last executing test programs: 4.799787856s ago: executing program 0 (id=493): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000000dc0)={0x28, 0x14, 0x211, 0x0, 0x0, {0x28}, [@INET_DIAG_REQ_BYTECODE={0x11, 0xfa, "4ac2411e47061aefad04000000"}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000841}, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d0102030109021200010000000009"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}, @random="a547ae413200", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x16, 0x0, 0x0, @multicast2}}}}}, 0x0) getpeername$inet(r2, 0x0, &(0x7f0000000040)) syz_usb_connect$uac1(0x2, 0xde, &(0x7f0000000240)={{0x12, 0x1, 0x111, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcc, 0x3, 0x1, 0x84, 0x0, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x35}, [@extension_unit={0xd, 0x24, 0x8, 0x1, 0xadf, 0xc, "94a43b071e9e"}, @processing_unit={0x9, 0x24, 0x7, 0x4, 0x5, 0x9, "16ad"}, @mixer_unit={0x6, 0x24, 0x4, 0x5, 0x7, "01"}, @mixer_unit={0x6, 0x24, 0x4, 0x3, 0x0, '\t'}, @mixer_unit={0x9, 0x24, 0x4, 0x6, 0x3, "6495826b"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x5, 0x6, 0x6}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x5, 0x1, 0xd3, 0x2, 0xa}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0xc, 0x1, 0x92, 0x2, "e44bb44b98"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x1d, 0xe, 0x6, {0x7, 0x25, 0x1, 0xc, 0x4, 0x100}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x6, 0x22, 0x2}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0xa2, 0x2, 0x91, 0x8, "6748cb", "f03b41"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x7, 0x3, 0x6, 0x7, "5ee0", "942a8d"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x8, 0x0, 0x8, {0x7, 0x25, 0x1, 0x8, 0x7, 0x200}}}}}}}}]}}, &(0x7f0000000a00)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x200, 0x80, 0xbb, 0x6, 0x40, 0x8}, 0x23, &(0x7f00000003c0)={0x5, 0xf, 0x23, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "7bc2b1da5a35a20f6d89e0d47198430f"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x4f, 0xa, 0x5}]}, 0x8, [{0x24, &(0x7f00000004c0)=@string={0x24, 0x3, "e981ec32d1ce7bb4822f488fd8ed04557b77507f3d82f535b4e066dd993b3e4b93b2"}}, {0xb2, &(0x7f0000000500)=@string={0xb2, 0x3, "24eb8336e9328a963a9706ad6fe1b44209e61c27ae269df6b161d79fe571a30de258074704ff903f2db15d183c52f941e9671d798893df9f8bc5d605f91cac37d67bd50586a338be36c75a3fa33fafe79931389ac5484f511b2b41a706eadc1bdddd509bbbd19fa4d26a24b97bb539d34d2907d63cdbbfea2ff4de9b03d2e315739fa0018b6b6b55fe2edb0fc4de8046f9aebd50db6a68170204e3ade583235e9db14ea198eb68cdd1954469e9f2e094"}}, {0xe3, &(0x7f00000006c0)=@string={0xe3, 0x3, "e186dde3fc53607de06e506285126f96074e79e15ee675e6c3ee610c96e5aea2462d2563b068cb606a017cb14145f61b026abfa285d001da75bb4e0401640b4b360e9e32f72ef37d06327b3514df9f4bbcb50380f865d80ab3e747c27e1e50a4212cc540590eec8071f5551055564cd5ca8f9bbd522333789d1ed3b6a014ec92b84a28349e95bd2ca0fb496b405038aa1c20a84c6232d95134b3197e02c6b332e4460ab235251419134e6a0d5de6e6a2e7bf0e6dbf65a193a1df3687f9d9202058722ad71b23766d1f31771506e04ad6bb8e626e2844a7e16360cba006389880f2"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x42a}}, {0xd5, &(0x7f0000000840)=@string={0xd5, 0x3, "f0faee86c0942c2a78385ed2b8bb4948c93fe1d893778d40bdd41ad38ebbeb8829ad6685f0e12123f532fa13c668f79839a71eb6684468b7aefdddabdbb22b9305e16203da5723366b40f0c21a9dad61a6a45814e30fb566ac0cc99ab4e2dd91295d72f0a45860681e458269801f2e4e4690de1f9505d90ee0863480daa952e427ffc35d8867a0cb25e5b5631b8a20f1853f3f56054719d255e5e8a3c47fbc9fa4abef14fbae9631fd4ba72dd2e65b6c3bfe98628165ccd8040238afe6bc7b80a1b9e294f6ce5558502a84950d40de7170445e"}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x43d}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0xc07}}]}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x3c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x28}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x9}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x9a1eb67c7f7d2b0c}}, @NFQA_CFG_FLAGS={0x1, 0x5, 0x1, 0x0, 0xd}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20040020) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=@updpolicy={0xc8, 0x19, 0x1, 0x0, 0x0, {{@in=@rand_addr=0x64010101, @in=@private, 0x4e24, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x3}, 0xe, 0xfffffffe, 0x0, 0x1}, [@policy_type={0xa}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x9}]}, 0xc8}}, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f00000001c0)={0x5, 0x10, 0xfa00, {&(0x7f0000002200), r6}}, 0x18) syz_usb_control_io$uac1(r1, 0x0, 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) modify_ldt$write(0x1, &(0x7f00000000c0)={0x4, 0x1000, 0x400, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1}, 0x10) pwritev(r7, &(0x7f0000000440)=[{&(0x7f0000000000)='&', 0x1}, {0x0}], 0x2, 0x7fff, 0x1ff) 4.007758014s ago: executing program 3 (id=503): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000080)="000a18000000090000eb55000000000100aa34745a1945da08e815b218b1752ad5eddec559244805bd238863fd069f79b57f04fcc20ed86b00", 0x39, 0x4000000, &(0x7f0000000380)={0x11, 0xe56930649afa540, r1, 0x1, 0xd8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) 3.928404312s ago: executing program 0 (id=504): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000100)) 3.82167496s ago: executing program 3 (id=507): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000e40)={0x38, r2, 0x5, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}]}, 0x38}}, 0x0) 3.724767824s ago: executing program 3 (id=509): fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0x400000000000003, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfbffffff}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffe}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}]}]}], {0x14}}, 0xd4}, 0x1, 0x0, 0x0, 0x2000c045}, 0x24000004) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x28}}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x80000000}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 3.722318338s ago: executing program 0 (id=510): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x2, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x4008010) 3.555585347s ago: executing program 0 (id=517): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a01010000000f000000000a0000060900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x8080}, 0x24008040) 3.433262066s ago: executing program 0 (id=519): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x9, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r1, &(0x7f0000005400)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x60010000, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 3.15262976s ago: executing program 2 (id=523): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000100)) 3.060554412s ago: executing program 2 (id=524): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000e40)={0x38, r2, 0x5, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}]}, 0x38}}, 0x0) 2.999525828s ago: executing program 2 (id=525): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="110c2dbd7000fedbdf256800000008000300", @ANYRES32=r2, @ANYBLOB="1400c7"], 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 2.930466197s ago: executing program 2 (id=526): socket(0x10, 0x3, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) r1 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$vim2m(&(0x7f0000000180), 0x3fe, 0x2) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000400) pselect6(0x32, &(0x7f0000000100)={0x0, 0x0, 0xffff, 0x2, 0x0, 0x0, 0x0, 0x400}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x10000000000, 0x1000000002, 0x0, 0x0, 0x6}, 0x0, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaa09aaaaaa0180c200000208004500002000000000002f907800000000e00000012001880b000c907875d000210259bd910c9f225803391fa010f751c355ebeb5d862559e36e01c50564ec1f2ddf2de02228c66fde7160d6c0e3ce0e906c4b3ec34ca0b20b573c633591f4c7da234517eb36149773d1247b4f84"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8101, 0x0, 0x7, 0x0, 0x3ff, 0xfa11, 0xffffffff}, 0x0) r5 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000000)=0x1) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = socket(0x40000000015, 0x5, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f00000002c0)={&(0x7f0000000200), 0x13, 0x0, 0x0, 0x100, 0xf1e2, 0x2, 0x9, {0xfffffff9, 0x401, 0xf, 0x40, 0xf, 0x8006, 0x65, 0x8ca, 0xda3, 0x3, 0x4, 0x2, 0xbe5, 0x2, "d82cf724c9db7adfbfe389342198616b5ae4ebff0e936b53a7fbc1c62e9dbe14"}}) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) bind$inet(r7, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="99de406627a01492382bc57fca259234561b6c817ac520ac6d2ec495727f03c8cae4e98127321fa8771cb67d338a8014823bc672b620b6c738ca30b896a2c60a4143bb437b630e85f3634091280631b8aa4d19fad53e2b514e6d1a1c1a1562644267c64928e9ab71c8ab94938c97ae6968bbca9a2ae2bffa1942a24cfb136f0d817dfd14e644ee3ffe64ee9e301b032d94ce36bb7c541fae04", @ANYBLOB="3c641c06e517b755642ffe80fa28e9d255", @ANYRESDEC=0x0, @ANYRES16, @ANYRES32, @ANYRESOCT=r1, @ANYRES32=r4, @ANYRESDEC, @ANYRESDEC], 0x18}, 0x1, 0x0, 0x0, 0x200040d5}, 0x0) getsockopt(r7, 0x200000000114, 0x271e, 0x0, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_LISTEN(r6, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x4734}}, 0x10) 2.923406541s ago: executing program 0 (id=527): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x0) r1 = socket(0x2b, 0x80801, 0x1) r2 = syz_open_dev$usbmon(&(0x7f0000000240), 0x8, 0x0) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0x49cdee) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4, 0xfffffffc}, 0x8}, 0x94) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x14, &(0x7f0000000340)={0x0, 0x3, 0x95, {0x95, 0x4, "5edac05410c9df918e843c3b7216f0c67b51ad971096c67ccf8da1d0cb2de14d3252d6708a307efb0fb80f9c2bd02da8d7820e317645670ee1ca3a4a2d85d439e910a9173768078c36aa964edde8ab73ec2ae0fff0c76f5585393ac0681f3a55da637435345eba9abeba55d56eaadcefd15df7f58d9dadc4ac880ac6265ba1524b38cb9a605c1b841799bd02c3ee90b266d7b2"}}, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x807}}, &(0x7f0000000440)=ANY=[@ANYBLOB="0022130000000a477a49b5a307a21ad87e000000000000"], &(0x7f0000000480)={0x0, 0x21, 0x9, {0x9, 0x21, 0xc, 0x53, 0x1, {0x22, 0x729}}}}, &(0x7f0000000780)={0x18, &(0x7f0000000500)=ANY=[@ANYBLOB="20178b000000e4212e0624f73c6fc85bacb58a9ed02c3cf4d2c409fee3e37ecf0ee48c7fd61182db6c8cf0d8d5b6ed19329adb9b17f00f6b8afb5ce3a75aacfbc7acbe9d8961d36eed9519a006726594cee68e4297323e30adc348dd7073429a50460e5143bcc415271f1cf3a42a4c26dae0848df7ff7a376be4f97973539e53e671d7d0725e6ef882fc9dc4238030d422"], &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000600)={0x0, 0x8, 0x1}, &(0x7f0000000640)={0x20, 0x1, 0x62, "3c0ba77c84dc7d34520f4b610b5805fac174f34dcb6ac8f748f2728f92ee1734062558199c6a3e2576ddcea99798639914550b5eef3dd7c03fdc89509f43e315dcee17ef4ddad06c8fc513be6e2994a435138d78e4f2f467acee325bb56cf7801e2a"}, &(0x7f00000006c0)={0x20, 0x3, 0x1, 0x4d}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xcc0, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0xb20c, 0x0, 0x0, 0xe8, 0x0, &(0x7f0000000280)="dd"}, 0x48) connect(r1, &(0x7f00000007c0)=@caif, 0x80) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') pread64(r4, &(0x7f00000004c0)=""/249, 0xf9, 0x3) preadv(r4, &(0x7f0000001700)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, 0x8, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=@getqdisc={0x48, 0x26, 0x2, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xfff1}, {0xffff, 0x10}, {0xf, 0x7}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x0) r6 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1040, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x40) write(r8, &(0x7f0000004200)='t', 0x1) sendfile(r8, r7, 0x0, 0x7fffffff) r9 = socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$FICLONE(r9, 0x40049409, r9) ftruncate(r6, 0x2007ffb) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 2.783360787s ago: executing program 3 (id=528): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x0, 0x4000000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) writev(r1, &(0x7f0000000500)=[{&(0x7f0000005600)="9e20bbe3331ff4cf08ec6cfa275e592cee8b3534c8e6371c7687b7facd3c5a88d9d7f2a80b43aa22b46a0f04bf0d849f16bf1c239612cac388c08348d0aaaabe32d718b51ccf91c46a55107dfbbb72cd0a82294e94a4ab389aa499d3fa5a377d61704a5fa537fca9fc65991edd8ffc275103c034f982f3731fa8eb05455ef7c6771c62348566371e165318fa221c94175d735f531d142bfb67015794935e1f3fef4c842fe9512e22015cbbf123f4bfc990296a80e121a1314347bba214ede8610080a18e2b47e017e1677339a1cf9bf893e63c4c08ee2c4ae3cb06dcbcca9cbe7e40f5d44c5910fa25b66d7eba3cce31c73766c6da5940a13578206cb8b77a91d8148a635ecce911651d16e677d935ee645ff4112611709021913382e27bbf8dde5ea1facb8f24b12c12831ffdd507eb1bbaa5231fbb30683066a1026ca1f66b113590fed0b1827e5d52f8f66307599a3165c5210111c654a9fe9db7e42db7e250d3bbe43f18c86835256ed420cb37ed0f56f678340a4a6f11a719ccab944c4b2e25f766584d2da35387826fef3f62a8ae5a0f6bfc2ebdd47faeb30649597bef61092146c798140374d49c6eba72edd292afc4a09c7debe96a0b890152f4428b0330d17a96bff961bb6ac1a23dcc058ae91ab635ed252f686b69a8a726044d7a0316b54b8db05d05dadcae1ae55274d3e59ef24dcf4470a79c798a72050bc6627ec1322bffca3d8628239960a5de81962d85bb145dcaaf3cb970e1abcbfbea5a2e37df05f1b0a4dc9dacffb1653129f06444e795a1db0892c97d021c216845fab4ffba7b0a05c5ab6df87806edc963e7aa0c6b6c3cc11df27233c1396bea59f8baed49f940f6e1cf4016f9c4163e5aa56d850783ca76353fefec203c107a5310c502fe02bbde2dffd920acd9d93033630b4a498d782210b563d7cf531999fd957fc7102b3b8df227298f2cafc2bc2785728a57b5ea72d0afa70da896c9f1f04e43dc0f6ad89827e84f042967914f1c938fc464cbfc8a331809a76f070135927ca64b4f3c9b254445bb8363cac4bb1caaed636ad35fb8abc506327141780491642069cedb9ffe677104576aad66c5d5568ce842134ca0fc80cde3c5ae4d8d408217cf13e65b3ee290a32daa827b66f47d406b84e8f31efb88a8a488bc7c01efa830591834efb1d52d4937fbbc58ef990c321ac594d44aa7fa238e6530be675a3bfc3570c93926d3831089193812a0d8be57affe6f0ab18703617498db40d6cb38040e7fd213ee286151730c1e1117666ecb6a261ebdeb465d657b23197ad09c45989b49193efba16d085bcd335a73332ffa45e8123d02e19c26c64710dd7a9e77582d6e97cdb3db05d415e2c86100de00a5395443742307389068d0d5fbde9a165e4663dd41d7b6b74b6a58fac3f46e8aad243fab7db40fa9316b73bb1f9aa2a02bb465d72413e40a6b598be7d17d8e59bda1a850d9865e63d8d34602b8eb8f85037a5217299dcd04010b8aa64ef94bd4d087c9e1f793f6b611985123d66456be6d0ef1d5d54623a7e878605971a7d3a901c81e5218ce6446c55f12d0cf1dbcee0a0f40fe87c1b749cd94e8628cf3f235e433fcfb07f536b4ef20af8d25af6025fe0c69c62f7deba421ae1c81f2df53902d8657111a6e85e530248296b456de8210e2deb84651040785db5cee14a0c994381db36bee1c433e29091fd122b2208b5d4e371f0cfd60b1390e02f2cbf2f551f243b511a303a43b0f22a222e1593c41aa052f41a5940114a4e029df915e70df30f844f85c08e8e2f2d95d802452201e4d694bc51d080bc494a43c22632d4239691ca5b31b00234ee203807337d6a6f5eb0dbd3bdf9eeb296063075e0c605a9686380dcfbe74ec0aa0264fd062d15d16988ba373cf5afec915ca43172908d5983772a055f63e15fe46e6dfd15ec912810fc69d75de00117892655b939eb2e36b3c974fc31556d49ea50c777905b99d75b14b287a3b727a1ea80d1c3736c9381ca200fc11f788962093d28449ca29da0fe81d20644335331aba7acb7cba43bb0f40783d1ab47cc1ce41acaee0fe9dba01a7d9f672c29e1ab349da902232974bfbcb341a70241a7d33c5273664433ffe136309a924dd0e29c3f9fb69ff885c7c56bc7aa174da41dd1b53a08196e8ec2ca33aa32b73f3a1f0fa20f5bbf9a6eb9a31fbc708c31d4a77a391477f42f7780f0a9b6afba659545567c3050bb903a0a67cf0c9a708f466c9a8428a918efe9976b9ddea154ea7742b3874f82012c5d15c0a3ad8372127de032f35898663b1cca8004d9c49c469da488058d1ceb14fec22d023b81776fc3c64e94cd868147e2d38e6e58faf7960e35bd5a930b2c572518e6efc7a2d1f0e31288cb6fa31f29b8d88a62b93d6d1581a2f7f98f32cf6f09ed2dcd8076f3832a87bf879cc4a9a9a7732c51e8176c4db6cc68f63290f3bd4f0d39f35a4d4fd68f9530ad4f868b5d293bc490835fb49ed10bf9ee1e1a8284397cf2b9abb1bc49263f459e77c921e5566de8d389a32e8c6de4963f6af8e9537b18165c1ee0f1a8f36df1a043fc6ddacc676f78032e614c17efbb0b194394b34edca024e507b9ea9fd90648a6527ed1240e25181200b4d9cf67a6d886b6922ec6e78a7b121e272568f561e11d2794465e6efa974869d542933a298d371abe991f305121df35065c58c282b83d9450587f5e10edde1f4f715e766c44d53377574d9c4be1ef25f6ded4dedfbfcf9011597cf6727faa0eefc7a0cfb3e56fa115bfa7025c018cbe8cc106d19766577c58abf031fe2a3757d4d3943210e5edc60e94c7de26e5d6e448c1bb00a6b9bdaa215f4716684eb5d1e106fe218fc18f02f9e7f0baf5f490546f2d284305371652a73521ea6b848ba1f5ff9c67daed3b2f84c6110761f0575b4e76487ad8a0fa5908d33f2b3293eb760d2b8aaea29f59462f974f7c2422c9aa30b2f3eb1c0d8e8f97d8a33002d0bf77459acd3c08960f364af498f969ecb2394e58f7911cd0d0a02520f1812b34bdd95d513478a7613cccc1f30ff17ea707c49bb9ea1d734df53b4a361a1fea07c1899a9b91af4ec308f9248a62d72d2d784e9e85dde90a84edee1360eeb92a1a9344006e2198562f41d0cc6e6f3daa2ff31c116db7e3b30c7dc5ec327a371735c629051a759ed714834281476e2d3429bbbec798a9d2d6de7c7e9de168464c7fe0de7a56f7785b39c4e9f156682e062ff187d2d42986ecff649e3ca2b08b1daf220d69e0d0103c8479e5c1b1125fb7fc0b8f3520874bff67b1e4c93c493d694a17c3a8f532a1710b41ee0647e0691e9cd13b5c8cb0cb4be215d49358d3140ca7727e4901befdd93a180103c145a5f9be827bb07bca02ca705f212ba16281cce38fe0b5ac4d8dd087d9c9f3904907dd3a15af8250cf3618eb6daaa78e5a6f7981d56910b399a5188c8199ee9902ca34cf1f8b643a74a7f7e51587ca489887ef4f3e3d285dfd74c1913b800cda5879244c38ca69796393796346d6272add59c4e289d85eb4a7d160fa273c6efb72db58e66adc755ded084714b8d3ab00a58f0b0248fb20160f0627bc01e3c5db7da4383ba5e7bd5f25c7382ad9d6337e5cea9db02ed14f7393dd6c5ca08a4dd3b51c8caa6dbede70b267869400c281c1e31079ff43d062c9629821ecbdb079811a6023403e60856405d96b3eb5733d4d6e48b7d46eb2325abe408cdae50fcc9403d918acfbe1ab6144c424ff9ccf4635bbb12a8550886b5cd394f0059fe3e74ca8c482244ede670e27263ecad0d29d32bb7babc8b022cb1cff61c562318d41f70a7e82433c062c14aeb5b2a70c197291c915aaf446551631667d3df72b508c6341f264a1787c962fff0a55923150a0fe6b73add225961b9de21b04b63018d9271c4c00cca7258248d21b1f56356162791b5cd32a70057816fd2bcb400ddd6e0de7c2bc8350d780fe0f198b159a1554b484a7cecb7fb645dee77bf679fb9644a2abf71a90cc404f075756e9da228cbcc81adc4252d372d9440f998c09d69219ffef174a35ae1b690cac4966ae5b4ba1e1d756e0141ea8b78cdc51132028b6d9a57b6468a95c31966bd19b3fe16911a28d1f21783aba65c27b8181589ed55e80588573ad360495a8e2a8c30cb1fa6920208a121e99e7f7d399bfa82180b8d71a8dabda087cf40caf8bd84b53db46d4d6151b172604b17517eb0277efdaa81feab837b2c43d6006d0e04430fd9d184701eef50ee5f4923e28e3bdcf822f6c34f0ea0638bdc371b7e6ead40af66260e7a7238695ddd635b7d92bfdeaa7a0f0240a7543402bf2b5e43ffcbee510d0d7d825f695c711eac079357e72c0aac695a6ffad2da8f40785d92fb97260ef4d5012b111fc60d994692af4e6d8b851111681882f9373c2bd3f48c0b64c46ae34dd8192cf8efa298320de317812d3f5688221171f961f8285fbcc07ed54148bed066c2526901914977aaba52a494df7d07bb6f56799abcbe5e988d684e308155961671073790f62f106775f1b7acaafca7263ea3a90bd524d0a7d5bd9732ae6e6f3f62478c653ae773f36675dcc651648eb0368e9ee23b421e66cd66caf27677c99fe45a679624824b5db53a47544368d810f83aab3772334d2f94c5009ec9a62f1f977bc65a1f16de63cd4d65c996d37ffa2eea1a218e909ec51dc77d1a081a3ca62b5d39aee347247cc25a669fcec3c31544b67f8fa788a6756a93488c862ec2746ad05f0170a1ed4f70deee3c55b20cb8b199da16701c477272f562939dd6e0d2d80c9fb73c701f81e8682790a938c769e32b2b76fcde21796bc123b9f7a923b8d7a6ab1cc3081ade99f8dd6d5abb754eaf23c41aaef694a9e77735b0ec12daab9e0d7b9a2fc8123181a6d387f1033ec0e9f58b2cce62e7f01ebeb8b570f9ab335111c7f740b54e1690b061455c18170c170f5b1fa383a864b0f9dcdabafed3efd0aa8c5a248f8fc468f6a9d90880b665e7e97b8d857edf7c64ccb2a46cb1a26984cba6ecdfc77820630e6a1301dccd2110b2ca692fc083b6d533a1c7713866e2ef57a85c8bd11b074b40cc5c7f9b8d82daa7f043cdeffb17b39b3b52afd866f1ba47928ac69d76789f47333433066eeff1ac8804a56f41ae7cf111030ab93de8efcd1749c4b0ccad98816fd5cc0733be36348931761b1a9990eaa8cfe4de3a8695416e2a41eb2f2f86e8438322541a4164df390304ef13c648f368d83f354ab5c60cb6c0b1d505887ee9a346d0b22073f131bdca08bb4d2342e9be5581283f6a93de82979192ccca3ef7d8e4ae5f9b43665ef4de796df5a49fb2c2d23ebd11406cd4cfdaf4e4cb663516bb2f43bc8f1c677a65defeb86e0dcc2466ff53a23d75c47f77e4dcb5ff34137a3eb9dbfda8d17aec4197a38c7174c78a4d0dbc0cb2f1f1b7888800616ef1261596e954d6734e55e3bd1e3851237f95fc765bfa61d7d0a04074560ec06673e1528095ba46fde83d17fdccd21be1df51af406edf6a79a13c21404e044439e7de9b888d4965d953c7539a64af8e479f2d92af5af0ee95c35cfb5151af902434d63715050892c181ab1103c890e1b9f2f39b2cfa02b1fca3e7da49cc4c90754189bc5dbe8a4cedfc4fa12326dcf847777ee17c411cb085f88091e8fa3a273c358b6a79688e48922295be557e76b30b378c61b0cf8ed11872ea127bb7e7934c8e9d7d1f1c8eb30bc16430ee7ed0888db3de6ac7a8421d672e2ae21595a610eaefb49fac57039262266a50ac4546c3a61ef3cb30aeb38730f9e241e4824df1ed3cca4094f7ed465cb082b4e303dc934b3b44edbbc2414bad8c8a53078a700e88fa0e1b7f63fac5b048c9ab70af2536ca9500"/4157, 0x103d}, {&(0x7f00000001c0)="28cfaa26d418c9014d7ea735a8e63bea02ef50e727c643f8e23de1aec8168b753fd57fdbb1", 0x25}, {&(0x7f0000000400)="6ebb2d09c35e1655c1cd1f343a5d46c9ce276404e8976aa5e29220cfe5d223a8137d5123157fa7fb5a948205555e51d969d2ce1af0a054d5110c9c82b1975b6291595fe8ad1d50f4342dd973f42d7f42", 0x50}, {&(0x7f0000000240)="4ecb9757d7205df0429643b3e7fb", 0xe}], 0x4) syz_open_dev$sndpcmc(0x0, 0x0, 0x42c001) syz_open_procfs(0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001080)=ANY=[@ANYBLOB="07040000", @ANYRESHEX=r4, @ANYBLOB="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"/1058], 0x428}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000044082, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000008c0)="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", 0x118}, {&(0x7f0000000540)="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", 0xde}], 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) r5 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000380)={0x1d, r6, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) epoll_create1(0x80000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1ee89900", @ANYRES16=0x0, @ANYBLOB="00012dbd7000fedbdf250a"], 0x14}}, 0x4000080) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="300018a9aad58d8fb302f5489c8d145b5c000011"], 0x30}], 0x1}, 0x0) 2.490373262s ago: executing program 4 (id=531): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000080)="000a18000000090000eb55000000000100aa34745a1945da08e815b218b1752ad5eddec559244805bd238863fd069f79b57f04fcc20ed86b00", 0x39, 0x4000000, &(0x7f0000000380)={0x11, 0xe56930649afa540, r3, 0x1, 0xd8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) 2.325317106s ago: executing program 1 (id=533): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}, [@TCA_NETEM_RATE64={0xc, 0x8, 0x129d6d3a7a711f6e}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0xc000000000, 0x101, 0x3, 0x1ff, 0x3}}]}}}]}, 0x84}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x400, 0x7, 0xfffffff7, 0x401, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x30000000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 2.291052825s ago: executing program 4 (id=534): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/9, 0x9}], 0x1) timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r2 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x40045731, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) close(0xffffffffffffffff) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 2.247756952s ago: executing program 1 (id=535): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000200)={0x8, &(0x7f00000001c0)=[{0xffff, 0x3, 0x8, 0x100}, {0x7, 0xae, 0x2, 0x10}, {0x8, 0x8, 0x8, 0x10001}, {0x9, 0x8e, 0x1, 0xffffffc0}, {0x1, 0xb, 0x9, 0xa}, {0xc000, 0x0, 0xe5, 0x24000000}, {0x1, 0x8, 0x4b, 0x6}, {0x9, 0x32, 0x7, 0x1}]}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x84, &(0x7f0000000280)={r7, @in={{0x2, 0x4e24, @empty}}, 0x0, 0x83}, 0x90) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r11, 0x6, 0x2d, 0x0, &(0x7f00000017c0)) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r12, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x694, 0x51, 0x8001}, {0x3, 0x8004, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x685, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x7, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffa, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x7}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158142, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x6, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x4, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x2, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x0, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x9}, {0x7, 0xd, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x4, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0xfffffffe, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x10, 0x5e20, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x7}, {0x20000002, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x2001, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3}, {0x3}, {0x2}, {0x3}, {0x4}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x3}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r8, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r4, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x5dc}], 0x1}, 0x20000090) 1.960524101s ago: executing program 4 (id=536): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x47, &(0x7f0000000040)={0x0, 0x6e98, 0xc000, 0x80008, 0x150}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="110c2dbd7000fedbdf256800000008000300", @ANYRES32, @ANYBLOB="1400c7"], 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 1.873442946s ago: executing program 3 (id=537): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x9, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r1, &(0x7f0000005400)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x60010000, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 1.872050892s ago: executing program 4 (id=538): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, 0x0, 0x0, 0x0) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x3}, 0x8) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2) ioctl$SNDRV_TIMER_IOCTL_INFO(r3, 0x80e85411, &(0x7f0000000400)) socket$inet6_sctp(0xa, 0x5, 0x84) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x49, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x60, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}}, 0x0) 1.292144726s ago: executing program 1 (id=539): fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0x400000000000003, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfbffffff}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffe}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}]}]}], {0x14}}, 0xd4}, 0x1, 0x0, 0x0, 0x2000c045}, 0x24000004) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x28}}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x80000000}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 1.281320973s ago: executing program 2 (id=540): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) write$FUSE_INIT(r0, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r1, &(0x7f00000063c0)=""/1024, 0x400) syz_fuse_handle_req(r0, &(0x7f0000008880)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000df00", 0x2000, &(0x7f00000087c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x68, 0x0, 0x0, [{0x0, 0x0, 0x4, 0x0, '#,,-'}, {0x2, 0xfffffffffffffffb, 0x1c, 0xfffffca7, '/proc/thread-self/attr/exec\x00'}]}, 0x0, 0x0, 0x0, 0x0}) 1.178686572s ago: executing program 3 (id=541): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$peekuser(0x3, r3, 0x4) syz_usb_control_io$uac1(r2, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAW(r6, 0x5407, &(0x7f00000000c0)={0x6, 0x9, 0x2, 0x1fe, 0x15}) ioctl$TIOCMSET(r6, 0x5418, &(0x7f0000000000)=0x8001) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x3a, 0x5d, 0x40, 0x5f9, 0xffff, 0x619f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xbd, 0x0, 0x10, 0x2, "", [{{0x9, 0x4, 0x7f, 0xc7, 0x0, 0xff, 0x2, 0xc1, 0x6}}]}}]}}, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0}) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x105200, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x2, 0x4, 0x6d}, 0x7a) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7}]}]}, 0x64}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xd}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) syz_usb_control_io(r2, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000a00)=ANY=[@ANYBLOB="200e0c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000000880)={0x18, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0}) ptrace$peek(0x2, r3, &(0x7f0000000080)) rt_sigqueueinfo(r3, 0x6, &(0x7f0000000140)={0x3d, 0x6, 0x1}) r8 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r8, &(0x7f0000000480)={0x2020}, 0x2020) syz_usb_disconnect(r0) 445.554707ms ago: executing program 4 (id=542): bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x2, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r0}]}, 0x44}}, 0x4008010) 328.998291ms ago: executing program 1 (id=543): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@bridge_delneigh={0x24, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r0, 0x0, 0x52}, [@NDA_VLAN={0x6}]}, 0x24}}, 0x0) 298.956229ms ago: executing program 2 (id=544): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0x400000000000003, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfbffffff}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffe}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}]}]}], {0x14}}, 0xd4}, 0x1, 0x0, 0x0, 0x2000c045}, 0x24000004) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x28}}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x80000000}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 295.369027ms ago: executing program 4 (id=545): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x0) r1 = socket(0x2b, 0x80801, 0x1) r2 = syz_open_dev$usbmon(&(0x7f0000000240), 0x8, 0x0) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0x49cdee) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4, 0xfffffffc}, 0x8}, 0x94) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x14, &(0x7f0000000340)={0x0, 0x3, 0x95, {0x95, 0x4, "5edac05410c9df918e843c3b7216f0c67b51ad971096c67ccf8da1d0cb2de14d3252d6708a307efb0fb80f9c2bd02da8d7820e317645670ee1ca3a4a2d85d439e910a9173768078c36aa964edde8ab73ec2ae0fff0c76f5585393ac0681f3a55da637435345eba9abeba55d56eaadcefd15df7f58d9dadc4ac880ac6265ba1524b38cb9a605c1b841799bd02c3ee90b266d7b2"}}, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x807}}, &(0x7f0000000440)=ANY=[@ANYBLOB="0022130000000a477a49b5a307a21ad87e000000000000"], &(0x7f0000000480)={0x0, 0x21, 0x9, {0x9, 0x21, 0xc, 0x53, 0x1, {0x22, 0x729}}}}, &(0x7f0000000780)={0x18, &(0x7f0000000500)=ANY=[@ANYBLOB="20178b000000e4212e0624f73c6fc85bacb58a9ed02c3cf4d2c409fee3e37ecf0ee48c7fd61182db6c8cf0d8d5b6ed19329adb9b17f00f6b8afb5ce3a75aacfbc7acbe9d8961d36eed9519a006726594cee68e4297323e30adc348dd7073429a50460e5143bcc415271f1cf3a42a4c26dae0848df7ff7a376be4f97973539e53e671d7d0725e6ef882fc9dc4238030d422"], &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000600)={0x0, 0x8, 0x1}, &(0x7f0000000640)={0x20, 0x1, 0x62, "3c0ba77c84dc7d34520f4b610b5805fac174f34dcb6ac8f748f2728f92ee1734062558199c6a3e2576ddcea99798639914550b5eef3dd7c03fdc89509f43e315dcee17ef4ddad06c8fc513be6e2994a435138d78e4f2f467acee325bb56cf7801e2a"}, &(0x7f00000006c0)={0x20, 0x3, 0x1, 0x4d}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xcc0, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0xb20c, 0x0, 0x0, 0xe8, 0x0, &(0x7f0000000280)="dd"}, 0x48) connect(r1, &(0x7f00000007c0)=@caif, 0x80) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') pread64(r4, &(0x7f00000004c0)=""/249, 0xf9, 0x3) preadv(r4, &(0x7f0000001700)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, 0x8, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=@getqdisc={0x48, 0x26, 0x2, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xfff1}, {0xffff, 0x10}, {0xf, 0x7}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) r7 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1040, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x40) write(r9, &(0x7f0000004200)='t', 0x1) sendfile(r9, r8, 0x0, 0x7fffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) ftruncate(r7, 0x2007ffb) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 109.016881ms ago: executing program 1 (id=546): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}, [@TCA_NETEM_RATE64={0xc, 0x8, 0x129d6d3a7a711f6e}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0xc000000000, 0x101, 0x3, 0x1ff, 0x3}}]}}}]}, 0x84}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x400, 0x7, 0xfffffff7, 0x401, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x30000000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 0s ago: executing program 1 (id=547): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000080)="000a18000000090000eb55000000000100aa34745a1945da08e815b218b1752ad5eddec559244805bd238863fd069f79b57f04fcc20ed86b00", 0x39, 0x4000000, &(0x7f0000000380)={0x11, 0xe56930649afa540, r3, 0x1, 0xd8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.174' (ED25519) to the list of known hosts. [ 69.870575][ T5610] cgroup: Unknown subsys name 'net' [ 70.001288][ T5610] cgroup: Unknown subsys name 'cpuset' [ 70.011494][ T5610] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.469111][ T5610] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.518882][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.525826][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 75.383463][ T5622] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.406105][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.423217][ T5626] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.435051][ T5626] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.441220][ T5628] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.444912][ T5626] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.462021][ T5626] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.470884][ T5630] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.471891][ T5626] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.481659][ T5630] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.487755][ T5626] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.498383][ T5630] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.503092][ T5626] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.511664][ T5630] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.527984][ T5626] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.529043][ T5630] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.544335][ T5633] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.553881][ T5633] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.556431][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.572262][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.574546][ T4942] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.584203][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.602874][ T4942] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.617807][ T5628] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.634296][ T4942] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.711012][ T5636] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.718819][ T5636] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.727478][ T5636] bridge_slave_0: entered allmulticast mode [ 76.735871][ T5636] bridge_slave_0: entered promiscuous mode [ 76.773651][ T5636] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.781762][ T5636] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.790218][ T5636] bridge_slave_1: entered allmulticast mode [ 76.799605][ T5636] bridge_slave_1: entered promiscuous mode [ 76.894568][ T5638] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.904110][ T5638] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.913051][ T5638] bridge_slave_0: entered allmulticast mode [ 76.920933][ T5638] bridge_slave_0: entered promiscuous mode [ 76.929228][ T5639] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.937882][ T5639] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.946108][ T5639] bridge_slave_0: entered allmulticast mode [ 76.953460][ T5639] bridge_slave_0: entered promiscuous mode [ 76.983881][ T5636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.996791][ T5636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.006679][ T5638] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.014692][ T5638] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.022454][ T5638] bridge_slave_1: entered allmulticast mode [ 77.030127][ T5638] bridge_slave_1: entered promiscuous mode [ 77.038578][ T5639] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.045971][ T5639] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.055185][ T5639] bridge_slave_1: entered allmulticast mode [ 77.062817][ T5639] bridge_slave_1: entered promiscuous mode [ 77.079072][ T5642] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.086733][ T5642] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.094788][ T5642] bridge_slave_0: entered allmulticast mode [ 77.102450][ T5642] bridge_slave_0: entered promiscuous mode [ 77.150174][ T5640] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.157776][ T5640] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.165275][ T5640] bridge_slave_0: entered allmulticast mode [ 77.173000][ T5640] bridge_slave_0: entered promiscuous mode [ 77.182016][ T5642] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.191285][ T5642] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.199492][ T5642] bridge_slave_1: entered allmulticast mode [ 77.207308][ T5642] bridge_slave_1: entered promiscuous mode [ 77.225908][ T5636] team0: Port device team_slave_0 added [ 77.235110][ T5636] team0: Port device team_slave_1 added [ 77.260341][ T5640] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.267944][ T5640] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.276226][ T5640] bridge_slave_1: entered allmulticast mode [ 77.284350][ T5640] bridge_slave_1: entered promiscuous mode [ 77.317357][ T5638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.329988][ T5639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.351560][ T5642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.372637][ T5638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.384925][ T5639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.415510][ T5642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.434565][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.442758][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.471510][ T5636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.505719][ T5640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.526573][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.534523][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.563796][ T5636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.586409][ T5639] team0: Port device team_slave_0 added [ 77.595593][ T5640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.597531][ T4942] Bluetooth: hci2: command tx timeout [ 77.623755][ T5642] team0: Port device team_slave_0 added [ 77.641693][ T5638] team0: Port device team_slave_0 added [ 77.652711][ T5639] team0: Port device team_slave_1 added [ 77.669866][ T5642] team0: Port device team_slave_1 added [ 77.676771][ T4942] Bluetooth: hci4: command tx timeout [ 77.676796][ T5626] Bluetooth: hci3: command tx timeout [ 77.677101][ T5628] Bluetooth: hci0: command tx timeout [ 77.683714][ T50] Bluetooth: hci1: command tx timeout [ 77.701413][ T5638] team0: Port device team_slave_1 added [ 77.721271][ T5640] team0: Port device team_slave_0 added [ 77.760852][ T5640] team0: Port device team_slave_1 added [ 77.797013][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.804659][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.833687][ T5639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.854738][ T5642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.862219][ T5642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.891582][ T5642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.913881][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.922178][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.952513][ T5638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.966216][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.973801][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.002401][ T5638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.015003][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.023973][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.052566][ T5639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.073800][ T5642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.081292][ T5642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.111212][ T5642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.129123][ T5636] hsr_slave_0: entered promiscuous mode [ 78.136002][ T5636] hsr_slave_1: entered promiscuous mode [ 78.158822][ T5640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.166120][ T5640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.194427][ T5640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.214680][ T5640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.223066][ T5640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.250918][ T5640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.312622][ T5638] hsr_slave_0: entered promiscuous mode [ 78.319538][ T5638] hsr_slave_1: entered promiscuous mode [ 78.327164][ T5638] debugfs: 'hsr0' already exists in 'hsr' [ 78.333353][ T5638] Cannot create hsr debugfs directory [ 78.396109][ T5639] hsr_slave_0: entered promiscuous mode [ 78.403131][ T5639] hsr_slave_1: entered promiscuous mode [ 78.409873][ T5639] debugfs: 'hsr0' already exists in 'hsr' [ 78.416416][ T5639] Cannot create hsr debugfs directory [ 78.474518][ T5642] hsr_slave_0: entered promiscuous mode [ 78.481944][ T5642] hsr_slave_1: entered promiscuous mode [ 78.488487][ T5642] debugfs: 'hsr0' already exists in 'hsr' [ 78.494417][ T5642] Cannot create hsr debugfs directory [ 78.510269][ T5640] hsr_slave_0: entered promiscuous mode [ 78.517796][ T5640] hsr_slave_1: entered promiscuous mode [ 78.525245][ T5640] debugfs: 'hsr0' already exists in 'hsr' [ 78.531873][ T5640] Cannot create hsr debugfs directory [ 79.064265][ T5636] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.079157][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.088116][ T5636] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.099802][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.108387][ T5636] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.119175][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.128265][ T5636] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.139272][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.227463][ T5639] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.241963][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.251652][ T5639] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.262241][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.271218][ T5639] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.282434][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.291452][ T5639] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.302249][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.403234][ T5638] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.415547][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.424449][ T5638] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.433673][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.442160][ T5638] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.452614][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.462924][ T5638] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.472947][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.551673][ T5636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.617811][ T5636] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.665232][ T5640] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.678261][ T4942] Bluetooth: hci2: command tx timeout [ 79.689166][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.701727][ T1031] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.710244][ T1031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.727357][ T5640] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.739187][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.747517][ T5640] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.757650][ T5628] Bluetooth: hci0: command tx timeout [ 79.760649][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.763396][ T4942] Bluetooth: hci4: command tx timeout [ 79.774515][ T5628] Bluetooth: hci1: command tx timeout [ 79.777232][ T4942] Bluetooth: hci3: command tx timeout [ 79.795395][ T1031] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.802729][ T1031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.819093][ T5640] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.829680][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.923402][ T5639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.968247][ T5642] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.980742][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.989989][ T5642] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.000969][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.011489][ T5642] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.021165][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.039070][ T5642] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.050005][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.087558][ T5639] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.109415][ T5638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.139213][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.146899][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.182618][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.190430][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.221146][ T5638] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.272020][ T1031] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.279373][ T1031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.297000][ T5636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.325697][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.333224][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.354970][ T5640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.451730][ T5640] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.500008][ T1031] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.507913][ T1031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.531346][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.538472][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.564545][ T5642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.573798][ T5636] veth0_vlan: entered promiscuous mode [ 80.593277][ T5639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.618767][ T5636] veth1_vlan: entered promiscuous mode [ 80.649566][ T5642] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.673172][ T170] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.680487][ T170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.698135][ T5638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.731019][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.738486][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.823286][ T5639] veth0_vlan: entered promiscuous mode [ 80.842708][ T5636] veth0_macvtap: entered promiscuous mode [ 80.872341][ T5636] veth1_macvtap: entered promiscuous mode [ 80.884438][ T5639] veth1_vlan: entered promiscuous mode [ 80.933211][ T5640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.945163][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.959466][ T5638] veth0_vlan: entered promiscuous mode [ 80.979386][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.007941][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.019635][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.035883][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.046776][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.057670][ T5638] veth1_vlan: entered promiscuous mode [ 81.091880][ T5639] veth0_macvtap: entered promiscuous mode [ 81.104958][ T5642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.140251][ T5639] veth1_macvtap: entered promiscuous mode [ 81.206152][ T5640] veth0_vlan: entered promiscuous mode [ 81.232158][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.259085][ T5638] veth0_macvtap: entered promiscuous mode [ 81.275278][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.302984][ T5640] veth1_vlan: entered promiscuous mode [ 81.325726][ T5638] veth1_macvtap: entered promiscuous mode [ 81.335263][ T34] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.362949][ T34] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.373363][ T34] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.386294][ T170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.394531][ T34] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.406287][ T170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.447540][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.501487][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.514473][ T5642] veth0_vlan: entered promiscuous mode [ 81.555305][ T170] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.564955][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.573676][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.579324][ T170] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.591325][ T170] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.611773][ T5640] veth0_macvtap: entered promiscuous mode [ 81.632769][ T170] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.645242][ T5640] veth1_macvtap: entered promiscuous mode [ 81.713540][ T5642] veth1_vlan: entered promiscuous mode [ 81.724726][ T5636] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 81.751174][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.752840][ T5636] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 81.781325][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.782209][ T5628] Bluetooth: hci2: command tx timeout [ 81.811312][ T5636] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 81.827952][ T5636] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 81.843105][ T5628] Bluetooth: hci3: command tx timeout [ 81.849790][ T5628] Bluetooth: hci4: command tx timeout [ 81.857238][ T5628] Bluetooth: hci0: command tx timeout [ 81.864603][ T50] Bluetooth: hci1: command tx timeout [ 81.867485][ T5636] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 81.944960][ T5640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.997600][ T5640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.009365][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.020541][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.037603][ T34] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.047345][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.073500][ T5642] veth0_macvtap: entered promiscuous mode [ 82.084108][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.101682][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.111884][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.128053][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.147193][ T5642] veth1_macvtap: entered promiscuous mode [ 82.319787][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.338386][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.402914][ T5728] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.412325][ T5728] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.527584][ T5728] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.555187][ T5728] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.703563][ T5730] vxcan1: entered allmulticast mode [ 82.734643][ T5734] batman_adv: batadv0: Adding interface: dummy0 [ 82.750742][ T5734] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.761538][ T5736] Set syz1 is full, maxelem 1023 reached [ 82.799170][ T5734] batman_adv: batadv0: Interface activated: dummy0 [ 82.814294][ T5735] batadv0: mtu less than device minimum [ 82.823834][ T5735] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 82.837619][ T5735] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 82.849948][ T5735] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 82.862873][ T5735] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 82.876271][ T5735] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 82.888423][ T5735] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 82.902934][ T5735] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 82.917632][ T5735] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 82.951752][ T170] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.972537][ T170] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.004424][ T5642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.043554][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.047117][ T170] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.075554][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.079148][ T170] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.139984][ T5642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.216300][ T1031] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.226902][ T1031] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.264780][ T1031] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.275816][ T1031] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.292963][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.331595][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.461636][ T5749] capability: warning: `syz.0.12' uses 32-bit capabilities (legacy support in use) [ 83.477648][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.493765][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.569221][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.578724][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.808981][ T5700] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 83.846901][ T50] Bluetooth: hci2: command tx timeout [ 83.916747][ T5628] Bluetooth: hci3: command tx timeout [ 83.922727][ T50] Bluetooth: hci4: command tx timeout [ 83.930608][ T5628] Bluetooth: hci1: command tx timeout [ 83.930619][ T5626] Bluetooth: hci0: command tx timeout [ 83.942737][ T5754] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 84.019543][ T5700] usb 1-1: Using ep0 maxpacket: 32 [ 84.053069][ T5700] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 84.064758][ T5700] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 84.077380][ T5700] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 84.086975][ T5700] usb 1-1: config 1 has no interface number 0 [ 84.093839][ T5700] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 84.115850][ T5700] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 84.146627][ T5700] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 84.171657][ T5700] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.228241][ T5700] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 84.369759][ T30] audit: type=1326 audit(1784031746.570:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5763 comm="syz.4.15" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70cf0ec code=0x0 [ 84.550738][ T5700] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 84.703480][ T5716] usb 1-1: USB disconnect, device number 2 [ 84.734173][ T5716] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 84.900751][ T5700] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 85.110098][ T5700] usb 3-1: device descriptor read/64, error -71 [ 85.357980][ T5700] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 85.517702][ T5700] usb 3-1: device descriptor read/64, error -71 [ 85.627248][ T5700] usb usb3-port1: attempt power cycle [ 86.019296][ T5700] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 86.052095][ T5700] usb 3-1: device descriptor read/8, error -71 [ 86.297053][ T5700] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 86.319791][ T5700] usb 3-1: device descriptor read/8, error -71 [ 86.439019][ T5700] usb usb3-port1: unable to enumerate USB device [ 87.385305][ T5786] Zero length message leads to an empty skb [ 87.609709][ T5796] fuse: Unknown parameter '000000000000000000060x0000000000000007' [ 87.688414][ T5799] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.24'. [ 87.754423][ T5792] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.24'. [ 87.796282][ T5797] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.24'. [ 87.811819][ T5716] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 87.938053][ T5804] bond0: option packets_per_slave: invalid value (18446744071562067969) [ 87.952447][ T5804] bond0: option packets_per_slave: allowed values 0 - 65535 [ 87.966625][ T5716] usb 2-1: device descriptor read/64, error -71 [ 87.981908][ T5804] batadv_slave_1: entered promiscuous mode [ 88.130749][ T5808] binder: 5807:5808 ioctl 703 3d returned -22 [ 88.216499][ T5716] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 88.245039][ T5803] batadv_slave_1: left promiscuous mode [ 88.386657][ T5716] usb 2-1: device descriptor read/64, error -71 [ 88.456409][ T5700] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 88.506813][ T5716] usb usb2-port1: attempt power cycle [ 88.627306][ T5700] usb 1-1: Using ep0 maxpacket: 16 [ 88.644954][ T5700] usb 1-1: no configurations [ 88.650823][ T5700] usb 1-1: can't read configurations, error -22 [ 88.788490][ T5700] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 88.857068][ T5716] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 88.908496][ T5716] usb 2-1: device descriptor read/8, error -71 [ 88.958555][ T5700] usb 1-1: Using ep0 maxpacket: 16 [ 88.970666][ T5700] usb 1-1: no configurations [ 88.986363][ T5700] usb 1-1: can't read configurations, error -22 [ 88.998328][ T5700] usb usb1-port1: attempt power cycle [ 89.040360][ T30] audit: type=1326 audit(1784031751.230:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5826 comm="syz.4.35" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70cf0ec code=0x0 [ 89.156431][ T5716] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 89.169540][ T5836] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 89.195232][ T5716] usb 2-1: device descriptor read/8, error -71 [ 89.317437][ T5716] usb usb2-port1: unable to enumerate USB device [ 89.333723][ T5843] netlink: 'syz.3.42': attribute type 1 has an invalid length. [ 89.366545][ T5700] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 89.400543][ T5700] usb 1-1: Using ep0 maxpacket: 16 [ 89.407540][ T5700] usb 1-1: no configurations [ 89.411474][ T5846] netlink: 44 bytes leftover after parsing attributes in process `syz.3.42'. [ 89.412815][ T5700] usb 1-1: can't read configurations, error -22 [ 89.569653][ T5700] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 89.583941][ T5850] raw_sendmsg: syz.3.44 forgot to set AF_INET. Fix it! [ 89.597372][ T5700] usb 1-1: Using ep0 maxpacket: 16 [ 89.603926][ T5700] usb 1-1: no configurations [ 89.613516][ T5700] usb 1-1: can't read configurations, error -22 [ 89.628518][ T5700] usb usb1-port1: unable to enumerate USB device [ 90.035600][ T5871] syz.3.50 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 90.058702][ T5867] netlink: 'syz.3.50': attribute type 2 has an invalid length. [ 90.587864][ T5700] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 90.783786][ T5700] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 90.824481][ T5700] usb 3-1: config 0 has no interface number 0 [ 90.855720][ T5700] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 90.898634][ T5700] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 90.928092][ T5700] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 90.954622][ T5700] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.989900][ T5700] usb 3-1: config 0 descriptor?? [ 91.010122][ T5876] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 91.078867][ T5700] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 91.232405][ T5876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.263355][ T5876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.302303][ T5876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.329086][ T5876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.379676][ T5876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.52'. [ 91.399195][ T5716] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 91.437826][ T5876] netlink: 6 bytes leftover after parsing attributes in process `syz.2.52'. [ 91.526491][ T5700] usb 3-1: USB disconnect, device number 6 [ 91.578917][ T5716] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.624726][ T5716] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 91.659629][ T5716] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.724109][ T5716] usb 1-1: config 0 descriptor?? [ 92.031000][ T809] cfg80211: failed to load regulatory.db [ 92.051609][ T5887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.073116][ T5700] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 92.106306][ T5887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.258168][ T5700] usb 4-1: device descriptor read/64, error -71 [ 92.557119][ T5700] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 92.698397][ T5700] usb 4-1: device descriptor read/64, error -71 [ 92.862089][ T5700] usb usb4-port1: attempt power cycle [ 93.247349][ T5700] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 93.317804][ T5700] usb 4-1: device descriptor read/8, error -71 [ 93.586584][ T5700] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 93.638222][ T5700] usb 4-1: device descriptor read/8, error -71 [ 93.767052][ T5700] usb usb4-port1: unable to enumerate USB device [ 94.604923][ T5925] netlink: 12 bytes leftover after parsing attributes in process `syz.1.69'. [ 94.655827][ T5925] netlink: 16 bytes leftover after parsing attributes in process `syz.1.69'. [ 96.490575][ C1] net_ratelimit: 11 callbacks suppressed [ 96.490595][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 96.623001][ T30] audit: type=1326 audit(1784031758.820:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5953 comm="syz.0.81" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff80ec code=0x0 [ 96.762707][ T5963] tc action pedit unable to extract header offset for header type (0x4) [ 96.775294][ T5964] netlink: 'syz.2.80': attribute type 2 has an invalid length. [ 96.813309][ T5716] usbhid 1-1:0.0: can't add hid device: -32 [ 96.831910][ T5716] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 96.937915][ T5970] netlink: 'syz.1.82': attribute type 2 has an invalid length. [ 97.167386][ T5716] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 97.329165][ T5716] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 97.340858][ T5716] usb 4-1: config 0 has no interface number 0 [ 97.347648][ T5716] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 97.370953][ T5716] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 97.388666][ T5716] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 97.409382][ T5716] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.450279][ T5716] usb 4-1: config 0 descriptor?? [ 97.468373][ T5969] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 97.483492][ T5716] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 97.684118][ T5969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.709669][ T5969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.744974][ T5969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.761958][ T5969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.801066][ T5969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.84'. [ 97.831983][ T5969] netlink: 6 bytes leftover after parsing attributes in process `syz.3.84'. [ 97.882992][ T5358] usb 4-1: USB disconnect, device number 6 [ 98.618476][ T5989] fuse: Unknown parameter '000000000000000000060x0000000000000007' [ 98.785957][ T30] audit: type=1326 audit(1784031760.970:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5991 comm="syz.4.91" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70cf0ec code=0x0 [ 98.829650][ T5989] netlink: 40 bytes leftover after parsing attributes in process `syz.3.88'. [ 98.953447][ T5998] tc action pedit unable to extract header offset for header type (0x4) [ 99.390869][ T6015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.430284][ T6014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.460179][ T6015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.484942][ T6014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.747117][ T5358] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 99.844120][ T6027] netlink: 'syz.0.100': attribute type 2 has an invalid length. [ 99.959129][ T5358] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 99.977875][ T5358] usb 2-1: config 0 has no interface number 0 [ 100.002112][ T5358] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 100.016277][ T5358] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 100.030256][ T5358] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 100.041800][ T5358] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.065690][ T5358] usb 2-1: config 0 descriptor?? [ 100.075915][ T6019] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 100.133001][ T5358] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 100.309372][ T6019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.362405][ T6019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.463601][ T6019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.515405][ T6019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.545390][ T6019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.99'. [ 100.589347][ T6019] netlink: 6 bytes leftover after parsing attributes in process `syz.1.99'. [ 100.663179][ C0] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 100.686951][ T5680] usb 2-1: USB disconnect, device number 6 [ 101.128226][ T5358] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 101.326507][ T5358] usb 4-1: Using ep0 maxpacket: 32 [ 101.339433][ T5358] usb 4-1: config 1 has an invalid interface number: 236 but max is 0 [ 101.359187][ T5358] usb 4-1: config 1 has no interface number 0 [ 101.377542][ T5358] usb 4-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 101.388506][ T5358] usb 4-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0 [ 101.423050][ T5358] usb 4-1: config 1 interface 236 has no altsetting 0 [ 101.435433][ T5358] usb 4-1: config 1 has an invalid interface number: 236 but max is 0 [ 101.453413][ T5358] usb 4-1: config 1 has no interface number 0 [ 101.469000][ T5358] usb 4-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 101.489450][ T5358] usb 4-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0 [ 101.516622][ T5358] usb 4-1: config 1 interface 236 has no altsetting 0 [ 101.539694][ T5358] usb 4-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a [ 101.554494][ T5358] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.564468][ T5358] usb 4-1: Product: syz [ 101.569199][ T5358] usb 4-1: Manufacturer: syz [ 101.574550][ T5358] usb 4-1: SerialNumber: syz [ 101.610368][ T5358] ti_usb_3410_5052 4-1:1.236: TI USB 5052 2 port adapter converter detected [ 102.167528][ T6066] fuse: Unknown parameter '000000000000000000060x0000000000000007' [ 102.254777][ T6066] netlink: 40 bytes leftover after parsing attributes in process `syz.1.114'. [ 102.336791][ T5680] usb 4-1: USB disconnect, device number 7 [ 103.965648][ T6090] FAULT_INJECTION: forcing a failure. [ 103.965648][ T6090] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 104.001620][ T6090] CPU: 1 UID: 0 PID: 6090 Comm: syz.1.122 Tainted: G L syzkaller #0 PREEMPT(full) [ 104.001647][ T6090] Tainted: [L]=SOFTLOCKUP [ 104.001652][ T6090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 104.001668][ T6090] Call Trace: [ 104.001675][ T6090] [ 104.001683][ T6090] dump_stack_lvl+0xe8/0x150 [ 104.001722][ T6090] should_fail_ex+0x40c/0x560 [ 104.001743][ T6090] _copy_from_user+0x2d/0xb0 [ 104.001761][ T6090] io_submit_one+0xd2/0x13d0 [ 104.001777][ T6090] ? lockdep_hardirqs_on+0x7a/0x110 [ 104.001803][ T6090] ? irqentry_exit+0x218/0x8f0 [ 104.001821][ T6090] ? __pfx_io_submit_one+0x10/0x10 [ 104.001834][ T6090] ? __might_fault+0xaf/0x130 [ 104.001855][ T6090] ? __might_fault+0xaf/0x130 [ 104.001870][ T6090] __ia32_compat_sys_io_submit+0x1e1/0x390 [ 104.001890][ T6090] ? __pfx___ia32_compat_sys_io_submit+0x10/0x10 [ 104.001917][ T6090] __do_fast_syscall_32+0x23e/0x6f0 [ 104.001935][ T6090] ? do_fast_syscall_32+0x33/0x70 [ 104.001950][ T6090] ? lockdep_hardirqs_on+0x7a/0x110 [ 104.001965][ T6090] ? asm_int80_emulation+0x1a/0x20 [ 104.001976][ T6090] ? do_int80_emulation+0x29f/0x550 [ 104.001992][ T6090] ? trace_irq_disable+0x3b/0x140 [ 104.002009][ T6090] do_fast_syscall_32+0x33/0x70 [ 104.002026][ T6090] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 104.002040][ T6090] RIP: 0023:0xf70bf0ec [ 104.002056][ T6090] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 104.002066][ T6090] RSP: 002b:00000000f548c50c EFLAGS: 00000206 ORIG_RAX: 00000000000000f8 [ 104.002080][ T6090] RAX: ffffffffffffffda RBX: 00000000f7ff2000 RCX: 0000000000000001 [ 104.002088][ T6090] RDX: 00000000800008c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 104.002095][ T6090] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 104.002102][ T6090] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 104.002109][ T6090] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 104.002127][ T6090] [ 106.240286][ T6108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.262041][ T6108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.356403][ T5716] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 106.516627][ T5716] usb 4-1: Using ep0 maxpacket: 32 [ 106.524670][ T5716] usb 4-1: config 1 has an invalid interface number: 236 but max is 0 [ 106.537010][ T5716] usb 4-1: config 1 has no interface number 0 [ 106.543240][ T5716] usb 4-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 106.553616][ T5716] usb 4-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0 [ 106.564168][ T5716] usb 4-1: config 1 interface 236 has no altsetting 0 [ 106.572857][ T5716] usb 4-1: config 1 has an invalid interface number: 236 but max is 0 [ 106.581828][ T5716] usb 4-1: config 1 has no interface number 0 [ 106.588025][ T5716] usb 4-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 106.597904][ T5716] usb 4-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0 [ 106.608676][ T5716] usb 4-1: config 1 interface 236 has no altsetting 0 [ 106.620232][ T5716] usb 4-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a [ 106.632630][ T5716] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.642515][ T5716] usb 4-1: Product: syz [ 106.648238][ T5716] usb 4-1: Manufacturer: syz [ 106.652940][ T5716] usb 4-1: SerialNumber: syz [ 106.659944][ T6123] fuse: Unknown parameter '000000000000000000060x0000000000000007' [ 106.668289][ T188] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 106.680478][ T5716] ti_usb_3410_5052 4-1:1.236: TI USB 5052 2 port adapter converter detected [ 106.723795][ T6123] netlink: 40 bytes leftover after parsing attributes in process `syz.1.133'. [ 106.856796][ T188] usb 3-1: Using ep0 maxpacket: 16 [ 106.869941][ T188] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 106.882859][ T188] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.894389][ T188] usb 3-1: Product: syz [ 106.899688][ T188] usb 3-1: Manufacturer: syz [ 106.905004][ T188] usb 3-1: SerialNumber: syz [ 107.149702][ T188] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 107.193446][ T188] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 107.213310][ T188] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 107.235482][ T188] usb 3-1: media controller created [ 107.284587][ T188] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 107.348346][ T188] zl10353_read_register: readreg error (reg=127, ret==-71) [ 107.428966][ T188] dvb_usb_gl861 3-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 107.468535][ T188] usb 3-1: USB disconnect, device number 7 [ 107.494993][ T809] usb 4-1: USB disconnect, device number 8 [ 108.193055][ T6143] netlink: 'syz.2.136': attribute type 2 has an invalid length. [ 108.458176][ T6156] netlink: 16 bytes leftover after parsing attributes in process `syz.0.139'. [ 111.402760][ T6192] netlink: 'syz.3.147': attribute type 2 has an invalid length. [ 111.485427][ T6196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.523016][ T6196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.559780][ T30] audit: type=1326 audit(1784031773.760:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6197 comm="syz.2.154" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf707f0ec code=0x0 [ 111.591511][ T6196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.596951][ T5358] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 111.602140][ T6196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.692101][ T6196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.715249][ T6196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.758108][ T5358] usb 2-1: device descriptor read/64, error -71 [ 112.016470][ T5358] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 112.156609][ T5358] usb 2-1: device descriptor read/64, error -71 [ 112.278096][ T5358] usb usb2-port1: attempt power cycle [ 112.626459][ T5358] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 112.686558][ T6220] netlink: 16 bytes leftover after parsing attributes in process `syz.3.158'. [ 112.701269][ T5358] usb 2-1: device descriptor read/8, error -71 [ 112.948591][ T5358] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 112.987216][ T5358] usb 2-1: device descriptor read/8, error -71 [ 113.109834][ T5358] usb usb2-port1: unable to enumerate USB device [ 113.241062][ T6232] netlink: 28 bytes leftover after parsing attributes in process `syz.3.163'. [ 113.762971][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 113.918405][ T6255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.930477][ T6255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.028513][ T188] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 114.069340][ T6257] netlink: 'syz.2.172': attribute type 2 has an invalid length. [ 114.198686][ T188] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.219937][ T188] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 114.231938][ T188] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.260834][ T188] usb 4-1: config 0 descriptor?? [ 114.490757][ T6247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.516897][ T6247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.604069][ T6247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.632974][ T6247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.670579][ T6272] netlink: 'syz.1.174': attribute type 2 has an invalid length. [ 115.171492][ T6284] openvswitch: netlink: Flow actions attr not present in new flow. [ 116.651739][ T5358] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 116.913057][ T5358] usb 3-1: config 0 has an invalid interface number: 39 but max is 0 [ 116.939440][ T5358] usb 3-1: config 0 has no interface number 0 [ 116.957117][ T5358] usb 3-1: config 0 interface 39 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 116.985281][ T5358] usb 3-1: New USB device found, idVendor=0499, idProduct=4d3f, bcdDevice=d2.2a [ 117.004335][ T5358] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.024577][ T5358] usb 3-1: Product: syz [ 117.045126][ T5358] usb 3-1: Manufacturer: syz [ 117.059593][ T5358] usb 3-1: SerialNumber: syz [ 117.100224][ T5358] usb 3-1: config 0 descriptor?? [ 117.420434][ T6300] netlink: 'syz.3.183': attribute type 12 has an invalid length. [ 117.839227][ T5358] usb 3-1: USB disconnect, device number 8 [ 117.973530][ T5678] udevd[5678]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.39/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 118.439566][ T6333] netlink: 'syz.2.190': attribute type 2 has an invalid length. [ 118.958229][ T6345] ptrace attach of "ci-upstream-kasan-gce-386/syz-executor exec"[5642] was attempted by "ci-upstream-kasan-gce-386/syz-executor exec"[6345] [ 119.357894][ T188] usbhid 4-1:0.0: can't add hid device: -32 [ 119.375339][ T188] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 119.809642][ T30] audit: type=1326 audit(1784031782.010:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6354 comm="syz.1.195" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70bf0ec code=0x0 [ 120.628030][ T30] audit: type=1326 audit(1784031782.830:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6366 comm="syz.3.199" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fe40ec code=0x0 [ 122.577251][ T30] audit: type=1326 audit(1784031784.780:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6380 comm="syz.1.202" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70bf0ec code=0x0 [ 124.190873][ T6393] openvswitch: netlink: Flow key attr not present in new flow. [ 124.454153][ T6408] netlink: 'syz.0.207': attribute type 2 has an invalid length. [ 125.206258][ T30] audit: type=1326 audit(1784031787.410:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6427 comm="syz.3.218" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fe40ec code=0x0 [ 125.319553][ T6432] netlink: 4 bytes leftover after parsing attributes in process `syz.1.219'. [ 125.352874][ T6432] netlink: 12 bytes leftover after parsing attributes in process `syz.1.219'. [ 125.395317][ T6432] Invalid option length (1048437) for dns_resolver key [ 125.451805][ T6437] openvswitch: netlink: Flow key attr not present in new flow. [ 125.600510][ T6441] fuse: Bad value for 'fd' [ 126.156545][ T5700] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 126.403020][ T5700] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 126.431156][ T5700] usb 3-1: config 0 interface 0 has no altsetting 0 [ 126.484530][ T5700] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 126.521442][ T5700] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 126.543612][ T5700] usb 3-1: Product: syz [ 126.558363][ T5700] usb 3-1: Manufacturer: syz [ 126.571133][ T5700] usb 3-1: SerialNumber: syz [ 126.593305][ T5700] usb 3-1: config 0 descriptor?? [ 126.629932][ T5700] usb 3-1: selecting invalid altsetting 0 [ 126.815824][ T6461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.230'. [ 127.076399][ T809] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 127.193864][ T6474] fuse: Bad value for 'fd' [ 127.241648][ T809] usb 2-1: Using ep0 maxpacket: 32 [ 127.257979][ T809] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 127.281622][ T809] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 127.293957][ T5358] usb 3-1: USB disconnect, device number 9 [ 127.300131][ T809] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 127.346102][ T809] usb 2-1: Product: syz [ 127.362941][ T809] usb 2-1: Manufacturer: syz [ 127.376772][ T809] usb 2-1: SerialNumber: syz [ 127.428645][ T809] usb 2-1: config 0 descriptor?? [ 127.443312][ T6462] raw-gadget.7 gadget.1: fail, usb_ep_enable returned -22 [ 127.470342][ T809] hub 2-1:0.0: bad descriptor, ignoring hub [ 127.491429][ T809] hub 2-1:0.0: probe with driver hub failed with error -5 [ 127.685777][ T6488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.798833][ T6488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.872694][ T6488] netlink: 48 bytes leftover after parsing attributes in process `syz.3.237'. [ 127.916813][ T809] usb 2-1: USB disconnect, device number 11 [ 127.933113][ T6462] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 128.056132][ T6488] vlan2: entered allmulticast mode [ 128.076939][ T6488] veth1_macvtap: entered allmulticast mode [ 128.633989][ T5358] hid-generic 0006:0008:0001.0001: ignoring exceeding usage max [ 128.645097][ T5358] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 128.831733][ T5358] hid-generic 0006:0008:0001.0001: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 129.111397][ T6501] fido_id[6501]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 129.746226][ T6511] fuse: Bad value for 'fd' [ 130.067744][ T6524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.084228][ T6524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.246473][ T5358] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 130.410411][ T5358] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 130.430502][ T5358] usb 3-1: config 0 has no interface number 0 [ 130.448828][ T5358] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 130.473588][ T5358] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 130.496922][ T5358] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 130.525603][ T5358] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.553327][ T5358] usb 3-1: config 0 descriptor?? [ 130.572324][ T6518] raw-gadget.5 gadget.2: fail, usb_ep_enable returned -22 [ 130.608750][ T5358] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 130.781225][ T6536] netlink: 'syz.0.257': attribute type 1 has an invalid length. [ 130.798163][ T6518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.812359][ T6518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.825481][ T6518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.865797][ T6518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.881258][ T6542] netlink: 28 bytes leftover after parsing attributes in process `syz.0.257'. [ 130.902743][ T6518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.249'. [ 130.928169][ T6518] netlink: 6 bytes leftover after parsing attributes in process `syz.2.249'. [ 130.945155][ T5700] usb 3-1: USB disconnect, device number 10 [ 131.821213][ T6570] netlink: 'syz.2.269': attribute type 10 has an invalid length. [ 132.224186][ T6580] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 132.586095][ T6596] netlink: 16 bytes leftover after parsing attributes in process `syz.4.281'. [ 132.763352][ T6604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.782980][ T5358] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 132.831081][ T6604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.904063][ T6611] netlink: 4 bytes leftover after parsing attributes in process `syz.4.287'. [ 132.915547][ T30] audit: type=1326 audit(1784031795.120:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6609 comm="syz.0.286" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff80ec code=0x0 [ 132.959638][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.967851][ T5358] usb 2-1: Using ep0 maxpacket: 32 [ 132.971771][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.982869][ T5358] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 133.018750][ T5358] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 133.047782][ T5358] usb 2-1: config 0 interface 0 has no altsetting 0 [ 133.067757][ T5358] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 133.086390][ T5358] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.102934][ T5358] usb 2-1: Product: syz [ 133.108572][ T6617] tc action pedit unable to extract header offset for header type (0x4) [ 133.123200][ T5358] usb 2-1: Manufacturer: syz [ 133.134216][ T5358] usb 2-1: SerialNumber: syz [ 133.161635][ T5358] usb 2-1: config 0 descriptor?? [ 133.195206][ T6623] netlink: 'syz.4.290': attribute type 10 has an invalid length. [ 133.208292][ T6623] batman_adv: batadv0: Interface deactivated: dummy0 [ 133.227092][ T6623] batman_adv: batadv0: Removing interface: dummy0 [ 133.257786][ T6625] netlink: 'syz.4.290': attribute type 10 has an invalid length. [ 133.281851][ T6623] team0: Port device dummy0 added [ 133.294200][ T6621] netlink: 'syz.3.288': attribute type 1 has an invalid length. [ 133.346514][ T6625] team0: Port device dummy0 removed [ 133.627389][ T6589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.647171][ T6589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.800212][ T5358] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 134.009170][ T5358] gs_usb 2-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 134.034999][ T5358] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -121 [ 134.779977][ T6649] netlink: 20 bytes leftover after parsing attributes in process `syz.2.295'. [ 135.763621][ T6665] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 136.071787][ T6672] netlink: 8 bytes leftover after parsing attributes in process `syz.3.305'. [ 136.085866][ T188] usb 2-1: USB disconnect, device number 12 [ 136.166639][ T5716] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 136.273810][ T6672] 8021q: adding VLAN 0 to HW filter on device bond1 [ 136.316407][ T5716] usb 3-1: Using ep0 maxpacket: 32 [ 136.351727][ T5716] usb 3-1: config 0 has no interfaces? [ 136.373554][ T5716] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 136.411390][ T5716] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.421436][ T5716] usb 3-1: Product: syz [ 136.426071][ T5716] usb 3-1: Manufacturer: syz [ 136.431488][ T5716] usb 3-1: SerialNumber: syz [ 136.445316][ T5716] usb 3-1: config 0 descriptor?? [ 136.481644][ T6677] bond1: (slave ip6erspan0): making interface the new active one [ 136.555224][ T6677] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 136.745707][ T6678] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 136.798096][ T6678] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 136.816882][ T5700] bond_slave_0: entered promiscuous mode [ 136.823857][ T5700] bond_slave_1: entered promiscuous mode [ 137.209658][ T5700] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 137.238256][ T5700] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 137.265805][ T6693] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.310'. [ 137.279744][ T5700] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 137.321919][ T6695] netlink: 'syz.3.309': attribute type 1 has an invalid length. [ 137.346457][ T5700] hid-generic 0003:0004:0000.0002: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 137.494238][ T6698] fido_id[6698]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 137.557941][ T6702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.558229][ T6702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.562235][ T6702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.562706][ T6702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.565842][ T6702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.566088][ T6702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.567384][ T6702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.313'. [ 137.568086][ T6702] netlink: 6 bytes leftover after parsing attributes in process `syz.0.313'. [ 138.106468][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 138.286381][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 138.305182][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 138.335074][ T10] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 138.364641][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 138.394255][ T10] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 138.408423][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.419056][ T10] usb 2-1: Product: syz [ 138.423715][ T10] usb 2-1: Manufacturer: syz [ 138.429828][ T10] usb 2-1: SerialNumber: syz [ 138.441118][ T10] usb 2-1: config 0 descriptor?? [ 138.492428][ T6717] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 138.508179][ T6717] bond1: (slave macvlan3): Enslaving as an active interface with an up link [ 138.641983][ T6719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.654078][ T6719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.933486][ T6709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.958023][ T6709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.131077][ T10] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 139.301662][ T5358] usb 3-1: USB disconnect, device number 11 [ 139.336687][ T10] gs_usb 2-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 139.354111][ T10] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -121 [ 139.599573][ T6728] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.322'. [ 139.658321][ T6727] netlink: 'syz.3.321': attribute type 2 has an invalid length. [ 141.501533][ T6785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.515006][ T6785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.559220][ T6785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.570039][ T6785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.030169][ T30] audit: type=1326 audit(1784031804.220:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6792 comm="syz.2.343" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf707f0ec code=0x0 [ 142.093115][ T6796] fuse: Bad value for 'fd' [ 142.151489][ T6799] tc action pedit unable to extract header offset for header type (0x4) [ 142.187040][ T6798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.196224][ T6798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.775250][ T6805] netlink: 'syz.0.347': attribute type 1 has an invalid length. [ 143.962901][ T6835] netlink: 4 bytes leftover after parsing attributes in process `syz.0.359'. [ 144.140420][ T6843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.360'. [ 144.150816][ T6843] bond1: option mode: unable to set because the bond device has slaves [ 144.250685][ T6847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.273511][ T6847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.299359][ T6847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.340226][ T6847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.383530][ T6851] netlink: 'syz.3.362': attribute type 2 has an invalid length. [ 144.400271][ T6847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.437485][ T6847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.462782][ T6847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.361'. [ 144.524503][ T6847] netlink: 6 bytes leftover after parsing attributes in process `syz.1.361'. [ 145.651864][ T6879] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.039570][ T6891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.044298][ T30] audit: type=1326 audit(1784031808.240:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6892 comm="syz.3.377" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fe40ec code=0x0 [ 146.090586][ T6891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.099726][ T6894] tc action pedit unable to extract header offset for header type (0x4) [ 146.132372][ T6891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.157033][ T6891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.187877][ T6891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.208601][ T6891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.221648][ T6891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.376'. [ 146.235314][ T6891] netlink: 6 bytes leftover after parsing attributes in process `syz.0.376'. [ 146.338448][ T6900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.380'. [ 146.402101][ T6900] 8021q: adding VLAN 0 to HW filter on device bond1 [ 146.562896][ T6911] netlink: 'syz.2.384': attribute type 2 has an invalid length. [ 146.976150][ T6925] netlink: 52 bytes leftover after parsing attributes in process `syz.3.387'. [ 146.994168][ T6925] program syz.3.387 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 147.008200][ T6925] mmap: syz.3.387 (6925) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 147.681382][ T6933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.703158][ T6933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.801918][ T30] audit: type=1804 audit(1784031810.000:14): pid=6933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.390" name="bus" dev="ramfs" ino=13456 res=1 errno=0 [ 147.907184][ T6938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.953031][ T6938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.329452][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 148.671557][ T6962] netlink: 16 bytes leftover after parsing attributes in process `syz.0.397'. [ 148.688994][ T6960] netlink: 16 bytes leftover after parsing attributes in process `syz.4.399'. [ 149.190485][ T6978] netlink: 'syz.2.403': attribute type 2 has an invalid length. [ 149.684378][ T6998] __nla_validate_parse: 2 callbacks suppressed [ 149.684407][ T6998] netlink: 16 bytes leftover after parsing attributes in process `syz.3.411'. [ 149.702201][ T6998] netlink: 32 bytes leftover after parsing attributes in process `syz.3.411'. [ 150.245144][ T7005] netlink: 'syz.0.413': attribute type 1 has an invalid length. [ 150.303164][ T7010] netlink: 'syz.3.414': attribute type 1 has an invalid length. [ 151.016515][ T188] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 151.044664][ T7020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.121537][ T7020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.187963][ T188] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 151.210333][ T188] usb 3-1: config 0 has no interface number 0 [ 151.225619][ T188] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 151.256372][ T188] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 151.287934][ T188] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 151.309869][ T188] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.333642][ T7020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.354453][ T188] usb 3-1: config 0 descriptor?? [ 151.361434][ T7020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.377874][ T7014] raw-gadget.7 gadget.2: fail, usb_ep_enable returned -22 [ 151.399055][ T188] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 151.601871][ T7014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.615976][ T7014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.629138][ T7014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.640047][ T7014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.655533][ T7014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.416'. [ 151.677495][ T7014] netlink: 6 bytes leftover after parsing attributes in process `syz.2.416'. [ 151.703036][ T809] usb 3-1: USB disconnect, device number 12 [ 152.003229][ T7031] syz_tun: entered promiscuous mode [ 152.103805][ T7033] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.423'. [ 152.196484][ T7035] bridge0: port 3(syz_tun) entered blocking state [ 152.213000][ T7035] bridge0: port 3(syz_tun) entered disabled state [ 152.215424][ T7039] binder_alloc: 7038: pid 7038 spamming oneway? 1 buffers allocated for a total size of 4096 [ 152.220935][ T7035] syz_tun: entered allmulticast mode [ 152.244636][ T7035] syz_tun: entered promiscuous mode [ 152.267880][ T7039] binder_alloc: 7038: pid 7038 spamming oneway? 2 buffers allocated for a total size of 5120 [ 152.332973][ T7043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.428'. [ 152.523190][ T7049] netlink: 'syz.0.429': attribute type 10 has an invalid length. [ 152.557734][ T7049] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.603308][ T7049] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.610813][ T7049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.619959][ T7049] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.627803][ T7049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.643989][ T7049] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 152.916182][ T7070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.961206][ T7070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.008722][ T7070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.038023][ T7070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.077759][ T7070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.102054][ T7070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.130187][ T7070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.439'. [ 153.162814][ T7070] netlink: 6 bytes leftover after parsing attributes in process `syz.0.439'. [ 153.323186][ T7074] netlink: 'syz.3.440': attribute type 1 has an invalid length. [ 153.691425][ T7081] netlink: 'syz.1.441': attribute type 2 has an invalid length. [ 153.986430][ T5358] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 154.146581][ T5358] usb 3-1: device descriptor read/64, error -71 [ 154.200165][ T30] audit: type=1326 audit(1784031816.400:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7090 comm="syz.0.444" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff80ec code=0x7fc00000 [ 154.324465][ T30] audit: type=1326 audit(1784031816.520:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7090 comm="syz.0.444" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71f71eb code=0x7fc00000 [ 154.422775][ T30] audit: type=1326 audit(1784031816.550:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7090 comm="syz.0.444" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff80ec code=0x7fc00000 [ 154.447687][ T5358] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 154.537336][ T30] audit: type=1326 audit(1784031816.550:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7090 comm="syz.0.444" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff80ec code=0x7fc00000 [ 154.612488][ T30] audit: type=1326 audit(1784031816.560:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7090 comm="syz.0.444" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff80ec code=0x7fc00000 [ 154.637951][ T5358] usb 3-1: device descriptor read/64, error -71 [ 154.694048][ T30] audit: type=1326 audit(1784031816.560:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7090 comm="syz.0.444" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff80ec code=0x7fc00000 [ 154.756878][ T5358] usb usb3-port1: attempt power cycle [ 154.786051][ T30] audit: type=1326 audit(1784031816.560:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7090 comm="syz.0.444" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff80ec code=0x7fc00000 [ 154.814811][ T30] audit: type=1326 audit(1784031816.560:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7090 comm="syz.0.444" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff80ec code=0x7fc00000 [ 154.851689][ T30] audit: type=1326 audit(1784031816.560:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7090 comm="syz.0.444" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff80ec code=0x7fc00000 [ 154.883828][ T30] audit: type=1326 audit(1784031816.560:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7090 comm="syz.0.444" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff80ec code=0x7fc00000 [ 155.087954][ T7109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.452'. [ 155.126467][ T5358] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 155.153678][ T7109] 8021q: adding VLAN 0 to HW filter on device bond1 [ 155.171368][ T5358] usb 3-1: device descriptor read/8, error -71 [ 155.235644][ T7115] netlink: 16 bytes leftover after parsing attributes in process `syz.0.454'. [ 155.283330][ T7115] netlink: 12 bytes leftover after parsing attributes in process `syz.0.454'. [ 155.438591][ T5358] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 155.460486][ T7121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.477165][ T5358] usb 3-1: device descriptor read/8, error -71 [ 155.538860][ T7125] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.552722][ T7125] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.596761][ T5358] usb usb3-port1: unable to enumerate USB device [ 155.611143][ T7125] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.618786][ T7125] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.712607][ T7125] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.734822][ T7125] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.885887][ T34] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.895858][ T34] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.906186][ T34] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.916359][ T34] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.080242][ T7133] netlink: 'syz.3.461': attribute type 2 has an invalid length. [ 157.154916][ T7155] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.467'. [ 157.727038][ T7168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.777030][ T7168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.824214][ T7168] usb 1-1: USB disconnect, device number 7 [ 157.847098][ T7171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.881668][ T7171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.936171][ T7168] hub 1-0:1.0: USB hub found [ 157.950109][ T7168] hub 1-0:1.0: 1 port detected [ 158.116405][ T5701] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 158.235440][ T7177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.250097][ T7177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.266475][ T5701] usb 1-1: device descriptor read/64, error -32 [ 158.314717][ T7177] netlink: 12 bytes leftover after parsing attributes in process `syz.3.474'. [ 158.516659][ T5701] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 158.656405][ T5701] usb 1-1: device descriptor read/64, error -32 [ 158.776569][ T5701] usb usb1-port1: attempt power cycle [ 158.846175][ T7193] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.480'. [ 158.862287][ T7191] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.480'. [ 158.878656][ T7192] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.480'. [ 158.962521][ T7195] binder: 7194:7195 ioctl 703 3d returned -22 [ 159.066601][ T5701] raw-gadget.0 gadget.0: failed to queue resume event [ 159.074905][ T7197] bond0: option packets_per_slave: invalid value (18446744071562067969) [ 159.107138][ T7197] bond0: option packets_per_slave: allowed values 0 - 65535 [ 159.155622][ T7197] batadv_slave_1: entered promiscuous mode [ 159.165070][ T5701] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 159.199586][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 159.217800][ T5701] usb 1-1: device descriptor read/8, error -32 [ 159.264367][ T7196] batadv_slave_1: left promiscuous mode [ 159.337830][ T5701] raw-gadget.0 gadget.0: failed to queue suspend event [ 159.365246][ T5701] raw-gadget.0 gadget.0: failed to queue reset event [ 159.457459][ T5701] raw-gadget.0 gadget.0: failed to queue resume event [ 159.522782][ T5701] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 159.557232][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 159.565473][ T5701] usb 1-1: device descriptor read/8, error -32 [ 159.676598][ T5701] raw-gadget.0 gadget.0: failed to queue suspend event [ 159.691340][ T5701] usb usb1-port1: unable to enumerate USB device [ 160.116690][ T7213] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.489'. [ 160.360722][ T7221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.377839][ T7221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.408574][ T7221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.438760][ T7221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.475804][ T7221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.508522][ T7221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.540454][ T7221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.493'. [ 160.562387][ T7221] netlink: 6 bytes leftover after parsing attributes in process `syz.0.493'. [ 160.825701][ T7235] netlink: 8 bytes leftover after parsing attributes in process `syz.3.500'. [ 161.278006][ T7252] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.505'. [ 161.513172][ T7266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.512'. [ 161.737573][ T7280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.750273][ T7280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.764478][ T7280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.781446][ T7280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.794868][ T7280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.807212][ T7280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.841301][ T7280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.521'. [ 161.855492][ T7280] netlink: 6 bytes leftover after parsing attributes in process `syz.1.521'. [ 162.198090][ T7293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.208329][ T7293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.514319][ T7305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.530'. [ 162.909308][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 162.909320][ T30] audit: type=1326 audit(1784031825.110:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7317 comm="syz.1.535" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70bf0ec code=0x0 [ 162.977092][ T7319] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 163.009704][ T7319] tc action pedit unable to extract header offset for header type (0x4) [ 163.986435][ T7339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.023496][ T7339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.069408][ T7339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.098668][ T7339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.199879][ T7339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.219129][ T7339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.148661][ T7356] ------------[ cut here ]------------ [ 165.155760][ T7356] hwsim_get_chanwidth(bw) > hwsim_get_chanwidth(confbw) [ 165.155790][ T7356] WARNING: drivers/net/wireless/virtual/mac80211_hwsim_main.c:2248 at mac80211_hwsim_tx+0x1ab4/0x2500, CPU#0: syz.1.547/7356 [ 165.176380][ T7356] Modules linked in: [ 165.181962][ T7356] CPU: 0 UID: 0 PID: 7356 Comm: syz.1.547 Tainted: G L syzkaller #0 PREEMPT(full) [ 165.193348][ T7356] Tainted: [L]=SOFTLOCKUP [ 165.198201][ T7356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 165.208694][ T7356] RIP: 0010:mac80211_hwsim_tx+0x1ab4/0x2500 [ 165.214965][ T7356] Code: c6 05 c7 5b 13 09 01 48 c7 c7 20 87 9b 8c be 6b 08 00 00 48 c7 c2 60 88 9b 8c e8 a7 dc 74 fa e9 ff ee ff ff e8 ed df 98 fa 90 <0f> 0b 90 49 bc 00 00 00 00 00 fc ff df e9 dd fe ff ff e8 d5 df 98 [ 165.235647][ T7356] RSP: 0018:ffffc9001bf8ee00 EFLAGS: 00010287 [ 165.242142][ T7356] RAX: ffffffff872d9173 RBX: 0000000000000000 RCX: 0000000000080000 [ 165.251062][ T7356] RDX: ffffc90005c41000 RSI: 0000000000000259 RDI: 000000000000025a [ 165.259276][ T7356] RBP: ffffc9001bf8ef90 R08: ffff88802f3b9f00 R09: 000000000000000e [ 165.267596][ T7356] R10: 000000000000000d R11: 0000000000000002 R12: 0000000000000014 [ 165.275795][ T7356] R13: ffff88801f6c6170 R14: 0000000000000028 R15: 0000000000000030 [ 165.284124][ T7356] FS: 0000000000000000(0000) GS:ffff888124f56000(0063) knlGS:00000000f54adb40 [ 165.293194][ T7356] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 165.300297][ T7356] CR2: 000000000c310787 CR3: 00000000758bc000 CR4: 00000000003526f0 [ 165.308439][ T7356] Call Trace: [ 165.311996][ T7356] [ 165.315051][ T7356] ? do_raw_spin_lock+0x12b/0x2f0 [ 165.320241][ T7356] ? __pfx_mac80211_hwsim_tx+0x10/0x10 [ 165.326184][ T7356] ieee80211_tx_frags+0x3df/0x890 [ 165.331435][ T7356] ? __pfx_ieee80211_tx_frags+0x10/0x10 [ 165.337796][ T7356] __ieee80211_tx+0x267/0x580 [ 165.342515][ T7356] ieee80211_tx+0x312/0x4b0 [ 165.347210][ T7356] ? __pfx_ieee80211_tx+0x10/0x10 [ 165.352458][ T7356] ? ieee80211_xmit+0x2e5/0x3c0 [ 165.357472][ T7356] ieee80211_monitor_start_xmit+0xb33/0x1280 [ 165.363869][ T7356] ? ieee80211_monitor_start_xmit+0x5ea/0x1280 [ 165.370308][ T7356] ? __pfx_ieee80211_monitor_start_xmit+0x10/0x10 [ 165.376814][ T7356] dev_hard_start_xmit+0x2cd/0x830 [ 165.382182][ T7356] sch_direct_xmit+0x257/0x4c0 [ 165.387040][ T7356] ? __pfx_sch_direct_xmit+0x10/0x10 [ 165.393155][ T7356] ? htb_enqueue+0xb96/0x11c0 [ 165.398188][ T7356] __qdisc_run+0xb11/0x1620 [ 165.403357][ T7356] __dev_queue_xmit+0x1c00/0x37f0 [ 165.408746][ T7356] ? __dev_queue_xmit+0x29b/0x37f0 [ 165.414007][ T7356] ? _copy_from_iter+0x21b/0x1660 [ 165.419118][ T7356] ? skb_set_owner_w+0x263/0x3d0 [ 165.424369][ T7356] ? __pfx___dev_queue_xmit+0x10/0x10 [ 165.430034][ T7356] ? __pfx__copy_from_iter+0x10/0x10 [ 165.435360][ T7356] ? packet_parse_headers+0x4c5/0x7a0 [ 165.441443][ T7356] ? packet_parse_headers+0x571/0x7a0 [ 165.447337][ T7356] ? __pfx_packet_parse_headers+0x10/0x10 [ 165.453289][ T7356] ? packet_xmit+0x68/0x330 [ 165.458050][ T7356] ? skb_put+0x112/0x210 [ 165.462543][ T7356] packet_sendmsg+0x3d95/0x5040 [ 165.467479][ T7356] ? futex_unqueue+0x22/0x240 [ 165.472380][ T7356] ? futex_unqueue+0x211/0x240 [ 165.477471][ T7356] ? __futex_wait+0x1e1/0x400 [ 165.482183][ T7356] ? __lock_acquire+0x683/0x2cf0 [ 165.487270][ T7356] ? __pfx_packet_sendmsg+0x10/0x10 [ 165.492508][ T7356] ? __might_fault+0xaf/0x130 [ 165.497424][ T7356] ? __pfx_aa_sk_perm+0x10/0x10 [ 165.502394][ T7356] ? aa_sock_msg_perm+0xf1/0x1b0 [ 165.507852][ T7356] ? __pfx_packet_sendmsg+0x10/0x10 [ 165.513104][ T7356] sock_sendmsg_nosec+0x13a/0x180 [ 165.518579][ T7356] __sys_sendto+0x408/0x5a0 [ 165.523110][ T7356] ? file_init_path+0x3b/0x5a0 [ 165.528114][ T7356] ? __pfx___sys_sendto+0x10/0x10 [ 165.533367][ T7356] ? rcu_is_watching+0x15/0xb0 [ 165.538631][ T7356] __ia32_sys_sendto+0xdd/0x100 [ 165.543922][ T7356] __do_fast_syscall_32+0x23e/0x6f0 [ 165.549301][ T7356] ? do_fast_syscall_32+0x33/0x70 [ 165.554447][ T7356] ? lockdep_hardirqs_on+0x7a/0x110 [ 165.559837][ T7356] ? asm_int80_emulation+0x1a/0x20 [ 165.565325][ T7356] ? do_int80_emulation+0x29f/0x550 [ 165.570726][ T7356] ? trace_irq_disable+0x3b/0x140 [ 165.576218][ T7356] do_fast_syscall_32+0x33/0x70 [ 165.581805][ T7356] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 165.588887][ T7356] RIP: 0023:0xf70bf0ec [ 165.593125][ T7356] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 165.614194][ T7356] RSP: 002b:00000000f54ad50c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 165.623116][ T7356] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000080 [ 165.631363][ T7356] RDX: 0000000000000039 RSI: 0000000004000000 RDI: 0000000080000380 [ 165.639565][ T7356] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000 [ 165.647891][ T7356] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 165.656704][ T7356] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 165.665443][ T7356] [ 165.668628][ T7356] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 165.676709][ T7356] CPU: 0 UID: 0 PID: 7356 Comm: syz.1.547 Tainted: G L syzkaller #0 PREEMPT(full) [ 165.688355][ T7356] Tainted: [L]=SOFTLOCKUP [ 165.693079][ T7356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 165.704712][ T7356] Call Trace: [ 165.708377][ T7356] [ 165.711535][ T7356] vpanic+0x56c/0xa60 [ 165.715801][ T7356] ? __pfx__printk+0x10/0x10 [ 165.720664][ T7356] ? __pfx_vpanic+0x10/0x10 [ 165.725543][ T7356] ? is_bpf_text_address+0x292/0x2b0 [ 165.731539][ T7356] ? is_bpf_text_address+0x26/0x2b0 [ 165.736841][ T7356] panic+0xc5/0xd0 [ 165.740572][ T7356] ? __pfx_panic+0x10/0x10 [ 165.746046][ T7356] __warn+0x315/0x4c0 [ 165.750676][ T7356] ? mac80211_hwsim_tx+0x1ab4/0x2500 [ 165.756422][ T7356] ? mac80211_hwsim_tx+0x1ab4/0x2500 [ 165.762055][ T7356] __report_bug+0x331/0x530 [ 165.767005][ T7356] ? mac80211_hwsim_tx+0x1ab4/0x2500 [ 165.773373][ T7356] ? __pfx___report_bug+0x10/0x10 [ 165.778757][ T7356] ? ieee80211_encrypt_tx_skb+0x2fc/0x3f0 [ 165.784596][ T7356] ? __pfx___skb_flow_dissect+0x10/0x10 [ 165.790733][ T7356] ? mac80211_hwsim_tx+0x1ab4/0x2500 [ 165.796280][ T7356] report_bug+0x16a/0x220 [ 165.801229][ T7356] ? mac80211_hwsim_tx+0x1ab4/0x2500 [ 165.806798][ T7356] ? mac80211_hwsim_tx+0x1ab6/0x2500 [ 165.812080][ T7356] handle_bug+0x9c/0x200 [ 165.816580][ T7356] exc_invalid_op+0x1a/0x50 [ 165.821073][ T7356] asm_exc_invalid_op+0x1a/0x20 [ 165.826579][ T7356] RIP: 0010:mac80211_hwsim_tx+0x1ab4/0x2500 [ 165.833101][ T7356] Code: c6 05 c7 5b 13 09 01 48 c7 c7 20 87 9b 8c be 6b 08 00 00 48 c7 c2 60 88 9b 8c e8 a7 dc 74 fa e9 ff ee ff ff e8 ed df 98 fa 90 <0f> 0b 90 49 bc 00 00 00 00 00 fc ff df e9 dd fe ff ff e8 d5 df 98 [ 165.853835][ T7356] RSP: 0018:ffffc9001bf8ee00 EFLAGS: 00010287 [ 165.860639][ T7356] RAX: ffffffff872d9173 RBX: 0000000000000000 RCX: 0000000000080000 [ 165.869313][ T7356] RDX: ffffc90005c41000 RSI: 0000000000000259 RDI: 000000000000025a [ 165.877852][ T7356] RBP: ffffc9001bf8ef90 R08: ffff88802f3b9f00 R09: 000000000000000e [ 165.887052][ T7356] R10: 000000000000000d R11: 0000000000000002 R12: 0000000000000014 [ 165.895646][ T7356] R13: ffff88801f6c6170 R14: 0000000000000028 R15: 0000000000000030 [ 165.904787][ T7356] ? mac80211_hwsim_tx+0x1ab3/0x2500 [ 165.910796][ T7356] ? do_raw_spin_lock+0x12b/0x2f0 [ 165.916120][ T7356] ? __pfx_mac80211_hwsim_tx+0x10/0x10 [ 165.921953][ T7356] ieee80211_tx_frags+0x3df/0x890 [ 165.927773][ T7356] ? __pfx_ieee80211_tx_frags+0x10/0x10 [ 165.933880][ T7356] __ieee80211_tx+0x267/0x580 [ 165.939555][ T7356] ieee80211_tx+0x312/0x4b0 [ 165.944455][ T7356] ? __pfx_ieee80211_tx+0x10/0x10 [ 165.949603][ T7356] ? ieee80211_xmit+0x2e5/0x3c0 [ 165.954755][ T7356] ieee80211_monitor_start_xmit+0xb33/0x1280 [ 165.961090][ T7356] ? ieee80211_monitor_start_xmit+0x5ea/0x1280 [ 165.967530][ T7356] ? __pfx_ieee80211_monitor_start_xmit+0x10/0x10 [ 165.974163][ T7356] dev_hard_start_xmit+0x2cd/0x830 [ 165.979576][ T7356] sch_direct_xmit+0x257/0x4c0 [ 165.984448][ T7356] ? __pfx_sch_direct_xmit+0x10/0x10 [ 165.990243][ T7356] ? htb_enqueue+0xb96/0x11c0 [ 165.995288][ T7356] __qdisc_run+0xb11/0x1620 [ 165.999827][ T7356] __dev_queue_xmit+0x1c00/0x37f0 [ 166.005557][ T7356] ? __dev_queue_xmit+0x29b/0x37f0 [ 166.010896][ T7356] ? _copy_from_iter+0x21b/0x1660 [ 166.016044][ T7356] ? skb_set_owner_w+0x263/0x3d0 [ 166.021771][ T7356] ? __pfx___dev_queue_xmit+0x10/0x10 [ 166.027787][ T7356] ? __pfx__copy_from_iter+0x10/0x10 [ 166.033427][ T7356] ? packet_parse_headers+0x4c5/0x7a0 [ 166.039007][ T7356] ? packet_parse_headers+0x571/0x7a0 [ 166.045066][ T7356] ? __pfx_packet_parse_headers+0x10/0x10 [ 166.050809][ T7356] ? packet_xmit+0x68/0x330 [ 166.055401][ T7356] ? skb_put+0x112/0x210 [ 166.059710][ T7356] packet_sendmsg+0x3d95/0x5040 [ 166.064758][ T7356] ? futex_unqueue+0x22/0x240 [ 166.069609][ T7356] ? futex_unqueue+0x211/0x240 [ 166.074541][ T7356] ? __futex_wait+0x1e1/0x400 [ 166.079259][ T7356] ? __lock_acquire+0x683/0x2cf0 [ 166.084391][ T7356] ? __pfx_packet_sendmsg+0x10/0x10 [ 166.089858][ T7356] ? __might_fault+0xaf/0x130 [ 166.094535][ T7356] ? __pfx_aa_sk_perm+0x10/0x10 [ 166.099674][ T7356] ? aa_sock_msg_perm+0xf1/0x1b0 [ 166.104785][ T7356] ? __pfx_packet_sendmsg+0x10/0x10 [ 166.109990][ T7356] sock_sendmsg_nosec+0x13a/0x180 [ 166.115286][ T7356] __sys_sendto+0x408/0x5a0 [ 166.120247][ T7356] ? file_init_path+0x3b/0x5a0 [ 166.125244][ T7356] ? __pfx___sys_sendto+0x10/0x10 [ 166.130713][ T7356] ? rcu_is_watching+0x15/0xb0 [ 166.135688][ T7356] __ia32_sys_sendto+0xdd/0x100 [ 166.141067][ T7356] __do_fast_syscall_32+0x23e/0x6f0 [ 166.146536][ T7356] ? do_fast_syscall_32+0x33/0x70 [ 166.151586][ T7356] ? lockdep_hardirqs_on+0x7a/0x110 [ 166.157313][ T7356] ? asm_int80_emulation+0x1a/0x20 [ 166.162855][ T7356] ? do_int80_emulation+0x29f/0x550 [ 166.168224][ T7356] ? trace_irq_disable+0x3b/0x140 [ 166.173527][ T7356] do_fast_syscall_32+0x33/0x70 [ 166.178425][ T7356] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 166.185031][ T7356] RIP: 0023:0xf70bf0ec [ 166.189107][ T7356] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 166.209145][ T7356] RSP: 002b:00000000f54ad50c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 166.217924][ T7356] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000080 [ 166.226522][ T7356] RDX: 0000000000000039 RSI: 0000000004000000 RDI: 0000000080000380 [ 166.234587][ T7356] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000 [ 166.242571][ T7356] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 166.250821][ T7356] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 166.259345][ T7356] [ 166.262695][ T7356] Kernel Offset: disabled [ 166.267279][ T7356] Rebooting in 86400 seconds..