cb34b7b8189c01ade45736c77cfde6f44448b78e02ef376d75fd2f95fb0dd91f9321837777f5f514f083bab481b66639af323383a4d715a0c3a216536c52d3fb3933895e1709b25a84a8637a125a5fede40a90d84218efed8b65c021bffc279a4b30fd0cb390a95d1225862f37df93bc97f1192e725bc38e81ca4a4d59f18afc9d89793d3834e1781a8d5e4d521aa3c34b4335817f0dd88771a31d3336e14645323ad54c728cf1b0fe515602c064b41885ff14ff394d4deef3c5de136fec1a05e3662cf61f29a74e9da23f116585d85d3806d015fc8783c08916546e18c92c737f31a7d35c72b3bea01fd852e7dc6d68f24bc787ef7b7df2c4acff86981597a7dd2aadbf40e26109a10e856a78929e698c308960d999783134d7f5abf90a9ecf67e496818ee42afe66888b41707047ecf3374be56e6be6d878531057d4b16b7ca749ec672842c057868ca4c0f9e69e6d92432d6331c4c32db2a93d50a690a0659d4c9bc6fd75f7201f943c603bf7caed8d218ebcf947ea685c0710c26aa11ec886480983e06b9be0168313de87b0e068f98bd14f2066e3fc3a058c32ca0da2a1b449814755e935ab360b15bc91f5d44e54ba2a8db07d1c3854f6b38efa006263300f2113c6d3481868e08d406545a25a8dc75b01e429853e26747023913298e7b5b174c8dfd4e36a81061ba46beeaa200d6003b9f0cf50caf3d5b06632d25fe7ba91d2a97f7562555a67876e334c642e48e753ce6f12a78329c381a1349cf5d89413d04a6b93c566aa2e335f4f0732567388a9df0b3084d57f6393eaf5c20fd7c3c29981500dfd3573a16ee4bc56836b5c3e75ebdce347e46f3d1247a936df69a259fb35ff4372b774f960aa4e8d84e4ae54caaea634d37d2d4f3a276e15176e1f00a906b2fe6ceaec16cba278d0eacdfac9dbbe5af60c5f923ce670315bbc29ac72e9f848d2c168949d7fae8d19fb86ac5511c36035c6c101063cd5b8b9902f8f51b6de2e59da3e5ddb25eb6e9dcd0a64492da36f8a61c9e2b33dd731f0423fd407048346d5a19fbb84c1d23e34f5e43afb32f3c6b85c550dae394285b233ec5ae2ac8646e2804f2c59e870caf6fae5d6df810bf6bd64562b288af75a5d42478475dd72e81651453558e4f7370cea3def6439ccc1ff644e7d0e9c5c286b8aa1881b5bf641ceef24f557b68bb7532af2139b5a890cddf0b1e26328070a43fe509609fdc6de4dfcf8f2f4a79ada37a05b9a2bcac4df7774a79f6aa569b4dd4cfcd944d64982c13349f5a880baa7b5f20aa55af6077299c6d53e0c6ea063d45d8217d72104012b5d82ec46fde056dfc94e6cc9d61bbd1bf08401d1ee163f3d7f88d3481c0f395765e6653d6678dd73a71d411e0ea02608b226357ead909c8d5643527dcd1e0f0b7a785cf691b59812593bcba54624fa2ad1db9547b78bdfe0d6ba2dbc3298dd0c539260235adb385a00989685705cf3631ae545dfd8e2813d5a2ae507f357ef3ed5dd46a868e04cfca7d01edf77c19c6d4477b9a57c7629dff4afef542d19a1b559e55488a3083ad29b98019bc54cc59299e30aa5cdf96e073ae593f644ca0e7f334b1979d16b436e624747e9c86cd985d126bc7495dc27d010347f7a76266894de2ec5d2c9e460e723b0857313e17a17a6a2ad9983867cb78dc5dd3eec56056fcf4a76acf11af6e74fa9c08dc30df7590fccc00e8e972736397ba8680fd56f2fd3758d628c3c93c4222ded9de6b2341cd49325af64d48de4e1c62dea24b19e82f3ae3cf1212671774b510d2e2c18141b5b0ca54376d311443bf5bea59d9f07cb83767904e644a5cb77830f4f7f92de93dd6498ad091384d8899fea4d539ea6dd9178b07bcb47704e37ce6412ab52e24108c890848f9ae08f3c7bd72362cea73dfd0ffc8b77baab1fb43f9b2247f3c20e1a67839ddb28ba7ebef67abe121c3f55d1b63cf32698e068ed11b514f23b8762d55e6394613bb895b5f6bd256ca0732acb067f916bdce9120dffa8a9473815ccd35b3d622ee25ffb98bbdbd17955a0694cac0a64254ae997a9a15137b7f923f611a1adaea3fb6ef547d5a3be44a14be44202b1679968ded791d3a7632cdf4cd3c762d022cc3109e0b10b62b3e779836756ca3bb65a1c8a7fff871113f1975b556831aaaba1850acf0953383e223d3371ae4753a323dda2ea9298cf94c15abb084f8548672b257225544adb2b5eb8fa348a32a20f15d6873bf5dabde8fd89a76903d6f75e0c57c4d6918a3c3120ba5e5cb955cf224a17bd49bb08212d585ce979199247a40757ab81d9e1fbddbb14f015908a9aee690382cb07557beb1b157f5a3b279615d5b7c64a83d229a87cd16a6d401c06dc84ae286075c4d634e6f91dc7a284bbfc1795acedb1fd43c5c2e8ed6fa237e3d06a69b4fb83aa47a12e4ef83a5c5741d85d8342247d4d979601b66867313b1b8f19f769d13c9fbf6c1b2e272d0b0e875743c138ef0c014e1d8985642b029d35aa073d283da1367e869561913a1a0463cf3cc6c41835dcb60d69f6f71aafeede9bc6987c4a68c9e0fb3c1986433e6e45d23a5b03ec664b00cf6a207a8e7dccf7d493bee9a44331e8c1ed92d5cec7afd206d3a3cb78f213b4d2aa8c1c9b0730d818747ddf1027aeb8684944c5b9696ea935f55b5be94f69bdcecc50186cff82a73de8bd231314d9217b6089b8cd8a292793f1fdec1c5af1a2df89c1e300d2fb93516d56060e08f7e4c50b5f227325d0908677653d64dc5cf838f39e271ad79f0033b6b2a5611d5d1f9bb984e6f7d735c5bf0924d873e20e5869bd6d94d9f0994a78614dec3f36325299d189293dc5a4df8cbad29d1fd7f9b51c1c9e48e2238aaff3243cd346deb4ba8545af524776300f648c6728b0f97d17f7ec45daddd62478890a166e7db997047df69ded08cc4d9d8297259dc4100c88359c880dc855ffd5ef3b0922a5b00dae3daeb70441e15dffb415adafaaafb5f5c03b610a3c9903662c236e23baf01337a669f5e174cca1ec79ad7f3cd8635fdcea958cb67400bd01dd03a845fe820f0e7f19776867f247e9c2536ad2776de00480246ace33002c284d7a8929d1e708da9059212ae6d7da49afb9222c97983529158f69bbdbd8f502daae24aef87d0d8a4085dd0740ad1f33178b52447f43192acab0b9aa777262142ec29befefc95de9637f3cb7dff186af2020378870015feadf7b4bf66959cc81543ae33312e4ae3e9c152a65eb76df86b788d11a8534227a8d7e330ef48f5a1069ce4152bc6b311e4636d480272527fcc60c5c3aebbb513d06246ef52e33e7cca789f106ca53df689353c3a518c6dd4719a073f83ea70e1b37c312d216ef26f806f13ddb40e12e3c8b31ccab1440fcd2a2f2f7766997a610a1ad51108163ab4da30219c9a5a2545b19041bdff4e2569f3c281784ac3982de68af9405d634ea1c8d814d0f15b946a1e2130a2995e2d2330be135f21bf5abeb851c65cc3227aff2ce2d88325436409d725a5523253a722af8360a0dee622adc4690ae49f6c3445d2bc4ae75595874849b54798724a0a9f6161caeb83ad17c2d7325524d9acb94e80c7626458167e624f62e9dbf2c49ea52f8c978481f6fdce7222a4c353d8a77034d7a3e3237d253ce3402553ae63a4519298e96b534bab3aadba3dbae70c07fa06e03f89b711e1deb0e9f4dacbad30374777a2710dec408fb8531acb5d89376c07b5673cac6e361935", 0x2000, 0x0) lseek(r3, 0xffffffffffffffff, 0x1) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) socket$unix(0x1, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') read$FUSE(r5, &(0x7f0000003380)={0x2020}, 0x2020) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000002c0)={&(0x7f0000000180)=""/90, 0x200000, 0x800, 0x2}, 0x20) io_uring_setup(0x1b7f, &(0x7f00000003c0)={0x0, 0x970, 0x0, 0x0, 0x398}) syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa"], 0x0) 25m42.218171076s ago: executing program 0 (id=55): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000c40)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}, 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r1, 0x720, 0x0) 25m41.157194586s ago: executing program 2 (id=57): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x1032, 0xffffffffffffffff, 0x21d67000) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r2, 0x11e, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x300000000000000, 0x0, 0x0) 25m37.780756564s ago: executing program 2 (id=63): sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x3c}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x4, 0x10cba, 0x1, {0x6, @sliced={0x7072, [0x5, 0x2, 0x5, 0xe93, 0xa5ee, 0x4cd, 0x6, 0x7, 0x8, 0x3, 0xc, 0x57, 0x42d1, 0x6, 0x5, 0x101, 0x2d, 0xfffd, 0x5, 0x3e7, 0x7, 0xffff, 0x6, 0x0, 0x1, 0x5, 0x7, 0x2, 0x32, 0xffff, 0x9a, 0xff, 0x3, 0xff5a, 0x9, 0x9, 0x4, 0x1c, 0x5, 0x5, 0xf, 0x8, 0xfa3e, 0xebf4, 0x7, 0x0, 0xce, 0xfff], 0xa}}, 0x40004}) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000480)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) ioctl$HCIINQUIRY(r4, 0x400448ca, 0x0) r5 = openat$dlm_control(0xffffff9c, &(0x7f0000000040), 0xa0701, 0x0) pwritev2(r5, &(0x7f0000000140)=[{&(0x7f00000001c0)='W', 0x1}], 0x2, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0xa, 0x0, r5, 0x7fffffff, '\x00', 0x0, r3, 0x1, 0x1, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000200000000000000ac0a000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000038902000000000eabe91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) sendto(0xffffffffffffffff, &(0x7f0000000000)="6f6e0239b1b2d920cc6edcd1498d4c7d21d2ad1bfbb070d9ca9412650ed8d941", 0x20, 0x2000c841, &(0x7f0000000040)=@in6={0xa, 0x4e21, 0x80000001, @private1, 0x8000}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) 25m36.312624081s ago: executing program 2 (id=65): syz_open_dev$loop(&(0x7f0000000100), 0x18bdb, 0x325967a866143452) r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x22) timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x100000b) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket(0x2d, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0xc004) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000000314010025bd7000ffdbdf250900020073797a32000000000800410072786500140033006272696467655f736c6176655f31"], 0x38}}, 0x4000) 25m24.561895741s ago: executing program 32 (id=55): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000c40)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}, 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r1, 0x720, 0x0) 25m20.983961699s ago: executing program 33 (id=65): syz_open_dev$loop(&(0x7f0000000100), 0x18bdb, 0x325967a866143452) r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x22) timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x100000b) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket(0x2d, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0xc004) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000000314010025bd7000ffdbdf250900020073797a32000000000800410072786500140033006272696467655f736c6176655f31"], 0x38}}, 0x4000) 12.628760334s ago: executing program 6 (id=6202): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 12.473974073s ago: executing program 6 (id=6204): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000002900)=r1, 0x4) bind$netlink(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00?\x00\x00\b\x00\n\x00', @ANYRES32, @ANYBLOB="240012800b000100627269646765"], 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 12.009693656s ago: executing program 6 (id=6208): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004015) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6}]}}}]}, 0x3c}}, 0x404c840) 10.660592921s ago: executing program 6 (id=6211): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000007c0)={0x3, 'vlan1\x00'}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42", 0x2a}], 0x4}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000ac0)}], 0x1}}], 0x2, 0x20000044) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000009c0), r1) sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8405d22596f37403}, 0x4054) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)=',8Z', 0x3) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = accept4(r0, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 9.64216804s ago: executing program 6 (id=6215): openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20005}, 0x4000894) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000030000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300d67a8527f76ec11542b6fcd728b981a405106c720a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4008014) socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x5, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060500000034e40000000002000000050001000600000005000400000000000900020073797a3100000500050005000a00000011000300686173683a69702c706f727400000000"], 0x58}}, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 8.686369496s ago: executing program 6 (id=6221): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000002020200140002007767320000000000000000000000000009000100"], 0x4c}, 0x1, 0x40030000000000, 0x0, 0x40084}, 0x0) 3.924466455s ago: executing program 1 (id=6256): sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000000600)="447df50ce4033a7b5ad00b83244c00b711803e7cca2504a2600da98efff9e7d67f87b17ffd582b04d632ebd866f28678899ae0d6306cd39420b7b7f78deaaf2908c2a5726f2c50c9eb72", 0x4a}, {&(0x7f00000006c0)="080c0434", 0x4}, {&(0x7f0000000780)="4274aa814c8f6ea8d8db43178dd2f41ef596a3ca465412910e05cba0f5d97e67886d55be18cac95a1aa093479596c3613670aaf2a3b1edc465bedfdb5156035719c0baa8bb8bf2a825ec04f424dda801fea000f41edc43511e9c8bf89656071e91ae4c356d6a9ca608af6b83cc9f3d9ae37c2bfab2e5708062c659e44272215dba2195d826f9fd3b46efe6524229e4", 0x8f}, {&(0x7f0000000880)="a1755527af3bc7c4671ac86bf0a2338efb5db1", 0x13}], 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x1a0}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d754", 0x7c9}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.070107416s ago: executing program 5 (id=6261): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000180)={0x14, r0, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4044080}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {0x0}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294", 0x31}, {&(0x7f0000000900)}], 0x4}}], 0x1, 0x20000044) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x17}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x14) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.427307965s ago: executing program 1 (id=6264): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x44004898) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000240)="800000800000210ee7decd7a0003400081", 0x11, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r2, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 2.363294411s ago: executing program 3 (id=6265): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x4780, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x20001, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x101a01) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8000, 0x44, 0x18}, 0x18) 2.318417073s ago: executing program 5 (id=6266): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453", 0x2f}], 0x4}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000ac0)}], 0x1}}], 0x2, 0x20000044) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000009c0), r1) sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8405d22596f37403}, 0x4054) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = accept4(r0, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.985117632s ago: executing program 5 (id=6268): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000180)={0x2c, r0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xa}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044080}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x17}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000120001fbffffff000200000007"], 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x14) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.939182333s ago: executing program 3 (id=6269): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a00"/28, @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10) 1.938382063s ago: executing program 4 (id=6270): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_TOS={0x5, 0x4, 0x1}]}}}, @IFLA_MASTER={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.849943591s ago: executing program 1 (id=6271): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x40040, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000007c0)={0x3, 'vlan1\x00'}) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000180)={0x14, r0, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4044080}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {0x0}, {&(0x7f0000000900)}], 0x3}}], 0x1, 0x20000044) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x17}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000120001fbffffff000200000007"], 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x14) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.757004855s ago: executing program 3 (id=6272): setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, 0x0, 0x0) socket$kcm(0x1e, 0x4, 0x0) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0xfdef) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002a80)=""/4096, 0xfdef}], 0x1}, 0x10021) 1.58273293s ago: executing program 3 (id=6273): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240450d0}, 0x0) 1.211257329s ago: executing program 1 (id=6274): r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x1) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0884113, &(0x7f0000000000)={0x0, 0x1fffffe, 0x800007, 0x100080000000006, 0x346a, 0x100000001, 0xfffdfffffffffffe, 0x4, 0x4, 0x2, 0xfffffffd, 0x1}) 1.207228506s ago: executing program 5 (id=6275): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r1, {0x6}}}, 0x24}}, 0x0) 1.163347607s ago: executing program 4 (id=6276): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 1.021966754s ago: executing program 1 (id=6277): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453", 0x2f}], 0x4}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000ac0)}], 0x1}}], 0x2, 0x20000044) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000009c0), r1) sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8405d22596f37403}, 0x4054) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = accept4(r0, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 961.563164ms ago: executing program 4 (id=6278): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADD(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) listen(r0, 0xfffffffe) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac3014aa080006000e"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) 898.846398ms ago: executing program 3 (id=6279): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x6, 0x4) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0xfffffffd, @mcast2, 0x5}, 0x1c) sendmmsg$inet(r0, &(0x7f00000036c0)=[{{0x0, 0x0, &(0x7f0000003340)=[{&(0x7f00000001c0)="91750a7fc1550b38e90ba525507ae2b72d4a84351064d3d11ddfbd80f54afbcb167965c9b3f4c6443f46c7df338549e62a5a439afa6e45c423ba1ab897c779a1e62eabca4f9cc5df3d77c91f906c198a07c91d6493e3a279d20e282c7f313fac2e07f1cef1ad449aeadcb6a398a88ecd90cdd225e3f342c060f83f6cd6c352c6f79ec7653cf433e11b2a07bd12d4cb7a312076966fd1e3dc9692afb2a59f2283d2d801ab4297bde840de77e14151ea9b054148025bf6781f26dfd2673e22fdc5520784b6ef47ae193a39191b95c04856e403df7673ced8a55a327570a08c7860d0c5a01a5cc014ee9de106dd1a497eba5f4f0f91eadb360c45e3a28233ea557d5f756bed012c1487e93441d2d673406f98434dd8f63064103264ebffe32f880576839e9cac006c038dda89c401c56cea863662283019016b75506ec51d05397443836e0b4f100ed461defceff686b55ead82d5afcff6e3eaa053b12036d1f46cc1490747c678500fdf1f3b2caeb32d1c23067ba8452b73aaf7affde23a3e9ac82fac338654ae9eefbf9bc4c8557c22f9aa6c08e517776375a45fde7be2c983461871f19cc527138f6244f00e926dc8463131004d03ac85edb5943b540f488f09bab8fb9186df316930a54e43691ae847c66992b10b6a08731e0601a0397cc1d4f9ff10bcb2a7af3c3e5b7c9c3f63f98b50030a79bff88efcc9bba7fe8dd70a7183f2ef24985e5b91d6a668b4accbd53e04dac79a4765f72beb52f734b0ae7624927ad6ff9d61c28d01df5e725c7720efa31f897252e86c69f6dae84387e769ac05ea8638aeb2e57e24d3ee7b0b9bdf8147408dd3b9bbf46fa4bca50803cd1447d4b7029704db2ecdf54679019b188821b6467e18ab9a4a6def9ca03076a97e439588d02f9d0c6fb3f1be8e31688424c52372472df59a73c1a9da535b90ce1e092855365782dc57a0ec6e7e6ee8fc548b1036d5848068a0e59d8a71703fd11af64e2200f1fa47476fca6b38d4fd9d1520d78cdede84c9a091616f112507bce0dfe58dcecfa63e4b249e25c4137404f7f2f570967f8d968345ceed0e213c62e6cc6452ae4d117ce1ceda419de850777310b3ccf54a1a117d8271a90ea6d6aa9128458990b6e2f57f3164056d8df5f8045b2771f14acd75061cbf7650fffed4d8f1b4433ae63367d60a4afcb7028d06a2c8fb147c7013e4bf2b62c655226560183ef7b22d8e00ce43dea3e68f7b7b433cac8a2190f9c768eb6132e1455c31231effa555e22b18189ed7487961a1f5e394057af7b001489e77e5036083ac36a1f96848917e973e046ed5a0a6ca4ae2462dcc8cfd04064d65c6f8f49e8eb43fdd6815d5187d9cfdd1788005d8b71f236dee3dfdcacb451c6ef13e1fc74e7312986545cc0a13328d22b8602c253867a22ab58a4bed72e64709b4f0837ca1a6ddf84b0f63e60d5ca7a125e68abffca08f04a917fd64a0b2f9966a96631696ad31df812dc8af5d7c2a4b7aae28c0ed77c0bef15791d83b9c21ea699d3866a5a709b6ccfe5b372da3f17cb145783b139062f86029f4bfbdfadfc263a0c6f1fb45da977826bbeb3814cf6f7695d1ca7b02ee3b9f1d19be4d74f3f7f92f309b1b3f29f268cf2760202d5b89f5ec419053a1d45212c11f2ec73413858294b130bce8895f9099f0012f5fb32d1d9cb9f2dc8e47152340a8d56537533274139245afcd18f68d01838f9508e17c33bc3e6d9f2accc8fe1f5b53302936473e671da5092ec9a2b183c6cef969518c21e3fcaef9b6f7375d89b8133809cc00e4623a8081c936c033dde08245f5c29eaaa15f01eb8aa331835b46396b8dc44786c271fb2f3b72aafaf73afd569bf9410634029ceb944a46ff58b9a68ee246cbdddb1d3ae5f433a19ed6e560a7e1db6d0e07c3fd7a1aac01a8c26ff1b7bb3975c28033865d50f249c4c57ca30cce77c0903ee163da4cbc4da82bf2b13653254df2e73fe07152ac7f64e4a7aa752f6a73295e349e2810372e4d8f4018aaeea362a6b56391905276ac43c7045a15fb9be98fcc9169334aef2c278bad6c72434373587f620e1442ef5f541af2d6636505961118f921c12a1155a3172314885c71cddd659d83cad14deac8a4743d7f4841d41f86e07e47fe115ea72b7b76cf4208c9722443805a2f57f09fa61a36ab760e3ad6840905cb640f638cbfdbe489925a89969f3feeb62b670b475873c3d5685e3cc78b9a281b53a860e7f8c106437309eb7f26fc500ffd2cb08ccc63cdd91b05fe2b0a0156a1881ee92ceac45846eeeb8f5d918464a45812f7110ba87c4e5e5c5e5c4c402f27ed549c61c12a1c550665e157f45577100b2b3d7a71da502e609f9ffc1aa82c5732119ed6f5bde246961ad31162c4da4632c7042da8c76ebc9c6a55a71ef07721f34ad6d53886c254f4bdff8a55be8dae0de26752e377e68042b3ba092a4add11027d8e7c6dd93f4b575dffc541b31460ea1c7924ca774341e3e667ba1ff5f1249e2360ace7d33c7292cec369d1b79d67d15da1f7972dabd5836f25652b161f0fa1447b31487b806efea9824e68cab8d2e35a9d65104e71ed6a0f8d46d50dde1883f3662ba2aca3ec0bb09da4e531a356e5f65ae4adc6ba7094ff2bce7cd4f5060635893944e09cd6a51ce961668b831fd84852c70c6c094d088d9630bd9370ef478995535745130912a6e320cd486f6b99974f949cbf80b74f476b165991400c5b522b9634186832742c7c7b19548e218bd4af75bc5664c3210429dbd45f3ff5f2346fc69c9a7f2af5122dd6dba44ec7143c0e9c51dc9390ccb44e3d6bb999d96a5a8a934494ad3aa590a5a1480abb2fbd81e17323174e6fb6cb865dfadfdc2598196a0964e32232e5458c1c1eb086439b4b6627b142e8370e7c5e90fb3aeae856fd852da5049fef19f6c8a4c83a2b61ff019895241edfe57394ba9a47898be3e339fdb48824d7cd5e38edf2e358d8af656ebc0a9fe02bec2de0d024856378a267439d86602495fd785e725012fd2f245ef7d42f547b8b13e4e0f26d6b6b56e72f3cd512a3f0f59ca89224366fab499b5653d0eec61a1a7c684f6e6ebbf564c314fa7f4755a202f3c13ac79213a9a03e380bdff7fa01f184377357867d70f6164074009939149d53afb061bb6039039707ea457b6f19e8de86546e7a160bcb3b1cb19dd0c66e319af5ae0b4392e3caa505a8d5fc6d95c30ed9458cbf4a7562ee405c58d730065ee5898adce822d4250fec9d4712d0d39fbe9d3aedaa0c95d2798d71219fae7397dcf50e06b44f88e8f7cabe4f68a48c84e1a2d300f3efa64b2edf8e7e066f646a3742725afc4e5cea76005c5dc72ccc66bab4c5f20ce8d57d77d3c51aa4dddc53bdbaf14aa1db23ca4a00093b35b30cfa186c9ec49d66310cd169d9281dabd4e989bc672e5a37243d3a42cca1e56114de60ab35d8f9434ec3cc8fbc7e739a6906262d06f353a05e4b49b96edf2d0d101297f3ec09436608b0a773c14524d896d897a020d5bd120190ce5f923c0c054362a6e045e11e4ed0284b219d3d9cc08323fb856a743bc2867665d36b453990462581e261c465d4d3ef26f8303e0a14d6c7373a55c1a613d896edc2f0d1152e95ca7fe9b265b14761ca18435c64e4ad50fd94d0ca10c84f5b5de7b69c0d727b42036391434b716de8625352555194fd52c62a71477548feaad609b0c102a21ebed32002c9d054dc2b81828f6a65c2ab4ffe4bff40e210bd6f1818c239edcbe6c614623a188145dbc50b21478636e13952fb140f35438cd792930cd2026f4c3c8bba5d1e770276e4c30720733f81290a38e23d989928bc521cfe293a4bc71e54c6563407fd2a79b71901b38d57f43f51a30d8bf6653c1b40962d0e9e48f19a9f63a9bd77938e402868e8c00a34a5dffdfbdf0a38057b51ca986b7e9ef28c03b7dbff8b4af3d82f3127498b6052b39adc9239e6bbaaf3d80e74112732d728380c055affab91dc3e160aeed662c2890b2acbe979304b6dc6ea4bf9d10389d7d3fd952f84e83f4426d31b967998536dd3e1adddf8119d86de55388e68fb2851bf29c1609f6ffd07bfbe61991765089833a87ca35daadfb2f229023a6d20d77c36954a0e9b86ecebeea58fe8a68ae3d99b3e7da3097040cdd0cec4bcd6df97efdb6ebe349de70f29323222c0729a5109deb0a6c2fdd0787351d2ce39077dd007aef670f396038ba51191cf93d1ef55efa5faa8841026519e069c816301bcc98da84c4cbc7a29ba02a34d4d6797e8c7659d6f89ed6625a6eec66566a32a8cac1906f3db5c8b4010febf9f8d65fa3b1d65266dbe012d923e47798e7c7103f9407fc0abef2a2cd3c5ed5ae0bf1b84e977fb01cfe49dfb20804fee3fa7d84e699ecf8f4e8c71cabf116abc9613961a6f402598562091b4ee5d7a07ad4a816ae5dd8dfd1a062ebf5ad6025ab1455e86983a326595f1f89bf530a31a98544e5b07361dc6c872fc8d101090fa54f31a7ec984bb2a8792dfde6596b53b4a03779e42985654de41e1344dbcb23bb931180f2b302cec2d35e8a6e55d5828dd092c70339cf3279c84c6c5c7a0cd507c5351c971e392b2fdf4bcf2d7e59b6380a9e8550bdc20d66b0f0abe29a7967acba8a2aa87f3abc6fa4760cbb06c47d935e1593a995814a12829e70bde271cd28a6c87166a0ed5233fd518f52568cc51dc9eb7a046023bbaedc4f2092bbcb7fe928f30fe5aee80d164b97a20910fe02ef00ecebaccdb129b6479a2148eaec177572867e3820f7dcc8b2e97a9cf3a6234550292340dfb44dd7356acdba8c78dab2ef7d5e2bc98786a8f53edea694dae11cfc26d905dc1733e6bf0f0a32dd26fba25872bb11e90414892b1ec2dd97ed67b454dc51d07a157b8c0b616c81daabd8956e17c0ff2af6c3702bb3af2d2d39b0873479913377def55ae8ed557a3ec1c168976209179cccf9ca440e170a57993f752b6c171a0ee1a28fd0b9042dfc2d341f269507338e4785e540e187afef778653e887f824176ce1a852fe548dbda9f7afcf653f48ba236c547eb27b7845178eea1c37404e771bccc94326c1b80cb795d216f6fa6f535a7366271d5185ac9c25480f591edc8e796cc1d2033a4db94b32e7c57a5b6823278812451e0c7ba7d7526ddfa53f38f9b1571a8e7bad7b9cefa02c2bafccd517222b29b75843e19ef401c289ffacf223b59245aba80c1af57a88fd1eb47570859c2432308eb10247cc0af61fdd5954fed2090d4037cab3e433a6c8edb68355e2c39aed8516a052598b26bd3d84b61ed80ad863e307b95c8d52e4c4dd2cd324e6ae38447a62aca884707b56bd8d227c89793980fa0cef2813673e7ea6c348bf55c19a1bbdceaf6d994fe1e446907930b8f3956a035436536b13232965697aab26d63fc4f6dd5caa534027c83286787917ecad3490eb0ee5851a1f442f38ce6e87a24b9c0512543011b2efa0709c47b83150b13456c2fffc0f1448efd239f19e074ae91137dece411236ee90fd6913f0e97d3a0ab0b5dbeeed74fff936411bd0265bf5547c1dcdf40861fd6a07a5a43d08d2d0f768e7eaffbd1eed2ac599e54bda20cbdddd4db12d19086989d9fa614321af427bcc61d7abfe5f418d7c8e157a4cdbaabbf6bad4be6a1788f6e20107530a20aad05842c12ccb344e062a9ba07f966eb3cda2c1be4e376e7fe0fba622bf3c2a94f75374a589cf8022c3c978af1b70adf254afbcda77057b1b835b08a3b2c4d14d958d1a408a0961e54ffc079fa4377c63b12da281639d1b9a579", 0xff8}, {&(0x7f00000011c0)="b6c24a8cf2", 0x5}, {&(0x7f0000001240)="dd1179", 0x3}], 0x3, &(0x7f0000003400)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xd}}, @ip_retopts={{0xb8, 0x0, 0x7, {[@cipso={0x86, 0x56, 0x3, [{0x0, 0x3, "de"}, {0x2, 0x4, "2688"}, {0x6, 0xf, "e3f45b7eac4cba1fe34cb8a42a"}, {0x6, 0x7, "945ca61bbc"}, {0x7, 0xc, "10ab5447e106a7328c8c"}, {0x4, 0xe, "d62490a1c88d7d21d8dfc0c3"}, {0x7, 0x12, "df73806da989cd5f9145ed27a6a0c8a8"}, {0x0, 0x7, "626671a271"}]}, @lsrr={0x83, 0x1f, 0x9f, [@multicast1, @local, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @multicast1, @empty]}, @ssrr={0x89, 0x7, 0xdd, [@local]}, @rr={0x7, 0x17, 0xe, [@multicast1, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @multicast2]}, @timestamp_addr={0x44, 0x14, 0x69, 0x1, 0x6, [{@multicast1}, {@broadcast, 0x3}]}]}}}], 0xd0}}], 0x1, 0x4040000) 788.16077ms ago: executing program 3 (id=6280): socket$nl_route(0x10, 0x3, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004015) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6}]}}}]}, 0x3c}}, 0x404c840) 786.217614ms ago: executing program 4 (id=6281): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x6, 0x4) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0xfffffffd, @mcast2, 0x5}, 0x1c) sendmmsg$inet(r0, &(0x7f00000036c0)=[{{0x0, 0x0, &(0x7f0000003340)=[{&(0x7f00000001c0)="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", 0xff0}, {&(0x7f00000011c0)="b6c24a8cf2", 0x5}, {&(0x7f0000001240)="dd1179", 0x3}], 0x3, &(0x7f0000003400)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xd}}, @ip_retopts={{0xb8, 0x0, 0x7, {[@cipso={0x86, 0x56, 0x3, [{0x0, 0x3, "de"}, {0x2, 0x4, "2688"}, {0x6, 0xf, "e3f45b7eac4cba1fe34cb8a42a"}, {0x6, 0x7, "945ca61bbc"}, {0x7, 0xc, "10ab5447e106a7328c8c"}, {0x4, 0xe, "d62490a1c88d7d21d8dfc0c3"}, {0x7, 0x12, "df73806da989cd5f9145ed27a6a0c8a8"}, {0x0, 0x7, "626671a271"}]}, @lsrr={0x83, 0x1f, 0x9f, [@multicast1, @local, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @multicast1, @empty]}, @ssrr={0x89, 0x7, 0xdd, [@local]}, @rr={0x7, 0x17, 0xe, [@multicast1, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @multicast2]}, @timestamp_addr={0x44, 0x14, 0x69, 0x1, 0x6, [{@multicast1}, {@broadcast, 0x3}]}]}}}], 0xd0}}], 0x1, 0x4040000) 709.519736ms ago: executing program 4 (id=6282): r0 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000061106000000000002000000000000000950000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2, 0x9800, 0xfffffffd, 0xfffffffc}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@ipv4_delrule={0x38, 0x21, 0x400, 0x70bd26, 0x25dfdbfe, {0x2, 0x14, 0x20, 0x0, 0x5, 0x0, 0x0, 0x8, 0x14}, [@FRA_SRC={0x8, 0x2, @broadcast}, @FRA_SRC={0x8, 0x2, @multicast2}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x6}]}, 0x38}}, 0x0) socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000500)=0x2) ioctl$PPPIOCBRIDGECHAN(r3, 0x40047435, &(0x7f0000000080)=0x3) 620.856586ms ago: executing program 4 (id=6283): sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000000600)="447df50ce4033a7b5ad00b83244c00b711803e7cca2504a2600da98efff9e7d67f87b17ffd582b04d632ebd866f28678899ae0d6306cd39420b7b7f78deaaf2908c2a5726f2c50c9eb720e93d3e5b49fae5ab325", 0x54}, {&(0x7f00000006c0)="080c0434", 0x4}, {&(0x7f0000000780)="4274aa814c8f6ea8d8db43178dd2f41ef596a3ca465412910e05cba0f5d97e67886d55be18cac95a1aa093479596c3613670aaf2a3b1edc465bedfdb5156035719c0baa8bb8bf2a825ec04f424dda801fea000f41edc43511e9c8bf89656071e91ae4c356d6a9ca608af6b83cc9f3d9ae37c2bfab2e5708062c659e44272215dba2195d826f9fd3b46efe6524229", 0x8e}, {&(0x7f0000000880)="a1755527af3bc7c4671ac86bf0a2338efb5d", 0x12}], 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x1a0}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_open_dev$video(&(0x7f0000000300), 0x8, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33050910"], 0xd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412b", 0xf}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 463.783394ms ago: executing program 5 (id=6284): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000180)={0x14, r0, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4044080}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {0x0}, {&(0x7f0000000900)}], 0x3}}], 0x1, 0x20000044) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x17}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000120001fbffffff000200000007"], 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x14) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 128.871041ms ago: executing program 1 (id=6285): sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000000600)="447df50ce4033a7b5ad00b83244c00b711803e7cca2504a2600da98efff9e7d67f87b17ffd582b04d632ebd866f28678899ae0d6306cd39420b7b7f78deaaf2908c2a5726f2c50c9eb720e93d3e5b49fae5ab325", 0x54}, {&(0x7f00000006c0)="080c0434", 0x4}, {&(0x7f0000000780)="4274aa814c8f6ea8d8db43178dd2f41ef596a3ca465412910e05cba0f5d97e67886d55be18cac95a1aa093479596c3613670aaf2a3b1edc465bedfdb5156035719c0baa8bb8bf2a825ec04f424dda801fea000f41edc43511e9c8bf89656071e91ae4c356d6a9ca608af6b83cc9f3d9ae37c2bfab2e5708062c659e44272215dba2195d826f9fd3b46efe6524229e4", 0x8f}, {&(0x7f0000000880)="a1755527af3bc7c4671ac86bf0a2338efb5d", 0x12}], 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x1a0}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) openat$sequencer(0xffffffffffffff9c, 0x0, 0x880, 0x0) syz_open_dev$video(&(0x7f0000000300), 0x8, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33050910"], 0xd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 0s ago: executing program 5 (id=6286): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x4780, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x20001, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x101a01) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8000, 0x44, 0x18}, 0x18) kernel console output (not intermixed with test programs): mode [ 1055.513857][T15551] debugfs: 'hsr0' already exists in 'hsr' [ 1055.513880][T15551] Cannot create hsr debugfs directory [ 1055.600726][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.600794][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.788244][T15638] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2317'. [ 1055.856759][T15637] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1055.891279][T10705] Bluetooth: hci4: command tx timeout [ 1056.597958][T10705] Bluetooth: hci1: unexpected event for opcode 0x1009 [ 1056.962941][T15551] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.485483][T15551] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.688523][T15666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2324'. [ 1057.970186][T10704] Bluetooth: hci4: command tx timeout [ 1058.396472][T15551] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.444212][T15672] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2326'. [ 1058.444644][T15677] –: renamed from dummy0 (while UP) [ 1058.758936][T15685] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2331'. [ 1058.880861][T15691] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2330'. [ 1058.950490][T15686] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1059.161767][T15551] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.935939][T15713] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2340'. [ 1059.999643][T10704] Bluetooth: hci1: unexpected event for opcode 0x1009 [ 1060.534787][T15551] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1060.638971][T15551] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1060.641602][T15551] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1060.688314][T15551] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1060.689196][T15551] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1060.752178][T15551] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1060.753608][T15551] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1060.914837][T15551] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1061.266899][T10704] Bluetooth: hci1: unexpected event for opcode 0x0009 [ 1061.323212][T15551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1061.355511][T15747] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1061.359839][T15747] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2349'. [ 1061.392568][T15551] 8021q: adding VLAN 0 to HW filter on device team0 [ 1061.420748][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1061.420966][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1061.482944][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1061.483044][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1061.784116][T15752] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2350'. [ 1063.746841][T15785] 9p: Bad value for 'rfdno' [ 1063.785698][T15785] overlay: ./bus is not a directory [ 1064.382158][T15551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1064.649752][T15551] veth0_vlan: entered promiscuous mode [ 1064.677755][T15551] veth1_vlan: entered promiscuous mode [ 1064.848594][T10704] Bluetooth: hci1: unexpected event for opcode 0x0009 [ 1064.905981][T15551] veth0_macvtap: entered promiscuous mode [ 1064.937805][T15551] veth1_macvtap: entered promiscuous mode [ 1066.317257][T15551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1066.345237][T15551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1066.416920][T15411] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1066.416971][T15411] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1066.417006][T15411] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1066.417039][T15411] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1066.663722][T10704] Bluetooth: hci1: unexpected event for opcode 0x1009 [ 1067.720787][ T1421] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1067.720807][ T1421] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1068.021652][T15411] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1068.021673][T15411] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1068.310309][T10704] Bluetooth: hci1: unexpected event for opcode 0x1009 [ 1069.316111][T15851] NILFS (nullb0): couldn't find nilfs on the device [ 1070.021630][T15858] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2381'. [ 1073.235238][T15912] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2398'. [ 1073.575699][T15919] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2400'. [ 1075.458478][T15945] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2409'. [ 1078.615678][T10704] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 1078.661065][T15968] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2416'. [ 1078.814947][T15972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2418'. [ 1080.208706][T15998] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2425'. [ 1082.119003][T16020] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2433'. [ 1082.690817][T10704] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1082.691157][T10704] Bluetooth: hci1: Injecting HCI hardware error event [ 1082.712097][T10705] Bluetooth: hci1: hardware error 0x00 [ 1083.149948][T16036] 9p: Bad value for 'rfdno' [ 1083.192895][T16036] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1083.192951][T16036] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1083.517614][ T5848] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1083.680324][ T5848] usb 2-1: Using ep0 maxpacket: 32 [ 1083.688240][ T5848] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 1083.688268][ T5848] usb 2-1: config 0 has no interface number 0 [ 1083.716118][ T5848] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1083.716148][ T5848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.716166][ T5848] usb 2-1: Product: syz [ 1083.716178][ T5848] usb 2-1: Manufacturer: syz [ 1083.716191][ T5848] usb 2-1: SerialNumber: syz [ 1083.784134][ T5848] usb 2-1: config 0 descriptor?? [ 1084.247679][ T5848] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1084.247710][ T5848] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1084.930169][T10705] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1085.055280][ T5848] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1085.055558][ T5848] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32 [ 1086.366970][ T1243] usb 2-1: USB disconnect, device number 54 [ 1086.640677][T16103] 9p: Bad value for 'rfdno' [ 1086.688559][T16103] overlay: ./bus is not a directory [ 1087.858734][T16120] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.2458'. [ 1092.284491][T16141] NILFS (nullb0): couldn't find nilfs on the device [ 1094.344029][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1094.871930][T16150] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2464'. [ 1095.204133][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 1095.206093][ T10] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 1095.206119][ T10] usb 7-1: config 0 has no interface number 0 [ 1095.208360][ T10] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1095.208388][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.208408][ T10] usb 7-1: Product: syz [ 1095.208420][ T10] usb 7-1: Manufacturer: syz [ 1095.208428][ T10] usb 7-1: SerialNumber: syz [ 1095.225057][T10705] Bluetooth: hci4: link tx timeout [ 1095.225452][T10705] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1095.298473][ T10] usb 7-1: config 0 descriptor?? [ 1095.507204][ T10] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 1095.507482][ T10] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 1095.598066][ T10] usb 7-1: USB disconnect, device number 2 [ 1095.612817][T16160] 9p: Bad value for 'rfdno' [ 1095.633043][T16160] overlay: ./bus is not a directory [ 1097.146831][T16171] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.2471'. [ 1097.251910][T10704] Bluetooth: hci4: command 0x0406 tx timeout [ 1100.632612][T16194] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2479'. [ 1101.040200][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1101.132168][T16213] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2485'. [ 1101.750958][ T10] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1101.750989][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1101.751009][ T10] usb 6-1: Product: syz [ 1101.751023][ T10] usb 6-1: Manufacturer: syz [ 1101.751037][ T10] usb 6-1: SerialNumber: syz [ 1102.313589][ T10] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1102.313655][ T10] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1102.723545][ T10] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1102.723600][ T10] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1102.724435][ T10] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1102.753708][T16234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1102.772442][ T10] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32 [ 1105.193935][T16239] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1106.730023][ T9] usb 6-1: USB disconnect, device number 4 [ 1106.749821][T16242] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2495'. [ 1106.858712][T16243] –: renamed from dummy0 (while UP) [ 1107.195180][T16254] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2499'. [ 1108.203019][T16262] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2500'. [ 1108.261782][T10705] Bluetooth: hci4: unexpected event for opcode 0x1009 [ 1108.581183][T16274] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2506'. [ 1108.596180][T16272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1108.870121][ T1243] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1109.846474][ T1243] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1109.846498][ T1243] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.846508][ T1243] usb 4-1: Product: syz [ 1109.846515][ T1243] usb 4-1: Manufacturer: syz [ 1109.846530][ T1243] usb 4-1: SerialNumber: syz [ 1110.315868][ T1243] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1110.315931][ T1243] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1111.215972][T16308] netlink: 'syz.1.2518': attribute type 4 has an invalid length. [ 1111.474370][ T1243] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1111.474429][ T1243] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1111.561897][ T1243] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1111.597884][ T1243] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 1111.760094][T12588] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1111.930112][T12588] usb 2-1: Using ep0 maxpacket: 32 [ 1111.932208][T12588] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1111.932236][T12588] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1111.932257][T12588] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1111.934524][T12588] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1111.934550][T12588] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.934569][T12588] usb 2-1: Product: syz [ 1111.934583][T12588] usb 2-1: Manufacturer: syz [ 1111.934596][T12588] usb 2-1: SerialNumber: syz [ 1112.003282][T12588] usb 2-1: config 0 descriptor?? [ 1112.406115][T12588] gs_usb 2-1:0.0: Configuring for 154 interfaces [ 1112.502842][ T821] usb 4-1: USB disconnect, device number 42 [ 1112.626787][T16323] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1113.678261][T12588] gs_usb 2-1:0.0: Disabling termination support for channel 0 (-ETIMEDOUT) [ 1113.866380][T12588] gs_usb 2-1:0.0: Couldn't get bit timing const for channel 1 (-EPIPE) [ 1114.558067][T16343] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2529'. [ 1115.488858][T12588] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -32 [ 1115.532244][T16356] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2534'. [ 1115.584786][T12588] usb 2-1: USB disconnect, device number 55 [ 1115.663833][ T6536] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1115.776684][T16366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2538'. [ 1115.815993][ T6536] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1115.816024][ T6536] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1115.816044][ T6536] usb 7-1: Product: syz [ 1115.816058][ T6536] usb 7-1: Manufacturer: syz [ 1115.816072][ T6536] usb 7-1: SerialNumber: syz [ 1115.894148][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.894205][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.698626][ T6536] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1116.698679][ T6536] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1117.133793][ T6536] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1117.133845][ T6536] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1117.134734][ T6536] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1117.231937][ T6536] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -32 [ 1117.509884][T16392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1117.662185][T16396] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2549'. [ 1118.526709][T11814] usb 7-1: USB disconnect, device number 3 [ 1120.370732][T11814] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1120.697481][T11814] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1120.697514][T11814] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.697535][T11814] usb 5-1: Product: syz [ 1120.697548][T11814] usb 5-1: Manufacturer: syz [ 1120.697563][T11814] usb 5-1: SerialNumber: syz [ 1121.287034][T16455] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2565'. [ 1121.891965][T10705] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1121.892313][T10705] Bluetooth: hci3: Injecting HCI hardware error event [ 1121.905356][T10704] Bluetooth: hci3: hardware error 0x00 [ 1121.934267][T11814] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1121.934328][T11814] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1122.541694][T11814] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE [ 1122.541765][T11814] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1122.542642][T11814] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1122.617240][T11814] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 1123.105713][T10705] Bluetooth: hci4: unexpected event for opcode 0x0000 [ 1123.594356][ T5724] usb 5-1: USB disconnect, device number 42 [ 1123.748320][T10705] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 1124.544371][T10704] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1124.844657][T10704] Bluetooth: hci4: unexpected event for opcode 0x1009 [ 1125.520122][ T5724] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1126.261118][T16543] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2595'. [ 1126.819423][ T5724] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1126.819456][ T5724] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1126.819476][ T5724] usb 7-1: Product: syz [ 1126.819499][ T5724] usb 7-1: Manufacturer: syz [ 1126.819514][ T5724] usb 7-1: SerialNumber: syz [ 1127.205611][T16550] 9p: Bad value for 'rfdno' [ 1127.251592][T16550] overlay: ./bus is not a directory [ 1127.337190][ T5724] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1127.337256][ T5724] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1127.977419][T16564] netlink: 'syz.3.2601': attribute type 4 has an invalid length. [ 1128.687746][ T5724] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE [ 1128.687807][ T5724] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1128.688696][ T5724] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1128.764665][ T5724] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -32 [ 1128.910857][ T36] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1129.125008][ T36] usb 4-1: Using ep0 maxpacket: 32 [ 1129.430938][ T36] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1129.430968][ T36] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1129.430992][ T36] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1129.479595][ T36] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1129.479625][ T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.479645][ T36] usb 4-1: Product: syz [ 1129.479658][ T36] usb 4-1: Manufacturer: syz [ 1129.479665][ T36] usb 4-1: SerialNumber: syz [ 1129.517238][ T36] usb 4-1: config 0 descriptor?? [ 1129.615137][T16575] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2605'. [ 1129.729673][ T5724] usb 7-1: USB disconnect, device number 4 [ 1129.926549][ T36] gs_usb 4-1:0.0: Configuring for 154 interfaces [ 1131.255048][ T36] gs_usb 4-1:0.0: Disabling termination support for channel 0 (-ETIMEDOUT) [ 1131.335582][ T36] gs_usb 4-1:0.0: Couldn't get bit timing const for channel 1 (-EPIPE) [ 1132.193260][ T36] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -32 [ 1132.247801][ T36] usb 4-1: USB disconnect, device number 43 [ 1132.555443][T16619] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.2620'. [ 1133.680215][ T36] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1133.813184][T11814] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1133.842909][ T36] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1133.842938][ T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1133.842958][ T36] usb 4-1: Product: syz [ 1133.842971][ T36] usb 4-1: Manufacturer: syz [ 1133.842985][ T36] usb 4-1: SerialNumber: syz [ 1134.050166][T11814] usb 2-1: Using ep0 maxpacket: 32 [ 1134.052680][T11814] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 1134.052707][T11814] usb 2-1: config 0 has no interface number 0 [ 1134.074351][T11814] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1134.074381][T11814] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1134.074400][T11814] usb 2-1: Product: syz [ 1134.074414][T11814] usb 2-1: Manufacturer: syz [ 1134.074427][T11814] usb 2-1: SerialNumber: syz [ 1134.090852][T11814] usb 2-1: config 0 descriptor?? [ 1134.418363][ T36] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1134.418427][ T36] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1134.630189][T11814] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1134.630219][T11814] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1134.834333][T11814] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1134.834622][T11814] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -61 [ 1135.399797][ T36] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE [ 1135.400087][ T36] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1136.275977][ T36] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1136.660339][T11922] usb 2-1: USB disconnect, device number 56 [ 1136.698259][ T36] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 1136.990219][ T36] usb 4-1: USB disconnect, device number 44 [ 1137.304563][T16703] netlink: 1688 bytes leftover after parsing attributes in process `syz.5.2632'. [ 1137.363351][T16697] ip6erspan0: entered allmulticast mode [ 1138.117879][T10704] Bluetooth: hci4: unexpected event for opcode 0x1009 [ 1143.660274][T10704] Bluetooth: hci4: unexpected event for opcode 0x1009 [ 1144.911054][T16761] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2645'. [ 1145.942583][T16779] netlink: 'syz.4.2650': attribute type 4 has an invalid length. [ 1146.891685][ T36] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1147.180082][ T36] usb 5-1: Using ep0 maxpacket: 32 [ 1147.182276][ T36] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1147.182304][ T36] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1147.182328][ T36] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1147.185082][ T36] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1147.185109][ T36] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1147.185129][ T36] usb 5-1: Product: syz [ 1147.185143][ T36] usb 5-1: Manufacturer: syz [ 1147.185156][ T36] usb 5-1: SerialNumber: syz [ 1147.272759][ T36] usb 5-1: config 0 descriptor?? [ 1147.775771][ T36] gs_usb 5-1:0.0: Configuring for 154 interfaces [ 1149.473457][ T36] gs_usb 5-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 1151.737015][ T36] gs_usb 5-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 1152.432076][ T36] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71 [ 1152.467876][ T36] usb 5-1: USB disconnect, device number 43 [ 1156.371449][T16901] netlink: 'syz.6.2670': attribute type 4 has an invalid length. [ 1157.370904][T11922] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1157.521484][T11922] usb 7-1: Using ep0 maxpacket: 32 [ 1157.527981][T11922] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1157.528012][T11922] usb 7-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1157.528036][T11922] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1157.531791][T11922] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1157.531819][T11922] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1157.531838][T11922] usb 7-1: Product: syz [ 1157.531851][T11922] usb 7-1: Manufacturer: syz [ 1157.531865][T11922] usb 7-1: SerialNumber: syz [ 1157.561738][T11922] usb 7-1: config 0 descriptor?? [ 1157.971570][T11922] gs_usb 7-1:0.0: Configuring for 154 interfaces [ 1160.666085][T11922] gs_usb 7-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 1161.075820][T11922] gs_usb 7-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 1161.309582][T16968] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2682'. [ 1161.511129][T11922] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -71 [ 1161.564940][T11922] usb 7-1: USB disconnect, device number 5 [ 1161.837044][T10704] Bluetooth: hci4: unexpected event for opcode 0x1009 [ 1162.453365][T17015] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2690'. [ 1162.759798][T17021] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2691'. [ 1163.171004][T17029] netlink: 'syz.3.2692': attribute type 4 has an invalid length. [ 1164.080200][T12588] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1164.440112][T12588] usb 4-1: Using ep0 maxpacket: 32 [ 1164.441907][T12588] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1164.441936][T12588] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1164.441960][T12588] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1164.444257][T12588] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1164.444284][T12588] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1164.444317][T12588] usb 4-1: Product: syz [ 1164.444330][T12588] usb 4-1: Manufacturer: syz [ 1164.444343][T12588] usb 4-1: SerialNumber: syz [ 1164.453562][T12588] usb 4-1: config 0 descriptor?? [ 1165.313263][T12588] gs_usb 4-1:0.0: Configuring for 154 interfaces [ 1165.600359][T17078] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2704'. [ 1167.043295][T12588] gs_usb 4-1:0.0: Disabling termination support for channel 0 (-ETIMEDOUT) [ 1167.232670][T12588] gs_usb 4-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 1168.832979][T12588] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 1168.848279][T12588] usb 4-1: USB disconnect, device number 45 [ 1172.252128][T17154] 9p: Bad value for 'rfdno' [ 1172.289087][T17154] overlay: ./bus is not a directory [ 1175.154964][T17192] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2732'. [ 1177.336868][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.336938][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1179.147980][T17219] ±ÿ: renamed from lo (while UP) [ 1179.711342][T17231] 9p: Bad value for 'rfdno' [ 1179.726063][T17231] overlay: ./bus is not a directory [ 1180.986449][T17243] syzkaller0: entered promiscuous mode [ 1180.986589][T17243] syzkaller0: entered allmulticast mode [ 1182.628624][T17272] 9p: Bad value for 'rfdno' [ 1182.671116][T17272] overlay: ./bus is not a directory [ 1184.936244][T10704] Bluetooth: hci4: unexpected event for opcode 0x0009 [ 1185.660158][T11814] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1186.570169][T11814] usb 4-1: Using ep0 maxpacket: 32 [ 1186.572439][T11814] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 1186.572467][T11814] usb 4-1: config 0 has no interface number 0 [ 1186.575084][T11814] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1186.575113][T11814] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1186.575133][T11814] usb 4-1: Product: syz [ 1186.575147][T11814] usb 4-1: Manufacturer: syz [ 1186.575161][T11814] usb 4-1: SerialNumber: syz [ 1186.604149][T11814] usb 4-1: config 0 descriptor?? [ 1187.562131][T11814] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1187.562164][T11814] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1187.634662][T17321] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.2769'. [ 1187.768973][T11814] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1187.769257][T11814] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -32 [ 1187.849753][T17323] syzkaller0: entered promiscuous mode [ 1187.849782][T17323] syzkaller0: entered allmulticast mode [ 1188.227239][T10704] Bluetooth: hci4: unexpected event for opcode 0x1009 [ 1188.835128][ T821] usb 4-1: USB disconnect, device number 46 [ 1190.154825][T17368] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2786'. [ 1190.324687][T17380] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2788'. [ 1190.680162][ T821] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1190.830132][ T821] usb 6-1: Using ep0 maxpacket: 32 [ 1190.832756][ T821] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 1190.832780][ T821] usb 6-1: config 0 has no interface number 0 [ 1190.836119][ T821] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1190.836149][ T821] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1190.836169][ T821] usb 6-1: Product: syz [ 1190.836183][ T821] usb 6-1: Manufacturer: syz [ 1190.836197][ T821] usb 6-1: SerialNumber: syz [ 1190.899053][ T821] usb 6-1: config 0 descriptor?? [ 1191.027405][T10704] Bluetooth: hci4: unexpected event for opcode 0x0000 [ 1191.318380][ T821] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1191.318401][ T821] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1191.519888][ T821] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1191.552963][ T821] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -32 [ 1191.983557][T10704] Bluetooth: hci4: unexpected event for opcode 0x0000 [ 1192.434690][T17426] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2805'. [ 1193.375701][T17438] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1193.545282][T12587] usb 6-1: USB disconnect, device number 5 [ 1193.875264][T17453] netlink: 'syz.4.2814': attribute type 39 has an invalid length. [ 1194.796595][T17438] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1195.108834][T10704] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1195.120210][T10704] Bluetooth: hci4: Injecting HCI hardware error event [ 1195.127981][T10705] Bluetooth: hci4: hardware error 0x00 [ 1195.646558][T17438] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1196.265884][T17438] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1196.355057][T17504] ip6erspan0: entered allmulticast mode [ 1196.829541][ T1814] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1196.946846][ T1444] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1196.975960][ T1814] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1196.989170][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.254033][T10705] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1198.814616][T17553] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2846'. [ 1199.281584][T17561] NILFS (nullb0): couldn't find nilfs on the device [ 1205.260603][T17606] NILFS (nullb0): couldn't find nilfs on the device [ 1206.222726][T17614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2863'. [ 1207.860322][T17627] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2866'. [ 1209.223144][T17642] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2872'. [ 1209.377718][T17654] netlink: 'syz.6.2875': attribute type 39 has an invalid length. [ 1211.080487][T17652] NILFS (nullb0): couldn't find nilfs on the device [ 1211.090964][T17652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2874'. [ 1213.625907][T17692] netlink: 'syz.5.2888': attribute type 4 has an invalid length. [ 1214.850200][T11922] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1214.881764][T17700] netlink: 'syz.4.2891': attribute type 39 has an invalid length. [ 1215.010091][T11922] usb 6-1: Using ep0 maxpacket: 32 [ 1215.019348][T11922] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1215.019375][T11922] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1215.019412][T11922] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1215.058465][T11922] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1215.058496][T11922] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.058515][T11922] usb 6-1: Product: syz [ 1215.058529][T11922] usb 6-1: Manufacturer: syz [ 1215.058543][T11922] usb 6-1: SerialNumber: syz [ 1215.111006][T11922] usb 6-1: config 0 descriptor?? [ 1215.521091][T11922] gs_usb 6-1:0.0: Configuring for 154 interfaces [ 1216.726452][T17743] NILFS (nullb0): couldn't find nilfs on the device [ 1216.817712][T11922] gs_usb 6-1:0.0: Disabling termination support for channel 0 (-ETIMEDOUT) [ 1216.929569][T11922] gs_usb 6-1:0.0: Couldn't get bit timing const for channel 1 (-EPIPE) [ 1218.943081][T17757] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2909'. [ 1219.189338][T11922] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -32 [ 1219.830234][T11922] usb 6-1: USB disconnect, device number 6 [ 1220.244351][T17773] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2918'. [ 1220.690120][T11922] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1220.848304][T11922] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1220.848335][T11922] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1220.848355][T11922] usb 6-1: Product: syz [ 1220.848367][T11922] usb 6-1: Manufacturer: syz [ 1220.848380][T11922] usb 6-1: SerialNumber: syz [ 1221.231366][T17801] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2927'. [ 1221.255624][T17801] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2927'. [ 1221.340285][T11922] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1221.340321][T11922] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1221.588217][T17809] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2931'. [ 1222.603764][T11922] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 1222.603824][T11922] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1222.604779][T11922] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1222.735797][T11922] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32 [ 1223.096716][T17840] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2944'. [ 1223.702503][T11922] usb 6-1: USB disconnect, device number 7 [ 1224.477614][T17869] syzkaller0: entered promiscuous mode [ 1224.477640][T17869] syzkaller0: entered allmulticast mode [ 1224.732507][T17877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2956'. [ 1225.141353][T17882] NILFS (nullb0): couldn't find nilfs on the device [ 1227.810921][T17906] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2966'. [ 1229.618842][T17944] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2979'. [ 1230.872636][T17948] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2978'. [ 1232.164931][T17969] NILFS (nullb0): couldn't find nilfs on the device [ 1235.007736][T17993] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2995'. [ 1236.095417][T18006] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3000'. [ 1236.250201][T18007] netlink: 'syz.1.3000': attribute type 4 has an invalid length. [ 1237.790230][T11922] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1237.940212][T11922] usb 2-1: Using ep0 maxpacket: 32 [ 1237.942282][T11922] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1237.942312][T11922] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1237.942334][T11922] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1237.944718][T11922] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1237.944746][T11922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1237.944766][T11922] usb 2-1: Product: syz [ 1237.944780][T11922] usb 2-1: Manufacturer: syz [ 1237.944794][T11922] usb 2-1: SerialNumber: syz [ 1238.026235][T11922] usb 2-1: config 0 descriptor?? [ 1238.442691][T11922] gs_usb 2-1:0.0: Configuring for 154 interfaces [ 1238.781510][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.781581][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.061176][T18048] NILFS (nullb0): couldn't find nilfs on the device [ 1239.915438][T11922] gs_usb 2-1:0.0: Disabling termination support for channel 0 (-ETIMEDOUT) [ 1240.049014][T11922] gs_usb 2-1:0.0: Couldn't get bit timing const for channel 1 (-EPIPE) [ 1241.963214][T11922] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -32 [ 1242.004629][T11922] usb 2-1: USB disconnect, device number 57 [ 1242.430177][T11922] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1242.594713][T11922] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1242.594757][T11922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1242.594777][T11922] usb 5-1: Product: syz [ 1242.594792][T11922] usb 5-1: Manufacturer: syz [ 1242.594805][T11922] usb 5-1: SerialNumber: syz [ 1243.041502][T18112] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3043'. [ 1243.067240][T18112] netlink: 'syz.6.3043': attribute type 4 has an invalid length. [ 1243.828203][T11922] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1243.828266][T11922] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1245.094651][T11922] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1245.097975][T11922] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 1245.300221][ T5713] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1245.459483][ T5713] usb 7-1: Using ep0 maxpacket: 32 [ 1245.461553][ T5713] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1245.461580][ T5713] usb 7-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1245.461600][ T5713] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1245.465711][ T5713] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1245.465742][ T5713] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1245.465760][ T5713] usb 7-1: Product: syz [ 1245.465773][ T5713] usb 7-1: Manufacturer: syz [ 1245.465787][ T5713] usb 7-1: SerialNumber: syz [ 1245.488461][ T5713] usb 7-1: config 0 descriptor?? [ 1245.532675][T11922] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000404. ret = -EPROTO [ 1245.532748][T11922] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1245.567504][T11922] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1245.719570][T11922] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 1245.748070][T11922] usb 5-1: USB disconnect, device number 44 [ 1245.900589][ T5713] gs_usb 7-1:0.0: Configuring for 154 interfaces [ 1246.397811][T18141] tipc: Enabling of bearer rejected, failed to enable media [ 1246.527289][T18145] syzkaller0: entered promiscuous mode [ 1246.527317][T18145] syzkaller0: entered allmulticast mode [ 1247.182774][ T5713] gs_usb 7-1:0.0: Disabling termination support for channel 0 (-ETIMEDOUT) [ 1247.335155][ C1] raw-gadget.1 gadget.6: ignoring, device is not running [ 1247.336744][ T5713] gs_usb 7-1:0.0: Couldn't get bit timing const for channel 1 (-EPIPE) [ 1247.665661][ T5713] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -32 [ 1247.736090][ T5713] usb 7-1: USB disconnect, device number 6 [ 1247.954867][T18179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3073'. [ 1248.432795][T18191] ip6erspan0: entered allmulticast mode [ 1249.689779][T18226] IPVS: set_ctl: invalid protocol: 136 172.30.0.7:20005 [ 1249.898766][T18235] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3094'. [ 1250.556292][T18258] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3105'. [ 1251.056041][T18277] tipc: Enabling of bearer rejected, failed to enable media [ 1252.427536][T18303] tipc: Enabling of bearer rejected, failed to enable media [ 1254.099161][T18336] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3133'. [ 1254.359796][T18345] tipc: Enabling of bearer rejected, failed to enable media [ 1255.222656][T18382] tipc: Enabling of bearer rejected, failed to enable media [ 1256.906059][T18447] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3179'. [ 1257.057256][T18453] IPVS: set_ctl: invalid protocol: 136 172.30.0.6:20005 [ 1257.629416][T18473] tipc: Started in network mode [ 1257.629445][T18473] tipc: Node identity 8a7cbca3bf63, cluster identity 4711 [ 1257.700511][T18473] tipc: Enabled bearer , priority 0 [ 1257.764855][T18472] tipc: Disabling bearer [ 1258.119592][T18492] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.3197'. [ 1259.345866][T18539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3218'. [ 1268.172099][T18776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3319'. [ 1268.555214][T18790] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3324'. [ 1270.563667][T18843] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3346'. [ 1271.643045][T18883] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3356'. [ 1272.472160][T18904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3365'. [ 1278.327927][T19022] netlink: 'syz.5.3414': attribute type 39 has an invalid length. [ 1280.885453][T19047] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3424'. [ 1285.852843][T19208] netlink: 'syz.1.3493': attribute type 39 has an invalid length. [ 1286.267845][T19220] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3499'. [ 1286.612541][T19228] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3502'. [ 1286.612606][T19228] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3502'. [ 1290.330130][ T10] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1290.490731][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 1290.493415][ T10] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 1290.493440][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1290.493459][ T10] usb 2-1: config 0 has no interface number 0 [ 1290.494186][ T10] usb 2-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1290.499196][ T10] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1290.499224][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1290.499244][ T10] usb 2-1: Product: syz [ 1290.499258][ T10] usb 2-1: Manufacturer: syz [ 1290.499273][ T10] usb 2-1: SerialNumber: syz [ 1290.588794][ T10] usb 2-1: config 0 descriptor?? [ 1290.602706][ T10] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1290.603547][ T10] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -22 [ 1291.959061][T19362] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3546'. [ 1292.791262][T19386] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.3556'. [ 1292.856209][ T10] usb 2-1: USB disconnect, device number 58 [ 1293.210124][T19405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3565'. [ 1293.210316][T19405] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3565'. [ 1293.582829][T19417] NILFS (nullb0): couldn't find nilfs on the device [ 1294.665458][T19440] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3579'. [ 1294.665651][T19440] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3579'. [ 1298.390220][T19501] netlink: 'syz.4.3600': attribute type 4 has an invalid length. [ 1299.290219][ T5860] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1299.440348][ T5860] usb 5-1: Using ep0 maxpacket: 32 [ 1299.443161][ T5860] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1299.443187][ T5860] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1299.443210][ T5860] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1299.446604][ T5860] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1299.446631][ T5860] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1299.446660][ T5860] usb 5-1: Product: syz [ 1299.446673][ T5860] usb 5-1: Manufacturer: syz [ 1299.446687][ T5860] usb 5-1: SerialNumber: syz [ 1299.533621][ T5860] usb 5-1: config 0 descriptor?? [ 1299.941707][ T5860] gs_usb 5-1:0.0: Configuring for 154 interfaces [ 1300.049484][T19515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3605'. [ 1300.218243][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.223259][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.170637][ T5860] gs_usb 5-1:0.0: Disabling termination support for channel 0 (-ETIMEDOUT) [ 1301.249413][ T5860] gs_usb 5-1:0.0: Couldn't get bit timing const for channel 1 (-EPIPE) [ 1301.502403][ T5860] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -32 [ 1301.554866][ T5860] usb 5-1: USB disconnect, device number 45 [ 1302.112523][T19568] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3625'. [ 1302.112587][T19568] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3625'. [ 1304.182174][T19624] netlink: 'syz.1.3648': attribute type 39 has an invalid length. [ 1307.555509][T19678] NILFS (nullb0): couldn't find nilfs on the device [ 1310.988762][T19728] Bluetooth: MGMT ver 1.23 [ 1310.998517][T19728] IPv6: Can't replace route, no match found [ 1311.304483][T19736] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3692'. [ 1313.934416][T19789] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3710'. [ 1314.516248][T19806] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3719'. [ 1314.951209][T19806] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1316.145169][T19806] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1316.221379][T19806] bond0 (unregistering): Released all slaves [ 1319.898869][T19878] syzkaller0: entered promiscuous mode [ 1319.898895][T19878] syzkaller0: entered allmulticast mode [ 1320.375964][T19894] 9p: Bad value for 'rfdno' [ 1320.512704][T19901] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3754'. [ 1320.536428][T19902] netlink: 'syz.6.3753': attribute type 39 has an invalid length. [ 1321.397642][T19927] netlink: 'syz.6.3765': attribute type 39 has an invalid length. [ 1321.559490][T19931] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3767'. [ 1322.086219][T19947] NILFS (nullb0): couldn't find nilfs on the device [ 1323.832614][T19959] IPv6: Can't replace route, no match found [ 1324.709060][T19980] NILFS (nullb0): couldn't find nilfs on the device [ 1326.324764][T19988] 9p: Bad value for 'rfdno' [ 1326.732332][T20002] netlink: 'syz.6.3777': attribute type 39 has an invalid length. [ 1327.289077][T20013] netlink: 'syz.6.3801': attribute type 1 has an invalid length. [ 1327.510723][T20013] bond0: entered promiscuous mode [ 1327.510770][T20013] bond0: entered allmulticast mode [ 1327.514108][T20013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1327.645261][T20015] erspan1: entered allmulticast mode [ 1327.680650][T20024] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3805'. [ 1327.793324][T20024] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1327.873774][T20024] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1327.925219][T20024] bond0 (unregistering): Released all slaves [ 1329.287637][T10704] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1329.327394][T10704] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1329.336780][T10704] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1329.339189][T10704] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1329.348845][T10704] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1329.967493][T20094] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3830'. [ 1330.193977][T20098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3831'. [ 1330.909666][ T1782] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1331.490279][T10705] Bluetooth: hci2: command tx timeout [ 1331.712948][T20125] netlink: 'syz.1.3838': attribute type 1 has an invalid length. [ 1331.938839][ T1782] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1332.102936][T20125] bond1: entered promiscuous mode [ 1332.122469][T20125] bond1: entered allmulticast mode [ 1332.122973][T20125] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1332.184253][T20128] erspan1: entered allmulticast mode [ 1332.457448][ T1782] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1332.993900][ T1782] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1333.042064][T20155] netlink: 'syz.5.3847': attribute type 39 has an invalid length. [ 1333.570412][T10705] Bluetooth: hci2: command tx timeout [ 1333.774610][T20175] syzkaller0: entered promiscuous mode [ 1333.774628][T20175] syzkaller0: entered allmulticast mode [ 1334.247768][T20083] bridge0: port 1(bridge_slave_0) entered blocking state [ 1334.248535][T20083] bridge0: port 1(bridge_slave_0) entered disabled state [ 1334.248776][T20083] bridge_slave_0: entered allmulticast mode [ 1334.287337][T20083] bridge_slave_0: entered promiscuous mode [ 1334.348300][T20183] IPv6: Can't replace route, no match found [ 1334.428170][T20186] netlink: 'syz.6.3857': attribute type 39 has an invalid length. [ 1334.456913][T20083] bridge0: port 2(bridge_slave_1) entered blocking state [ 1334.457022][T20083] bridge0: port 2(bridge_slave_1) entered disabled state [ 1334.457279][T20083] bridge_slave_1: entered allmulticast mode [ 1334.472364][T20083] bridge_slave_1: entered promiscuous mode [ 1334.814013][T20193] netlink: 'syz.5.3859': attribute type 39 has an invalid length. [ 1334.974601][T20083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1335.039718][T20083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1335.390439][ T1782] bridge_slave_1: left allmulticast mode [ 1335.390476][ T1782] bridge_slave_1: left promiscuous mode [ 1335.390793][ T1782] bridge0: port 2(bridge_slave_1) entered disabled state [ 1335.453211][ T1782] bridge_slave_0: left allmulticast mode [ 1335.453248][ T1782] bridge_slave_0: left promiscuous mode [ 1335.453497][ T1782] bridge0: port 1(bridge_slave_0) entered disabled state [ 1335.567228][T20204] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3864'. [ 1335.650187][T10705] Bluetooth: hci2: command tx timeout [ 1335.730816][T20207] netlink: 'syz.4.3865': attribute type 1 has an invalid length. [ 1336.431269][ T1782] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1336.511507][ T1782] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1336.553689][ T1782] bond0 (unregistering): Released all slaves [ 1336.910202][T20220] netlink: 'syz.5.3869': attribute type 39 has an invalid length. [ 1336.917878][T20207] bond0: entered promiscuous mode [ 1336.917907][T20207] bond0: entered allmulticast mode [ 1336.951218][T20207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1336.959553][T20208] erspan1: entered allmulticast mode [ 1337.183879][T20083] team0: Port device team_slave_0 added [ 1337.199409][T20083] team0: Port device team_slave_1 added [ 1337.267943][T20226] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3870'. [ 1337.730315][T10705] Bluetooth: hci2: command tx timeout [ 1337.812716][T20083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1337.812733][T20083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1337.812758][T20083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1337.890978][T20083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1337.890994][T20083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1337.891020][T20083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1338.842867][T20083] hsr_slave_0: entered promiscuous mode [ 1338.854049][T20083] hsr_slave_1: entered promiscuous mode [ 1338.858290][T20083] debugfs: 'hsr0' already exists in 'hsr' [ 1338.858318][T20083] Cannot create hsr debugfs directory [ 1339.028423][ T1782] hsr_slave_0: left promiscuous mode [ 1339.061855][ T1782] hsr_slave_1: left promiscuous mode [ 1339.063049][ T1782] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1339.063074][ T1782] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1339.122388][ T1782] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1339.122415][ T1782] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1339.393258][ T1782] veth1_macvtap: left promiscuous mode [ 1339.393320][ T1782] veth0_macvtap: left promiscuous mode [ 1339.393495][ T1782] veth1_vlan: left promiscuous mode [ 1339.393588][ T1782] veth0_vlan: left promiscuous mode [ 1340.212129][T20292] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3886'. [ 1340.520921][ T1782] team0 (unregistering): Port device team_slave_1 removed [ 1340.581261][ T1782] team0 (unregistering): Port device team_slave_0 removed [ 1340.798856][ T5264] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1340.809803][T20281] syzkaller0: entered promiscuous mode [ 1340.809830][T20281] syzkaller0: entered allmulticast mode [ 1340.914479][T20297] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3888'. [ 1345.568460][T20356] netlink: 'syz.6.3898': attribute type 4 has an invalid length. [ 1346.530145][T16611] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1346.680098][T16611] usb 7-1: Using ep0 maxpacket: 32 [ 1346.681917][T16611] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1346.681944][T16611] usb 7-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1346.681967][T16611] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1346.684202][T16611] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1346.684229][T16611] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1346.684249][T16611] usb 7-1: Product: syz [ 1346.684264][T16611] usb 7-1: Manufacturer: syz [ 1346.684278][T16611] usb 7-1: SerialNumber: syz [ 1346.771859][T16611] usb 7-1: config 0 descriptor?? [ 1347.184215][T16611] gs_usb 7-1:0.0: Configuring for 154 interfaces [ 1348.596543][T16611] gs_usb 7-1:0.0: Disabling termination support for channel 0 (-ETIMEDOUT) [ 1349.892026][T16611] gs_usb 7-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 1350.184298][T16611] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -71 [ 1350.315768][T16611] usb 7-1: USB disconnect, device number 7 [ 1352.664669][T20083] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1353.326143][T20083] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1353.349290][T20083] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1353.561740][T20083] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1353.565119][T20083] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1353.851515][T20083] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1353.852515][T20083] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1353.935864][T20083] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1354.296331][T20083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1354.375931][T20083] 8021q: adding VLAN 0 to HW filter on device team0 [ 1354.401352][T16839] bridge0: port 1(bridge_slave_0) entered blocking state [ 1354.402273][T16839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1354.446117][T16841] bridge0: port 2(bridge_slave_1) entered blocking state [ 1354.446456][T16841] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1356.640605][T20517] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3937'. [ 1357.402819][T20083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1357.727462][T20083] veth0_vlan: entered promiscuous mode [ 1357.780496][T20083] veth1_vlan: entered promiscuous mode [ 1357.981838][T20083] veth0_macvtap: entered promiscuous mode [ 1358.057080][T20083] veth1_macvtap: entered promiscuous mode [ 1358.091183][T20083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1358.135296][T20083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1358.163527][T10947] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1358.164443][T10947] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1358.168430][T10947] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1358.169098][T10947] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1359.493082][ T8039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1359.493104][ T8039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1359.637921][T16841] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1359.637941][T16841] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1359.999629][T20596] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3961'. [ 1359.999916][T20596] bond0: left allmulticast mode [ 1361.661827][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.661906][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1363.610603][T20674] netlink: 160 bytes leftover after parsing attributes in process `syz.1.3985'. [ 1364.637945][T20699] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3995'. [ 1364.922914][T20709] syzkaller0: entered promiscuous mode [ 1364.922940][T20709] syzkaller0: entered allmulticast mode [ 1365.346164][T20722] netlink: 'syz.4.4003': attribute type 39 has an invalid length. [ 1365.669537][T20735] IPv6: Can't replace route, no match found [ 1369.524703][T20801] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4029'. [ 1370.812268][T20811] syzkaller0: entered promiscuous mode [ 1370.812295][T20811] syzkaller0: entered allmulticast mode [ 1370.993615][T20828] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4039'. [ 1374.314412][T20872] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4053'. [ 1374.345108][T20878] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4055'. [ 1374.894319][T20872] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1374.953018][T20872] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1374.998748][T20872] bond0 (unregistering): Released all slaves [ 1377.473792][T20931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4072'. [ 1377.719563][T20941] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4077'. [ 1378.899444][T20949] IPv6: Can't replace route, no match found [ 1378.935982][T20950] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4079'. [ 1379.324032][T20960] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4084'. [ 1379.767485][T20977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4091'. [ 1380.283707][T20991] IPv6: Can't replace route, no match found [ 1382.501217][T21040] IPv6: Can't replace route, no match found [ 1384.525836][T21090] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4128'. [ 1385.172448][T21100] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.4131'. [ 1385.464354][T21109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4134'. [ 1388.750066][T21151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4149'. [ 1389.029861][T21171] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4153'. [ 1394.064691][T21268] syzkaller0: entered promiscuous mode [ 1394.064717][T21268] syzkaller0: entered allmulticast mode [ 1394.286830][T21280] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4193'. [ 1394.872155][T21279] netlink: 160 bytes leftover after parsing attributes in process `syz.4.4194'. [ 1395.049857][T21297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4197'. [ 1396.397802][T21309] netlink: 'syz.4.4200': attribute type 4 has an invalid length. [ 1398.730146][ T9] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1398.890977][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1398.892875][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1398.892903][ T9] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1398.892926][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1398.895173][ T9] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1398.895200][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1398.895219][ T9] usb 5-1: Product: syz [ 1398.895232][ T9] usb 5-1: Manufacturer: syz [ 1398.895245][ T9] usb 5-1: SerialNumber: syz [ 1398.898776][ T9] usb 5-1: config 0 descriptor?? [ 1398.974465][ T821] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1399.130447][ T821] usb 6-1: Using ep0 maxpacket: 32 [ 1399.133036][ T821] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 1399.133063][ T821] usb 6-1: config 0 has no interface number 0 [ 1399.135743][ T821] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1399.135798][ T821] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1399.135810][ T821] usb 6-1: Product: syz [ 1399.135817][ T821] usb 6-1: Manufacturer: syz [ 1399.135824][ T821] usb 6-1: SerialNumber: syz [ 1399.195078][ T821] usb 6-1: config 0 descriptor?? [ 1399.378853][ T9] gs_usb 5-1:0.0: Configuring for 154 interfaces [ 1399.604264][ T821] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1399.604347][ T821] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1400.263559][ T9] gs_usb 5-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 1400.318459][ T9] gs_usb 5-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 1400.505363][ T821] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1400.505768][ T821] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -32 [ 1400.612180][ T9] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71 [ 1400.647090][ T9] usb 5-1: USB disconnect, device number 46 [ 1400.728093][T21346] IPv6: Can't replace route, no match found [ 1401.639627][T21372] netlink: 'syz.4.4220': attribute type 39 has an invalid length. [ 1401.755573][T21373] netlink: 'syz.6.4219': attribute type 4 has an invalid length. [ 1402.759378][ T5860] usb 6-1: USB disconnect, device number 8 [ 1402.925733][ T821] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1403.890082][ T821] usb 7-1: Using ep0 maxpacket: 32 [ 1403.897576][ T821] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1403.897605][ T821] usb 7-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1403.897629][ T821] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1403.920185][ T821] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1403.920216][ T821] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1403.920236][ T821] usb 7-1: Product: syz [ 1403.920248][ T821] usb 7-1: Manufacturer: syz [ 1403.920262][ T821] usb 7-1: SerialNumber: syz [ 1404.125696][ T821] usb 7-1: config 0 descriptor?? [ 1404.536700][ T821] gs_usb 7-1:0.0: Configuring for 154 interfaces [ 1405.630279][T12587] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1405.780202][T12587] usb 4-1: Using ep0 maxpacket: 32 [ 1405.782833][T12587] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 1405.782860][T12587] usb 4-1: config 0 has no interface number 0 [ 1405.788222][T12587] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1405.789056][T12587] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1405.789080][T12587] usb 4-1: Product: syz [ 1405.789095][T12587] usb 4-1: Manufacturer: syz [ 1405.789109][T12587] usb 4-1: SerialNumber: syz [ 1405.821958][T12587] usb 4-1: config 0 descriptor?? [ 1405.870343][T21425] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4240'. [ 1406.083789][ T821] gs_usb 7-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 1406.126080][ T821] gs_usb 7-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 1406.254957][T12587] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1406.254986][T12587] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1406.420975][ T821] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -71 [ 1406.460945][ T821] usb 7-1: USB disconnect, device number 8 [ 1407.332871][T12587] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1407.333156][T12587] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -32 [ 1407.455394][T21472] netlink: 'syz.5.4254': attribute type 4 has an invalid length. [ 1408.423020][ T5860] usb 4-1: USB disconnect, device number 47 [ 1408.520112][ T821] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1408.680123][ T821] usb 6-1: Using ep0 maxpacket: 32 [ 1408.685097][ T821] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1408.685127][ T821] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1408.685151][ T821] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1408.687510][ T821] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1408.687540][ T821] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1408.687560][ T821] usb 6-1: Product: syz [ 1408.687574][ T821] usb 6-1: Manufacturer: syz [ 1408.687588][ T821] usb 6-1: SerialNumber: syz [ 1408.748511][ T821] usb 6-1: config 0 descriptor?? [ 1408.884776][T21500] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.4271'. [ 1409.160594][ T821] gs_usb 6-1:0.0: Configuring for 154 interfaces [ 1410.346200][ T10] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1410.595011][ T821] gs_usb 6-1:0.0: Disabling termination support for channel 0 (-ETIMEDOUT) [ 1410.728710][ T821] gs_usb 6-1:0.0: Couldn't get bit timing const for channel 1 (-EPIPE) [ 1410.791260][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 1410.797311][ T10] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 1410.797340][ T10] usb 7-1: config 0 has no interface number 0 [ 1410.977885][ T10] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1410.977916][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1410.977944][ T10] usb 7-1: Product: syz [ 1410.977957][ T10] usb 7-1: Manufacturer: syz [ 1410.977970][ T10] usb 7-1: SerialNumber: syz [ 1411.033748][ T10] usb 7-1: config 0 descriptor?? [ 1411.233890][ T821] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -32 [ 1411.332207][ T821] usb 6-1: USB disconnect, device number 9 [ 1411.469587][T21556] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4295'. [ 1411.476903][ T10] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1411.476934][ T10] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1412.289906][ T10] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1412.292092][ T10] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -32 [ 1413.326946][T21601] IPv6: Can't replace route, no match found [ 1413.508040][ T9] usb 7-1: USB disconnect, device number 9 [ 1414.521543][ T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1414.959616][T10705] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1414.998264][T10705] Bluetooth: hci2: Injecting HCI hardware error event [ 1415.635402][T10705] Bluetooth: hci2: hardware error 0x00 [ 1415.673212][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 1415.677636][ T9] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 1415.677663][ T9] usb 6-1: config 0 has no interface number 0 [ 1415.703775][ T9] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1415.703805][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1415.703825][ T9] usb 6-1: Product: syz [ 1415.703839][ T9] usb 6-1: Manufacturer: syz [ 1415.703853][ T9] usb 6-1: SerialNumber: syz [ 1415.886419][ T9] usb 6-1: config 0 descriptor?? [ 1416.334358][ T9] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1416.334388][ T9] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1416.864699][T21675] syzkaller0: entered promiscuous mode [ 1416.864936][T21675] syzkaller0: entered allmulticast mode [ 1417.151018][ T9] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1417.151384][ T9] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -32 [ 1417.575323][T21649] Bluetooth: hci2: unexpected event for opcode 0x1009 [ 1418.130164][T10705] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1418.197574][ T5713] usb 6-1: USB disconnect, device number 10 [ 1418.638516][T21747] netlink: 160 bytes leftover after parsing attributes in process `syz.5.4376'. [ 1421.607905][T21845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4417'. [ 1423.093881][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.093960][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.300191][T11814] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1424.650221][T11814] usb 7-1: Using ep0 maxpacket: 32 [ 1424.652558][T11814] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1424.652588][T11814] usb 7-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1424.652611][T11814] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1424.658641][T11814] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1424.658671][T11814] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1424.658691][T11814] usb 7-1: Product: syz [ 1424.658705][T11814] usb 7-1: Manufacturer: syz [ 1424.658718][T11814] usb 7-1: SerialNumber: syz [ 1424.727922][T11814] usb 7-1: config 0 descriptor?? [ 1425.131810][T11814] gs_usb 7-1:0.0: Configuring for 154 interfaces [ 1426.183782][T21941] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4458'. [ 1426.370465][T11814] gs_usb 7-1:0.0: Disabling termination support for channel 0 (-ETIMEDOUT) [ 1426.461239][T11814] gs_usb 7-1:0.0: Couldn't get bit timing const for channel 1 (-EPIPE) [ 1426.713990][T11814] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -32 [ 1426.757192][T11814] usb 7-1: USB disconnect, device number 10 [ 1428.659092][T22000] netlink: 1688 bytes leftover after parsing attributes in process `syz.6.4483'. [ 1429.290186][T22026] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4497'. [ 1432.090157][T12587] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1432.240131][T12587] usb 5-1: Using ep0 maxpacket: 32 [ 1432.242811][T12587] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1432.242839][T12587] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1432.242862][T12587] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1432.245155][T12587] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1432.245183][T12587] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1432.245203][T12587] usb 5-1: Product: syz [ 1432.245216][T12587] usb 5-1: Manufacturer: syz [ 1432.245230][T12587] usb 5-1: SerialNumber: syz [ 1432.254286][T12587] usb 5-1: config 0 descriptor?? [ 1432.814102][T12587] gs_usb 5-1:0.0: Configuring for 154 interfaces [ 1433.512529][T22101] netlink: 160 bytes leftover after parsing attributes in process `syz.3.4527'. [ 1434.050777][T12587] gs_usb 5-1:0.0: Disabling termination support for channel 0 (-ETIMEDOUT) [ 1434.193708][T12587] gs_usb 5-1:0.0: Couldn't get bit timing const for channel 1 (-EPIPE) [ 1434.642727][T12587] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -32 [ 1434.720929][T12587] usb 5-1: USB disconnect, device number 47 [ 1434.758536][T22109] netlink: 160 bytes leftover after parsing attributes in process `syz.6.4528'. [ 1436.630216][T22212] netlink: 'syz.6.4573': attribute type 12 has an invalid length. [ 1436.630348][T22212] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4573'. [ 1438.168038][T22269] netlink: 160 bytes leftover after parsing attributes in process `syz.6.4599'. [ 1439.320969][T22319] IPv6: Can't replace route, no match found [ 1441.451407][T22393] gretap1: entered allmulticast mode [ 1441.545066][T22401] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4654'. [ 1441.724614][T22411] netlink: 840 bytes leftover after parsing attributes in process `syz.6.4657'. [ 1442.082425][T22428] netlink: 'syz.6.4663': attribute type 12 has an invalid length. [ 1442.082447][T22428] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4663'. [ 1445.006461][T22511] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4699'. [ 1445.339841][T22521] netlink: 160 bytes leftover after parsing attributes in process `syz.6.4701'. [ 1446.017020][T22551] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4713'. [ 1446.359052][T22564] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4719'. [ 1447.243278][T21649] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1447.296525][T21649] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1447.343457][T21649] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1447.346009][T21649] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1447.361701][T21649] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1447.444968][T22587] netlink: 160 bytes leftover after parsing attributes in process `syz.5.4729'. [ 1448.099948][T22599] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4731'. [ 1448.100075][T22599] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4731'. [ 1449.820174][T21649] Bluetooth: hci5: command tx timeout [ 1449.898837][ T1592] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1451.069060][ T1592] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1451.892954][T21649] Bluetooth: hci5: command tx timeout [ 1452.115404][ T1592] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1453.669753][T22652] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4746'. [ 1453.911320][ T1592] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1453.972241][T21649] Bluetooth: hci5: command tx timeout [ 1453.995678][T22657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4748'. [ 1454.997671][T22589] bridge0: port 1(bridge_slave_0) entered blocking state [ 1454.997906][T22589] bridge0: port 1(bridge_slave_0) entered disabled state [ 1454.998155][T22589] bridge_slave_0: entered allmulticast mode [ 1455.046735][T22589] bridge_slave_0: entered promiscuous mode [ 1455.059512][T22589] bridge0: port 2(bridge_slave_1) entered blocking state [ 1455.059653][T22589] bridge0: port 2(bridge_slave_1) entered disabled state [ 1455.059922][T22589] bridge_slave_1: entered allmulticast mode [ 1455.095251][T22589] bridge_slave_1: entered promiscuous mode [ 1455.603944][T22681] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4755'. [ 1455.723573][T22683] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4756'. [ 1455.941473][T22589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1456.050218][T21649] Bluetooth: hci5: command tx timeout [ 1456.325047][T22589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1456.518764][T22589] team0: Port device team_slave_0 added [ 1456.522822][T22589] team0: Port device team_slave_1 added [ 1456.990683][ T1592] bridge_slave_1: left allmulticast mode [ 1456.990719][ T1592] bridge_slave_1: left promiscuous mode [ 1456.991076][ T1592] bridge0: port 2(bridge_slave_1) entered disabled state [ 1457.051458][ T1592] bridge_slave_0: left allmulticast mode [ 1457.051491][ T1592] bridge_slave_0: left promiscuous mode [ 1457.051864][ T1592] bridge0: port 1(bridge_slave_0) entered disabled state [ 1458.488409][ T1592] bond1 (unregistering): Released all slaves [ 1458.534383][T22589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1458.534396][T22589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1458.534411][T22589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1458.761216][T22589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1458.761234][T22589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1458.761261][T22589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1459.006509][ T1592] tipc: Left network mode [ 1459.195785][T22721] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4770'. [ 1459.461878][T22735] netlink: 'syz.3.4773': attribute type 1 has an invalid length. [ 1459.740326][T22720] tipc: Enabling of bearer rejected, failed to enable media [ 1460.323859][T22725] syzkaller0: entered promiscuous mode [ 1460.323886][T22725] syzkaller0: entered allmulticast mode [ 1460.479794][T22735] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1460.506277][T22738] gretap1: entered allmulticast mode [ 1460.837173][ T5264] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1460.910798][T22589] hsr_slave_0: entered promiscuous mode [ 1460.912153][T22589] hsr_slave_1: entered promiscuous mode [ 1460.913043][T22589] debugfs: 'hsr0' already exists in 'hsr' [ 1460.913065][T22589] Cannot create hsr debugfs directory [ 1461.974740][ T1592] hsr_slave_0: left promiscuous mode [ 1462.022226][ T1592] hsr_slave_1: left promiscuous mode [ 1462.023597][ T1592] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1462.023623][ T1592] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1462.205802][ T1592] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1462.205831][ T1592] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1462.559336][ T1592] veth1_macvtap: left promiscuous mode [ 1462.559436][ T1592] veth0_macvtap: left promiscuous mode [ 1462.559677][ T1592] veth1_vlan: left promiscuous mode [ 1462.586526][ T1592] veth0_vlan: left promiscuous mode [ 1463.357212][T22820] netlink: 'syz.5.4791': attribute type 1 has an invalid length. [ 1463.872525][ T1592] team0 (unregistering): Port device team_slave_1 removed [ 1463.992862][ T1592] team0 (unregistering): Port device team_slave_0 removed [ 1464.359300][ T5264] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1464.367577][T22820] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1464.400250][T22821] gretap1: entered allmulticast mode [ 1464.422225][T22833] syzkaller0: entered promiscuous mode [ 1464.422255][T22833] syzkaller0: entered allmulticast mode [ 1465.551134][T22861] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4802'. [ 1466.616464][T22871] netlink: 160 bytes leftover after parsing attributes in process `syz.5.4803'. [ 1467.515432][ T5264] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1469.539142][T22942] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4815'. [ 1470.694724][T22965] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4821'. [ 1470.865112][T22973] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4821'. [ 1470.991356][T22965] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1471.096222][T22967] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1471.162285][T22967] bond1: (slave bond2): Enslaving as an active interface with an up link [ 1471.340900][T22973] bond1 (unregistering): (slave bond2): Releasing backup interface [ 1471.455565][T22973] bond1 (unregistering): Released all slaves [ 1472.802983][T23029] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4830'. [ 1473.428134][T22589] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1473.453487][T22589] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1473.454881][T22589] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1473.548374][T22589] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1473.565157][T22589] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1473.715662][T22589] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1473.719671][T22589] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1473.760963][T22589] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1474.084071][T23063] syzkaller0: entered promiscuous mode [ 1474.084096][T23063] syzkaller0: entered allmulticast mode [ 1474.470764][T22589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1474.537141][T22589] 8021q: adding VLAN 0 to HW filter on device team0 [ 1474.603476][ T1444] bridge0: port 1(bridge_slave_0) entered blocking state [ 1474.608363][ T1444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1474.656148][ T1444] bridge0: port 2(bridge_slave_1) entered blocking state [ 1474.656258][ T1444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1476.011900][T22589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1476.228308][T22589] veth0_vlan: entered promiscuous mode [ 1476.287047][T22589] veth1_vlan: entered promiscuous mode [ 1476.362636][T22589] veth0_macvtap: entered promiscuous mode [ 1476.394635][T22589] veth1_macvtap: entered promiscuous mode [ 1476.477262][T22589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1476.522928][T22589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1476.591803][T16838] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1476.596645][T16838] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1476.634048][T16838] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1476.635104][T16838] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1478.541668][ T1592] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1478.541689][ T1592] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1479.063659][T15408] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1479.063680][T15408] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1479.098874][T23137] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4854'. [ 1479.178457][T23137] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1479.225792][T23137] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4854'. [ 1479.265353][T23134] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1479.284962][T23134] bond1: (slave bond3): Enslaving as an active interface with an up link [ 1479.481073][T23137] bond1 (unregistering): (slave bond3): Releasing backup interface [ 1479.571261][T23137] bond1 (unregistering): Released all slaves [ 1480.827940][T23167] syzkaller0: entered promiscuous mode [ 1480.827967][T23167] syzkaller0: entered allmulticast mode [ 1481.393869][T23183] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4870'. [ 1481.433303][T23185] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4871'. [ 1481.453325][T23186] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4870'. [ 1481.738422][T23183] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1481.864439][T23186] bond1 (unregistering): Released all slaves [ 1483.046412][T23216] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4881'. [ 1483.318527][T23224] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4885'. [ 1483.455128][T23230] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4885'. [ 1483.559227][T23224] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1483.650909][T23227] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1483.653895][T23227] bond1: (slave bond2): Enslaving as an active interface with an up link [ 1483.979880][T23248] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4889'. [ 1484.001018][T23230] bond1 (unregistering): (slave bond2): Releasing backup interface [ 1484.104401][T23230] bond1 (unregistering): Released all slaves [ 1484.154433][T23235] syzkaller0: entered promiscuous mode [ 1484.154460][T23235] syzkaller0: entered allmulticast mode [ 1484.538902][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.538972][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.727632][T23269] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4894'. [ 1484.727656][T23269] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4894'. [ 1485.530079][T23280] netlink: 160 bytes leftover after parsing attributes in process `syz.3.4899'. [ 1486.044950][T23295] netlink: 160 bytes leftover after parsing attributes in process `syz.6.4902'. [ 1486.436839][T23308] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4909'. [ 1486.738315][T23317] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4911'. [ 1486.845607][T23319] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4912'. [ 1487.674289][T23344] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4923'. [ 1487.922956][T23355] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4924'. [ 1488.014679][T23355] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1489.508765][T23386] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4934'. [ 1490.702210][T23414] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4942'. [ 1491.204540][T23427] netlink: 160 bytes leftover after parsing attributes in process `syz.4.4946'. [ 1491.671654][T23437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4950'. [ 1492.007921][T23449] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4953'. [ 1492.034337][T23449] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1492.104406][T23449] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1492.107852][T23449] bond4: (slave bond5): Enslaving as an active interface with an up link [ 1492.929198][T23464] netlink: 160 bytes leftover after parsing attributes in process `syz.4.4957'. [ 1493.155623][T23475] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4960'. [ 1493.735446][T23487] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4965'. [ 1494.126022][T23491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4967'. [ 1494.223852][T23479] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1496.286613][T23526] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.4979'. [ 1496.479615][T23534] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4983'. [ 1498.209686][T23561] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.4992'. [ 1499.002789][T23589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5001'. [ 1502.523452][T23664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5029'. [ 1502.591854][T23666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5030'. [ 1503.106019][T23680] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5033'. [ 1503.106037][T23680] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5033'. [ 1505.216331][T23729] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5049'. [ 1506.702709][T23764] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5058'. [ 1508.305483][T23780] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5063'. [ 1509.389664][T23793] netlink: 160 bytes leftover after parsing attributes in process `syz.5.5067'. [ 1514.597778][T23872] netlink: 160 bytes leftover after parsing attributes in process `syz.6.5091'. [ 1515.280752][T23886] syzkaller0: entered promiscuous mode [ 1515.280782][T23886] syzkaller0: entered allmulticast mode [ 1515.372597][T23891] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5098'. [ 1515.372722][T23891] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5098'. [ 1515.562742][T23896] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5100'. [ 1517.049405][T23933] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5113'. [ 1517.099461][T23933] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1517.163457][T23933] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5113'. [ 1517.647902][T23950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5116'. [ 1519.873702][T24004] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5138'. [ 1522.800173][T16611] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1522.952690][T16611] usb 7-1: Using ep0 maxpacket: 32 [ 1522.975564][T16611] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 1522.975591][T16611] usb 7-1: config 0 has no interface number 0 [ 1522.996978][T16611] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1522.996996][T16611] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1522.997007][T16611] usb 7-1: Product: syz [ 1522.997015][T16611] usb 7-1: Manufacturer: syz [ 1522.997022][T16611] usb 7-1: SerialNumber: syz [ 1523.037496][T16611] usb 7-1: config 0 descriptor?? [ 1523.448308][T16611] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1523.448339][T16611] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1524.694545][T16611] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1524.694845][T16611] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -61 [ 1525.038139][T24092] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5169'. [ 1525.952308][T12588] usb 7-1: USB disconnect, device number 11 [ 1526.006165][T24114] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5175'. [ 1531.718148][T24182] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5195'. [ 1533.220607][ T821] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1533.380207][ T821] usb 7-1: Using ep0 maxpacket: 32 [ 1533.384083][ T821] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 1533.384109][ T821] usb 7-1: config 0 has no interface number 0 [ 1533.387807][ T821] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1533.387835][ T821] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1533.387856][ T821] usb 7-1: Product: syz [ 1533.387868][ T821] usb 7-1: Manufacturer: syz [ 1533.387881][ T821] usb 7-1: SerialNumber: syz [ 1533.409512][ T821] usb 7-1: config 0 descriptor?? [ 1533.833514][ T821] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1533.833545][ T821] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1534.551392][T24250] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5223'. [ 1534.577742][T24252] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5224'. [ 1534.698083][T24256] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5224'. [ 1534.803789][T24259] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5226'. [ 1535.072728][ T821] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1535.073014][ T821] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -61 [ 1536.309923][ T10] usb 7-1: USB disconnect, device number 12 [ 1536.625347][T24297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5241'. [ 1536.673843][T24298] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5239'. [ 1536.926523][T24295] bond1 (unregistering): Released all slaves [ 1537.960978][T12587] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1538.160434][T12587] usb 7-1: Using ep0 maxpacket: 32 [ 1538.309636][T12587] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 1538.309715][T12587] usb 7-1: config 0 has no interface number 0 [ 1538.479246][T12587] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1538.479277][T12587] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1538.479298][T12587] usb 7-1: Product: syz [ 1538.479311][T12587] usb 7-1: Manufacturer: syz [ 1538.479326][T12587] usb 7-1: SerialNumber: syz [ 1538.551146][T12587] usb 7-1: config 0 descriptor?? [ 1539.565515][T12587] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1539.565553][T12587] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1540.793791][T12587] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1540.794088][T12587] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -61 [ 1542.190367][ T821] usb 7-1: USB disconnect, device number 13 [ 1542.685017][T24367] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5264'. [ 1544.460100][T16611] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1544.650101][T16611] usb 5-1: Using ep0 maxpacket: 32 [ 1544.652418][T16611] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 1544.652444][T16611] usb 5-1: config 0 has no interface number 0 [ 1544.802072][T16611] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1544.802104][T16611] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1544.802124][T16611] usb 5-1: Product: syz [ 1544.802150][T16611] usb 5-1: Manufacturer: syz [ 1544.802171][T16611] usb 5-1: SerialNumber: syz [ 1544.852669][T24411] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5279'. [ 1544.881533][T16611] usb 5-1: config 0 descriptor?? [ 1546.101633][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.107758][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.864118][T16611] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1546.864150][T16611] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1547.848398][T16611] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1547.848691][T16611] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -61 [ 1549.543188][ T10] usb 5-1: USB disconnect, device number 48 [ 1549.974096][T24462] nbd: must specify at least one socket [ 1551.240180][T11922] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1551.335455][T24491] nbd: must specify at least one socket [ 1551.400185][T11922] usb 5-1: Using ep0 maxpacket: 32 [ 1551.402418][T11922] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 1551.402446][T11922] usb 5-1: config 0 has no interface number 0 [ 1551.406351][T11922] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1551.406379][T11922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1551.406399][T11922] usb 5-1: Product: syz [ 1551.406413][T11922] usb 5-1: Manufacturer: syz [ 1551.406427][T11922] usb 5-1: SerialNumber: syz [ 1551.414431][T11922] usb 5-1: config 0 descriptor?? [ 1551.957662][T11922] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1551.957681][T11922] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1553.977715][T11922] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1553.978031][T11922] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -61 [ 1555.239495][T11922] usb 5-1: USB disconnect, device number 49 [ 1555.510241][T21649] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1555.510599][T21649] Bluetooth: hci5: Injecting HCI hardware error event [ 1555.516451][T21649] Bluetooth: hci5: hardware error 0x00 [ 1556.019624][T10705] Bluetooth: hci5: unexpected event for opcode 0x0000 [ 1557.909786][T21649] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1560.454946][T24706] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5393'. [ 1561.075999][T24724] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5401'. [ 1561.393808][T24736] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5407'. [ 1563.165823][T24787] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5430'. [ 1563.167059][T24787] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5430'. [ 1566.446443][T24908] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5485'. [ 1567.903220][T24966] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5501'. [ 1569.417877][T25035] IPv6: Can't replace route, no match found [ 1569.682931][T25041] vlan0: entered promiscuous mode [ 1571.197690][T25106] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5552'. [ 1571.437305][T25115] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5556'. [ 1571.768729][T25131] IPv6: Can't replace route, no match found [ 1572.699282][T25163] IPv6: Can't replace route, no match found [ 1576.917175][T25311] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5636'. [ 1577.058591][T25311] bond0: left promiscuous mode [ 1577.058621][T25311] bond0: left allmulticast mode [ 1580.648565][T25397] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5664'. [ 1580.740145][T25397] bond0: left promiscuous mode [ 1580.765428][T25400] IPv6: Can't replace route, no match found [ 1580.834150][T25404] netlink: 'syz.6.5667': attribute type 1 has an invalid length. [ 1582.804872][T10705] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1582.855568][T10705] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1582.858965][T10705] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1582.911359][T10705] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1582.928458][T10705] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1583.585162][T25477] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5693'. [ 1584.345644][T25504] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5704'. [ 1585.090218][T21649] Bluetooth: hci4: command tx timeout [ 1585.207490][T16841] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1585.553333][T25524] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5714'. [ 1585.688332][T25529] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5714'. [ 1585.873587][T25528] bond6 (unregistering): Released all slaves [ 1586.860677][T16841] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1587.170089][T21649] Bluetooth: hci4: command tx timeout [ 1587.655140][T16841] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1588.119196][T25608] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5748'. [ 1588.119304][T25608] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1588.119317][T25608] IPv6: NLM_F_CREATE should be set when creating new route [ 1588.213104][T16841] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1589.016456][T25636] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5760'. [ 1589.254773][T21649] Bluetooth: hci4: command tx timeout [ 1589.518073][T25653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5766'. [ 1590.216058][T25457] bridge0: port 1(bridge_slave_0) entered blocking state [ 1590.216178][T25457] bridge0: port 1(bridge_slave_0) entered disabled state [ 1590.216468][T25457] bridge_slave_0: entered allmulticast mode [ 1590.232320][T25457] bridge_slave_0: entered promiscuous mode [ 1590.256299][T25457] bridge0: port 2(bridge_slave_1) entered blocking state [ 1590.256492][T25457] bridge0: port 2(bridge_slave_1) entered disabled state [ 1590.259258][T25457] bridge_slave_1: entered allmulticast mode [ 1590.268493][T25457] bridge_slave_1: entered promiscuous mode [ 1590.574993][T16841] bridge_slave_1: left allmulticast mode [ 1590.575028][T16841] bridge_slave_1: left promiscuous mode [ 1590.575312][T16841] bridge0: port 2(bridge_slave_1) entered disabled state [ 1590.651720][T16841] bridge_slave_0: left allmulticast mode [ 1590.651756][T16841] bridge_slave_0: left promiscuous mode [ 1590.651998][T16841] bridge0: port 1(bridge_slave_0) entered disabled state [ 1591.330368][T21649] Bluetooth: hci4: command tx timeout [ 1593.600147][ T10] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1593.760129][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 1593.764426][ T10] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1593.764457][ T10] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1593.764482][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1593.766793][ T10] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1593.766822][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1593.766841][ T10] usb 6-1: Product: syz [ 1593.766855][ T10] usb 6-1: Manufacturer: syz [ 1593.766868][ T10] usb 6-1: SerialNumber: syz [ 1593.899580][ T10] usb 6-1: config 0 descriptor?? [ 1594.029318][T16841] bond0 (unregistering): Released all slaves [ 1594.049168][T16841] bond2 (unregistering): Released all slaves [ 1594.308537][ T10] gs_usb 6-1:0.0: Configuring for 154 interfaces [ 1594.355709][T25457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1594.593851][T25457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1594.682950][T25740] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5802'. [ 1595.058845][T25457] team0: Port device team_slave_0 added [ 1595.475086][T25757] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5810'. [ 1595.527794][T25457] team0: Port device team_slave_1 added [ 1595.570884][ T10] gs_usb 6-1:0.0: Disabling termination support for channel 0 (-ETIMEDOUT) [ 1595.836820][ T10] gs_usb 6-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 1595.924198][T25457] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1595.924215][T25457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1595.924242][T25457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1596.198169][T25457] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1596.198188][T25457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1596.198215][T25457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1596.331053][ T10] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -71 [ 1596.372546][ T10] usb 6-1: USB disconnect, device number 11 [ 1596.914823][T25796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5822'. [ 1597.373408][ T5264] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1597.872927][T25820] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5830'. [ 1597.971786][T25825] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5832'. [ 1597.977508][T25826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5830'. [ 1598.142074][T25457] hsr_slave_0: entered promiscuous mode [ 1598.144652][T25457] hsr_slave_1: entered promiscuous mode [ 1598.145762][T25457] debugfs: 'hsr0' already exists in 'hsr' [ 1598.145786][T25457] Cannot create hsr debugfs directory [ 1598.389117][T25823] bond2 (unregistering): Released all slaves [ 1598.890286][T25860] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5845'. [ 1598.890312][T25860] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5845'. [ 1598.897466][T25845] syzkaller0: entered promiscuous mode [ 1598.897494][T25845] syzkaller0: entered allmulticast mode [ 1599.060241][T16841] hsr_slave_0: left promiscuous mode [ 1599.114051][T16841] hsr_slave_1: left promiscuous mode [ 1599.156398][T16841] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1599.156428][T16841] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1599.213804][T16841] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1599.213833][T16841] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1599.343461][T16841] veth1_macvtap: left promiscuous mode [ 1599.343560][T16841] veth0_macvtap: left promiscuous mode [ 1599.379763][T16841] veth1_vlan: left promiscuous mode [ 1600.453615][T25913] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5870'. [ 1600.779373][T16841] team0 (unregistering): Port device team_slave_1 removed [ 1600.890969][T16841] team0 (unregistering): Port device team_slave_0 removed [ 1601.795558][T25954] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5889'. [ 1601.804881][T25953] IPv6: Can't replace route, no match found [ 1601.912898][T25958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5892'. [ 1602.961985][T25972] syzkaller0: entered promiscuous mode [ 1602.962014][T25972] syzkaller0: entered allmulticast mode [ 1604.636770][ T5264] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1605.102764][T26040] syzkaller0: entered promiscuous mode [ 1605.102789][T26040] syzkaller0: entered allmulticast mode [ 1607.425373][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.425442][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1609.291488][T25457] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1609.338885][T25457] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1609.398547][T25457] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1609.467365][T25457] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1609.488741][T25457] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1609.598383][T25457] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1609.611815][T25457] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1609.648726][T25457] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1610.044156][T25457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1610.155066][T25457] 8021q: adding VLAN 0 to HW filter on device team0 [ 1610.212833][ T1444] bridge0: port 1(bridge_slave_0) entered blocking state [ 1610.212967][ T1444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1610.233965][ T1444] bridge0: port 2(bridge_slave_1) entered blocking state [ 1610.238263][ T1444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1611.854821][T26284] IPv6: Can't replace route, no match found [ 1612.274662][T25457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1612.627427][T26312] syzkaller0: entered promiscuous mode [ 1612.627457][T26312] syzkaller0: entered allmulticast mode [ 1613.579052][T25457] veth0_vlan: entered promiscuous mode [ 1613.645149][T25457] veth1_vlan: entered promiscuous mode [ 1613.795791][T25457] veth0_macvtap: entered promiscuous mode [ 1613.856025][T25457] veth1_macvtap: entered promiscuous mode [ 1613.936939][T25457] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1613.984339][T25457] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1614.014457][ T1782] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1614.014712][ T1782] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1614.014750][ T1782] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1614.014784][ T1782] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1614.946183][ T1421] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1614.946204][ T1421] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1615.485230][T16841] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1615.485252][T16841] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1619.535800][T10705] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1619.558313][T10705] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1619.560293][T10705] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1619.637830][T10705] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1619.667213][T10705] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1620.387637][T26450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6047'. [ 1622.383626][T21649] Bluetooth: hci3: command tx timeout [ 1623.505545][ T1592] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1624.316245][ T1592] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1624.316845][T26518] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6069'. [ 1624.450248][T21649] Bluetooth: hci3: command tx timeout [ 1624.853037][T26524] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6071'. [ 1624.859228][ T1592] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1625.022679][T26526] syzkaller1: entered promiscuous mode [ 1625.022706][T26526] syzkaller1: entered allmulticast mode [ 1625.838879][ T1592] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1626.157559][T26553] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6082'. [ 1626.534413][T21649] Bluetooth: hci3: command tx timeout [ 1628.196623][T26594] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6092'. [ 1628.363870][T26588] syzkaller1: entered promiscuous mode [ 1628.363897][T26588] syzkaller1: entered allmulticast mode [ 1628.620229][T10705] Bluetooth: hci3: command tx timeout [ 1628.920570][ T1592] bridge_slave_1: left allmulticast mode [ 1628.920599][ T1592] bridge_slave_1: left promiscuous mode [ 1628.920894][ T1592] bridge0: port 2(bridge_slave_1) entered disabled state [ 1629.001161][ T1592] bridge_slave_0: left allmulticast mode [ 1629.001188][ T1592] bridge_slave_0: left promiscuous mode [ 1629.001386][ T1592] bridge0: port 1(bridge_slave_0) entered disabled state [ 1629.170933][T10705] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1629.171279][T10705] Bluetooth: hci4: Injecting HCI hardware error event [ 1629.175182][T26577] Bluetooth: hci4: hardware error 0x00 [ 1629.652057][T10705] Bluetooth: hci2: command 0xfc11 tx timeout [ 1629.718563][T21649] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 1630.079171][T21649] Bluetooth: hci4: unexpected event for opcode 0x1009 [ 1630.460649][ T1592] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1630.540805][ T1592] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1630.584099][ T1592] bond0 (unregistering): Released all slaves [ 1630.598622][ T1592] bond1 (unregistering): Released all slaves [ 1630.619063][ T1592] bond2 (unregistering): Released all slaves [ 1631.440297][T26577] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1631.930561][T26431] bridge0: port 1(bridge_slave_0) entered blocking state [ 1631.930682][T26431] bridge0: port 1(bridge_slave_0) entered disabled state [ 1631.930942][T26431] bridge_slave_0: entered allmulticast mode [ 1631.933923][T26431] bridge_slave_0: entered promiscuous mode [ 1631.936746][T26431] bridge0: port 2(bridge_slave_1) entered blocking state [ 1631.936812][T26431] bridge0: port 2(bridge_slave_1) entered disabled state [ 1631.936953][T26431] bridge_slave_1: entered allmulticast mode [ 1631.938544][T26431] bridge_slave_1: entered promiscuous mode [ 1632.163507][T26431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1632.238718][T26431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1632.364437][T26431] team0: Port device team_slave_0 added [ 1632.381022][T26431] team0: Port device team_slave_1 added [ 1632.717819][T26431] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1632.717838][T26431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1632.717859][T26431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1632.882963][T26431] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1632.882981][T26431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1632.883016][T26431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1635.920495][T26690] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6120'. [ 1635.942163][ T5264] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1635.965351][T26431] hsr_slave_0: entered promiscuous mode [ 1635.966285][T26431] hsr_slave_1: entered promiscuous mode [ 1635.966852][T26431] debugfs: 'hsr0' already exists in 'hsr' [ 1635.966869][T26431] Cannot create hsr debugfs directory [ 1636.132966][T26693] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6120'. [ 1636.342763][T26692] bond1 (unregistering): Released all slaves [ 1637.111674][ T1592] hsr_slave_0: left promiscuous mode [ 1637.150337][ T1592] hsr_slave_1: left promiscuous mode [ 1637.151812][ T1592] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1637.151856][ T1592] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1637.217373][ T1592] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1637.217393][ T1592] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1637.322044][ T1592] veth1_macvtap: left promiscuous mode [ 1637.366054][ T1592] veth0_macvtap: left promiscuous mode [ 1637.366254][ T1592] veth1_vlan: left promiscuous mode [ 1637.366353][ T1592] veth0_vlan: left promiscuous mode [ 1637.634135][T26721] netlink: 'syz.1.6130': attribute type 39 has an invalid length. [ 1639.783410][T26732] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6135'. [ 1639.889395][T26738] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6135'. [ 1640.122642][ T1592] team0 (unregistering): Port device team_slave_1 removed [ 1640.181422][ T1592] team0 (unregistering): Port device team_slave_0 removed [ 1640.698446][T26735] bond6 (unregistering): Released all slaves [ 1640.762212][T26743] netlink: 'syz.4.6138': attribute type 39 has an invalid length. [ 1641.623967][T26759] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6146'. [ 1641.864173][T26765] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1641.864190][T26765] IPv6: NLM_F_CREATE should be set when creating new route [ 1642.063158][T26770] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6150'. [ 1642.199345][T26774] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6150'. [ 1642.877978][T26772] bond6 (unregistering): Released all slaves [ 1642.951974][T26799] netlink: 'syz.5.6156': attribute type 39 has an invalid length. [ 1643.639072][ T5264] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1647.284449][T26881] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6181'. [ 1647.591185][T26431] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1647.631391][T26431] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1647.634383][T26431] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1647.669359][T26431] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1647.843934][T26893] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1647.848452][T26431] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1647.910908][T26431] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1648.003903][T26431] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1648.107612][T26431] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1648.220384][T26577] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 1648.774087][T26932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6189'. [ 1649.022794][T26431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1649.058408][T26431] 8021q: adding VLAN 0 to HW filter on device team0 [ 1649.077842][ T147] bridge0: port 1(bridge_slave_0) entered blocking state [ 1649.078081][ T147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1649.207980][ T1560] bridge0: port 2(bridge_slave_1) entered blocking state [ 1649.208225][ T1560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1650.884897][T26978] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6204'. [ 1651.546036][T26431] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1651.820834][T26431] veth0_vlan: entered promiscuous mode [ 1651.879059][T26989] geneve3: entered promiscuous mode [ 1651.901316][ T1189] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 58680 - 0 [ 1651.901365][ T1189] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 58680 - 0 [ 1651.901918][ T1189] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 58680 - 0 [ 1651.901963][ T1189] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 58680 - 0 [ 1651.903352][T26431] veth1_vlan: entered promiscuous mode [ 1651.997380][T26431] veth0_macvtap: entered promiscuous mode [ 1652.017797][T26431] veth1_macvtap: entered promiscuous mode [ 1652.053118][T26431] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1652.081391][T26431] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1652.110059][ T147] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1652.117318][ T147] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1652.117619][ T147] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1652.117644][ T147] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1652.294389][T26577] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 1653.787279][ T8039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1653.787300][ T8039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1654.256829][T10947] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1654.256852][T10947] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1655.659953][T21649] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1655.733421][T21649] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1655.751509][T21649] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1655.754310][T21649] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1655.811976][T21649] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1656.669062][T27078] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6236'. [ 1656.745662][T27082] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6236'. [ 1656.857689][T27078] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1656.975035][T27082] bond1 (unregistering): Released all slaves [ 1658.132667][T21649] Bluetooth: hci2: command tx timeout [ 1658.772797][T21649] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1658.772975][T21649] Bluetooth: hci3: Injecting HCI hardware error event [ 1658.775984][T21649] Bluetooth: hci3: hardware error 0x00 [ 1659.398027][T27059] bridge0: port 1(bridge_slave_0) entered blocking state [ 1659.398201][T27059] bridge0: port 1(bridge_slave_0) entered disabled state [ 1659.398423][T27059] bridge_slave_0: entered allmulticast mode [ 1659.422483][T27059] bridge_slave_0: entered promiscuous mode [ 1659.481800][T27145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6257'. [ 1659.530734][T27059] bridge0: port 2(bridge_slave_1) entered blocking state [ 1659.531145][T27059] bridge0: port 2(bridge_slave_1) entered disabled state [ 1659.531444][T27059] bridge_slave_1: entered allmulticast mode [ 1659.533768][T27059] bridge_slave_1: entered promiscuous mode [ 1659.604580][T27059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1659.632885][T27059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1659.694584][T27059] team0: Port device team_slave_0 added [ 1659.698140][T27059] team0: Port device team_slave_1 added [ 1659.765441][T27059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1659.765458][T27059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1659.765482][T27059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1659.858464][T27059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1659.858481][T27059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1659.858506][T27059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1660.210170][T26577] Bluetooth: hci2: command tx timeout [ 1660.692026][T27059] hsr_slave_0: entered promiscuous mode [ 1660.705922][T27059] hsr_slave_1: entered promiscuous mode [ 1660.710485][T27059] debugfs: 'hsr0' already exists in 'hsr' [ 1660.710512][T27059] Cannot create hsr debugfs directory [ 1661.177971][T21649] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1661.374176][T27181] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6269'. [ 1661.827792][T27059] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1661.827815][T27059] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 58680 - 0 [ 1662.090812][T27199] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6275'. [ 1662.144858][T27203] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6275'. [ 1662.273004][T27199] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1662.291735][T21649] Bluetooth: hci2: command tx timeout [ 1662.439143][T27203] bond1 (unregistering): Released all slaves [ 1662.966238][T27059] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1662.966273][T27059] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 58680 - 0 [ 1663.069818][T27214] geneve2: entered promiscuous mode [ 1663.077808][T10947] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 43432 - 0 [ 1663.129077][T10947] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 43432 - 0 [ 1663.129117][T10947] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 43432 - 0 [ 1663.129144][T10947] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 43432 - 0 [ 1663.287777][ T821] ------------[ cut here ]------------ [ 1663.287787][ T821] in_task() && kcov_mode_enabled(mode) [ 1663.287800][ T821] WARNING: kernel/kcov.c:884 at kcov_remote_start+0x5d8/0x710, CPU#0: kworker/0:2/821 [ 1663.287829][ T821] Modules linked in: [ 1663.287850][ T821] CPU: 0 UID: 0 PID: 821 Comm: kworker/0:2 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1663.287866][ T821] Tainted: [L]=SOFTLOCKUP [ 1663.287870][ T821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1663.287878][ T821] Workqueue: usb_hub_wq hub_event [ 1663.287897][ T821] RIP: 0010:kcov_remote_start+0x5d8/0x710 [ 1663.287909][ T821] Code: 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 52 da dc 02 90 0f 0b 90 e9 62 fa ff ff 90 0f 0b 90 0f b7 83 c0 04 00 00 e9 a3 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 5a ff 57 09 89 c0 48 c7 c7 10 04 6b [ 1663.287919][ T821] RSP: 0018:ffffc90004d1f7c8 EFLAGS: 00010202 [ 1663.287929][ T821] RAX: 0000000000000002 RBX: ffff888025bd5c40 RCX: 0000000000000000 [ 1663.287936][ T821] RDX: 0000000000000000 RSI: ffffffff8ba74d40 RDI: ffffffff8ba74d00 [ 1663.287944][ T821] RBP: ffffc90004d1fad0 R08: ffffffff8b1eb760 R09: ffffffff8dfc8140 [ 1663.287952][ T821] R10: dffffc0000000000 R11: fffffbfff1f11c3f R12: ffff8880297e9000 [ 1663.287960][ T821] R13: dffffc0000000000 R14: 0100000000000008 R15: ffff88802a4ae000 [ 1663.287968][ T821] FS: 0000000000000000(0000) GS:ffff888126179000(0000) knlGS:0000000000000000 [ 1663.287977][ T821] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1663.287984][ T821] CR2: 000000110c328664 CR3: 00000000a6bcc000 CR4: 00000000003526f0 [ 1663.287995][ T821] Call Trace: [ 1663.288000][ T821] [ 1663.288007][ T821] hub_event+0x150/0x4f60 [ 1663.288025][ T821] ? __lock_acquire+0x6b5/0x2cf0 [ 1663.288039][ T821] ? look_up_lock_class+0x57/0x110 [ 1663.288133][ T821] ? __lock_acquire+0x6b5/0x2cf0 [ 1663.288150][ T821] ? trace_hrtimer_start+0x82/0x200 [ 1663.288165][ T821] ? lock_acquire+0x106/0x350 [ 1663.288180][ T821] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1663.288195][ T821] ? __pfx_hub_event+0x10/0x10 [ 1663.288206][ T821] ? process_scheduled_works+0xa70/0x1860 [ 1663.288223][ T821] ? process_scheduled_works+0xa70/0x1860 [ 1663.288234][ T821] ? process_scheduled_works+0xa70/0x1860 [ 1663.288246][ T821] process_scheduled_works+0xb5d/0x1860 [ 1663.288274][ T821] ? __pfx_process_scheduled_works+0x10/0x10 [ 1663.288290][ T821] ? assign_work+0x3d5/0x5e0 [ 1663.288304][ T821] worker_thread+0xa53/0xfc0 [ 1663.288330][ T821] kthread+0x388/0x470 [ 1663.288345][ T821] ? __pfx_worker_thread+0x10/0x10 [ 1663.288356][ T821] ? __pfx_kthread+0x10/0x10 [ 1663.288370][ T821] ret_from_fork+0x514/0xb70 [ 1663.288385][ T821] ? __pfx_ret_from_fork+0x10/0x10 [ 1663.288397][ T821] ? __switch_to+0xc79/0x1410 [ 1663.288415][ T821] ? __pfx_kthread+0x10/0x10 [ 1663.288430][ T821] ret_from_fork_asm+0x1a/0x30 [ 1663.288465][ T821] [ 1663.288471][ T821] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1663.288481][ T821] CPU: 0 UID: 0 PID: 821 Comm: kworker/0:2 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1663.288496][ T821] Tainted: [L]=SOFTLOCKUP [ 1663.288501][ T821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1663.288508][ T821] Workqueue: usb_hub_wq hub_event [ 1663.288519][ T821] Call Trace: [ 1663.288524][ T821] [ 1663.288529][ T821] vpanic+0x56c/0xa60 [ 1663.288550][ T821] ? __pfx__printk+0x10/0x10 [ 1663.288565][ T821] ? __pfx_vpanic+0x10/0x10 [ 1663.288576][ T821] ? is_bpf_text_address+0x292/0x2b0 [ 1663.288590][ T821] ? is_bpf_text_address+0x26/0x2b0 [ 1663.288609][ T821] panic+0xc5/0xd0 [ 1663.288621][ T821] ? __pfx_panic+0x10/0x10 [ 1663.288639][ T821] ? ret_from_fork_asm+0x1a/0x30 [ 1663.288654][ T821] __warn+0x315/0x4c0 [ 1663.288666][ T821] ? kcov_remote_start+0x5d8/0x710 [ 1663.288679][ T821] ? kcov_remote_start+0x5d8/0x710 [ 1663.288691][ T821] __report_bug+0x29a/0x540 [ 1663.288772][ T821] ? kcov_remote_start+0x5d8/0x710 [ 1663.288794][ T821] ? __pfx___report_bug+0x10/0x10 [ 1663.288813][ T821] ? unwind_next_frame+0xa6/0x2550 [ 1663.288836][ T821] ? unwind_next_frame+0x1bbf/0x2550 [ 1663.288850][ T821] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 1663.288894][ T821] ? rt_spin_lock+0x1e0/0x400 [ 1663.288909][ T821] ? rt_spin_lock+0x1e0/0x400 [ 1663.288925][ T821] ? kcov_remote_start+0x5d8/0x710 [ 1663.288936][ T821] report_bug+0x16a/0x220 [ 1663.288948][ T821] ? kcov_remote_start+0x5d8/0x710 [ 1663.288958][ T821] ? kcov_remote_start+0x5da/0x710 [ 1663.288968][ T821] handle_bug+0x9c/0x200 [ 1663.289005][ T821] exc_invalid_op+0x1a/0x50 [ 1663.289018][ T821] asm_exc_invalid_op+0x1a/0x20 [ 1663.289029][ T821] RIP: 0010:kcov_remote_start+0x5d8/0x710 [ 1663.289041][ T821] Code: 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 52 da dc 02 90 0f 0b 90 e9 62 fa ff ff 90 0f 0b 90 0f b7 83 c0 04 00 00 e9 a3 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 5a ff 57 09 89 c0 48 c7 c7 10 04 6b [ 1663.289051][ T821] RSP: 0018:ffffc90004d1f7c8 EFLAGS: 00010202 [ 1663.289060][ T821] RAX: 0000000000000002 RBX: ffff888025bd5c40 RCX: 0000000000000000 [ 1663.289068][ T821] RDX: 0000000000000000 RSI: ffffffff8ba74d40 RDI: ffffffff8ba74d00 [ 1663.289076][ T821] RBP: ffffc90004d1fad0 R08: ffffffff8b1eb760 R09: ffffffff8dfc8140 [ 1663.289084][ T821] R10: dffffc0000000000 R11: fffffbfff1f11c3f R12: ffff8880297e9000 [ 1663.289091][ T821] R13: dffffc0000000000 R14: 0100000000000008 R15: ffff88802a4ae000 [ 1663.289103][ T821] ? rt_spin_lock+0x1e0/0x400 [ 1663.289122][ T821] ? kcov_remote_start+0xe0/0x710 [ 1663.289134][ T821] hub_event+0x150/0x4f60 [ 1663.289152][ T821] ? __lock_acquire+0x6b5/0x2cf0 [ 1663.289165][ T821] ? look_up_lock_class+0x57/0x110 [ 1663.289181][ T821] ? __lock_acquire+0x6b5/0x2cf0 [ 1663.289200][ T821] ? trace_hrtimer_start+0x82/0x200 [ 1663.289216][ T821] ? lock_acquire+0x106/0x350 [ 1663.289230][ T821] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1663.289244][ T821] ? __pfx_hub_event+0x10/0x10 [ 1663.289256][ T821] ? process_scheduled_works+0xa70/0x1860 [ 1663.289271][ T821] ? process_scheduled_works+0xa70/0x1860 [ 1663.289282][ T821] ? process_scheduled_works+0xa70/0x1860 [ 1663.289295][ T821] process_scheduled_works+0xb5d/0x1860 [ 1663.289322][ T821] ? __pfx_process_scheduled_works+0x10/0x10 [ 1663.289337][ T821] ? assign_work+0x3d5/0x5e0 [ 1663.289351][ T821] worker_thread+0xa53/0xfc0 [ 1663.289377][ T821] kthread+0x388/0x470 [ 1663.289392][ T821] ? __pfx_worker_thread+0x10/0x10 [ 1663.289402][ T821] ? __pfx_kthread+0x10/0x10 [ 1663.289417][ T821] ret_from_fork+0x514/0xb70 [ 1663.289431][ T821] ? __pfx_ret_from_fork+0x10/0x10 [ 1663.289443][ T821] ? __switch_to+0xc79/0x1410 [ 1663.289460][ T821] ? __pfx_kthread+0x10/0x10 [ 1663.289474][ T821] ret_from_fork_asm+0x1a/0x30 [ 1663.289496][ T821] [ 1663.290153][ T821] Kernel Offset: disabled