last executing test programs: 13.454472734s ago: executing program 2 (id=1452): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) recvfrom(r0, &(0x7f0000001380)=""/179, 0xb3, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d382e23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8", 0x7f}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda3", 0x2d}], 0x2) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 9.937226539s ago: executing program 2 (id=1460): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001b000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="0fc739f30f09660f3822276766c7442400d4e4fdc46766c74424020e0000006766c744240600000000670f011c24baa00066ed0fc7580c0f71e5ad0f01c4f20f013d0fc75d00", 0x46}], 0x1, 0x27, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) pipe2$watch_queue(&(0x7f0000000000), 0x80) syz_usb_connect(0x0, 0x43, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000e7c2f708210435030e5f00000001090231000100000000090400000002"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newtaction={0x14, 0x30, 0x871a15abc695f91d, 0x0, 0x80000}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r3 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x41}, 0x0) r4 = io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000600)={0x0, 0x0, {0x1, 0x2, 0x3, 0x1, 0x100000}, 0x6}) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) ioctl$XFS_IOC_FSGEOMETRY_V1(r4, 0x80705864, &(0x7f00000004c0)) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYRES64, @ANYRES64=r6, @ANYBLOB, @ANYRESOCT=r3], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xd, &(0x7f00000006c0)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xcbf1b7dc05bab38b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, 0x0) 9.88355044s ago: executing program 3 (id=1461): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x880) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x181000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0x7, '.\x00'}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000380), 0x12) unshare(0xd6071b00) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$LINK_DETACH(0x22, &(0x7f0000000180)=r4, 0x4) r5 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) socket$can_bcm(0x1d, 0x2, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x40000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r7, 0x404c534a, &(0x7f0000000080)={0xb, 0x40, 0xfffff4f8}) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg(r8, &(0x7f00000032c0), 0x0, 0x801) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x1, 0x0) 8.874426651s ago: executing program 3 (id=1464): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x84, 0x2c, 0xd2f, 0x10b52c, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff5, 0x10}, {}, {0x8, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xe, 0x6, 0x4, 0x2, 0x4000000}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24018084}, 0x20000000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40000, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) close(r7) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r10, &(0x7f0000000200)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r9, 0x42}, 0x80, &(0x7f0000000700)=[{&(0x7f00000001c0)="27030200dc0f14000e000f00fdc6c1020000ff8407c2fb7fe0406e52534b4f6b3d327db412f400000000030000", 0x2d}], 0x1}, 0x4005) 8.437815151s ago: executing program 0 (id=1466): syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) set_mempolicy(0x5, &(0x7f0000000000)=0x7, 0x6) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r5 = openat(r4, &(0x7f0000000080)='./bus\x00', 0x0, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000200)=@o_path={0x0}, 0x18) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x1c1002, 0x50) sendfile(r6, r5, 0x0, 0x7fffffff) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) write$vhost_msg(r1, 0x0, 0x0) read$char_usb(r1, &(0x7f0000000140)=""/92, 0x5c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001c000100fefffffffbdbdf250a00", @ANYRES32=0x0, @ANYBLOB="0000280914000100fe8000e3ed89e26fa7591f7c000000aa"], 0x30}}, 0x0) ioctl$TCSETS(r0, 0x40384708, &(0x7f0000000080)={0x8, 0x1, 0x609152b0, 0x10000000, 0xe, "3eccd2000500"}) 7.810542234s ago: executing program 3 (id=1468): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) recvfrom(r0, &(0x7f0000001380)=""/179, 0xb3, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d382e23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8", 0x7f}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda3", 0x2d}], 0x2) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 6.259723817s ago: executing program 0 (id=1470): r0 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r0, &(0x7f0000000b40)=[{&(0x7f0000000f00)=""/46, 0x2e}], 0x1, 0x4, 0x10003ff) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2) r1 = socket(0x10, 0x80000, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000080), 0xfffffffffffffffa, 0x101000) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000000a40)={{0x2, 0x0, 0x40, 0x5, 'syz0\x00', 0x10000003}, 0x0, [0x3, 0x8800000, 0xfffffffffffffffe, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffff52, 0x53ad, 0x1, 0x8000000000000000, 0x8, 0x0, 0x4000000000000, 0xfffffffffffffffe, 0xfffffffffffffff7, 0x0, 0xfffffffffffffff5, 0x0, 0x0, 0x3, 0x7, 0xc, 0x9, 0x4, 0x0, 0x7fffffff, 0x6, 0x3, 0xfffffffffffffffd, 0x80000000002, 0x0, 0x4000000000000, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffa, 0x6, 0x6, 0x2, 0x3, 0x61, 0x9, 0xfffffffffffffc, 0x8, 0xfffffffffffffffe, 0x80000001, 0x0, 0x1ffffffffffe, 0x1, 0xfffffffffffffff8, 0x0, 0x1, 0xbd1, 0x8000000000000000, 0xfffffffffff7fffc, 0x0, 0x0, 0x7, 0x0, 0x3ff, 0x7, 0x9, 0x200, 0x9, 0x5, 0xffff, 0xfffffffffffffff8, 0x2, 0x0, 0x0, 0x10001, 0xebc, 0x0, 0x0, 0x74c, 0x6, 0x6, 0x400000000067, 0x7, 0x10000000, 0x7fffffff, 0x401, 0xfffffffffffffffe, 0x1, 0x76e, 0x0, 0x4, 0x5, 0x7, 0x0, 0xa7ea, 0x0, 0xf32, 0x9, 0x2001, 0x0, 0x4000000000000000, 0x0, 0xa562, 0x0, 0x80000005, 0x7, 0x0, 0x5, 0x8, 0x1, 0xfffffffffffffffd, 0x2, 0xfffffffffffffffe, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x101, 0x0, 0x7, 0x4, 0x1553, 0x40, 0x0, 0x1, 0x0, 0xf65]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresgid(0xee00, 0xee01, 0x0) setgroups(0x0, 0x0) setuid(0xee00) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 5.438418355s ago: executing program 2 (id=1471): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x7, 0x1c, &(0x7f0000000100)=ANY=[@ANYRES16, @ANYRES32, @ANYBLOB="0000000000000000b7f8bf4b381e028f02000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000001008050004000000185400000d00000000000000000000004095ff0740f5157d180000000600000000000000830a000085100000020000009500000000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b7020000020000008500000085000000b7"], 0x0, 0xf, 0x0, 0x0, 0x40f00, 0xdff007ab5d5402d0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c40000000000000000100000000"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000030feffff720af0fff8ffffff61a4f0ff000000002d040000000000003d400300000000006504000001ed000079130000000000006c44000000000000"], 0x0}, 0x94) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x128}, 0x1, 0x0, 0x0, 0x20000040}, 0x8011) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400404"], 0x7) 5.102495942s ago: executing program 2 (id=1473): syz_emit_ethernet(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00') syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10004040}, 0x10) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setitimer(0x0, &(0x7f0000000180)={{0x77359400}}, 0x0) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x8000) read(r2, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000180)={0x335, @tick=0xe, 0x42, {}, 0x2}) tkill(r1, 0x7) 4.990496524s ago: executing program 3 (id=1474): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {}, 0x1}, 0x18) connect$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x1, 0xf0}}, 0x18) sendmmsg(r0, &(0x7f0000004300)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000340)="462ebbe6d9073d6fa34c2d28aa708936bb19e656da2f34ecdbf8f27b8f9dd2ec16ada05787201e46e7036b00bbb65ff0a8cadc7fb7831750f1edb022515b25d6e1fa50dad846b3ee57a293373af86975a635ca51bb40ed19", 0x58}, {&(0x7f00000003c0)="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", 0x6a2}], 0x2}}], 0x1, 0xf5) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}}, 0x18) sendmmsg(r2, &(0x7f0000004300)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000340)="462ebbe6d9073d6fa34c2d28aa708936bb19e656da2f34ecdbf8f27b8f9dd2ec16ada05787201e46e7036b00bbb65ff0a8cadc7fb7831750f1edb022515b25d6e1fa50dad846b3ee57a293373af86975a635ca51bb40ed19", 0x58}, {&(0x7f00000003c0)="ba0806f7974098b7201514a5e6f35395a8a7edcda4309e5a638a81366c5d0f119a231a5462c06cda314dbd3b5437fc61a3153d140a4d0c9c59cbe1a8b3bf5e564de1cad214b8431ae21aed41a2cde48a12f29c20d7a214c24d2bdbbc4421f6908b5ee9fe755168be5deb9e16613a8c215e2b44e8d06be4b6d0bf30868765fe1a1a05def3639bd2b89ede6975868d70fcac2de92e6661b6a33c3f3c0dee05295baca225b7e3e8985b217328cacfaa945e0221d3a76e1177a420c7daaa142ce546ca3ff6e8b91197f7a94e98d072e8d9b348591d9fca29dd6b9ec352d74edd1ce0c63ad64caaa1e30e24ac0305c5999b5545194ec572ba27fe4b543e3f7633b2d8d9639a30138f1efaade9f82fc877cf51130c8570f56fb41c0f5515cc9df80e2cd543be16799866ba259062726d99a5a6d7bda02334035b126c1ab323e2f820b050c9773a1098a1b9817f1a408dee2a2f7c91a5cebba6ace07171ce236ec47bce5dcd81bc685d4cb3bfcfbc24774aedf1f388df7db5aa5a572b086371a74d9f470da1f57ca8cb2ecb017c001f64723146442c217f3c91e2bbe4bc7610a1909048488fed84295b058272f42d812c7e5738a90f017bd49d5c849e42e18e1670a89fd20db5e1d6529c9cec7f44318e2a478f3b81375f72414e076646b6726de3e78438df63d631d0354d90e9de003320ffabb2c81576a6c5d2a769b83cb85c23a91ee49f607c8059932f3cbbf78a6d9edd2261101fb3176a6a4e2f9ac5f02144076c24ff2233104df6d53b553d19389eb4c48bc6eb88f3f950e9d27681502390eb01ccae9e9b730fdca1c55a7255b71a33191ac570ad056254e1a69ad5554b9380e53883883d0e535ecdf58516b416c15a24754b9a25ec06b8af3e40052881865b87150edd413e22858ba4e943b7a8a3ae435c4bb600c9b5678896e224b4dfc3c97e270fff363880acc4d6d2fd18de851ba33ae4afc4263e1e53ae4eb071a3230ee296930d76cd3d5bb96f3c5942c9a29207ca16f5854dba086d5c1c05cc968c4561941a749bfb44f9ede6d0bb3c00dedf93b1210eca37e873718ccdf7cc055d7bab4dd77ff95f3f20f41a92830c62f182ac3fb847ce8df7fdb3f616660bb752e4a86157f8d8c5ae61139cc76b38d9fbf84fc6429fed5deeb995998d2d8cf6547e7bff62129629d7087495d57b47e9bfe5301a1a7311569b0e28f5049ae88869f20c7cb4f6833d235c02cb9fca9ecc1be493f2bef37eadc3706e220b52b4ad24ee2f68346114be52c1dd3fa1b373c2272d3344b63111459934f1a6580d26b0c854fe0cd485c6996b6fe807b122b1a30af24610cdddbbdde5601d35a4f66cdd5a547870bca1182273f2dd236b7227bc9015026a7610c321279487c1d3ad009069eaa0a8c0939e507b8609ea5d3c6a3fc8d28a8eb599b12dddffdeaa5ce05ccd902627239ea537253d6be666b94f244a5c9525bb4f535496bbc3bf37fb20997d0b9054b9f59a1d202a94e9333a47f436fee2202999b76a1914b6c8595339d91bc07f302f2918d1bd933b497f778d61acf6ff304314d9b95cfc7e722dd28dd86a92ddcad07b96f46ae9ca4ae3ed8f0786668b531d9b680eeda7728b9d918febe3d387099314f104cba399acc360248a5262e97af554bd550e0e3c9353c1f1d603ad28f9e1e351a420223bfa4c18adc440e3e16ec47c818a28ed4c1683dd076e4424ef2bc9980aec0e3cb255a34b590c2e387ecac30be18e1fda22311e2993f4ae17172a1048b84ee5a7b33970058b55a43eac46eb5ec05d53b7031cec0e121b2e0947fa998eecd231daa2d5b1a875bee2e834610cd363cc7644911a34162bf247593e2cb8c8c62091f17532fb903eea3b10135b6aaf7ae7d82998f1063907de807b60763a9d34b3af13019d99148f3ab7fa5430523df350ba3105c717764392be28a24c08c20e38f87cf19904b0dff0c9ec3f1d83184923ec679dc06149f8465a6b0eedab15742ebd4fba0e5308c968e7db234d4c33024ff28439323af1ec1bded0dde9dd08ebe72c1782d269cf08db95e9dd431355f4a7402e4a31fee601362d32f05e23ba00bfae85f018b54d7cd38929b8e1e9bd16b7b07faad560f5ff07311d68e7fe25209fe1e0b862d2d19d551cdb4a5ce04159fde81a995a927d2b3b1ef83db81b71255ac8c2a00bce0fc0b525214f57c77749c9b791f8d779a71453183661a41dadec853f6922b485a73ee7835d5ba9a2c88be84826793706a991ce5326b0bb1cfe4dca625e32824e42a347a65305ee2cd44f6291aef2acf979705ccbdd2277cff875198d26176b81669a8eef544d5d9b5b16a4f4bb3b2895254a5dfc5a40f8121d366a4e8150d0fba93e2f443c8b378763808e42", 0x695}], 0x2}}], 0x1, 0xf5) 4.886732106s ago: executing program 1 (id=1475): r0 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a0000070800024000000002090001007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x4044010}, 0x0) recvmsg$unix(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/54, 0x36}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a4", 0x1b}], 0x1}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045000028006700000a06"], 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 4.474758695s ago: executing program 1 (id=1476): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x84, 0x2c, 0xd2f, 0x10b52c, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff5, 0x10}, {}, {0x8, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xe, 0x6, 0x4, 0x2, 0x4000000}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24018084}, 0x20000000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40000, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) close(r7) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r10, &(0x7f0000000200)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r9, 0x42}, 0x80, &(0x7f0000000700)=[{&(0x7f00000001c0)="27030200dc0f14000e000f00fdc6c1020000ff8407c2fb7fe0406e52534b4f6b3d327db412f400000000030000", 0x2d}], 0x1}, 0x4005) 4.397811477s ago: executing program 3 (id=1477): r0 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) syz_open_dev$MSR(0x0, 0x7, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0xc0800) r1 = getpgrp(0x0) sched_setaffinity(r1, 0xfffffffffffffdc3, &(0x7f00000000c0)=0x5) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) readv(r0, &(0x7f0000002b80)=[{&(0x7f0000002bc0)=""/4096, 0x1000}], 0x1) readv(r0, 0x0, 0x0) 3.995325666s ago: executing program 0 (id=1478): syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) set_mempolicy(0x5, &(0x7f0000000000)=0x7, 0x6) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r5 = openat(r4, &(0x7f0000000080)='./bus\x00', 0x0, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000200)=@o_path={0x0}, 0x18) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x1c1002, 0x50) sendfile(r6, r5, 0x0, 0x7fffffff) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) write$vhost_msg(r1, 0x0, 0x0) read$char_usb(r1, &(0x7f0000000140)=""/92, 0x5c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001c000100fefffffffbdbdf250a00", @ANYRES32=0x0, @ANYBLOB="0000280914000100fe8000e3ed89e26fa7591f7c000000aa"], 0x30}}, 0x0) ioctl$TCSETS(r0, 0x40384708, &(0x7f0000000080)={0x8, 0x1, 0x609152b0, 0x10000000, 0xe, "3eccd2000500"}) 1.754910353s ago: executing program 3 (id=1479): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = accept4$llc(0xffffffffffffffff, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000200)=0x10, 0x800) setsockopt(r3, 0x6, 0x5, &(0x7f00000002c0)="c78d0503fab443aa61cf320c3aebd26386289febe4", 0x15) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004f3000/0x1000)=nil, 0x1000, 0x9, 0x12, r6, 0xd9de2000) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(r8, 0x0, &(0x7f00000005c0)) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newlink={0x3c, 0x10, 0x437, 0xffdffffe, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x704c3, 0xc4a48b7f26bf141b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20a7d52d1a3e1087}, 0x1000c014) sendmmsg$inet(r7, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000340)={0x10000002}) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.634504265s ago: executing program 1 (id=1480): socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x4, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x100) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0), 0x60081, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r1, 0x404c4701, 0x0) ioctl$TIOCSTI(r1, 0x5412, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000280)=0xb3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000001c0)=0x8) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710, @host}, 0x10) writev(r2, 0x0, 0x0) 1.610483456s ago: executing program 0 (id=1481): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x7, 0x1c, &(0x7f0000000100)=ANY=[@ANYRES16, @ANYRES32, @ANYBLOB="0000000000000000b7f8bf4b381e028f02000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000001008050004000000185400000d00000000000000000000004095ff0740f5157d180000000600000000000000830a000085100000020000009500000000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b7020000020000008500000085000000b7"], 0x0, 0xf, 0x0, 0x0, 0x40f00, 0xdff007ab5d5402d0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c40000000000000000100000000"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000030feffff720af0fff8ffffff61a4f0ff000000002d040000000000003d400300000000006504000001ed000079130000000000006c44000000000000"], 0x0}, 0x94) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x128}, 0x1, 0x0, 0x0, 0x20000040}, 0x8011) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400404"], 0x7) 1.438519409s ago: executing program 2 (id=1482): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) recvfrom(r0, &(0x7f0000001380)=""/179, 0xb3, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d382e23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb", 0x83}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda3", 0x2d}], 0x2) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 1.230504974s ago: executing program 1 (id=1483): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x182000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000180)={0x356, 0xa0, 0x0, 0x0, 0x6, 0x0, 0x8, 0x0, {0x10, 0x4}, {0xc0, 0xb, 0x40020000}, {0x0, 0x8}, {0x4, 0xb}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1, 0xf, 0xb, 0x400009, 0x3, 0x0, 0x3f, 0x1, 0x0, 0x7}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f00000000c0)=0x80) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = creat(&(0x7f0000019080)='./file0\x00', 0xecf86c37d530494c) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x13, r4, 0x0) syz_clone3(&(0x7f0000001240)={0x200200000, 0x0, 0x0, 0x0, {0x3e}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, 0x0, &(0x7f0000000040)) 1.130101586s ago: executing program 0 (id=1484): r0 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a0000070800024000000002090001007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x4044010}, 0x0) recvmsg$unix(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/54, 0x36}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a4", 0x1b}], 0x1}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045000028006700000a06"], 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 1.064490758s ago: executing program 1 (id=1485): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {}, 0x1}, 0x18) connect$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x1, 0xf0}}, 0x18) sendmmsg(r0, &(0x7f0000004300)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000340)="462ebbe6d9073d6fa34c2d28aa708936bb19e656da2f34ecdbf8f27b8f9dd2ec16ada05787201e46e7036b00bbb65ff0a8cadc7fb7831750f1edb022515b25d6e1fa50dad846b3ee57a293373af86975a635ca51bb40ed19", 0x58}, {&(0x7f00000003c0)="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", 0x6a2}], 0x2}}], 0x1, 0xf5) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}}, 0x18) sendmmsg(r2, &(0x7f0000004300)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000340)="462ebbe6d9073d6fa34c2d28aa708936bb19e656da2f34ecdbf8f27b8f9dd2ec16ada05787201e46e7036b00bbb65ff0a8cadc7fb7831750f1edb022515b25d6e1fa50dad846b3ee57a293373af86975a635ca51bb40ed19", 0x58}, {&(0x7f00000003c0)="ba0806f7974098b7201514a5e6f35395a8a7edcda4309e5a638a81366c5d0f119a231a5462c06cda314dbd3b5437fc61a3153d140a4d0c9c59cbe1a8b3bf5e564de1cad214b8431ae21aed41a2cde48a12f29c20d7a214c24d2bdbbc4421f6908b5ee9fe755168be5deb9e16613a8c215e2b44e8d06be4b6d0bf30868765fe1a1a05def3639bd2b89ede6975868d70fcac2de92e6661b6a33c3f3c0dee05295baca225b7e3e8985b217328cacfaa945e0221d3a76e1177a420c7daaa142ce546ca3ff6e8b91197f7a94e98d072e8d9b348591d9fca29dd6b9ec352d74edd1ce0c63ad64caaa1e30e24ac0305c5999b5545194ec572ba27fe4b543e3f7633b2d8d9639a30138f1efaade9f82fc877cf51130c8570f56fb41c0f5515cc9df80e2cd543be16799866ba259062726d99a5a6d7bda02334035b126c1ab323e2f820b050c9773a1098a1b9817f1a408dee2a2f7c91a5cebba6ace07171ce236ec47bce5dcd81bc685d4cb3bfcfbc24774aedf1f388df7db5aa5a572b086371a74d9f470da1f57ca8cb2ecb017c001f64723146442c217f3c91e2bbe4bc7610a1909048488fed84295b058272f42d812c7e5738a90f017bd49d5c849e42e18e1670a89fd20db5e1d6529c9cec7f44318e2a478f3b81375f72414e076646b6726de3e78438df63d631d0354d90e9de003320ffabb2c81576a6c5d2a769b83cb85c23a91ee49f607c8059932f3cbbf78a6d9edd2261101fb3176a6a4e2f9ac5f02144076c24ff2233104df6d53b553d19389eb4c48bc6eb88f3f950e9d27681502390eb01ccae9e9b730fdca1c55a7255b71a33191ac570ad056254e1a69ad5554b9380e53883883d0e535ecdf58516b416c15a24754b9a25ec06b8af3e40052881865b87150edd413e22858ba4e943b7a8a3ae435c4bb600c9b5678896e224b4dfc3c97e270fff363880acc4d6d2fd18de851ba33ae4afc4263e1e53ae4eb071a3230ee296930d76cd3d5bb96f3c5942c9a29207ca16f5854dba086d5c1c05cc968c4561941a749bfb44f9ede6d0bb3c00dedf93b1210eca37e873718ccdf7cc055d7bab4dd77ff95f3f20f41a92830c62f182ac3fb847ce8df7fdb3f616660bb752e4a86157f8d8c5ae61139cc76b38d9fbf84fc6429fed5deeb995998d2d8cf6547e7bff62129629d7087495d57b47e9bfe5301a1a7311569b0e28f5049ae88869f20c7cb4f6833d235c02cb9fca9ecc1be493f2bef37eadc3706e220b52b4ad24ee2f68346114be52c1dd3fa1b373c2272d3344b63111459934f1a6580d26b0c854fe0cd485c6996b6fe807b122b1a30af24610cdddbbdde5601d35a4f66cdd5a547870bca1182273f2dd236b7227bc9015026a7610c321279487c1d3ad009069eaa0a8c0939e507b8609ea5d3c6a3fc8d28a8eb599b12dddffdeaa5ce05ccd902627239ea537253d6be666b94f244a5c9525bb4f535496bbc3bf37fb20997d0b9054b9f59a1d202a94e9333a47f436fee2202999b76a1914b6c8595339d91bc07f302f2918d1bd933b497f778d61acf6ff304314d9b95cfc7e722dd28dd86a92ddcad07b96f46ae9ca4ae3ed8f0786668b531d9b680eeda7728b9d918febe3d387099314f104cba399acc360248a5262e97af554bd550e0e3c9353c1f1d603ad28f9e1e351a420223bfa4c18adc440e3e16ec47c818a28ed4c1683dd076e4424ef2bc9980aec0e3cb255a34b590c2e387ecac30be18e1fda22311e2993f4ae17172a1048b84ee5a7b33970058b55a43eac46eb5ec05d53b7031cec0e121b2e0947fa998eecd231daa2d5b1a875bee2e834610cd363cc7644911a34162bf247593e2cb8c8c62091f17532fb903eea3b10135b6aaf7ae7d82998f1063907de807b60763a9d34b3af13019d99148f3ab7fa5430523df350ba3105c717764392be28a24c08c20e38f87cf19904b0dff0c9ec3f1d83184923ec679dc06149f8465a6b0eedab15742ebd4fba0e5308c968e7db234d4c33024ff28439323af1ec1bded0dde9dd08ebe72c1782d269cf08db95e9dd431355f4a7402e4a31fee601362d32f05e23ba00bfae85f018b54d7cd38929b8e1e9bd16b7b07faad560f5ff07311d68e7fe25209fe1e0b862d2d19d551cdb4a5ce04159fde81a995a927d2b3b1ef83db81b71255ac8c2a00bce0fc0b525214f57c77749c9b791f8d779a71453183661a41dadec853f6922b485a73ee7835d5ba9a2c88be84826793706a991ce5326b0bb1cfe4dca625e32824e42a347a65305ee2cd44f6291aef2acf979705ccbdd2277cff875198d26176b81669a8eef544d5d9b5b16a4f4bb3b2895254a5dfc5a40f8121d366a4e8150d0fba93e2f443c8b378763808e42731814618de1e4", 0x69c}], 0x2}}], 0x1, 0xf5) 571.882268ms ago: executing program 0 (id=1486): r0 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r0, &(0x7f0000000b40)=[{&(0x7f0000000f00)=""/46, 0x2e}], 0x1, 0x4, 0x10003ff) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2) r1 = socket(0x10, 0x80000, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000080), 0xfffffffffffffffa, 0x101000) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000000a40)={{0x2, 0x0, 0x40, 0x5, 'syz0\x00', 0x10000003}, 0x0, [0x3, 0x8800000, 0xfffffffffffffffe, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffff52, 0x53ad, 0x1, 0x8000000000000000, 0x8, 0x0, 0x4000000000000, 0xfffffffffffffffe, 0xfffffffffffffff7, 0x0, 0xfffffffffffffff5, 0x0, 0x0, 0x3, 0x7, 0xc, 0x9, 0x4, 0x0, 0x7fffffff, 0x6, 0x3, 0xfffffffffffffffd, 0x80000000002, 0x0, 0x4000000000000, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffa, 0x6, 0x6, 0x2, 0x3, 0x61, 0x9, 0xfffffffffffffc, 0x8, 0xfffffffffffffffe, 0x80000001, 0x0, 0x1ffffffffffe, 0x1, 0xfffffffffffffff8, 0x0, 0x1, 0xbd1, 0x8000000000000000, 0xfffffffffff7fffc, 0x0, 0x0, 0x7, 0x0, 0x3ff, 0x7, 0x9, 0x200, 0x9, 0x5, 0xffff, 0xfffffffffffffff8, 0x2, 0x0, 0x0, 0x10001, 0xebc, 0x0, 0x0, 0x74c, 0x6, 0x6, 0x400000000067, 0x7, 0x10000000, 0x7fffffff, 0x401, 0xfffffffffffffffe, 0x1, 0x76e, 0x0, 0x4, 0x5, 0x7, 0x0, 0xa7ea, 0x0, 0xf32, 0x9, 0x2001, 0x0, 0x4000000000000000, 0x0, 0xa562, 0x0, 0x80000005, 0x7, 0x0, 0x5, 0x8, 0x1, 0xfffffffffffffffd, 0x2, 0xfffffffffffffffe, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x101, 0x0, 0x7, 0x4, 0x1553, 0x40, 0x0, 0x1, 0x0, 0xf65]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresgid(0xee00, 0xee01, 0x0) setgroups(0x0, 0x0) setuid(0xee00) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 494.4971ms ago: executing program 1 (id=1487): r0 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) syz_open_dev$MSR(0x0, 0x7, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0xc0800) r1 = getpgrp(0x0) sched_setaffinity(r1, 0xfffffffffffffdc3, &(0x7f00000000c0)=0x5) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) readv(r0, &(0x7f0000002b80)=[{&(0x7f0000002bc0)=""/4096, 0x1000}], 0x1) readv(r0, 0x0, 0x0) 0s ago: executing program 2 (id=1488): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002480)=@newtfilter={0x4a8, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x474, 0x2, [@TCA_U32_POLICE={0x44c, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x80000, 0x3, 0xf, 0xfdb, 0x1, 0x80, 0x7, 0x7, 0x40000000, 0xaa04, 0x80000001, 0x99, 0x8000, 0x1000, 0x3, 0x0, 0x7fffffff, 0x80, 0x1, 0x7, 0x0, 0x9, 0x4, 0x5, 0x80000001, 0x2, 0xe0, 0x9, 0x1, 0x80000000, 0x1, 0xffff8001, 0x6, 0x10001, 0x7, 0x10000, 0x30, 0x807, 0x1000, 0xfff, 0x7, 0x2, 0x5, 0x48a, 0x9, 0x1000, 0x7, 0x7198, 0x8, 0x80000001, 0x1, 0x101, 0x3, 0x7, 0x2, 0x8, 0x10000, 0x2, 0x1, 0x2, 0x6, 0x9, 0x13, 0x2, 0xffff, 0x80, 0xbf77, 0x8, 0xc52, 0x6, 0x9, 0x7, 0x9, 0x5, 0x8, 0x3, 0x8, 0x5, 0x8, 0x1, 0x3, 0x7fffffff, 0x8, 0x2845, 0x2, 0xe9, 0x2a, 0x3, 0x891, 0x8, 0x1, 0x12, 0x6, 0xfff, 0xffffc9b5, 0x80000000, 0x2, 0x6, 0x6, 0xaa, 0x0, 0x8, 0x0, 0x0, 0x5, 0x1, 0x2, 0x40, 0x4, 0x7, 0x8, 0x8000, 0x4, 0xffffff2d, 0x0, 0xffff7fff, 0x2, 0x8f4, 0x6, 0x2f1e, 0x8, 0xfcb, 0x8, 0x1, 0x9, 0x6fe68a84, 0x200, 0x1, 0xfffffff9, 0xb, 0x1, 0xab, 0x9, 0x7, 0x0, 0xe, 0x10001, 0x8, 0xa, 0x6, 0x6, 0x9f, 0x7, 0xffff519d, 0x9, 0x4, 0x2, 0x3, 0x1, 0x2, 0x9, 0x4ae, 0x8, 0x1e9, 0x9, 0x105, 0x200, 0x4, 0x4, 0x1, 0x5, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80, 0x2, 0x2, 0x1, 0x5, 0x101, 0x7, 0x4, 0x9, 0x7e32, 0x8800, 0x4, 0xf85f, 0x10000, 0x800, 0xffffffff, 0x7, 0x4af, 0x7e25, 0x1, 0x5027, 0x8, 0x10000, 0x4, 0x3, 0x7, 0x680, 0xc1, 0x2, 0x7, 0x8, 0x401, 0x74dc, 0x400000, 0x401, 0x92c, 0xffff32d2, 0x4, 0xafcf, 0x7f, 0x5, 0xffff0000, 0x0, 0x8, 0x200, 0x4a, 0x4000, 0x0, 0x9, 0x10000, 0x4d4fbb35, 0xb2, 0xe752, 0x5, 0x0, 0x100, 0x8001, 0x6, 0xfffffff8, 0x9, 0x2, 0x81, 0x2, 0xc, 0xa, 0x94, 0x3b0, 0x401, 0x118966c9, 0xe56, 0x8, 0x4, 0x1800000, 0x6a, 0x9d6, 0x200, 0x2, 0x3d, 0x7, 0x8000, 0x7e, 0x6, 0x5, 0x7, 0x4, 0x3, 0xff, 0xe, 0x4, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x4, 0x6, 0x0, {0x7, 0x2, 0x3, 0x10, 0x4, 0x8}, {0x6, 0x0, 0x9, 0xe23, 0x100, 0x5}, 0x7, 0x99, 0xef2}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xadd1}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0x4a8}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040084) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.234' (ED25519) to the list of known hosts. [ 83.953160][ T5761] cgroup: Unknown subsys name 'net' [ 84.087606][ T5761] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.794704][ T5761] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.855679][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.865049][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.872741][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.881149][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.888552][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.898820][ T5778] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.906744][ T5778] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.914769][ T5778] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.925337][ T5084] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.942211][ T5779] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.951196][ T5779] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.003386][ T5779] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.011945][ T5779] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.022516][ T5779] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.030156][ T5778] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 88.037302][ T5779] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 88.045505][ T5779] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.055050][ T5779] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.065643][ T5779] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.097067][ T5775] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.108219][ T5775] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.116553][ T5775] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.124699][ T5775] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 88.132202][ T5775] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.711470][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 88.741195][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 88.808854][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 88.857823][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 88.952421][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.961440][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.969403][ T5772] bridge_slave_0: entered allmulticast mode [ 88.977220][ T5772] bridge_slave_0: entered promiscuous mode [ 88.993865][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.001188][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.008557][ T5772] bridge_slave_1: entered allmulticast mode [ 89.016148][ T5772] bridge_slave_1: entered promiscuous mode [ 89.122195][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.132487][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.139821][ T5780] bridge_slave_0: entered allmulticast mode [ 89.149882][ T5780] bridge_slave_0: entered promiscuous mode [ 89.158000][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.165157][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.172573][ T5785] bridge_slave_0: entered allmulticast mode [ 89.180934][ T5785] bridge_slave_0: entered promiscuous mode [ 89.204853][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.217963][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.228223][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.235435][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.243442][ T5780] bridge_slave_1: entered allmulticast mode [ 89.251036][ T5780] bridge_slave_1: entered promiscuous mode [ 89.269649][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.278675][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.286089][ T5785] bridge_slave_1: entered allmulticast mode [ 89.293873][ T5785] bridge_slave_1: entered promiscuous mode [ 89.366448][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.373765][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.384152][ T5776] bridge_slave_0: entered allmulticast mode [ 89.391588][ T5776] bridge_slave_0: entered promiscuous mode [ 89.403149][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.417342][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.430483][ T5772] team0: Port device team_slave_0 added [ 89.439805][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.452455][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.462922][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.471067][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.479108][ T5776] bridge_slave_1: entered allmulticast mode [ 89.486221][ T5776] bridge_slave_1: entered promiscuous mode [ 89.519095][ T5772] team0: Port device team_slave_1 added [ 89.604533][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.615211][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.644907][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.660967][ T5785] team0: Port device team_slave_0 added [ 89.671386][ T5780] team0: Port device team_slave_0 added [ 89.692466][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.702662][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.710176][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.737275][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.758155][ T5785] team0: Port device team_slave_1 added [ 89.781715][ T5780] team0: Port device team_slave_1 added [ 89.801273][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.877848][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.885212][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.912112][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.935688][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.942810][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.969074][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.987965][ T5772] hsr_slave_0: entered promiscuous mode [ 89.994871][ T5772] hsr_slave_1: entered promiscuous mode [ 90.001748][ T5775] Bluetooth: hci0: command tx timeout [ 90.010495][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.018073][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.044512][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.078517][ T5776] team0: Port device team_slave_0 added [ 90.088396][ T5776] team0: Port device team_slave_1 added [ 90.095752][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.103072][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.129681][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.159347][ T5778] Bluetooth: hci2: command tx timeout [ 90.159791][ T5779] Bluetooth: hci1: command tx timeout [ 90.171364][ T5775] Bluetooth: hci3: command tx timeout [ 90.247946][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.255002][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.281566][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.295145][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.302527][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.329194][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.345243][ T5785] hsr_slave_0: entered promiscuous mode [ 90.352569][ T5785] hsr_slave_1: entered promiscuous mode [ 90.360139][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.368216][ T5785] Cannot create hsr debugfs directory [ 90.437288][ T5776] hsr_slave_0: entered promiscuous mode [ 90.443983][ T5776] hsr_slave_1: entered promiscuous mode [ 90.450707][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.458460][ T5776] Cannot create hsr debugfs directory [ 90.470526][ T5780] hsr_slave_0: entered promiscuous mode [ 90.479059][ T5780] hsr_slave_1: entered promiscuous mode [ 90.485651][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.494800][ T5780] Cannot create hsr debugfs directory [ 90.955957][ T5772] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.975094][ T5772] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.986306][ T5772] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.998615][ T5772] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.075519][ T5780] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.107724][ T5780] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.130601][ T5780] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.149991][ T5780] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.206006][ T5776] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.218863][ T5776] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.233944][ T5776] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.270423][ T5776] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.343201][ T5785] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.375152][ T5785] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.388054][ T5785] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.400195][ T5785] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.489048][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.555570][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.584099][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.591572][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.621504][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.628848][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.663073][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.724313][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.742578][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.788602][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.795802][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.831914][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.849226][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.856412][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.900695][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.907947][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.933074][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.940334][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.972073][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.069983][ T5776] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.089761][ T5779] Bluetooth: hci0: command tx timeout [ 92.119751][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.213119][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.220426][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.237175][ T5779] Bluetooth: hci1: command tx timeout [ 92.242658][ T5779] Bluetooth: hci2: command tx timeout [ 92.247635][ T5775] Bluetooth: hci3: command tx timeout [ 92.280384][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.287733][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.322167][ T172] cfg80211: failed to load regulatory.db [ 92.358791][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.467687][ T5785] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.542831][ T5772] veth0_vlan: entered promiscuous mode [ 92.582253][ T5772] veth1_vlan: entered promiscuous mode [ 92.699504][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.709784][ T5772] veth0_macvtap: entered promiscuous mode [ 92.743519][ T5772] veth1_macvtap: entered promiscuous mode [ 92.844188][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.872000][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.893070][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.907265][ T5776] veth0_vlan: entered promiscuous mode [ 92.922634][ T5772] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.933193][ T5772] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.943471][ T5772] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.952686][ T5772] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.984011][ T5776] veth1_vlan: entered promiscuous mode [ 93.125291][ T5780] veth0_vlan: entered promiscuous mode [ 93.145462][ T5776] veth0_macvtap: entered promiscuous mode [ 93.201775][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.214067][ T5780] veth1_vlan: entered promiscuous mode [ 93.223732][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.233951][ T5776] veth1_macvtap: entered promiscuous mode [ 93.249075][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.318353][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.319459][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.326263][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.340440][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.357478][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.383169][ T5780] veth0_macvtap: entered promiscuous mode [ 93.409966][ T5780] veth1_macvtap: entered promiscuous mode [ 93.421083][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.445455][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.459714][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.494810][ T5776] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.505112][ T5776] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.515902][ T5776] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.525422][ T5776] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.555074][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.567552][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.578048][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.589785][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.601914][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.673354][ T5785] veth0_vlan: entered promiscuous mode [ 93.718926][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.731334][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.750356][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.765955][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.780103][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.849356][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.878272][ T5780] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.892094][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.894493][ T5780] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.909817][ T5780] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.919843][ T5780] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.176478][ T5779] Bluetooth: hci0: command tx timeout [ 94.241054][ T5785] veth1_vlan: entered promiscuous mode [ 94.319654][ T5775] Bluetooth: hci2: command tx timeout [ 94.319654][ T5778] Bluetooth: hci1: command tx timeout [ 94.333719][ T5779] Bluetooth: hci3: command tx timeout [ 94.829788][ T3002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.890867][ T3002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.953331][ T5785] veth0_macvtap: entered promiscuous mode [ 95.596491][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.605575][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.648225][ T5785] veth1_macvtap: entered promiscuous mode [ 95.754337][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.772884][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.783723][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.795730][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.806227][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.817839][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.002387][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.199116][ T3002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.286954][ T5779] Bluetooth: hci0: command tx timeout [ 96.293296][ T3002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.404317][ T5779] Bluetooth: hci1: command tx timeout [ 96.412469][ T5779] Bluetooth: hci3: command tx timeout [ 96.424581][ T5775] Bluetooth: hci2: command tx timeout [ 96.470132][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.496849][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.507392][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.519099][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.529558][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.546945][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.560478][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.581828][ T5785] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.590754][ T5785] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.601611][ T5785] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.621407][ T5785] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.832722][ T3506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.844206][ T3506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.940958][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.953206][ T5861] syzkaller0: entered promiscuous mode [ 96.965646][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.976494][ T5861] syzkaller0: entered allmulticast mode [ 97.228182][ T172] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 97.285807][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888030964c00: rx timeout, send abort [ 97.298305][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888030964c00: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 97.313344][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888030965000: rx timeout, send abort [ 97.322078][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888030965000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 97.646998][ T172] usb 3-1: Using ep0 maxpacket: 8 [ 97.736887][ T172] usb 3-1: unable to get BOS descriptor or descriptor too short [ 97.775240][ T172] usb 3-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice= 0.40 [ 97.809135][ T172] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.972436][ T172] usb 3-1: Product: syz [ 97.976701][ T172] usb 3-1: Manufacturer: syz [ 97.981564][ T172] usb 3-1: SerialNumber: syz [ 98.018281][ T5869] Zero length message leads to an empty skb [ 98.608356][ T5884] ======================================================= [ 98.608356][ T5884] WARNING: The mand mount option has been deprecated and [ 98.608356][ T5884] and is ignored by this kernel. Remove the mand [ 98.608356][ T5884] option from the mount to silence this warning. [ 98.608356][ T5884] ======================================================= [ 98.758457][ T5884] overlayfs: failed to resolve './file1': -2 [ 99.284447][ T172] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 99.294848][ T172] usb 3-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8213); report any issues to g@b4.vu [ 99.306207][ T172] usb 3-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 99.957722][ T172] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 100.091418][ T172] usb 3-1: USB disconnect, device number 2 [ 100.109211][ T5894] syzkaller0: entered promiscuous mode [ 100.114925][ T5894] syzkaller0: entered allmulticast mode [ 100.271138][ T5784] udevd[5784]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 101.295411][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88802ef0d000: rx timeout, send abort [ 101.306888][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88802ef0d000: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 101.321421][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88802d01c000: rx timeout, send abort [ 101.336980][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88802d01c000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 102.645883][ T5906] overlayfs: failed to resolve './file1': -2 [ 102.868499][ T5908] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23'. [ 106.590218][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88803113b400: rx timeout, send abort [ 106.600008][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88803113b400: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 106.615357][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888031139400: rx timeout, send abort [ 106.624626][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888031139400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 108.286853][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 110.014705][ T5971] syzkaller0: entered promiscuous mode [ 110.057250][ T5971] syzkaller0: entered allmulticast mode [ 111.621243][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805f5f8000: rx timeout, send abort [ 111.630484][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88805f5f8000: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 111.645257][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805f71ec00: rx timeout, send abort [ 111.654844][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88805f71ec00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 125.975214][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805f044800: rx timeout, send abort [ 125.984704][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88805f044800: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 126.000319][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805f044000: rx timeout, send abort [ 126.009592][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88805f044000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 128.141938][ T6127] syzkaller0: entered promiscuous mode [ 128.176031][ T6127] syzkaller0: entered allmulticast mode [ 130.379422][ T6165] netlink: 4 bytes leftover after parsing attributes in process `syz.1.86'. [ 130.916938][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 132.238449][ T6181] syzkaller0: entered promiscuous mode [ 132.244012][ T6181] syzkaller0: entered allmulticast mode [ 133.476978][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 134.073043][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.080078][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.202467][ T6193] syzkaller0: entered promiscuous mode [ 135.208980][ T6193] syzkaller0: entered allmulticast mode [ 137.723003][ T6243] netlink: 4 bytes leftover after parsing attributes in process `syz.1.101'. [ 138.596839][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 139.269071][ T6249] syzkaller0: entered promiscuous mode [ 139.274633][ T6249] syzkaller0: entered allmulticast mode [ 139.793427][ T6264] syzkaller0: entered promiscuous mode [ 139.799421][ T6264] syzkaller0: entered allmulticast mode [ 142.922920][ T6315] netlink: 4 bytes leftover after parsing attributes in process `syz.3.113'. [ 143.334280][ T6323] syzkaller0: entered promiscuous mode [ 143.343013][ T6323] syzkaller0: entered allmulticast mode [ 144.674596][ T6343] syzkaller0: entered promiscuous mode [ 144.686987][ T6343] syzkaller0: entered allmulticast mode [ 144.750351][ T6340] syzkaller0: entered promiscuous mode [ 144.755950][ T6340] syzkaller0: entered allmulticast mode [ 146.515529][ T6367] syzkaller0: entered promiscuous mode [ 146.538226][ T6367] syzkaller0: entered allmulticast mode [ 147.201889][ T6390] netlink: 4 bytes leftover after parsing attributes in process `syz.2.130'. [ 147.269375][ T6391] syzkaller0: entered promiscuous mode [ 147.277240][ T6391] syzkaller0: entered allmulticast mode [ 148.707481][ T6396] syzkaller0: entered promiscuous mode [ 148.713028][ T6396] syzkaller0: entered allmulticast mode [ 151.353849][ T6440] netlink: 4 bytes leftover after parsing attributes in process `syz.0.140'. [ 151.528334][ T6441] syzkaller0: entered promiscuous mode [ 151.555480][ T6441] syzkaller0: entered allmulticast mode [ 152.104177][ T6464] syzkaller0: entered promiscuous mode [ 152.110953][ T6464] syzkaller0: entered allmulticast mode [ 152.563102][ T6469] syzkaller0: entered promiscuous mode [ 152.576664][ T6469] syzkaller0: entered allmulticast mode [ 156.293784][ T6502] syzkaller0: entered promiscuous mode [ 156.307007][ T6502] syzkaller0: entered allmulticast mode [ 159.076891][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 160.318373][ T6531] syzkaller0: entered promiscuous mode [ 160.327592][ T6531] syzkaller0: entered allmulticast mode [ 162.114313][ T6546] syzkaller0: entered promiscuous mode [ 162.153023][ T6546] syzkaller0: entered allmulticast mode [ 162.300378][ T6551] netlink: 4 bytes leftover after parsing attributes in process `syz.2.155'. [ 162.596097][ T6556] syzkaller0: entered promiscuous mode [ 162.640327][ T6556] syzkaller0: entered allmulticast mode [ 164.606778][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 169.316815][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 169.692420][ T6608] syzkaller0: entered promiscuous mode [ 169.712151][ T6608] syzkaller0: entered allmulticast mode [ 169.984638][ T6614] netlink: 4 bytes leftover after parsing attributes in process `syz.3.174'. [ 172.017524][ T6640] syzkaller0: entered promiscuous mode [ 172.033920][ T6640] syzkaller0: entered allmulticast mode [ 177.126804][ T6693] netlink: 4 bytes leftover after parsing attributes in process `syz.2.187'. [ 179.556971][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 179.778486][ T6725] syzkaller0: entered promiscuous mode [ 179.784045][ T6725] syzkaller0: entered allmulticast mode [ 181.821516][ T6762] netlink: 4 bytes leftover after parsing attributes in process `syz.1.197'. [ 182.100774][ T6766] syzkaller0: entered promiscuous mode [ 182.121630][ T6766] syzkaller0: entered allmulticast mode [ 184.163594][ T6808] netlink: 4 bytes leftover after parsing attributes in process `syz.1.208'. [ 184.254051][ T6807] syzkaller0: entered promiscuous mode [ 184.266326][ T6807] syzkaller0: entered allmulticast mode [ 193.033028][ T6889] syzkaller0: entered promiscuous mode [ 193.056912][ T6889] syzkaller0: entered allmulticast mode [ 194.720911][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.727593][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.035117][ T6904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.219'. [ 196.552238][ T6927] syzkaller0: entered promiscuous mode [ 196.574661][ T6927] syzkaller0: entered allmulticast mode [ 197.655835][ T6956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.237'. [ 199.508760][ T6977] syzkaller0: entered promiscuous mode [ 199.536565][ T6977] syzkaller0: entered allmulticast mode [ 199.698256][ T6979] syzkaller0: entered promiscuous mode [ 199.709423][ T6979] syzkaller0: entered allmulticast mode [ 201.837192][ T7007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.250'. [ 202.044138][ T7012] binder: BINDER_SET_CONTEXT_MGR already set [ 202.051989][ T7012] binder: 7011:7012 ioctl 4018620d 200000004a80 returned -16 [ 202.157452][ T7016] syzkaller0: entered promiscuous mode [ 202.163017][ T7016] syzkaller0: entered allmulticast mode [ 202.363920][ T7022] syzkaller0: entered promiscuous mode [ 202.387842][ T7022] syzkaller0: entered allmulticast mode [ 202.740139][ T7040] netlink: 4 bytes leftover after parsing attributes in process `syz.3.260'. [ 203.226157][ T7050] syzkaller0: entered promiscuous mode [ 203.232099][ T7050] syzkaller0: entered allmulticast mode [ 206.057293][ T7104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.272'. [ 208.001337][ T7134] syzkaller0: entered promiscuous mode [ 208.007653][ T7134] syzkaller0: entered allmulticast mode [ 209.336891][ T7142] syzkaller0: entered promiscuous mode [ 209.342605][ T7142] syzkaller0: entered allmulticast mode [ 209.351978][ T7144] syzkaller0: entered promiscuous mode [ 209.364287][ T7144] syzkaller0: entered allmulticast mode [ 209.549799][ T7153] netlink: 4 bytes leftover after parsing attributes in process `syz.3.285'. [ 209.867274][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 210.276791][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 212.793840][ T7180] syzkaller0: entered promiscuous mode [ 212.819630][ T7180] syzkaller0: entered allmulticast mode [ 213.118551][ T5084] Bluetooth: hci1: command 0x0406 tx timeout [ 213.124816][ T5084] Bluetooth: hci2: command 0x0406 tx timeout [ 213.132440][ T5084] Bluetooth: hci3: command 0x0406 tx timeout [ 213.138825][ T5084] Bluetooth: hci0: command 0x0406 tx timeout [ 214.886485][ T7182] syzkaller0: entered promiscuous mode [ 214.892177][ T7182] syzkaller0: entered allmulticast mode [ 214.964944][ T7209] syzkaller0: entered promiscuous mode [ 214.987883][ T7209] syzkaller0: entered allmulticast mode [ 216.736865][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 218.215235][ T7241] syzkaller0: entered promiscuous mode [ 218.228370][ T7241] syzkaller0: entered allmulticast mode [ 218.883917][ T23] usb 4-1: unable to get BOS descriptor or descriptor too short [ 218.904926][ T23] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 218.919568][ T23] usb 4-1: can't read configurations, error -71 [ 220.058817][ T23] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 220.247029][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 220.266269][ T23] usb 4-1: unable to get BOS descriptor or descriptor too short [ 220.298745][ T7258] syzkaller0: entered promiscuous mode [ 220.304321][ T7258] syzkaller0: entered allmulticast mode [ 220.328470][ T23] usb 4-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice= 0.40 [ 220.337932][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.346051][ T23] usb 4-1: Product: syz [ 220.359632][ T23] usb 4-1: Manufacturer: syz [ 220.402780][ T23] usb 4-1: SerialNumber: syz [ 220.467819][ T7261] syzkaller0: entered promiscuous mode [ 220.473517][ T7261] syzkaller0: entered allmulticast mode [ 220.702108][ T7269] netlink: 4 bytes leftover after parsing attributes in process `syz.1.314'. [ 221.067429][ T7273] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 221.448555][ T23] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 222.247661][ T23] usb 4-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8213); report any issues to g@b4.vu [ 222.277210][ T23] usb 4-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 222.407976][ T23] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 222.494074][ T23] usb 4-1: USB disconnect, device number 3 [ 223.011620][ T5787] udevd[5787]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 223.456096][ T7295] syzkaller0: entered promiscuous mode [ 223.466606][ T7295] syzkaller0: entered allmulticast mode [ 225.356477][ T7338] netlink: 4 bytes leftover after parsing attributes in process `syz.2.324'. [ 227.252409][ T7361] overlayfs: missing 'lowerdir' [ 227.610525][ T7365] syzkaller0: entered promiscuous mode [ 227.667630][ T7365] syzkaller0: entered allmulticast mode [ 228.770469][ T7399] overlayfs: missing 'lowerdir' [ 229.162538][ T7406] netlink: 40 bytes leftover after parsing attributes in process `syz.1.345'. [ 231.337377][ T5775] Bluetooth: hci3: command 0x0406 tx timeout [ 231.813717][ T7429] overlayfs: missing 'lowerdir' [ 233.727955][ T27] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 233.768306][ T27] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 234.539718][ T7468] overlayfs: missing 'lowerdir' [ 235.443959][ T7477] netlink: 4 bytes leftover after parsing attributes in process `syz.3.367'. [ 238.197100][ T7504] overlayfs: missing 'lowerdir' [ 239.636963][ T27] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 239.850510][ T27] usb 4-1: Using ep0 maxpacket: 8 [ 240.539100][ T27] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 240.567732][ T27] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 240.590122][ T27] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 240.616867][ T27] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 240.657871][ T27] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 240.711000][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.363527][ T27] usb 4-1: GET_CAPABILITIES returned 0 [ 241.562138][ T27] usbtmc 4-1:16.0: can't read capabilities [ 241.579397][ T27] usb 4-1: USB disconnect, device number 4 [ 243.247028][ T2134] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 243.447865][ T2134] usb 2-1: Using ep0 maxpacket: 8 [ 243.477723][ T2134] usb 2-1: unable to get BOS descriptor or descriptor too short [ 243.514855][ T2134] usb 2-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice= 0.40 [ 243.526876][ T2134] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.535979][ T2134] usb 2-1: Product: syz [ 243.540886][ T2134] usb 2-1: Manufacturer: syz [ 243.545686][ T2134] usb 2-1: SerialNumber: syz [ 243.720856][ T5775] Bluetooth: hci0: unexpected event for opcode 0x042c [ 243.797323][ T5817] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 245.634768][ T2134] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 245.646137][ T2134] usb 2-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8213); report any issues to g@b4.vu [ 245.805270][ T2134] usb 2-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 246.768510][ T2134] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 246.794088][ T2134] usb 2-1: USB disconnect, device number 2 [ 246.911086][ T5773] udevd[5773]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 247.107533][ T7580] overlayfs: missing 'lowerdir' [ 247.146182][ T5817] usb 3-1: unable to get BOS descriptor or descriptor too short [ 247.156448][ T5817] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 247.207311][ T5817] usb 3-1: can't read configurations, error -71 [ 250.726618][ T7620] overlayfs: missing 'lowerdir' [ 251.065876][ T7623] syzkaller0: entered promiscuous mode [ 251.071690][ T7623] syzkaller0: entered allmulticast mode [ 254.783553][ T7678] overlayfs: missing 'lowerdir' [ 256.166804][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.173190][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.615836][ T7719] overlayfs: missing 'workdir' [ 258.895066][ T7727] netlink: 'syz.2.425': attribute type 1 has an invalid length. [ 259.180333][ T7731] syzkaller0: entered promiscuous mode [ 259.216090][ T7731] syzkaller0: entered allmulticast mode [ 260.659592][ T7752] overlayfs: missing 'workdir' [ 266.862325][ T5817] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 266.966894][ T7794] syz.0.442[7794]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 267.249884][ T5817] usb 2-1: Using ep0 maxpacket: 8 [ 267.297568][ T5817] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 267.465468][ T5817] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 267.600522][ T5817] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.610911][ T7798] overlayfs: missing 'workdir' [ 267.642476][ T5817] usb 2-1: config 0 descriptor?? [ 267.711385][ T7794] netlink: 'syz.0.442': attribute type 49 has an invalid length. [ 268.152685][ T7794] veth0_to_bond: entered promiscuous mode [ 268.158561][ T7794] veth0_to_bond: entered allmulticast mode [ 268.208688][ T5817] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 269.623037][ T7818] syzkaller0: entered promiscuous mode [ 269.641534][ T7818] syzkaller0: entered allmulticast mode [ 269.724854][ T8] usb 2-1: USB disconnect, device number 3 [ 273.664838][ T7842] netlink: 4 bytes leftover after parsing attributes in process `syz.0.449'. [ 273.899549][ T7864] syzkaller0: entered promiscuous mode [ 273.922766][ T7864] syzkaller0: entered allmulticast mode [ 273.930227][ T7868] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 273.986873][ T7868] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 274.032010][ T7872] Bluetooth: MGMT ver 1.22 [ 274.048119][ T7871] binder: BINDER_SET_CONTEXT_MGR already set [ 274.065287][ T7871] binder: 7869:7871 ioctl 4018620d 200000004a80 returned -16 [ 277.112560][ T7898] hugetlbfs: syz.1.460 (7898): Using mlock ulimits for SHM_HUGETLB is obsolete [ 277.304669][ T7900] netlink: 'syz.2.462': attribute type 1 has an invalid length. [ 277.622718][ T7902] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 277.687762][ T7902] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 277.941284][ T7909] binder: BINDER_SET_CONTEXT_MGR already set [ 277.954327][ T7909] binder: 7908:7909 ioctl 4018620d 200000004a80 returned -16 [ 281.859629][ T7935] netlink: 'syz.3.473': attribute type 1 has an invalid length. [ 282.147081][ T7937] binder: BINDER_SET_CONTEXT_MGR already set [ 282.167168][ T7937] binder: 7936:7937 ioctl 4018620d 200000004a80 returned -16 [ 285.775372][ T7978] binder: 7977:7978 ioctl c0306201 0 returned -14 [ 285.791048][ T7975] netlink: 'syz.3.482': attribute type 1 has an invalid length. [ 286.634253][ T28] audit: type=1326 audit(1783293280.830:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7996 comm="syz.1.480" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f16acf9de59 code=0x0 [ 286.658015][ C1] vkms_vblank_simulate: vblank timer overrun [ 287.687230][ T7999] syzkaller0: entered promiscuous mode [ 287.693760][ T7999] syzkaller0: entered allmulticast mode [ 291.998890][ T8041] binder: 8040:8041 ioctl c0306201 0 returned -14 [ 294.176586][ T8070] syzkaller0: entered promiscuous mode [ 294.196912][ T8070] syzkaller0: entered allmulticast mode [ 298.108282][ T8108] binder: 8107:8108 ioctl c0306201 0 returned -14 [ 300.075027][ T8130] syzkaller0: entered promiscuous mode [ 300.105028][ T8130] syzkaller0: entered allmulticast mode [ 302.327274][ T8182] netlink: 'syz.3.516': attribute type 1 has an invalid length. [ 305.527769][ T5775] Bluetooth: hci2: unexpected event for opcode 0x0419 [ 305.831091][ T8208] syzkaller0: entered promiscuous mode [ 305.877056][ T8208] syzkaller0: entered allmulticast mode [ 309.601068][ T5775] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 309.612953][ T5775] Bluetooth: hci2: Injecting HCI hardware error event [ 309.654816][ T5775] Bluetooth: hci2: hardware error 0x00 [ 311.923584][ T5775] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 315.574924][ T8286] netlink: 'syz.3.543': attribute type 1 has an invalid length. [ 317.614091][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.620664][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.910532][ T8311] trusted_key: syz.1.550 sent an empty control message without MSG_MORE. [ 318.318892][ T8319] syzkaller0: entered promiscuous mode [ 318.324498][ T8319] syzkaller0: entered allmulticast mode [ 322.467701][ T8366] syzkaller0: entered promiscuous mode [ 322.473274][ T8366] syzkaller0: entered allmulticast mode [ 325.621646][ T28] audit: type=1326 audit(1783293319.820:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8415 comm="syz.1.575" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f16acf9de59 code=0x0 [ 328.429627][ T8447] syzkaller0: entered promiscuous mode [ 328.435203][ T8447] syzkaller0: entered allmulticast mode [ 328.766988][ T8] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 328.973215][ T28] audit: type=1326 audit(1783293323.170:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8468 comm="syz.3.587" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa07cf9de59 code=0x0 [ 328.994951][ T8] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 171, changing to 4 [ 329.017293][ T8] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 329.049662][ T8] usb 3-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40 [ 329.059425][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.077089][ T8] usb 3-1: Product: syz [ 329.081463][ T8] usb 3-1: Manufacturer: syz [ 329.086107][ T8] usb 3-1: SerialNumber: syz [ 329.901905][ T8] usb 3-1: USB disconnect, device number 5 [ 330.044489][ T7932] udevd[7932]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 331.613467][ T2134] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 331.800927][ T2134] usb 3-1: Using ep0 maxpacket: 32 [ 331.823676][ T2134] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 331.868010][ T2134] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 331.877556][ T2134] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 331.885803][ T2134] usb 3-1: Product: syz [ 331.890176][ T2134] usb 3-1: Manufacturer: syz [ 331.894828][ T2134] usb 3-1: SerialNumber: syz [ 331.907147][ T2134] usb 3-1: config 0 descriptor?? [ 331.922474][ T8499] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 331.941849][ T2134] hub 3-1:0.0: bad descriptor, ignoring hub [ 331.947973][ T2134] hub: probe of 3-1:0.0 failed with error -5 [ 332.267174][ T2134] usb 3-1: USB disconnect, device number 6 [ 332.627204][ T6086] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 332.987447][ T6086] usb 3-1: Using ep0 maxpacket: 32 [ 334.316674][ C1] sched: RT throttling activated [ 336.160787][ T6086] usb 3-1: device descriptor read/all, error -71 [ 336.887611][ T8532] syzkaller0: entered promiscuous mode [ 336.893375][ T8532] syzkaller0: entered allmulticast mode [ 337.659418][ T8534] netlink: 32 bytes leftover after parsing attributes in process `syz.1.603'. [ 337.688596][ T8534] netlink: 32 bytes leftover after parsing attributes in process `syz.1.603'. [ 337.722704][ T8534] netlink: 9 bytes leftover after parsing attributes in process `syz.1.603'. [ 337.877952][ T8551] syzkaller0: entered promiscuous mode [ 337.900091][ T8551] syzkaller0: entered allmulticast mode [ 343.426799][ T5817] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 343.639176][ T5817] usb 4-1: config 15 has an invalid interface number: 50 but max is 0 [ 343.655795][ T5817] usb 4-1: config 15 has no interface number 0 [ 343.677902][ T5817] usb 4-1: config 15 interface 50 has no altsetting 0 [ 343.699949][ T5817] usb 4-1: string descriptor 0 read error: -22 [ 343.716881][ T5817] usb 4-1: New USB device found, idVendor=1b3d, idProduct=011c, bcdDevice=7d.a8 [ 343.732762][ T5817] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.757084][ T5817] hub 4-1:15.50: bad descriptor, ignoring hub [ 343.776897][ T5817] hub: probe of 4-1:15.50 failed with error -5 [ 343.804623][ T5817] ftdi_sio 4-1:15.50: FTDI USB Serial Device converter detected [ 343.849082][ T5817] ftdi_sio ttyUSB0: unknown device type: 0x7da8 [ 343.936127][ T8607] syzkaller0: entered promiscuous mode [ 343.954494][ T8607] syzkaller0: entered allmulticast mode [ 344.128202][ T27] usb 4-1: USB disconnect, device number 5 [ 344.135869][ T27] ftdi_sio 4-1:15.50: device disconnected [ 347.901557][ T8634] syzkaller0: entered promiscuous mode [ 347.926063][ T8634] syzkaller0: entered allmulticast mode [ 348.394461][ T8641] comedi comedi0: pcm3724: I/O port conflict (0x4,16) [ 349.101756][ T8643] syzkaller0: entered promiscuous mode [ 349.121237][ T8643] syzkaller0: entered allmulticast mode [ 351.546618][ T8667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.642'. [ 352.821548][ T8680] syzkaller0: entered promiscuous mode [ 352.841921][ T8680] syzkaller0: entered allmulticast mode [ 357.217966][ T8719] syzkaller0: entered promiscuous mode [ 357.224139][ T8719] syzkaller0: entered allmulticast mode [ 360.010936][ T8738] syzkaller0: entered promiscuous mode [ 360.018168][ T8738] syzkaller0: entered allmulticast mode [ 361.448705][ T8786] binder: BINDER_SET_CONTEXT_MGR already set [ 361.454876][ T8786] binder: 8785:8786 ioctl 4018620d 200000004a80 returned -16 [ 363.241052][ T8800] syzkaller0: entered promiscuous mode [ 363.261575][ T8800] syzkaller0: entered allmulticast mode [ 363.363812][ T8803] process 'syz.0.675' launched './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' with NULL argv: empty string added [ 367.730813][ T8818] syzkaller0: entered promiscuous mode [ 367.736376][ T8818] syzkaller0: entered allmulticast mode [ 367.865515][ T8824] syzkaller0: entered promiscuous mode [ 367.872214][ T8824] syzkaller0: entered allmulticast mode [ 368.288095][ T8833] misc userio: Invalid payload size [ 368.425534][ T8833] netlink: 120 bytes leftover after parsing attributes in process `syz.0.684'. [ 368.439868][ T8833] netlink: 12 bytes leftover after parsing attributes in process `syz.0.684'. [ 370.241116][ T8848] syzkaller0: entered promiscuous mode [ 370.286799][ T8848] syzkaller0: entered allmulticast mode [ 370.413058][ T8851] comedi comedi0: pcm3724: I/O port conflict (0x4,16) [ 372.614139][ T8876] syzkaller0: entered promiscuous mode [ 372.731475][ T8876] syzkaller0: entered allmulticast mode [ 373.034904][ T8885] syzkaller0: entered promiscuous mode [ 373.046769][ T8885] syzkaller0: entered allmulticast mode [ 373.146277][ T8890] syzkaller1: entered promiscuous mode [ 373.167932][ T8890] syzkaller1: entered allmulticast mode [ 375.527523][ T8910] syzkaller0: entered promiscuous mode [ 375.536802][ T8910] syzkaller0: entered allmulticast mode [ 376.327801][ T8928] syzkaller0: entered promiscuous mode [ 376.333468][ T8928] syzkaller0: entered allmulticast mode [ 376.664900][ T8938] netlink: 1628 bytes leftover after parsing attributes in process `syz.2.712'. [ 379.052084][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.058874][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.363222][ T8973] syzkaller0: entered promiscuous mode [ 380.447323][ T8973] syzkaller0: entered allmulticast mode [ 382.349193][ T8988] syzkaller0: entered promiscuous mode [ 382.377060][ T8988] syzkaller0: entered allmulticast mode [ 385.354548][ T9018] syzkaller0: entered promiscuous mode [ 385.368325][ T9018] syzkaller0: entered allmulticast mode [ 388.735738][ T9032] syzkaller0: entered promiscuous mode [ 388.742885][ T9032] syzkaller0: entered allmulticast mode [ 389.159482][ T9035] netlink: 'syz.0.738': attribute type 1 has an invalid length. [ 389.168437][ T9035] netlink: 'syz.0.738': attribute type 2 has an invalid length. [ 389.877034][ T27] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 390.117147][ T27] usb 3-1: Using ep0 maxpacket: 32 [ 390.135315][ T27] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 390.173501][ T27] usb 3-1: config 0 has no interface number 0 [ 390.185796][ T27] usb 3-1: config 0 interface 184 has no altsetting 0 [ 390.207042][ T27] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 390.216794][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.224930][ T27] usb 3-1: Product: syz [ 390.240072][ T27] usb 3-1: Manufacturer: syz [ 390.244861][ T27] usb 3-1: SerialNumber: syz [ 390.278596][ T27] usb 3-1: config 0 descriptor?? [ 390.301074][ T27] smsc75xx v1.0.0 [ 391.451035][ T9055] syzkaller0: entered promiscuous mode [ 391.493073][ T9055] syzkaller0: entered allmulticast mode [ 391.922414][ T27] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 392.587528][ T27] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 392.598705][ T27] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 392.610512][ T27] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 392.620922][ T27] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 392.631802][ T27] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 392.642711][ T27] smsc75xx: probe of 3-1:0.184 failed with error -71 [ 392.658735][ T27] usb 3-1: USB disconnect, device number 9 [ 394.877637][ T9069] syzkaller0: entered promiscuous mode [ 394.883191][ T9069] syzkaller0: entered allmulticast mode [ 396.200935][ T9084] syzkaller0: entered promiscuous mode [ 396.206506][ T9084] syzkaller0: entered allmulticast mode [ 399.440837][ T9103] syzkaller0: entered promiscuous mode [ 399.446557][ T9103] syzkaller0: entered allmulticast mode [ 402.515928][ T9131] syzkaller0: entered promiscuous mode [ 402.525149][ T9131] syzkaller0: entered allmulticast mode [ 403.008781][ T9139] syzkaller0: entered promiscuous mode [ 403.036747][ T9139] syzkaller0: entered allmulticast mode [ 406.673380][ T9171] syzkaller0: entered promiscuous mode [ 406.706848][ T9171] syzkaller0: entered allmulticast mode [ 408.770507][ T9175] sctp: failed to load transform for md5: -2 [ 408.973988][ T9189] syzkaller0: entered promiscuous mode [ 408.997684][ T9189] syzkaller0: entered allmulticast mode [ 410.313469][ T9207] syzkaller0: entered promiscuous mode [ 410.322232][ T9207] syzkaller0: entered allmulticast mode [ 412.824766][ T9232] syzkaller0: entered promiscuous mode [ 412.832160][ T9232] syzkaller0: entered allmulticast mode [ 413.638462][ T9246] capability: warning: `syz.2.803' uses deprecated v2 capabilities in a way that may be insecure [ 414.430683][ T9250] block device autoloading is deprecated and will be removed. [ 414.829297][ T9257] syzkaller0: entered promiscuous mode [ 414.834871][ T9257] syzkaller0: entered allmulticast mode [ 415.177515][ T9263] syzkaller0: entered promiscuous mode [ 415.187055][ T9263] syzkaller0: entered allmulticast mode [ 417.349671][ T9272] syzkaller0: entered promiscuous mode [ 417.355249][ T9272] syzkaller0: entered allmulticast mode [ 417.585348][ T9276] syz.1.814 uses obsolete (PF_INET,SOCK_PACKET) [ 423.392460][ T9313] syzkaller0: entered promiscuous mode [ 423.406698][ T9313] syzkaller0: entered allmulticast mode [ 424.524123][ T9325] fuse: Bad value for 'fd' [ 426.948295][ T9359] netlink: 4 bytes leftover after parsing attributes in process `syz.3.830'. [ 427.536139][ T9359] hsr_slave_1 (unregistering): left promiscuous mode [ 428.162380][ T9353] syzkaller0: entered promiscuous mode [ 428.168546][ T9353] syzkaller0: entered allmulticast mode [ 430.286598][ T9392] overlayfs: failed to clone upperpath [ 431.415930][ T9404] syzkaller0: entered promiscuous mode [ 431.446696][ T9404] syzkaller0: entered allmulticast mode [ 431.898550][ T9410] syzkaller0: entered promiscuous mode [ 431.907200][ T9410] syzkaller0: entered allmulticast mode [ 434.241129][ T9427] syzkaller0: entered promiscuous mode [ 434.296356][ T9427] syzkaller0: entered allmulticast mode [ 436.109551][ T9447] ip6gre0: entered allmulticast mode [ 436.214714][ T9451] syzkaller0: entered promiscuous mode [ 436.230833][ T9451] syzkaller0: entered allmulticast mode [ 436.674437][ T9460] syzkaller0: entered promiscuous mode [ 436.716943][ T9460] syzkaller0: entered allmulticast mode [ 437.944697][ T9471] syzkaller0: entered promiscuous mode [ 437.958548][ T9471] syzkaller0: entered allmulticast mode [ 440.497541][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.523760][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.734903][ T9553] syzkaller0: entered promiscuous mode [ 442.759747][ T9553] syzkaller0: entered allmulticast mode [ 450.008278][ T9598] syzkaller0: entered promiscuous mode [ 450.024356][ T9598] syzkaller0: entered allmulticast mode [ 452.436841][ T9622] syzkaller0: entered promiscuous mode [ 452.488913][ T9622] syzkaller0: entered allmulticast mode [ 452.730830][ T9622] syz.2.909 (9622) used greatest stack depth: 20816 bytes left [ 453.417139][ T27] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 453.606878][ T27] usb 1-1: Using ep0 maxpacket: 8 [ 454.295203][ T27] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 454.306213][ T27] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 454.316906][ T27] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 454.326774][ T27] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 454.337018][ T27] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 454.350599][ T27] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 454.359796][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.584672][ T27] usb 1-1: GET_CAPABILITIES returned 0 [ 454.590752][ T27] usbtmc 1-1:16.0: can't read capabilities [ 454.801093][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 454.820131][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 454.829318][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 454.838642][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 454.847794][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 455.041908][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 455.052885][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 455.074648][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 455.113542][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 455.129275][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 455.145249][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 455.155378][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 455.168478][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 455.183729][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 455.199843][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 455.214424][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 455.495374][ T10] usb 1-1: USB disconnect, device number 2 [ 455.770642][ T9664] syzkaller0: entered promiscuous mode [ 455.786492][ T9664] syzkaller0: entered allmulticast mode [ 456.573452][ T9682] netlink: 16 bytes leftover after parsing attributes in process `syz.2.924'. [ 460.118484][ T9712] netlink: 36 bytes leftover after parsing attributes in process `syz.3.933'. [ 460.160673][ T9712] netlink: 56 bytes leftover after parsing attributes in process `syz.3.933'. [ 460.196509][ T9712] netlink: 16 bytes leftover after parsing attributes in process `syz.3.933'. [ 460.227942][ T9714] 9pnet_fd: Insufficient options for proto=fd [ 460.646829][ T5855] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 460.836911][ T5855] usb 1-1: Using ep0 maxpacket: 8 [ 460.854644][ T5855] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 460.879188][ T5855] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.895983][ T5855] usb 1-1: Product: syz [ 460.904967][ T5855] usb 1-1: Manufacturer: syz [ 460.914442][ T5855] usb 1-1: SerialNumber: syz [ 460.933765][ T5855] usb 1-1: config 0 descriptor?? [ 460.963271][ T5855] gspca_main: se401-2.14.0 probing 047d:5003 [ 464.463416][ T5855] gspca_se401: read req failed req 0x06 error -19 [ 464.648868][ T5855] usb 1-1: USB disconnect, device number 3 [ 465.044015][ T9752] syzkaller0: entered promiscuous mode [ 465.062190][ T9752] syzkaller0: entered allmulticast mode [ 468.886796][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 469.097001][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 469.106141][ T10] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 469.128175][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 469.144721][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 469.164896][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 469.185910][ T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 469.212124][ T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 469.221939][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.649462][ T10] usb 3-1: GET_CAPABILITIES returned 0 [ 469.655191][ T10] usbtmc 3-1:16.0: can't read capabilities [ 470.433964][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 470.443172][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 470.452333][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 470.461831][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 470.471542][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 470.480873][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 470.491178][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 470.500337][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 470.509477][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 470.518736][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 470.527903][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 470.537056][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 470.546194][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 470.555299][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 470.564398][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 470.573568][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 470.616874][ T8] usb 3-1: USB disconnect, device number 10 [ 473.462590][ T9832] netlink: 32 bytes leftover after parsing attributes in process `syz.0.971'. [ 487.371783][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 487.578509][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 487.590798][ T10] usb 1-1: config 0 has an invalid descriptor of length 245, skipping remainder of the config [ 487.626904][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 487.646963][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 487.686806][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 487.710195][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 489.444087][ T10] usb 1-1: string descriptor 0 read error: -71 [ 489.458968][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 489.488981][ T10] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 489.539230][ T10] usb 1-1: config 0 descriptor?? [ 489.563769][ T10] usb 1-1: can't set config #0, error -71 [ 489.601934][ T10] usb 1-1: USB disconnect, device number 4 [ 489.960709][ T5775] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 491.198968][ T10] IPVS: starting estimator thread 0... [ 491.215943][ T9993] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 491.297722][ T9994] IPVS: using max 26 ests per chain, 62400 per kthread [ 493.996760][ T5775] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 494.006302][ T5775] Bluetooth: hci3: Injecting HCI hardware error event [ 494.015084][ T5775] Bluetooth: hci3: hardware error 0x00 [ 495.891877][T10041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1025'. [ 496.076846][ T5775] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 497.720617][T10054] syzkaller0: entered promiscuous mode [ 497.730941][T10054] syzkaller0: entered allmulticast mode [ 500.311295][ T6086] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 500.508832][ T6086] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 500.526754][ T6086] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 500.544739][ T6086] usb 3-1: config 220 has no interface number 2 [ 500.565902][ T6086] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 500.601370][ T6086] usb 3-1: config 220 interface 0 has no altsetting 0 [ 500.610058][ T6086] usb 3-1: config 220 interface 76 has no altsetting 0 [ 500.630903][ T6086] usb 3-1: config 220 interface 1 has no altsetting 0 [ 500.644292][ T6086] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 500.666513][ T6086] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.697499][ T6086] usb 3-1: Product: syz [ 500.707509][ T6086] usb 3-1: Manufacturer: syz [ 500.725031][ T6086] usb 3-1: SerialNumber: syz [ 500.996852][ T6086] uvcvideo 3-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 501.018259][ T6086] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 501.036815][ T6086] usb 3-1: No valid video chain found. [ 501.047601][ T6086] usb 3-1: selecting invalid altsetting 0 [ 501.085742][ T6086] usb 3-1: selecting invalid altsetting 0 [ 501.109109][ T6086] usbtest: probe of 3-1:220.1 failed with error -22 [ 501.137580][ T6086] usb 3-1: USB disconnect, device number 11 [ 501.931710][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.938341][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.314311][T10170] syzkaller0: entered promiscuous mode [ 502.327068][T10170] syzkaller0: entered allmulticast mode [ 505.474717][T10182] input: syz1 as /devices/virtual/input/input6 [ 505.505719][T10184] input: syz1 as /devices/virtual/input/input7 [ 507.908423][T10216] syzkaller0: entered promiscuous mode [ 507.913993][T10216] syzkaller0: entered allmulticast mode [ 514.495326][T10251] UBIFS error (pid: 10251): cannot open "./file0", error -22 [ 514.515120][T10251] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1084'. [ 514.557524][T10256] syzkaller0: entered promiscuous mode [ 514.577795][T10256] syzkaller0: entered allmulticast mode [ 516.905342][T10292] syzkaller0: entered promiscuous mode [ 516.911371][T10292] syzkaller0: entered allmulticast mode [ 517.057243][T10297] syzkaller0: entered promiscuous mode [ 517.062997][T10297] syzkaller0: entered allmulticast mode [ 519.521746][ T28] audit: type=1326 audit(1783293513.710:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10316 comm="syz.3.1104" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07cf9de59 code=0x7ffc0000 [ 519.622133][ T28] audit: type=1326 audit(1783293513.710:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10316 comm="syz.3.1104" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07cf9de59 code=0x7ffc0000 [ 519.666846][ T28] audit: type=1326 audit(1783293513.750:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10316 comm="syz.3.1104" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fa07cf9de59 code=0x7ffc0000 [ 519.692993][ T28] audit: type=1326 audit(1783293513.750:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10316 comm="syz.3.1104" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07cf9de59 code=0x7ffc0000 [ 520.953422][T10346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1112'. [ 521.796246][T10366] syzkaller0: entered promiscuous mode [ 521.804035][T10366] syzkaller0: entered allmulticast mode [ 521.906278][T10366] simple: basic_1 [ 522.773880][T10383] syzkaller0: entered promiscuous mode [ 522.788316][T10383] syzkaller0: entered allmulticast mode [ 525.683004][T10416] syzkaller0: entered promiscuous mode [ 525.690911][T10416] syzkaller0: entered allmulticast mode [ 529.242631][T10465] fuse: Bad value for 'fd' [ 531.065817][T10493] syzkaller0: entered promiscuous mode [ 531.075652][T10493] syzkaller0: entered allmulticast mode [ 532.103933][T10513] fuse: Bad value for 'fd' [ 534.119934][T10523] syzkaller0: entered promiscuous mode [ 534.125707][T10523] syzkaller0: entered allmulticast mode [ 535.789401][T10551] fuse: Bad value for 'fd' [ 540.717520][ T5817] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 542.044585][ T5817] usb 1-1: Using ep0 maxpacket: 16 [ 542.088233][ T5817] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 542.145785][ T5817] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 542.189970][ T5817] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 542.226776][ T5817] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 542.246797][ T5817] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 542.307805][ T5817] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 542.326764][ T5817] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 542.334855][ T5817] usb 1-1: Manufacturer: syz [ 542.354285][ T5817] usb 1-1: config 0 descriptor?? [ 542.726699][ T5817] rc_core: IR keymap rc-hauppauge not found [ 542.733056][ T5817] Registered IR keymap rc-empty [ 542.739701][ T5817] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 542.781411][ T5817] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 542.820811][ T5817] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 542.837808][ T5817] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input8 [ 542.864101][ T5817] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 542.897128][ T5817] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 542.936906][ T5817] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 542.966853][ T5817] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 542.996729][ T5817] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 543.026866][ T5817] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 543.056813][ T5817] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 543.088038][ T5817] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 543.124650][ T5817] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 543.169584][ T5817] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 543.206742][ T5817] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 543.239131][ T5817] mceusb 1-1:0.0: Registered 轡 with mce emulator interface version 1 [ 543.270156][ T5817] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 543.331341][ T5817] usb 1-1: USB disconnect, device number 5 [ 543.445270][T10676] syz_tun: entered allmulticast mode [ 545.138108][T10708] binder: 10707:10708 ioctl c0306201 0 returned -14 [ 545.180311][T10712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1215'. [ 545.522460][ T23] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 545.729922][ T23] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 545.749736][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 545.776853][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 545.808068][ T23] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 545.818439][ T23] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 545.828091][ T23] usb 1-1: Manufacturer: syz [ 545.838157][ T23] usb 1-1: config 0 descriptor?? [ 545.859883][ T23] igorplugusb 1-1:0.0: endpoint incorrect [ 546.088542][ T10] usb 1-1: USB disconnect, device number 6 [ 547.161948][T10741] random: crng reseeded on system resumption [ 547.801606][T10741] Restarting kernel threads ... done. [ 548.116111][T10745] binder: 10744:10745 ioctl c0306201 0 returned -14 [ 549.246033][ T27] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 549.537781][ T27] usb 1-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 549.552091][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.561779][ T27] usb 1-1: Product: syz [ 549.568682][ T27] usb 1-1: Manufacturer: syz [ 549.573411][ T27] usb 1-1: SerialNumber: syz [ 549.588157][ T27] usb 1-1: config 0 descriptor?? [ 549.622652][ T27] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 549.811103][T10771] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-22) [ 550.062376][ T27] gspca_sq905c: sq905c_read: usb_control_msg failed (-32) [ 550.080162][ T27] sq905c 1-1:0.0: Reading version command failed [ 550.101098][ T27] sq905c: probe of 1-1:0.0 failed with error -32 [ 550.124147][ T27] usb 1-1: USB disconnect, device number 7 [ 553.809240][T10796] UBIFS error (pid: 10796): cannot open "./file0", error -22 [ 555.826231][T10815] vlan2: entered allmulticast mode [ 555.890197][T10815] dummy0: entered allmulticast mode [ 559.669337][T10834] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1254'. [ 559.699960][T10831] syzkaller0: entered promiscuous mode [ 559.705512][T10831] syzkaller0: entered allmulticast mode [ 559.766402][T10838] UBIFS error (pid: 10838): cannot open "./file0", error -22 [ 564.318981][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.377234][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.817085][T10857] input: syz1 as /devices/virtual/input/input9 [ 565.947081][T10874] syzkaller0: entered promiscuous mode [ 565.971411][T10874] syzkaller0: entered allmulticast mode [ 566.026692][T10876] UBIFS error (pid: 10876): cannot open "./file0", error -22 [ 567.894650][T10897] input: syz1 as /devices/virtual/input/input10 [ 568.865806][T10912] syzkaller0: entered promiscuous mode [ 568.889615][T10912] syzkaller0: entered allmulticast mode [ 569.805881][T10917] UBIFS error (pid: 10917): cannot open "./file0", error -22 [ 570.078514][T10918] ceph: No mds server is up or the cluster is laggy [ 572.247125][ T6086] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 572.474082][ T6086] usb 3-1: unable to get BOS descriptor or descriptor too short [ 572.513265][ T6086] usb 3-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=5a.9d [ 572.534433][ T6086] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.546885][ T6086] usb 3-1: Product: syz [ 572.558741][ T6086] usb 3-1: Manufacturer: syz [ 572.579171][ T6086] usb 3-1: SerialNumber: syz [ 572.636051][ T6086] usb 3-1: config 0 descriptor?? [ 572.859260][ T6086] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 572.906756][ T6086] gspca_sn9c2028: read1 error -71 [ 572.928247][ T6086] gspca_sn9c2028: read1 error -71 [ 572.947092][ T6086] gspca_sn9c2028: read1 error -71 [ 572.952276][ T6086] sn9c2028: probe of 3-1:0.0 failed with error -71 [ 573.025575][T10967] UBIFS error (pid: 10967): cannot open "./file0", error -22 [ 573.056700][ T6086] usb 3-1: USB disconnect, device number 12 [ 573.230731][T10972] syzkaller0: entered promiscuous mode [ 573.236336][T10972] syzkaller0: entered allmulticast mode [ 575.320072][T11009] syzkaller0: entered promiscuous mode [ 575.332759][T11009] syzkaller0: entered allmulticast mode [ 575.460855][T11012] UBIFS error (pid: 11012): cannot open "./file0", error -22 [ 580.218742][ T23] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 580.437063][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 581.252669][ T23] usb 3-1: config 0 has no interfaces? [ 581.288907][ T23] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 581.314685][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.333498][ T23] usb 3-1: Product: syz [ 581.338922][ T23] usb 3-1: Manufacturer: syz [ 581.343786][ T23] usb 3-1: SerialNumber: syz [ 581.360346][ T23] usb 3-1: config 0 descriptor?? [ 581.430885][T11084] netlink: 'syz.3.1329': attribute type 1 has an invalid length. [ 581.451207][T11084] netlink: 'syz.3.1329': attribute type 2 has an invalid length. [ 583.507095][ T5855] usb 3-1: USB disconnect, device number 13 [ 583.857785][ T3506] kworker/dying (3506) used greatest stack depth: 20712 bytes left [ 583.900738][T11105] UBIFS error (pid: 11105): cannot open "./file0", error -22 [ 588.035609][T11135] pim6reg9: entered allmulticast mode [ 589.134239][T11143] UBIFS error (pid: 11143): cannot open "./file0", error -22 [ 590.887311][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 591.141466][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 591.158779][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11 [ 591.186776][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50609, setting to 1024 [ 591.265366][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 591.348562][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.511676][ T10] usb 1-1: config 0 descriptor?? [ 591.594375][T11153] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 591.759749][ T10] hub 1-1:0.0: USB hub found [ 592.007012][ T10] hub 1-1:0.0: 1 port detected [ 592.253367][ T10] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 592.393180][ T10] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 592.558052][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 592.615988][ T10] usbhid: probe of 1-1:0.0 failed with error -71 [ 592.748706][ T10] usb 1-1: USB disconnect, device number 8 [ 599.727920][T11232] overlayfs: failed to clone upperpath [ 600.014597][T11238] syzkaller0: entered promiscuous mode [ 600.021922][T11238] syzkaller0: entered allmulticast mode [ 602.996902][ T5855] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 604.020446][ T5855] usb 1-1: Using ep0 maxpacket: 32 [ 604.393154][ T5855] usb 1-1: device descriptor read/all, error -71 [ 605.929642][T11276] XFS (nullb0): Invalid superblock magic number [ 609.534819][T11326] syzkaller0: entered promiscuous mode [ 609.582333][T11326] syzkaller0: entered allmulticast mode [ 613.491683][T11366] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1401'. [ 614.253432][T11362] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1400'. [ 616.486100][T11407] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1412'. [ 617.164787][T11424] pim6reg9: entered allmulticast mode [ 618.523903][T11436] overlayfs: failed to clone upperpath [ 620.137153][T11444] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1421'. [ 620.478915][T11452] syzkaller0: entered promiscuous mode [ 620.484669][T11452] syzkaller0: entered allmulticast mode [ 624.348992][T11463] pim6reg: entered allmulticast mode [ 624.702260][T11484] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1432'. [ 624.920751][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.929099][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.166290][T11512] input: syz1 as /devices/virtual/input/input11 [ 626.223284][T11516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1441'. [ 629.631737][T11543] syzkaller0: entered promiscuous mode [ 629.645214][T11543] syzkaller0: entered allmulticast mode [ 633.570442][T11583] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 633.578999][T11583] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 633.587543][T11583] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 633.866664][ T8] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 634.056795][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 634.073337][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 634.104489][ T8] usb 3-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 634.124437][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.144931][ T8] usb 3-1: config 0 descriptor?? [ 637.077897][ T8] usb 3-1: USB disconnect, device number 14 [ 642.364287][T11712] syzkaller0: entered promiscuous mode [ 642.376689][T11712] syzkaller0: entered allmulticast mode [ 644.452987][ C1] ------------[ cut here ]------------ [ 644.458962][ C1] WARNING: CPU: 1 PID: 5780 at net/mac80211/tx.c:5033 __ieee80211_beacon_get+0x1141/0x1520 [ 644.470675][ C1] Modules linked in: [ 644.474794][ C1] CPU: 1 PID: 5780 Comm: syz-executor Not tainted syzkaller #0 [ 644.482550][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 644.492747][ C1] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 644.499278][ C1] Code: f7 4c 89 ef e8 70 d3 ba f7 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 cb f1 7c f7 0f 0b e9 61 f8 ff ff e8 bf f1 7c f7 <0f> 0b e9 85 fb ff ff e8 b3 f1 7c f7 48 c7 c7 00 ae 65 8e 4c 89 e6 [ 644.519494][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246 [ 644.525754][ C1] RAX: ffffffff8a09f3b1 RBX: dffffc0000000000 RCX: ffff888079890000 [ 644.533823][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 644.542018][ C1] RBP: 0000000000000000 R08: ffff888079890000 R09: 0000000000000003 [ 644.550133][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805ed42440 [ 644.558206][ C1] R13: ffff88805f296c24 R14: ffff88805ed42930 R15: ffff88805f296c00 [ 644.566688][ C1] FS: 0000555563c7c500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 644.575782][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 644.582515][ C1] CR2: 00007f1d871556b8 CR3: 00000000627ca000 CR4: 00000000003506e0 [ 644.590714][ C1] Call Trace: [ 644.591211][ T32] ------------[ cut here ]------------ [ 644.594204][ C1] [ 644.600162][ T32] WARNING: CPU: 0 PID: 32 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 644.602892][ C1] ? __ieee80211_beacon_get+0x36/0x1520 [ 644.613900][ T32] Modules linked in: [ 644.619416][ C1] ieee80211_beacon_get_tim+0xbf/0x580 [ 644.619455][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 644.623370][ T32] [ 644.623382][ T32] CPU: 0 PID: 32 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 644.628967][ C1] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 644.635746][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 644.638169][ C1] __iterate_interfaces+0x225/0x4c0 [ 644.638213][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 644.645676][ T32] Workqueue: phy4 ieee80211_csa_finalize_work [ 644.651294][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 644.651333][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 644.651358][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 644.651395][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 644.651419][ C1] ? hw_scan_work+0xf10/0xf10 [ 644.662551][ T32] [ 644.666897][ C1] __hrtimer_run_queues+0x525/0xc10 [ 644.666947][ C1] ? hrtimer_interrupt+0x980/0x980 [ 644.673220][ T32] RIP: 0010:ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 644.679360][ C1] ? read_tsc+0x9/0x20 [ 644.687004][ T32] Code: 48 89 df e8 64 bc d0 f7 e9 d6 fc ff ff e8 9a 44 78 f7 eb 24 e8 93 44 78 f7 c7 04 24 f4 ff ff ff e9 cc f5 ff ff e8 82 44 78 f7 <0f> 0b 0f 0b e9 b7 f5 ff ff e8 74 44 78 f7 48 8b 7c 24 08 4c 8b 74 [ 644.692924][ C1] hrtimer_run_softirq+0x177/0x290 [ 644.700147][ T32] RSP: 0018:ffffc90000a8f9c0 EFLAGS: 00010293 [ 644.705237][ C1] handle_softirqs+0x27d/0x820 [ 644.709963][ T32] [ 644.712297][ C1] ? read_tsc+0x9/0x20 [ 644.717582][ T32] RAX: ffffffff8a0e9ce2 RBX: 0000000000000001 RCX: ffff888018adda00 [ 644.722644][ C1] ? ktime_get+0x24b/0x280 [ 644.729968][ T32] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 644.734052][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 644.761925][ T32] RBP: dffffc0000000000 R08: ffff88805ed4162f R09: 1ffff1100bda82c5 [ 644.766112][ C1] ? do_softirq+0x1a0/0x1a0 [ 644.772505][ T32] R10: dffffc0000000000 R11: ffffed100bda82c6 R12: 0000000000000001 [ 644.777046][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 644.777084][ C1] __irq_exit_rcu+0xd3/0x190 [ 644.779429][ T32] R13: ffff88805ed42659 R14: ffff888077de2d48 R15: ffff88805fbad800 [ 644.783519][ C1] ? irq_exit_rcu+0x20/0x20 [ 644.791560][ T32] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 644.795998][ C1] irq_exit_rcu+0x9/0x20 [ 644.804749][ T32] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 644.810164][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 644.818708][ T32] CR2: 00005555948d7a38 CR3: 0000000026c7b000 CR4: 00000000003506f0 [ 644.823219][ C1] [ 644.831451][ T32] Call Trace: [ 644.836576][ C1] [ 644.841240][ T32] [ 644.849272][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 644.853922][ T32] ieee80211_link_use_reserved_context+0x37b/0x5c0 [ 644.862879][ C1] RIP: 0010:kasan_check_range+0x1b9/0x290 [ 644.862913][ C1] Code: f4 49 01 dc 4d 01 f3 49 8d 5c 24 07 4d 85 e4 49 0f 49 dc 48 83 e3 f8 49 29 dc 74 0e 41 80 3b 00 75 6b 49 ff c3 49 ff cc 75 f2 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 45 84 ff 0f 85 91 00 00 00 41 f7 [ 644.862931][ C1] RSP: 0018:ffffc9000458f508 EFLAGS: 00000256 [ 644.862952][ C1] RAX: ffffffff81c93401 RBX: 0000000000000000 RCX: ffffffff81c934b8 [ 644.862969][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffea00018ce834 [ 644.862984][ C1] RBP: ffffc9000458f850 R08: ffffea00018ce837 R09: 1ffffd4000319d06 [ 644.863000][ C1] R10: dffffc0000000000 R11: fffff94000319d07 R12: 0000000000000001 [ 644.863016][ C1] R13: ffffea00018ce834 R14: fffff94000319d07 R15: 1ffffd4000319d06 [ 644.863042][ C1] ? copy_page_range+0x1171/0x3700 [ 644.863112][ C1] ? copy_page_range+0x1228/0x3700 [ 644.863151][ C1] ? vm_normal_page+0x99/0x1e0 [ 644.863185][ C1] copy_page_range+0x1228/0x3700 [ 644.867496][ T32] ieee80211_csa_finalize+0x571/0xeb0 [ 644.874194][ C1] ? pfn_valid+0x450/0x450 [ 644.880136][ T32] ? mutex_lock_nested+0x20/0x20 [ 644.888024][ C1] ? copy_mm+0x1705/0x1e30 [ 644.888069][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 644.891032][ T32] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 644.894364][ C1] ? down_write+0x16e/0x200 [ 644.897475][ T32] ? ieee80211_csa_finalize_work+0x140/0x140 [ 644.900346][ C1] ? up_write+0x1be/0x410 [ 644.906334][ T32] ? read_lock_is_recursive+0x20/0x20 [ 644.912913][ C1] copy_mm+0x1751/0x1e30 [ 644.918729][ T32] ieee80211_csa_finalize_work+0xf6/0x140 [ 644.938696][ C1] ? copy_signal+0x640/0x640 [ 644.944884][ T32] ? process_scheduled_works+0x975/0x1600 [ 644.953188][ C1] ? lockdep_init_map_type+0x9c/0x8e0 [ 644.953241][ C1] ? __init_rwsem+0x122/0x160 [ 644.961482][ T32] process_scheduled_works+0xa60/0x1600 [ 644.969412][ C1] ? copy_signal+0x51f/0x640 [ 644.969444][ C1] copy_process+0x171d/0x3df0 [ 644.969481][ C1] ? copy_process+0x98e/0x3df0 [ 644.969518][ C1] ? __pidfd_prepare+0x140/0x140 [ 644.969556][ C1] kernel_clone+0x24b/0x8a0 [ 644.969587][ C1] ? create_io_thread+0x190/0x190 [ 644.969623][ C1] ? __might_fault+0xaa/0x120 [ 644.969655][ C1] __x64_sys_clone+0x1b7/0x230 [ 644.969685][ C1] ? __ia32_sys_vfork+0x140/0x140 [ 644.969923][ C1] ? lock_chain_count+0x20/0x20 [ 644.978138][ T32] ? worker_attach_to_pool+0x370/0x370 [ 644.986163][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 644.991718][ T32] ? assign_work+0x3cc/0x5d0 [ 644.996798][ C1] do_syscall_64+0x55/0xb0 [ 644.996839][ C1] ? clear_bhb_loop+0x40/0x90 [ 644.996860][ C1] ? clear_bhb_loop+0x40/0x90 [ 645.001740][ T32] worker_thread+0xa5e/0xfe0 [ 645.006718][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 645.012273][ T32] kthread+0x2fa/0x390 [ 645.016654][ C1] RIP: 0033:0x7f1d863c68d2 [ 645.016678][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 645.021629][ T32] ? pr_cont_work+0x550/0x550 [ 645.021674][ T32] ? kthread_blkcg+0xd0/0xd0 [ 645.021697][ T32] ret_from_fork+0x48/0x80 [ 645.021723][ T32] ? kthread_blkcg+0xd0/0xd0 [ 645.026166][ C1] RSP: 002b:00007ffdc22c6ec0 EFLAGS: 00000246 [ 645.031238][ T32] ret_from_fork_asm+0x11/0x20 [ 645.037243][ C1] ORIG_RAX: 0000000000000038 [ 645.037257][ C1] RAX: ffffffffffffffda RBX: 00007ffdc22c6ec0 RCX: 00007f1d863c68d2 [ 645.037274][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 645.041819][ T32] [ 645.047881][ C1] RBP: 00007ffdc22c704c R08: 0000000000000000 R09: 0000000000000001 [ 645.047898][ C1] R10: 0000555563c7c7d0 R11: 0000000000000246 R12: 0000000000000001 [ 645.047913][ C1] R13: 00000000000927c0 R14: 000000000009cf2c R15: 00007ffdc22c70a0 [ 645.047946][ C1] [ 645.052290][ T32] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 645.052302][ T32] CPU: 0 PID: 32 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 645.052380][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 645.052419][ T32] Workqueue: phy4 ieee80211_csa_finalize_work [ 645.052504][ T32] Call Trace: [ 645.052535][ T32] [ 645.052565][ T32] dump_stack_lvl+0x18c/0x250 [ 645.052660][ T32] ? show_regs_print_info+0x20/0x20 [ 645.052744][ T32] ? load_image+0x420/0x420 [ 645.052898][ T32] panic+0x2ca/0x720 [ 645.052982][ T32] ? bpf_jit_dump+0xd0/0xd0 [ 645.053081][ T32] ? ret_from_fork_asm+0x11/0x20 [ 645.053169][ T32] __warn+0x2e0/0x470 [ 645.053232][ T32] ? ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 645.053309][ T32] ? ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 645.053373][ T32] report_bug+0x2be/0x4f0 [ 645.053434][ T32] ? ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 645.053500][ T32] ? ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 645.053581][ T32] ? ieee80211_vif_use_reserved_switch+0x1110/0x2900 [ 645.053645][ T32] handle_bug+0xcf/0x120 [ 645.053698][ T32] exc_invalid_op+0x1a/0x50 [ 645.053760][ T32] asm_exc_invalid_op+0x1a/0x20 [ 645.053863][ T32] RIP: 0010:ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 645.053943][ T32] Code: 48 89 df e8 64 bc d0 f7 e9 d6 fc ff ff e8 9a 44 78 f7 eb 24 e8 93 44 78 f7 c7 04 24 f4 ff ff ff e9 cc f5 ff ff e8 82 44 78 f7 <0f> 0b 0f 0b e9 b7 f5 ff ff e8 74 44 78 f7 48 8b 7c 24 08 4c 8b 74 [ 645.053985][ T32] RSP: 0018:ffffc90000a8f9c0 EFLAGS: 00010293 [ 645.054037][ T32] RAX: ffffffff8a0e9ce2 RBX: 0000000000000001 RCX: ffff888018adda00 [ 645.054072][ T32] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 645.054105][ T32] RBP: dffffc0000000000 R08: ffff88805ed4162f R09: 1ffff1100bda82c5 [ 645.054146][ T32] R10: dffffc0000000000 R11: ffffed100bda82c6 R12: 0000000000000001 [ 645.054180][ T32] R13: ffff88805ed42659 R14: ffff888077de2d48 R15: ffff88805fbad800 [ 645.054243][ T32] ? ieee80211_vif_use_reserved_switch+0xd02/0x2900 [ 645.054386][ T32] ieee80211_link_use_reserved_context+0x37b/0x5c0 [ 645.054471][ T32] ieee80211_csa_finalize+0x571/0xeb0 [ 645.054546][ T32] ? mutex_lock_nested+0x20/0x20 [ 645.054619][ T32] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 645.054684][ T32] ? ieee80211_csa_finalize_work+0x140/0x140 [ 645.054757][ T32] ? read_lock_is_recursive+0x20/0x20 [ 645.054842][ T32] ieee80211_csa_finalize_work+0xf6/0x140 [ 645.054906][ T32] ? process_scheduled_works+0x975/0x1600 [ 645.054988][ T32] process_scheduled_works+0xa60/0x1600 [ 645.055146][ T32] ? worker_attach_to_pool+0x370/0x370 [ 645.055259][ T32] ? assign_work+0x3cc/0x5d0 [ 645.055351][ T32] worker_thread+0xa5e/0xfe0 [ 645.055496][ T32] kthread+0x2fa/0x390 [ 645.055549][ T32] ? pr_cont_work+0x550/0x550 [ 645.055622][ T32] ? kthread_blkcg+0xd0/0xd0 [ 645.055675][ T32] ret_from_fork+0x48/0x80 [ 645.055739][ T32] ? kthread_blkcg+0xd0/0xd0 [ 645.055800][ T32] ret_from_fork_asm+0x11/0x20 [ 645.055918][ T32] [ 645.058218][ T32] Kernel Offset: disabled