last executing test programs: 2m24.849469339s ago: executing program 3 (id=152): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x801, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x129540, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@newtaction={0xeb0, 0x30, 0xb, 0x4, 0x0, {}, [{0xe9c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe50, 0x3, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0xfffffffc, 0x8, 0x9}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x0, 0x400, 0x9323, 0x9, 0x6, 0x7}, {0x5, 0x5, 0x1, 0x0, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x40080003}, {0x3, 0x1, 0x80, 0x0, 0xacc8, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0x1, 0x81}, {0x8, 0xfff, 0x6, 0xeb88, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4, 0x1000000}, {0x8004, 0x80000001, 0xfffffeff, 0x20df, 0x4, 0x5}, {0x0, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0xfffffffd, 0x1000594}, {0x7fffffff, 0x1, 0x6, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x1000083, 0x3}, {0x8, 0x8, 0x9, 0x2, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff417, 0x1, 0x3ff, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0x1, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x4, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x37d, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x1ff}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x3, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6ae, 0x2, 0x100, 0x4, 0xd}, {0x1, 0x1, 0xa5, 0x2, 0x4d800, 0x6}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0xfffffffc}, {0x4, 0x62e, 0xb, 0x219c, 0x2, 0x5}, {0x0, 0x4, 0x0, 0x20000, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x80000000, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10001, 0x4, 0x7}, {0x0, 0x4, 0x7, 0x4, 0xc, 0x3}, {0x8, 0x10000, 0x1, 0x0, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0xf}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e6}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x6, 0x1, 0x4, 0xe}, {0xfffffff5, 0x8, 0x702b, 0x8, 0x3, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x8, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x8, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100100, 0x3ff, 0x0, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x80000001, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xfff, 0x6, 0x101, 0x5, 0x400, 0x8000400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x2000007f, 0x8}, {0x5, 0x25b, 0x0, 0x3, 0xa, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x5}, {0x7f, 0x3a74, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x5, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x8, 0x1, 0xb, 0x8, 0x7}, {0xfff, 0x1, 0x800, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x11, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x1, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0x3, 0x4, 0x43d, 0x7}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1, 0xfffffffe, 0x6, 0xe0}, {0x800, 0x4c, 0xf20, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x36b6800}, {0xcfb7, 0x0, 0x2, 0x2, 0x1, 0xaa82}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x70a0, 0x9, 0xffff, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x402, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d8, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x0, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x5cd, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x202, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0x80000001, 0xfffffff9}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8a, 0x19}], [{0x1}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x53cfacc330b2f8e6}, {0x1, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x5}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x5}, {0x4}, {0x5}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4}, {0x6, 0x1}, {0x5, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb0}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r1, 0x0, 0x0, 0x0, &(0x7f00000006c0), 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) syz_open_dev$dri(0x0, 0x1ff, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), 0xffffffffffffffff) 2m24.67230178s ago: executing program 3 (id=155): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x2020044, 0x0, 0x4, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='mqueue\x00', 0x200000, 0x0) mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2105015, 0x0) 2m24.460806562s ago: executing program 3 (id=158): io_setup(0x8, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x40, 0x8001, 0x0, 0x9, 0x80, 0xfffffe0000000001, 0xfa11, 0xfffffffc}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2c, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0xffff1000, 0x1c4213}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m23.448264391s ago: executing program 3 (id=166): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x1240000, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2101015, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100419, 0x0) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./cgroup\x00', 0x0, 0x2001015, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x80001, 0x0) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./cgroup\x00', 0x0, 0x2001015, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x80016, 0x0) 2m23.315424079s ago: executing program 3 (id=167): sendto$inet(0xffffffffffffffff, &(0x7f0000000140)="21699f", 0x3, 0x2000c8d4, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89a3, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) timer_create(0x3, &(0x7f0000000080)={0x0, 0x2040, 0x5, @thr={0x0, 0x0}}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001dc0)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 2m22.862384216s ago: executing program 3 (id=173): llistxattr(&(0x7f00000005c0)='./file0\x00', 0x0, 0x0) 2m22.480384778s ago: executing program 32 (id=173): llistxattr(&(0x7f00000005c0)='./file0\x00', 0x0, 0x0) 6.750201996s ago: executing program 0 (id=725): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan0\x00'}) connect$can_bcm(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000c00)={{0x1}, &(0x7f0000000b80), 0x0}, 0x1c) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0xffff, 0xa}, {0x1}}}, 0x24}}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="06"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x2004c800) 6.417547506s ago: executing program 0 (id=729): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5c2}, 0x94) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r1 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/122, 0x6}], 0x3e8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 5.855663608s ago: executing program 0 (id=730): r0 = syz_usb_connect(0x0, 0x4a, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000400)=ANY=[@ANYRES8=r0, @ANYBLOB="c6fbe5649cd457567beb69b725a5688d7f707d748e518c142ea27bc85a5f66219946ac7371af67df948d434ea1ebcbfeb1ab12d2522d9c0171dbf36075e8b7618a7d20e0087a5615fb3b86c712b5c262c2b2d621089b1c4f57d3d462e20bf495db9188b5619c826670cc9ba1974ba718d69d578e783403c5d70cd22b712c9f857ab0d0d36cde1e1cc63015840e017fba62db184720d87020fef6d859a07b0f10a35bcfdc939ab3d8a179abad7952a15899b69bca3e6a75ca3482fccc55fdd035ac225dff84ba6ddeba1bbee63e3e03c0e5d083edb96d0d6a06a24bdd57fb269704b96b4d1fc88e0ea630462357c5c909806d3a37e99206bd3553e76c2c3b9ac96ef808ddad462757c012cf2126378726283ab183817cc9d167c53ea2b24ec6576d8b0dfca654cda0d281dc215bf2f59e4b267fa7220b3ec65f5e73087d0083dc751c5f281ca6b3aceb70fe8eae0e6fcea5228c9087e8b802bafeb27adb1355cc08677dd8b214b123344661c7ee29e8f353789eb22a8b0798251fdfd7149fa3fd0fdf8a0cc06c43248f2a0dce67393ba80120043c11c419821f2bef48c6fb9f165fdac46fa7ab40b64f1606e685c8b58b020977a058566b2e0ae373ea0fa4583c5b171eeff80d75277febe358dcf9d3e28ce6e563c3ebb71beb2289ee3768dfbd37327a9467e1e62ddf9a7ba932a458fb6dbafe5c50a9be38cb6f7f612408e29a12bd7c15775bc414f105cedf71e72ec68af0a4231ef3d82ae0cdc7418f22c272be3f8f82e5ac6ad13def6ea521c5ff354536feb22bbeaf6d12631b9803eda2ddc43e053e362abd00b60af4148260ee680286cc2f14b25d2762fb5f45b7c64135c98a872965de3f33ee24b6d81f43a1d43c85dc0c2a3e28e0c6af0fbb27544b8239ffec1061926a9c26696e80c3df9e55a822b1dd395d6eb4ff838b83b61e9ac62521000cb667da15bda6f202fd895d61c936fccc0bc3fb978a2379e9f2795e911c8bbed83cdabddcfaa6840a36b6bd2ed9b3a59723fbd24c33521654857b7e4e925dba5141e1087e4b01a797f0b623419950799a6dd802e423b7f41c2541b5fb563d9692f604815fb2771cf8b4c5617c50ae88bb80ed25f897edd124dd421ddae8e7ef28de8bd292469eb4057f93e3a842422c49f0f316717389cdc5a0475c04eeb0831e7ab9cc559e5887725ecdf6224bfe75efd03ce7f2539d7620501d2a5c600b6479763b091d39321d857d3eed69707a0e08a52fafa6f92dc76826e69b0e604a818261f8dffb61a2d16aae1cf396a8b9a70e1ba058cafb9a71eb8146bb1472084acd84ed095a25fd12399225ec40e8b2b288f56e6a95136f21ce16535666c8470eaee0bce62fdeebeb6713da6db209bb3de9644473e3fcd97d98aadab3cc0d64bf66046720627741217e8ec024806e9799cb165b6328a93b4a6e938fcd821c5dc02046ae8e51fb2a9e79e5dbcdb704ceddefe961328c4226622b9d0c02bd946f9d80c8f514a5e37a46ae1db024aac1ce4ab21496a7bdb4d08deb6d5e501adabdd7942ad620f50bef32ff6af942cabeed0cd4c739f298c51ebaac7b416709dfc814ed4b9551d9f8227de8087ee3b44d052e826c4e66e9eb0173aca840b1aba9fffdf3b40f00ec9667d2e82e261be1445ffcad411065f15f7d3ad45850fab7d5aef8dd39d8a00fd5efaff44c6faebe9a3e385f80e1156c558443ca00d35bb5ca6fdb176634a258b9c9474111b72892eba55338ed099dacdfeda713bb5e5ca6b2f6cb9f7bcfe1994c6a5a4078482f5cefbf41f9c3731b1fe602c4d89c28864aa26fa45033f07021cf9c3e48f7f1f096b81829cbe441451975741390f3446ce942c3a71ac9a63e2d32c63099e15a3bdb703a06c17c9a4148f8facfcb2a9cffb7077b1f8c941d14f2bf5b687da291a0ea6b5457446c2dba44ad000c58411ff49907557f03d84898a50fe1176e71ddbdb7b7688395da708de9c7c9465b2b2658cc9b3c2e0d0e3ee0ad889f06f3"]) 5.393407055s ago: executing program 2 (id=733): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r2, 0x6, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x2, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x20000000, 0xfffffffc, 0x7ff}}]}, {0x4}, {0x2, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) sendmsg$nl_route_sched(r4, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x32, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) unshare(0x2040400) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(0xffffffffffffffff, 0x0, 0x0) r6 = openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r6, 0xc02c564a, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4b0, 0x2fc, 0x18c, 0x203, 0x0, 0x19030000, 0x3e8, 0x2e0, 0x2e0, 0x3e8, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d4, 0x2fc, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {0xfffc, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {0xffff}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4, 0x0, 0x10}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x50c) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 5.14005901s ago: executing program 0 (id=736): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSTI(r4, 0x5412, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x80}, 0x1, 0x0, 0x0, 0x840}, 0x0) close(r5) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) 4.360641436s ago: executing program 1 (id=737): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) close(0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x810) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r6, {}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x1, 0x32, 0x5, 0x9, 0x2, 0x9, 0xd, 0x1, 0x1, {0xffff1c72, 0x23, 0x7, 0x8, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0x8000) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f0000000900)="bada30fbc99b5400040000ea0756159288a8", 0x36, 0x8040, &(0x7f00000001c0)={0x11, 0x88a8, r8, 0x1, 0xd8, 0x6, @multicast}, 0x14) 3.93845917s ago: executing program 1 (id=739): setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x7000000, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r5 = socket(0x40000000015, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2715, 0x0, &(0x7f0000000400)) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x3010}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x4, 0x0, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a677f122b7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fed9879328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e2725427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a95", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361", 0x35}], 0x3}, 0x0) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, 0x0, 0x866d014d088730b6) sendmsg$TIPC_NL_SOCK_GET(r6, &(0x7f0000000300)={&(0x7f0000000140), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0x10) 3.835341396s ago: executing program 2 (id=740): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) r0 = inotify_init1(0x80800) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x610003d5) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1a42028, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x42, 0x5) io_setup(0x5, 0x0) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, r1, &(0x7f0000000000)='\x00\x00', 0x2, 0xaf}]) 3.484906527s ago: executing program 2 (id=743): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffdbd}]}) shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) shmdt(0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f7, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_emit_ethernet(0x95, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f00000001c0)={0x1, 0x1, [0xf74, 0x4e0, 0xe4b, 0xa20]}) syz_open_dev$usbfs(0x0, 0x775, 0x8000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) dup(r1) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) 3.42716613s ago: executing program 0 (id=744): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000400)=ANY=[@ANYRES8=r0, @ANYBLOB="c6fbe5649cd457567beb69b725a5688d7f707d748e518c142ea27bc85a5f66219946ac7371af67df948d434ea1ebcbfeb1ab12d2522d9c0171dbf36075e8b7618a7d20e0087a5615fb3b86c712b5c262c2b2d621089b1c4f57d3d462e20bf495db9188b5619c826670cc9ba1974ba718d69d578e783403c5d70cd22b712c9f857ab0d0d36cde1e1cc63015840e017fba62db184720d87020fef6d859a07b0f10a35bcfdc939ab3d8a179abad7952a15899b69bca3e6a75ca3482fccc55fdd035ac225dff84ba6ddeba1bbee63e3e03c0e5d083edb96d0d6a06a24bdd57fb269704b96b4d1fc88e0ea630462357c5c909806d3a37e99206bd3553e76c2c3b9ac96ef808ddad462757c012cf2126378726283ab183817cc9d167c53ea2b24ec6576d8b0dfca654cda0d281dc215bf2f59e4b267fa7220b3ec65f5e73087d0083dc751c5f281ca6b3aceb70fe8eae0e6fcea5228c9087e8b802bafeb27adb1355cc08677dd8b214b123344661c7ee29e8f353789eb22a8b0798251fdfd7149fa3fd0fdf8a0cc06c43248f2a0dce67393ba80120043c11c419821f2bef48c6fb9f165fdac46fa7ab40b64f1606e685c8b58b020977a058566b2e0ae373ea0fa4583c5b171eeff80d75277febe358dcf9d3e28ce6e563c3ebb71beb2289ee3768dfbd37327a9467e1e62ddf9a7ba932a458fb6dbafe5c50a9be38cb6f7f612408e29a12bd7c15775bc414f105cedf71e72ec68af0a4231ef3d82ae0cdc7418f22c272be3f8f82e5ac6ad13def6ea521c5ff354536feb22bbeaf6d12631b9803eda2ddc43e053e362abd00b60af4148260ee680286cc2f14b25d2762fb5f45b7c64135c98a872965de3f33ee24b6d81f43a1d43c85dc0c2a3e28e0c6af0fbb27544b8239ffec1061926a9c26696e80c3df9e55a822b1dd395d6eb4ff838b83b61e9ac62521000cb667da15bda6f202fd895d61c936fccc0bc3fb978a2379e9f2795e911c8bbed83cdabddcfaa6840a36b6bd2ed9b3a59723fbd24c33521654857b7e4e925dba5141e1087e4b01a797f0b623419950799a6dd802e423b7f41c2541b5fb563d9692f604815fb2771cf8b4c5617c50ae88bb80ed25f897edd124dd421ddae8e7ef28de8bd292469eb4057f93e3a842422c49f0f316717389cdc5a0475c04eeb0831e7ab9cc559e5887725ecdf6224bfe75efd03ce7f2539d7620501d2a5c600b6479763b091d39321d857d3eed69707a0e08a52fafa6f92dc76826e69b0e604a818261f8dffb61a2d16aae1cf396a8b9a70e1ba058cafb9a71eb8146bb1472084acd84ed095a25fd12399225ec40e8b2b288f56e6a95136f21ce16535666c8470eaee0bce62fdeebeb6713da6db209bb3de9644473e3fcd97d98aadab3cc0d64bf66046720627741217e8ec024806e9799cb165b6328a93b4a6e938fcd821c5dc02046ae8e51fb2a9e79e5dbcdb704ceddefe961328c4226622b9d0c02bd946f9d80c8f514a5e37a46ae1db024aac1ce4ab21496a7bdb4d08deb6d5e501adabdd7942ad620f50bef32ff6af942cabeed0cd4c739f298c51ebaac7b416709dfc814ed4b9551d9f8227de8087ee3b44d052e826c4e66e9eb0173aca840b1aba9fffdf3b40f00ec9667d2e82e261be1445ffcad411065f15f7d3ad45850fab7d5aef8dd39d8a00fd5efaff44c6faebe9a3e385f80e1156c558443ca00d35bb5ca6fdb176634a258b9c9474111b72892eba55338ed099dacdfeda713bb5e5ca6b2f6cb9f7bcfe1994c6a5a4078482f5cefbf41f9c3731b1fe602c4d89c28864aa26fa45033f07021cf9c3e48f7f1f096b81829cbe441451975741390f3446ce942c3a71ac9a63e2d32c63099e15a3bdb703a06c17c9a4148f8facfcb2a9cffb7077b1f8c941d14f2bf5b687da291a0ea6b5457446c2dba44ad000c58411ff49907557f03d84898a50fe1176e71ddbdb7b7688395da708de9c7c9465b2b2658cc9b3c2e0d0e3ee0ad889f06f3"]) 3.181267015s ago: executing program 4 (id=745): sendto$inet(0xffffffffffffffff, &(0x7f0000000140)="21699f", 0x3, 0x2000c8d4, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) timer_create(0x3, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001dc0)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 2.90927459s ago: executing program 1 (id=746): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x7, 0x1}, 0x1c) recvmmsg$unix(r0, 0x0, 0x0, 0x40000000, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 2.458461297s ago: executing program 2 (id=747): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) close(0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x810) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r6, {}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x1, 0x32, 0x5, 0x9, 0x2, 0x9, 0xd, 0x1, 0x1, {0xffff1c72, 0x23, 0x7, 0x8, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0x8000) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f0000000900)="bada30fbc99b5400040000ea0756159288a8", 0x36, 0x8040, &(0x7f00000001c0)={0x11, 0x88a8, r8, 0x1, 0xd8, 0x6, @multicast}, 0x14) 2.296911806s ago: executing program 2 (id=748): sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) unshare(0x22020600) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fcntl$getflags(r3, 0x1) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@private2, 0x4, 0x2, 0x2, 0x3, 0x3c76, 0x4}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000007000)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001002a000000000000000000000a28000000000a010800000000000000000a00000008000240000000010900010073797a300000000f20000000000a01040000000000000000070000000900010073797a310000000028000000000a030000000000000000000a00000008000240000000000900010073797a300000000014000000110001ffde000000000000000000000a328a44464dac54fa283aab1474ac1eec12bea3d7f2977a58244f7f7f767e3fca62d900c1112e1ecaab68700d5b99a4f1f721274febc9824afe9713c9948cc9440e5c89fb7e1ac0544b079900000000"], 0x98}}, 0x0) fsetxattr$security_capability(r2, 0x0, 0x0, 0xfffffe04, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_open_dev$vim2m(0x0, 0x47b, 0x2) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x85c68e8ab9c77084, 0x0) openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) 2.086128469s ago: executing program 4 (id=749): r0 = socket(0x840000000002, 0x3, 0x100) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_int(r0, 0x0, 0x1, 0x0, 0x0) 1.932918238s ago: executing program 1 (id=750): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x98, 0x0, &(0x7f00000005c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x46, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000700)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1.858165622s ago: executing program 4 (id=751): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) r0 = inotify_init1(0x80800) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x610003d5) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1a42028, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x42, 0x5) io_setup(0x5, &(0x7f00000002c0)=0x0) io_submit(r1, 0x0, 0x0) 1.691208532s ago: executing program 1 (id=752): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSTI(r4, 0x5412, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x80}, 0x1, 0x0, 0x0, 0x840}, 0x0) close(r5) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) 1.495149553s ago: executing program 4 (id=753): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x7a, &(0x7f0000000040)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x5, 0x0, 0x0, {0x14, 0x4, 0x2, 0x5, 0x2, 0x66, 0x330, 0x2, 0x1, 0x81, @multicast1, @multicast2, {[@ra={0x94, 0x4}, @ra={0x94, 0x4}, @lsrr={0x83, 0x3, 0x19}, @rr={0x7, 0x1f, 0xfd, [@dev={0xac, 0x14, 0x14, 0x3b}, @broadcast, @dev={0xac, 0x14, 0x14, 0x1d}, @local, @remote, @dev={0xac, 0x14, 0x14, 0x13}, @rand_addr=0x64010102]}, @ssrr={0x89, 0xf, 0x11, [@local, @rand_addr=0x64010101, @rand_addr=0x64010100]}]}}}}}}}, 0x0) r2 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7900fbdbdf2505000000200001800d0001007564703a73797a3200000800000280f5070f04000f03c2"], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r3 = socket$nl_audit(0x10, 0x3, 0x9) socket$netlink(0x10, 0x3, 0x12) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@empty, 0x8000, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0xa00, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@policy_type={0xa, 0x10, {0x1}}]}, 0x1c}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r5, &(0x7f0000000580)=ANY=[@ANYRESOCT], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000001500)="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", 0x7ff}], 0x1) 1.181023531s ago: executing program 4 (id=754): setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x7000000, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r5 = socket(0x40000000015, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2715, 0x0, &(0x7f0000000400)) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x3010}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x4, 0x0, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361", 0x35}], 0x3}, 0x0) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, 0x0, 0x866d014d088730b6) sendmsg$TIPC_NL_SOCK_GET(r6, &(0x7f0000000300)={&(0x7f0000000140), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0x10) 1.020762881s ago: executing program 2 (id=755): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000480)=ANY=[@ANYBLOB="120100000c9768405e0483020b9931e4020109021b000100000000090400fb0160291d00090509"], 0x0) syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 347.1775ms ago: executing program 0 (id=756): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) close(0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x810) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r6, {}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x1, 0x32, 0x5, 0x9, 0x2, 0x9, 0xd, 0x1, 0x1, {0xffff1c72, 0x23, 0x7, 0x8, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0x8000) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f0000000900)="bada30fbc99b5400040000ea0756159288a8", 0x36, 0x8040, &(0x7f00000001c0)={0x11, 0x88a8, r8, 0x1, 0xd8, 0x6, @multicast}, 0x14) 71.976756ms ago: executing program 1 (id=757): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x8004}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x800}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0xf}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x6}, {}, {0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x10}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {0x0, 0x0, 0xfffffe01}, {0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x5, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}], [{0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x28, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}}, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'ip6tnl0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x2000000}, 0x1c) r3 = syz_open_procfs(0x0, 0x0) fchdir(r3) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x900, 0x12) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "0587a06a93f2aad4", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', "be0ea450d5a50003"}, 0x38) connect$llc(0xffffffffffffffff, &(0x7f00000003c0)={0x1a, 0x336, 0x40, 0xa1, 0x5, 0x9, @remote}, 0x10) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r5, 0x39) syz_open_dev$evdev(&(0x7f0000000100), 0x1000, 0x10800) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r6, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 0s ago: executing program 4 (id=758): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x0, 0x0, @mcast2, 0x7}}, {{0xa, 0x0, 0x6df, @empty, 0x5}}}, 0x108) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)) syslog(0x3, &(0x7f0000000700)=""/231, 0xe7) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000", 0x50}, {&(0x7f00000001c0)="ee641681c41fd678", 0x8}], 0x2) close(0x3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.30' (ED25519) to the list of known hosts. [ 56.965232][ T5750] cgroup: Unknown subsys name 'net' [ 57.100147][ T5750] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.441368][ T5750] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 59.906588][ T5768] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 59.906721][ T5770] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 59.914638][ T5768] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 59.926290][ T5772] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 59.932347][ T5768] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 59.937408][ T5772] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 59.942954][ T5768] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 59.950178][ T5772] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 59.957274][ T5768] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 59.963376][ T5772] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 59.970647][ T5768] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 59.978492][ T5772] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 59.984999][ T5768] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 59.992738][ T5772] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.005953][ T5772] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 60.013357][ T5772] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 60.014371][ T5766] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 60.028328][ T5766] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.080261][ T5768] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 60.088510][ T5775] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 60.097300][ T5775] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 60.131332][ T5775] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 60.140204][ T5775] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 60.147611][ T5775] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 60.357620][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 60.469641][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.477475][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.484862][ T5767] bridge_slave_0: entered allmulticast mode [ 60.491967][ T5767] bridge_slave_0: entered promiscuous mode [ 60.515046][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.522158][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.529373][ T5767] bridge_slave_1: entered allmulticast mode [ 60.536103][ T5767] bridge_slave_1: entered promiscuous mode [ 60.601194][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.621449][ T5762] chnl_net:caif_netlink_parms(): no params data found [ 60.635980][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.683185][ T5761] chnl_net:caif_netlink_parms(): no params data found [ 60.711099][ T5767] team0: Port device team_slave_0 added [ 60.720419][ T5767] team0: Port device team_slave_1 added [ 60.796335][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.803298][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.829524][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.854749][ T5763] chnl_net:caif_netlink_parms(): no params data found [ 60.873074][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.880127][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.906860][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.927318][ T5762] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.934524][ T5762] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.941723][ T5762] bridge_slave_0: entered allmulticast mode [ 60.948723][ T5762] bridge_slave_0: entered promiscuous mode [ 60.986191][ T5762] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.993314][ T5762] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.001498][ T5762] bridge_slave_1: entered allmulticast mode [ 61.008223][ T5762] bridge_slave_1: entered promiscuous mode [ 61.060602][ T5761] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.067881][ T5761] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.075203][ T5761] bridge_slave_0: entered allmulticast mode [ 61.081824][ T5761] bridge_slave_0: entered promiscuous mode [ 61.095668][ T5762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.112252][ T5761] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.119900][ T5761] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.127300][ T5761] bridge_slave_1: entered allmulticast mode [ 61.134191][ T5761] bridge_slave_1: entered promiscuous mode [ 61.157160][ T5762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.179120][ T5767] hsr_slave_0: entered promiscuous mode [ 61.186051][ T5767] hsr_slave_1: entered promiscuous mode [ 61.212841][ T5763] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.220078][ T5763] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.227619][ T5763] bridge_slave_0: entered allmulticast mode [ 61.234439][ T5763] bridge_slave_0: entered promiscuous mode [ 61.272775][ T5763] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.280142][ T5763] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.287673][ T5763] bridge_slave_1: entered allmulticast mode [ 61.294617][ T5763] bridge_slave_1: entered promiscuous mode [ 61.312450][ T5762] team0: Port device team_slave_0 added [ 61.320705][ T5761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.332712][ T5761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.358687][ T5763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.369934][ T5762] team0: Port device team_slave_1 added [ 61.390007][ T5762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.397084][ T5762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.423608][ T5762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.465196][ T5763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.489325][ T5762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.496763][ T5762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.522993][ T5762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.547443][ T5761] team0: Port device team_slave_0 added [ 61.555424][ T5761] team0: Port device team_slave_1 added [ 61.591359][ T5761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.598432][ T5761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.624444][ T5761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.641769][ T5763] team0: Port device team_slave_0 added [ 61.656207][ T5761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.663149][ T5761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.689280][ T5761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.715949][ T5763] team0: Port device team_slave_1 added [ 61.773046][ T5763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.780310][ T5763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.806471][ T5763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.822163][ T5762] hsr_slave_0: entered promiscuous mode [ 61.829343][ T5762] hsr_slave_1: entered promiscuous mode [ 61.835682][ T5762] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.843472][ T5762] Cannot create hsr debugfs directory [ 61.870490][ T5763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.877692][ T5763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.905543][ T5763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.949065][ T5761] hsr_slave_0: entered promiscuous mode [ 61.956163][ T5761] hsr_slave_1: entered promiscuous mode [ 61.962464][ T5761] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.970857][ T5761] Cannot create hsr debugfs directory [ 62.044203][ T5772] Bluetooth: hci2: command tx timeout [ 62.082515][ T5763] hsr_slave_0: entered promiscuous mode [ 62.089893][ T5763] hsr_slave_1: entered promiscuous mode [ 62.096267][ T5763] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.103873][ T5763] Cannot create hsr debugfs directory [ 62.123708][ T5775] Bluetooth: hci0: command tx timeout [ 62.129393][ T5772] Bluetooth: hci1: command tx timeout [ 62.203774][ T5772] Bluetooth: hci3: command tx timeout [ 62.226541][ T5767] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.257870][ T5767] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.279860][ T5767] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.289563][ T5767] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.408969][ T5761] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.420950][ T5761] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.432033][ T5761] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.442952][ T5761] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.516960][ T5762] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.541552][ T5762] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.552011][ T5762] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.569416][ T5762] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.641306][ T5763] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.652500][ T5763] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.662867][ T5763] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.685542][ T5763] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.751984][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.794062][ T5761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.836100][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.847224][ T5761] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.862818][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.870077][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.897836][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.904983][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.914940][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.922022][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.945085][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.952275][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.973810][ T5762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.022091][ T5763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.040377][ T5762] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.072921][ T1074] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.080079][ T1074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.099703][ T1074] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.106839][ T1074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.139282][ T5763] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.179937][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.187095][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.250958][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.258130][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.493394][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.608020][ T5761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.637709][ T5767] veth0_vlan: entered promiscuous mode [ 63.687717][ T5767] veth1_vlan: entered promiscuous mode [ 63.740750][ T5762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.793099][ T5761] veth0_vlan: entered promiscuous mode [ 63.840004][ T5767] veth0_macvtap: entered promiscuous mode [ 63.849176][ T5761] veth1_vlan: entered promiscuous mode [ 63.862564][ T5763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.874995][ T5767] veth1_macvtap: entered promiscuous mode [ 63.902047][ T5762] veth0_vlan: entered promiscuous mode [ 63.926086][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.938697][ T5762] veth1_vlan: entered promiscuous mode [ 63.955337][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.968538][ T5767] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.977498][ T5767] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.991422][ T5767] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.000344][ T5767] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.057899][ T5761] veth0_macvtap: entered promiscuous mode [ 64.081650][ T5763] veth0_vlan: entered promiscuous mode [ 64.109114][ T5761] veth1_macvtap: entered promiscuous mode [ 64.125171][ T5772] Bluetooth: hci2: command tx timeout [ 64.151049][ T5762] veth0_macvtap: entered promiscuous mode [ 64.180869][ T1132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.193996][ T1132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.201065][ T5762] veth1_macvtap: entered promiscuous mode [ 64.216059][ T5772] Bluetooth: hci1: command tx timeout [ 64.221474][ T5772] Bluetooth: hci0: command tx timeout [ 64.229653][ T5763] veth1_vlan: entered promiscuous mode [ 64.262517][ T5761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.277206][ T5761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.288774][ T5761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.295696][ T5772] Bluetooth: hci3: command tx timeout [ 64.305613][ T5761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.318831][ T5761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.329728][ T5761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.341327][ T1132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.342667][ T5761] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.358750][ T5761] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.361874][ T1132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.368442][ T5761] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.383656][ T5761] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.407732][ T5762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.419106][ T5762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.429310][ T5762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.439752][ T5762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.452953][ T5762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.505734][ T5762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.522333][ T5762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.533412][ T5762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.544308][ T5762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.557241][ T5762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.572376][ T5763] veth0_macvtap: entered promiscuous mode [ 64.603274][ T5762] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.614560][ T5762] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.623264][ T5762] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.632478][ T5762] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.648841][ T5763] veth1_macvtap: entered promiscuous mode [ 64.682622][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.708665][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.769359][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.782228][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.799009][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.809516][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.834629][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.849387][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.860900][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.917387][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.944626][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.954660][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.969076][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.979798][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.992615][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.004915][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.032043][ T5763] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.040972][ T5763] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.050184][ T5763] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.058975][ T5763] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.083078][ T1132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.085613][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.107137][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.124448][ T1132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.157490][ T1132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.197595][ T1132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.366113][ T1132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.387428][ T1132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.519825][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.533091][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.550102][ T5860] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9'. [ 65.787023][ T5867] syz.0.12[5867]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 66.053355][ T5874] loop2: detected capacity change from 0 to 512 [ 66.062708][ T5874] EXT4-fs: Ignoring removed mblk_io_submit option [ 66.074246][ T5867] loop0: detected capacity change from 0 to 32768 [ 66.083049][ T5867] XFS: noattr2 mount option is deprecated. [ 66.089814][ T5867] XFS (loop0): sunit and swidth options incompatible with the noalign option [ 66.107548][ T5874] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 66.122959][ T5874] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e02c, mo2=0002] [ 66.141776][ T5776] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 66.142311][ T5874] System zones: 1-12 [ 66.163860][ T5874] EXT4-fs (loop2): orphan cleanup on readonly fs [ 66.173000][ T5874] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.14: bg 0: block 361: padding at end of block bitmap is not set [ 66.204360][ T5772] Bluetooth: hci2: command tx timeout [ 66.293707][ T5772] Bluetooth: hci0: command tx timeout [ 66.293952][ T5775] Bluetooth: hci1: command tx timeout [ 66.305211][ T5874] EXT4-fs (loop2): Remounting filesystem read-only [ 66.313284][ T5874] EXT4-fs (loop2): 1 truncate cleaned up [ 66.327671][ T5874] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 66.364471][ T5775] Bluetooth: hci3: command tx timeout [ 66.390991][ T5874] EXT4-fs warning (device loop2): dx_probe:823: inode #2: lblock 0: comm syz.2.14: error -117 reading directory block [ 66.472500][ T5763] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 66.977759][ T5889] loop0: detected capacity change from 0 to 32768 [ 66.990618][ T5889] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.20 (5889) [ 67.012714][ T5889] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 67.023155][ T5889] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 67.032501][ T5889] BTRFS info (device loop0): disabling tree log [ 67.039111][ T5889] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 67.048733][ T5889] BTRFS info (device loop0): use zstd compression, level 3 [ 67.056006][ T5889] BTRFS info (device loop0): turning off barriers [ 67.062561][ T5889] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 67.073273][ T5889] BTRFS info (device loop0): trying to use backup root at mount time [ 67.081470][ T5889] BTRFS info (device loop0): enabling auto defrag [ 67.088886][ T5889] BTRFS info (device loop0): using free space tree [ 67.152351][ T11] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 67.168239][ T5889] BTRFS error (device loop0): failed to load root extent [ 67.176109][ T5889] BTRFS warning (device loop0): try to load backup roots slot 1 [ 67.186294][ T11] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 67.199884][ T5889] BTRFS warning (device loop0): couldn't read tree root [ 67.207045][ T5889] BTRFS warning (device loop0): try to load backup roots slot 2 [ 67.215089][ T1132] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 67.249004][ T5889] BTRFS warning (device loop0): couldn't read tree root [ 67.256032][ T5889] BTRFS warning (device loop0): try to load backup roots slot 3 [ 67.283882][ T5889] BTRFS info (device loop0): enabling ssd optimizations [ 67.290887][ T5889] BTRFS info (device loop0): auto enabling async discard [ 67.319035][ T5889] BTRFS info (device loop0): rebuilding free space tree [ 67.383875][ T5889] BTRFS info (device loop0): checking UUID tree [ 67.531424][ T5914] loop3: detected capacity change from 0 to 32768 [ 67.552357][ T5914] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz.3.25 (5914) [ 67.813171][ T5776] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 67.933791][ T5918] loop2: detected capacity change from 0 to 2048 [ 67.941815][ T5918] UDF-fs: bad mount option "GÏÌÿÿÿ€ãÿÿ " or missing value [ 68.010648][ T5761] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 68.184182][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.193134][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.303860][ T5775] Bluetooth: hci2: command tx timeout [ 68.365509][ T5775] Bluetooth: hci1: command tx timeout [ 68.365521][ T5772] Bluetooth: hci0: command tx timeout [ 68.402592][ T5932] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 68.445471][ T5772] Bluetooth: hci3: command tx timeout [ 69.005452][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 69.552365][ T5952] netlink: 'syz.0.34': attribute type 13 has an invalid length. [ 70.402343][ T5960] loop3: detected capacity change from 0 to 1024 [ 70.410636][ T5952] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.419243][ T5952] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.525999][ T27] audit: type=1800 audit(1769204219.497:2): pid=5960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.36" name="file2" dev="loop3" ino=20 res=0 errno=0 [ 71.297214][ T5952] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.354937][ T5952] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.415776][ T5974] loop3: detected capacity change from 0 to 2048 [ 71.424003][ T5974] UDF-fs: bad mount option "GÏÌÿÿÿ€ãÿÿ " or missing value [ 71.489088][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.498932][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.691515][ T5952] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.700705][ T5952] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.719490][ T5952] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.730652][ T5952] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.118366][ T5998] x_tables: ip_tables: osf match: only valid for protocol 6 [ 73.290702][ T6018] netlink: 'syz.2.50': attribute type 13 has an invalid length. [ 73.676360][ T6026] loop1: detected capacity change from 0 to 128 [ 73.691912][ T6026] FAT-fs (loop1): Unrecognized mount option "18446744073709551615ÿÿÿ" or missing value [ 73.922178][ T6018] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.929687][ T6018] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.234314][ T6018] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.262988][ T6018] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.600454][ T6018] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.614079][ T6018] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.622962][ T6018] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.632541][ T6018] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.903872][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 74.923943][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.942141][ T6051] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 75.024031][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 75.315684][ T6063] loop1: detected capacity change from 0 to 128 [ 75.325740][ T6063] FAT-fs (loop1): Unrecognized mount option "18446744073709551615ÿÿÿ" or missing value [ 75.513766][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 75.523699][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 75.563881][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 75.833997][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 75.895476][ T6070] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 76.306389][ T6075] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.70'. [ 76.484608][ T6079] tipc: Enabling of bearer rejected, failed to enable media [ 76.608800][ T6087] netlink: 44 bytes leftover after parsing attributes in process `syz.0.71'. [ 78.121686][ T6110] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 78.130760][ T6110] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 78.876950][ T6114] block device autoloading is deprecated and will be removed. [ 78.888805][ T6114] syz.0.81: attempt to access beyond end of device [ 78.888805][ T6114] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 79.931710][ T6139] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 79.976110][ T6139] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 81.358204][ T6166] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 81.367763][ T6166] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 81.756033][ T1190] cfg80211: failed to load regulatory.db [ 82.545593][ T6192] overlayfs: missing 'lowerdir' [ 82.930448][ T6212] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.121'. [ 83.994227][ T788] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 84.146201][ T6238] mmap: syz.3.131 (6238) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 84.193613][ T788] usb 3-1: Using ep0 maxpacket: 8 [ 84.213908][ T788] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 84.235844][ T788] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 84.255921][ T788] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 84.278337][ T788] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 84.307583][ T788] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 84.326233][ T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.587440][ T788] usb 3-1: usb_control_msg returned -32 [ 84.587519][ T788] usbtmc 3-1:16.0: can't read capabilities [ 84.747425][ T6231] usbtmc 3-1:16.0: usbtmc488_ioctl_trigger returned -90 [ 84.765917][ T788] usb 3-1: USB disconnect, device number 2 [ 85.320706][ T6266] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 85.424995][ T6268] netlink: 'syz.3.142': attribute type 13 has an invalid length. [ 85.433505][ T6271] binder: 6270:6271 ioctl c0306201 200000000240 returned -11 [ 86.298557][ T6268] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.306264][ T6268] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.051739][ T6268] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.116540][ T6268] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.784665][ T6268] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.804243][ T6268] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.813156][ T6268] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.842819][ T6268] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.067737][ T6276] tipc: Enabling of bearer rejected, failed to enable media [ 88.085382][ T6277] syzkaller0: entered promiscuous mode [ 88.101927][ T6277] syzkaller0: entered allmulticast mode [ 88.133749][ T6287] netlink: 44 bytes leftover after parsing attributes in process `syz.2.144'. [ 88.493880][ T5976] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 88.717956][ T5976] usb 2-1: Using ep0 maxpacket: 8 [ 88.729894][ T5976] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 88.756027][ T5976] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 88.771674][ T5976] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 88.783839][ T5976] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 88.800539][ T5976] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 88.811266][ T5976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.031853][ T5976] usb 2-1: usb_control_msg returned -32 [ 89.058277][ T5976] usbtmc 2-1:16.0: can't read capabilities [ 89.080730][ T5976] usb 2-1: USB disconnect, device number 2 [ 89.509191][ T6332] tipc: Enabling of bearer rejected, failed to enable media [ 89.518872][ T6332] syzkaller0: entered promiscuous mode [ 89.525149][ T6332] syzkaller0: entered allmulticast mode [ 89.581690][ T6332] netlink: 44 bytes leftover after parsing attributes in process `syz.0.164'. [ 90.162832][ T6352] Zero length message leads to an empty skb [ 90.583830][ T5976] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 90.788638][ T5976] usb 2-1: Using ep0 maxpacket: 8 [ 90.818678][ T5976] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 90.850083][ T5976] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 90.880498][ T5976] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 90.899200][ T5976] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 90.948066][ T5976] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 90.975646][ T5976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.241476][ T5976] usb 2-1: usb_control_msg returned -32 [ 91.252329][ T5775] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.266878][ T5976] usbtmc 2-1:16.0: can't read capabilities [ 91.279572][ T5775] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.313097][ T5775] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.322531][ T5976] usb 2-1: USB disconnect, device number 3 [ 91.340888][ T5775] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.354282][ T5775] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 91.361750][ T5775] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.089323][ T6385] tipc: Enabling of bearer rejected, failed to enable media [ 92.203141][ T6365] chnl_net:caif_netlink_parms(): no params data found [ 92.226383][ T6383] syzkaller0: entered promiscuous mode [ 92.231917][ T6383] syzkaller0: entered allmulticast mode [ 92.377648][ T6383] netlink: 44 bytes leftover after parsing attributes in process `syz.0.179'. [ 92.453732][ T6392] netlink: 'syz.1.181': attribute type 13 has an invalid length. [ 92.833751][ T5982] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 92.869828][ T6392] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.877502][ T6392] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.903687][ T5978] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 93.043651][ T5982] usb 1-1: Using ep0 maxpacket: 32 [ 93.051959][ T5982] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 93.060704][ T5982] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 93.071336][ T5982] usb 1-1: config 0 has no interface number 0 [ 93.078503][ T5982] usb 1-1: config 0 interface 85 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 93.091963][ T5982] usb 1-1: config 0 interface 85 has no altsetting 0 [ 93.113629][ T5978] usb 3-1: Using ep0 maxpacket: 8 [ 93.124437][ T5982] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 93.138892][ T5982] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.148174][ T5982] usb 1-1: Product: syz [ 93.152937][ T5978] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 93.168257][ T5978] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 93.178164][ T5982] usb 1-1: Manufacturer: syz [ 93.182869][ T5982] usb 1-1: SerialNumber: syz [ 93.187835][ T5978] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 93.199335][ T5978] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 93.213686][ T5982] usb 1-1: config 0 descriptor?? [ 93.219202][ T5978] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 93.230462][ T5982] appletouch 1-1:0.85: Could not find int-in endpoint [ 93.238902][ T5982] appletouch: probe of 1-1:0.85 failed with error -5 [ 93.246531][ T5982] usbhid 1-1:0.85: couldn't find an input interrupt endpoint [ 93.254044][ T5978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.323051][ T6392] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.354083][ T6392] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.403696][ T5772] Bluetooth: hci2: command tx timeout [ 93.448632][ T5982] usb 1-1: USB disconnect, device number 2 [ 93.483762][ T5978] usb 3-1: usb_control_msg returned -32 [ 93.490362][ T5978] usbtmc 3-1:16.0: can't read capabilities [ 93.510610][ T5981] usb 3-1: USB disconnect, device number 3 [ 93.721459][ T6392] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.730776][ T6392] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.739742][ T6392] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.749214][ T6392] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.001639][ T49] hsr_slave_0: left promiscuous mode [ 94.013479][ T49] hsr_slave_1: left promiscuous mode [ 94.026273][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.064885][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.094807][ T49] bridge_slave_1: left allmulticast mode [ 94.100486][ T49] bridge_slave_1: left promiscuous mode [ 94.142393][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.193967][ T49] bridge_slave_0: left allmulticast mode [ 94.199655][ T49] bridge_slave_0: left promiscuous mode [ 94.312703][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.433251][ T49] team0 (unregistering): Port device team_slave_1 removed [ 95.484570][ T5772] Bluetooth: hci2: command tx timeout [ 95.608800][ T49] team0 (unregistering): Port device team_slave_0 removed [ 95.712351][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.800914][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.211243][ T49] bond0 (unregistering): Released all slaves [ 96.368473][ T6443] netlink: 44 bytes leftover after parsing attributes in process `syz.0.191'. [ 96.499453][ T6365] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.506884][ T6365] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.514197][ T6365] bridge_slave_0: entered allmulticast mode [ 96.521487][ T6365] bridge_slave_0: entered promiscuous mode [ 96.535974][ T6365] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.553612][ T6365] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.571152][ T6365] bridge_slave_1: entered allmulticast mode [ 96.588218][ T6365] bridge_slave_1: entered promiscuous mode [ 96.742795][ T6365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.804690][ T6365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.973980][ T6365] team0: Port device team_slave_0 added [ 96.983957][ T6365] team0: Port device team_slave_1 added [ 97.008999][ T6365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.023563][ T6365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.059954][ T6365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.091832][ T6365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.121328][ T6365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.210220][ T6365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.455722][ T6365] hsr_slave_0: entered promiscuous mode [ 97.488357][ T6365] hsr_slave_1: entered promiscuous mode [ 97.568674][ T5772] Bluetooth: hci2: command tx timeout [ 97.811840][ T6497] netlink: 'syz.1.204': attribute type 13 has an invalid length. [ 97.991977][ T6365] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 98.007425][ T6365] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 98.028122][ T6365] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 98.114799][ T6365] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 98.439737][ T6365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.476882][ T6365] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.496327][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.503462][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.549289][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.556437][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.401196][ T6365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.654028][ T5772] Bluetooth: hci2: command tx timeout [ 99.719760][ T6557] syzkaller0: entered promiscuous mode [ 99.735170][ T6557] syzkaller0: entered allmulticast mode [ 99.774866][ T6557] netlink: 44 bytes leftover after parsing attributes in process `syz.2.218'. [ 100.490959][ T6365] veth0_vlan: entered promiscuous mode [ 100.539011][ T6365] veth1_vlan: entered promiscuous mode [ 100.791378][ T6365] veth0_macvtap: entered promiscuous mode [ 100.901025][ T6365] veth1_macvtap: entered promiscuous mode [ 100.985963][ T6365] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.094880][ T6365] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.107534][ T6365] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.148014][ T6365] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.193932][ T6365] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.202670][ T6365] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.476667][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.509014][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.535881][ T6593] netlink: 'syz.1.224': attribute type 13 has an invalid length. [ 101.595484][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.634608][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.029564][ T6605] syzkaller0: entered promiscuous mode [ 102.059986][ T6605] syzkaller0: entered allmulticast mode [ 102.147574][ T6605] netlink: 44 bytes leftover after parsing attributes in process `syz.1.227'. [ 102.229928][ T6618] syz.2.229: attempt to access beyond end of device [ 102.229928][ T6618] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 104.304672][ T6654] overlayfs: failed to resolve './bus': -2 [ 105.634518][ T6694] overlayfs: failed to resolve './bus': -2 [ 106.337686][ T6721] binder: 6720:6721 ioctl c0306201 0 returned -14 [ 106.362220][ T6721] binder: 6720:6721 ioctl c0306201 200000000240 returned -11 [ 106.866815][ T6746] input: syz0 as /devices/virtual/input/input5 [ 108.049898][ T5773] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 108.235729][ T5773] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.250740][ T5773] usb 2-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 108.271556][ T5773] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.292696][ T5773] usb 2-1: config 0 descriptor?? [ 108.751501][ T5773] usbhid 2-1:0.0: can't add hid device: -71 [ 108.769313][ T5773] usbhid: probe of 2-1:0.0 failed with error -71 [ 108.921135][ T5773] usb 2-1: USB disconnect, device number 4 [ 110.240622][ T6818] syzkaller0: entered promiscuous mode [ 110.248896][ T6818] syzkaller0: entered allmulticast mode [ 110.267109][ T6818] netlink: 44 bytes leftover after parsing attributes in process `syz.2.278'. [ 114.241815][ T6873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.292'. [ 114.635624][ T27] audit: type=1326 audit(1769204263.617:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6880 comm="syz.2.293" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f44e739acb9 code=0x0 [ 114.863303][ T27] audit: type=1326 audit(1769204263.837:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6887 comm="syz.4.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c37f9acb9 code=0x7ffc0000 [ 114.892541][ T27] audit: type=1326 audit(1769204263.837:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6887 comm="syz.4.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c37f9acb9 code=0x7ffc0000 [ 114.936075][ T27] audit: type=1326 audit(1769204263.837:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6887 comm="syz.4.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7f7c37f9acb9 code=0x7ffc0000 [ 114.958927][ T27] audit: type=1326 audit(1769204263.837:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6887 comm="syz.4.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c37f9acb9 code=0x7ffc0000 [ 114.982374][ T27] audit: type=1326 audit(1769204263.837:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6887 comm="syz.4.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c37f9acb9 code=0x7ffc0000 [ 115.239624][ T6894] netlink: 12 bytes leftover after parsing attributes in process `syz.4.296'. [ 115.709660][ T6899] loop2: detected capacity change from 0 to 128 [ 115.792304][ T6899] FAT-fs (loop2): Unrecognized mount option "18446744073709551615ÿÿÿ" or missing value [ 116.454699][ T6913] syzkaller0: entered promiscuous mode [ 116.469973][ T6913] syzkaller0: entered allmulticast mode [ 118.636285][ T6948] netlink: 12 bytes leftover after parsing attributes in process `syz.1.309'. [ 119.443834][ T5773] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 119.662090][ T5773] usb 1-1: Using ep0 maxpacket: 16 [ 119.680463][ T5773] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.718518][ T5773] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 119.744080][ T5773] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 119.783635][ T5773] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 119.802524][ T5773] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 119.830994][ T5773] usb 1-1: Manufacturer: syz [ 119.864604][ T5773] usb 1-1: config 0 descriptor?? [ 120.273692][ T788] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 120.354169][ T6992] syzkaller0: entered promiscuous mode [ 120.362863][ T6992] syzkaller0: entered allmulticast mode [ 120.392744][ T6992] netlink: 44 bytes leftover after parsing attributes in process `syz.4.321'. [ 120.473620][ T788] usb 3-1: Using ep0 maxpacket: 8 [ 120.489359][ T788] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 120.513720][ T788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.522091][ T788] usb 3-1: Product: syz [ 120.543946][ T788] usb 3-1: Manufacturer: syz [ 120.548588][ T788] usb 3-1: SerialNumber: syz [ 120.570920][ T788] usb 3-1: config 0 descriptor?? [ 120.816650][ T788] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 121.216425][ T788] gspca_sunplus: reg_w_riv err -71 [ 121.227274][ T788] sunplus: probe of 3-1:0.0 failed with error -71 [ 121.249324][ T788] usb 3-1: USB disconnect, device number 4 [ 122.163897][ T788] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 122.206052][ T5988] usb 1-1: USB disconnect, device number 3 [ 122.387847][ T788] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 122.590957][ T788] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.660705][ T788] usb 5-1: Product: syz [ 122.699183][ T788] usb 5-1: Manufacturer: syz [ 122.711859][ T7077] netlink: 12 bytes leftover after parsing attributes in process `syz.0.329'. [ 122.726018][ T788] usb 5-1: SerialNumber: syz [ 122.753684][ T7078] syzkaller0: entered promiscuous mode [ 122.762739][ T7078] syzkaller0: entered allmulticast mode [ 122.792451][ T7078] netlink: 44 bytes leftover after parsing attributes in process `syz.2.331'. [ 123.439279][ T788] (unnamed net_device) (uninitialized): Assigned a random MAC address: 46:03:68:e9:0d:7c [ 124.263514][ C1] sched: RT throttling activated [ 124.823848][ T788] rtl8150 5-1:1.0: eth5: rtl8150 is detected [ 124.893841][ T788] usb 5-1: USB disconnect, device number 2 [ 125.536757][ T788] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 125.744052][ T788] usb 5-1: Using ep0 maxpacket: 8 [ 125.762166][ T788] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 125.791755][ T788] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.812000][ T788] usb 5-1: Product: syz [ 125.816586][ T788] usb 5-1: Manufacturer: syz [ 125.821194][ T788] usb 5-1: SerialNumber: syz [ 125.890575][ T788] usb 5-1: config 0 descriptor?? [ 126.013826][ T5979] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 126.139922][ T788] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 126.223719][ T5979] usb 3-1: Using ep0 maxpacket: 16 [ 126.237039][ T5979] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.272220][ T5979] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 126.294342][ T5979] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 126.352808][ T5979] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 126.372487][ T5979] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 126.381238][ T5979] usb 3-1: Manufacturer: syz [ 126.387399][ T5979] usb 3-1: config 0 descriptor?? [ 127.590120][ T7169] netlink: 16162 bytes leftover after parsing attributes in process `syz.1.344'. [ 127.783995][ T5773] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 127.986914][ T5773] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 128.013425][ T5773] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 128.025010][ T788] usb write operation failed. (-71) [ 128.034555][ T5773] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.059176][ T788] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 128.079247][ T788] dvbdev: DVB: registering new adapter (Terratec H7) [ 128.090397][ T788] usb 5-1: media controller created [ 128.096495][ T788] usb read operation failed. (-71) [ 128.103420][ T788] usb write operation failed. (-71) [ 128.115813][ T5773] usb 1-1: config 0 descriptor?? [ 128.126171][ T788] dvb_usb_az6007: probe of 5-1:0.0 failed with error -5 [ 128.378016][ T5773] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 128.422536][ T788] usb 5-1: USB disconnect, device number 3 [ 128.797380][ T788] usb 3-1: USB disconnect, device number 5 [ 128.902012][ T7196] syzkaller0: entered promiscuous mode [ 128.908027][ T7196] syzkaller0: entered allmulticast mode [ 129.332656][ T7208] netlink: 8 bytes leftover after parsing attributes in process `syz.4.353'. [ 129.634779][ T7226] netlink: 'syz.2.358': attribute type 4 has an invalid length. [ 129.643644][ T7226] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.358'. [ 130.121748][ T7241] loop1: detected capacity change from 0 to 128 [ 130.133200][ T7241] FAT-fs (loop1): Unrecognized mount option "18446744073709551615ÿÿÿ" or missing value [ 130.551334][ T5979] usb 1-1: USB disconnect, device number 4 [ 130.620847][ T7260] syzkaller0: entered promiscuous mode [ 130.626576][ T7260] syzkaller0: entered allmulticast mode [ 131.238360][ T7277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.365'. [ 131.623720][ T788] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 131.677432][ T7289] netlink: 36 bytes leftover after parsing attributes in process `syz.2.368'. [ 131.766398][ T7289] (null): rxe_set_mtu: Set mtu to 1024 [ 131.910825][ T788] usb 2-1: config index 0 descriptor too short (expected 65535, got 146) [ 132.017786][ T788] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.073698][ T788] usb 2-1: config 0 has no interfaces? [ 132.123864][ T788] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 132.273674][ T788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 132.295477][ T788] usb 2-1: SerialNumber: syz [ 132.318199][ T788] usb 2-1: config 0 descriptor?? [ 132.640938][ T7289] infiniband !yz!: set down [ 132.647554][ T7289] infiniband !yz!: added team_slave_0 [ 132.927042][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.943219][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.065175][ T7289] RDS/IB: !yz!: added [ 133.070143][ T7289] smc: adding ib device !yz! with port count 1 [ 133.130273][ T7289] smc: ib device !yz! port 1 has pnetid [ 133.270357][ T7314] loop4: detected capacity change from 0 to 128 [ 133.287065][ T7314] FAT-fs (loop4): Unrecognized mount option "18446744073709551615ÿÿÿ" or missing value [ 133.751158][ T5772] Bluetooth: hci1: unexpected Set CIG Parameters response data [ 134.227608][ T7335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.376'. [ 134.506219][ T5969] usb 2-1: USB disconnect, device number 5 [ 135.063613][ T5969] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 135.255882][ T5969] usb 2-1: Using ep0 maxpacket: 8 [ 135.295708][ T5969] usb 2-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 135.306025][ T5969] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.353438][ T5969] usb 2-1: Product: syz [ 135.380184][ T5969] usb 2-1: Manufacturer: syz [ 135.385216][ T5969] usb 2-1: SerialNumber: syz [ 135.392716][ T5969] usb 2-1: config 0 descriptor?? [ 135.609809][ T5969] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 135.659693][ T7376] syzkaller0: entered promiscuous mode [ 135.668793][ T7376] syzkaller0: entered allmulticast mode [ 135.731385][ T7376] netlink: 44 bytes leftover after parsing attributes in process `syz.4.382'. [ 135.818683][ T5969] gspca_sunplus: reg_w_riv err -71 [ 135.944052][ T5969] sunplus: probe of 2-1:0.0 failed with error -71 [ 135.980619][ T5969] usb 2-1: USB disconnect, device number 6 [ 136.200145][ T7387] loop2: detected capacity change from 0 to 128 [ 136.252616][ T7387] FAT-fs (loop2): Unrecognized mount option "18446744073709551615ÿÿÿ" or missing value [ 136.297323][ T5754] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 136.849533][ T7403] binder: 7402:7403 ioctl 4018620d 0 returned -22 [ 136.866267][ T7403] binder: 7402:7403 ioctl c0306201 200000000240 returned -11 [ 137.003776][ T788] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 137.170811][ T7411] tipc: Started in network mode [ 137.183763][ T7411] tipc: Node identity 62b9732706d, cluster identity 4711 [ 137.191144][ T7411] tipc: Enabled bearer , priority 0 [ 137.201016][ T7411] netlink: 44 bytes leftover after parsing attributes in process `syz.2.395'. [ 137.217431][ T788] usb 2-1: Using ep0 maxpacket: 16 [ 137.224467][ T788] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.225274][ T7411] tipc: Resetting bearer [ 137.247693][ T788] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 137.267415][ T788] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 137.286077][ T7410] tipc: Disabling bearer [ 137.294501][ T788] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 137.306190][ T788] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 137.322007][ T788] usb 2-1: Manufacturer: syz [ 137.343361][ T788] usb 2-1: config 0 descriptor?? [ 137.805527][ T5775] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 137.814193][ T5775] Bluetooth: hci1: Injecting HCI hardware error event [ 137.822509][ T5775] Bluetooth: hci1: hardware error 0x00 [ 138.179502][ T7428] binder: 7427:7428 ioctl c0306201 0 returned -14 [ 138.201378][ T7428] binder: 7427:7428 ioctl c0306201 200000000240 returned -11 [ 138.478187][ T7432] program syz.2.402 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 138.767814][ T7438] loop4: detected capacity change from 0 to 128 [ 138.783094][ T7438] FAT-fs (loop4): Unrecognized mount option "18446744073709551615ÿÿÿ" or missing value [ 139.756660][ T5773] usb 2-1: USB disconnect, device number 7 [ 139.895905][ T5775] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 141.571972][ T7478] loop4: detected capacity change from 0 to 128 [ 141.585030][ T7478] FAT-fs (loop4): Unrecognized mount option "18446744073709551615ÿÿÿ" or missing value [ 141.743701][ T5773] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 141.933726][ T5773] usb 1-1: Using ep0 maxpacket: 16 [ 141.946687][ T5773] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.960566][ T5773] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 141.993409][ T5773] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 142.030915][ T5773] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 142.053287][ T5773] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 142.062306][ T5773] usb 1-1: Manufacturer: syz [ 142.076485][ T5773] usb 1-1: config 0 descriptor?? [ 144.475975][ T5773] usb 1-1: USB disconnect, device number 5 [ 144.606575][ T7530] loop0: detected capacity change from 0 to 128 [ 145.022079][ T7530] FAT-fs (loop0): Unrecognized mount option "18446744073709551615ÿÿÿ" or missing value [ 146.064005][ T7558] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 146.218680][ T7570] binder: 7568:7570 ioctl c0306201 200000000240 returned -11 [ 147.268339][ T27] audit: type=1326 audit(1769204296.247:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7559 comm="syz.1.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2abc79acb9 code=0x7ffc0000 [ 147.866242][ T7606] netlink: 36 bytes leftover after parsing attributes in process `syz.0.453'. [ 147.920450][ T7606] (null): rxe_set_mtu: Set mtu to 1024 [ 147.952489][ T7606] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 149.444923][ T7620] syz.4.457: attempt to access beyond end of device [ 149.444923][ T7620] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 150.217493][ T7622] netlink: 36 bytes leftover after parsing attributes in process `syz.4.459'. [ 150.229234][ T7622] (null): rxe_set_mtu: Set mtu to 1024 [ 150.235159][ T7622] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 151.268871][ T7644] loop2: detected capacity change from 0 to 128 [ 151.285061][ T7644] FAT-fs (loop2): Unrecognized mount option "18446744073709551615ÿÿÿ" or missing value [ 151.381319][ T7646] netlink: 36 bytes leftover after parsing attributes in process `syz.0.467'. [ 151.412987][ T7646] (null): rxe_set_mtu: Set mtu to 1024 [ 151.431065][ T7646] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 151.595932][ T7650] overlayfs: failed to resolve './bus': -2 [ 152.178870][ T7661] syzkaller0: entered promiscuous mode [ 152.235078][ T7661] syzkaller0: entered allmulticast mode [ 152.421384][ T7662] tipc: Started in network mode [ 152.449838][ T7662] tipc: Node identity 02ffa655832a, cluster identity 4711 [ 152.503171][ T7662] tipc: Enabled bearer , priority 0 [ 152.914335][ T7667] syzkaller0: entered promiscuous mode [ 152.919834][ T7667] syzkaller0: entered allmulticast mode [ 152.942231][ T7675] netlink: 44 bytes leftover after parsing attributes in process `syz.0.473'. [ 153.027974][ T7677] tipc: Resetting bearer [ 153.108177][ T7660] tipc: Resetting bearer [ 153.256465][ T7660] tipc: Disabling bearer [ 153.555756][ T7682] netlink: 'syz.0.477': attribute type 13 has an invalid length. [ 153.945806][ T7687] netdevsim netdevsim0: Direct firmware load for . [ 153.945806][ T7687] failed with error -2 [ 153.977723][ T7687] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 153.977723][ T7687] [ 154.166412][ T7694] loop1: detected capacity change from 0 to 128 [ 154.210815][ T7696] syz.2.481: attempt to access beyond end of device [ 154.210815][ T7696] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 154.246517][ T7694] FAT-fs (loop1): Unrecognized mount option "18446744073709551615ÿÿÿ" or missing value [ 155.163263][ T7707] tipc: Enabled bearer , priority 0 [ 155.171029][ T7707] syzkaller0: entered promiscuous mode [ 155.177638][ T7707] syzkaller0: entered allmulticast mode [ 155.197528][ T7707] netlink: 44 bytes leftover after parsing attributes in process `syz.2.485'. [ 155.226013][ T7707] tipc: Resetting bearer [ 155.248478][ T7706] tipc: Resetting bearer [ 155.305516][ T7706] tipc: Disabling bearer [ 155.373730][ T7710] binder: BINDER_SET_CONTEXT_MGR already set [ 155.392363][ T7710] binder: 7709:7710 ioctl 4018620d 200000000540 returned -16 [ 155.505342][ T7712] netlink: 'syz.2.487': attribute type 13 has an invalid length. [ 156.120247][ T7725] netlink: 4 bytes leftover after parsing attributes in process `syz.0.490'. [ 156.737564][ T7730] syz.1.492: attempt to access beyond end of device [ 156.737564][ T7730] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 157.931923][ T7743] loop2: detected capacity change from 0 to 128 [ 157.942570][ T7743] FAT-fs (loop2): Unrecognized mount option "18446744073709551615ÿÿÿ" or missing value [ 158.051978][ T7744] tipc: Enabled bearer , priority 0 [ 158.109473][ T7747] syzkaller0: entered promiscuous mode [ 158.152049][ T7747] syzkaller0: entered allmulticast mode [ 158.217795][ T7747] netlink: 44 bytes leftover after parsing attributes in process `syz.0.496'. [ 158.250306][ T7739] tipc: Resetting bearer [ 158.357486][ T7739] tipc: Disabling bearer [ 158.839878][ T7756] netlink: 4 bytes leftover after parsing attributes in process `syz.0.499'. [ 159.402963][ T7767] syz.0.502: attempt to access beyond end of device [ 159.402963][ T7767] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 160.336305][ T7773] binder: 7770:7773 ioctl c0306201 0 returned -14 [ 160.369873][ T7773] binder: 7770:7773 ioctl c0306201 200000000240 returned -11 [ 160.397119][ T7777] tipc: Enabled bearer , priority 0 [ 160.415047][ T7777] syzkaller0: entered promiscuous mode [ 160.420550][ T7777] syzkaller0: entered allmulticast mode [ 160.437405][ T7777] netlink: 44 bytes leftover after parsing attributes in process `syz.2.506'. [ 160.459498][ T7777] tipc: Resetting bearer [ 160.497544][ T7776] tipc: Resetting bearer [ 160.554303][ T7776] tipc: Disabling bearer [ 160.629218][ T7783] process 'syz.0.504' launched '/dev/fd/-1' with NULL argv: empty string added [ 160.799856][ T7785] loop2: detected capacity change from 0 to 128 [ 160.826186][ T7785] FAT-fs (loop2): Unrecognized mount option "18446744073709551615ÿÿÿ" or missing value [ 160.873328][ T7787] netlink: 'syz.4.509': attribute type 5 has an invalid length. [ 160.980487][ T7791] netlink: 4 bytes leftover after parsing attributes in process `syz.4.510'. [ 161.245441][ T5772] Bluetooth: hci2: command 0x0406 tx timeout [ 162.027695][ T7803] input: syz0 as /devices/virtual/input/input6 [ 164.236544][ T7813] binder: 7812:7813 ioctl c0306201 0 returned -14 [ 164.495224][ T7824] netlink: 4 bytes leftover after parsing attributes in process `syz.0.519'. [ 164.703830][ T5981] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 164.742067][ T7827] netlink: 'syz.0.522': attribute type 13 has an invalid length. [ 164.797717][ T7827] netlink: 'syz.0.522': attribute type 27 has an invalid length. [ 164.996308][ T5981] usb 3-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.006646][ T5981] usb 3-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 165.020029][ T5981] usb 3-1: config 0 interface 0 has no altsetting 0 [ 165.027048][ T5981] usb 3-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.00 [ 165.056673][ T5981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.095352][ T5981] usb 3-1: config 0 descriptor?? [ 165.106071][ T7832] netlink: 'syz.0.524': attribute type 1 has an invalid length. [ 165.126523][ T5981] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input7 [ 165.181818][ T7832] netlink: 'syz.0.524': attribute type 4 has an invalid length. [ 165.217983][ T7832] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.524'. [ 165.912857][ T7834] syzkaller0: entered promiscuous mode [ 165.929639][ T7834] syzkaller0: entered allmulticast mode [ 167.283724][ T5122] bcm5974 3-1:0.0: could not read from device [ 167.380826][ T5122] bcm5974 3-1:0.0: could not read from device [ 167.393771][ T5981] usb 3-1: USB disconnect, device number 6 [ 167.397974][ T5122] bcm5974 3-1:0.0: could not read from device [ 169.879836][ T7872] input: syz0 as /devices/virtual/input/input8 [ 170.386906][ T7863] netlink: 4 bytes leftover after parsing attributes in process `syz.2.530'. [ 170.813651][ T5979] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 171.012059][ T5979] usb 2-1: Using ep0 maxpacket: 32 [ 171.021374][ T5979] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.053232][ T5979] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.073405][ T5979] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 171.093060][ T5979] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.127254][ T5979] usb 2-1: config 0 descriptor?? [ 171.140476][ T5979] hub 2-1:0.0: USB hub found [ 171.970111][ T5979] hub 2-1:0.0: 1 port detected [ 173.545237][ T7893] netlink: 4 bytes leftover after parsing attributes in process `syz.0.541'. [ 173.764601][ T5979] hub 2-1:0.0: activate --> -90 [ 174.185669][ T5981] usb 2-1: USB disconnect, device number 8 [ 176.313775][ T5772] Bluetooth: hci3: command 0x0406 tx timeout [ 176.529792][ T7928] loop1: detected capacity change from 0 to 128 [ 176.542127][ T7928] FAT-fs (loop1): Unrecognized mount option "18446744073709551615ÿÿÿ" or missing value [ 176.761022][ T7936] input: syz0 as /devices/virtual/input/input9 [ 177.240671][ T7942] netlink: 4 bytes leftover after parsing attributes in process `syz.2.553'. [ 177.713599][ T5981] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 177.743864][ T788] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 177.936959][ T5981] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 177.964566][ T5981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.975691][ T5981] usb 2-1: Product: syz [ 177.983638][ T5981] usb 2-1: Manufacturer: syz [ 177.993657][ T5981] usb 2-1: SerialNumber: syz [ 178.033809][ T788] usb 3-1: Using ep0 maxpacket: 8 [ 178.048189][ T788] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 178.067481][ T788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.084028][ T788] usb 3-1: Product: syz [ 178.093799][ T788] usb 3-1: Manufacturer: syz [ 178.113778][ T788] usb 3-1: SerialNumber: syz [ 178.135642][ T788] usb 3-1: config 0 descriptor?? [ 178.419499][ T788] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 178.434008][ T5981] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 179.887727][ T7970] tipc: Started in network mode [ 179.892871][ T7970] tipc: Node identity 6ad13e79ce4e, cluster identity 4711 [ 179.902599][ T7970] tipc: Enabled bearer , priority 0 [ 179.915731][ T7970] syzkaller0: entered promiscuous mode [ 179.921386][ T7970] syzkaller0: entered allmulticast mode [ 179.942554][ T7970] netlink: 44 bytes leftover after parsing attributes in process `syz.4.559'. [ 179.967199][ T7970] tipc: Resetting bearer [ 179.979652][ T7969] tipc: Resetting bearer [ 180.044189][ T7969] tipc: Disabling bearer [ 180.204214][ T7974] netlink: 'syz.0.561': attribute type 32 has an invalid length. [ 180.212014][ T7974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.561'. [ 180.224787][ T7974] (unnamed net_device) (uninitialized): option coupled_control: invalid value (255) [ 180.289820][ T7978] loop0: detected capacity change from 0 to 128 [ 180.297240][ T7978] FAT-fs (loop0): Unrecognized mount option "18446744073709551615ÿÿÿ" or missing value [ 180.561240][ T5981] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 180.587929][ T5981] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -71 [ 180.614692][ T5981] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 180.635082][ T5981] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 180.655019][ T5981] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 180.706862][ T5981] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 180.729222][ T5981] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 180.742556][ T5981] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 180.754857][ T5981] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -71 [ 180.778632][ T5981] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 180.798242][ T788] usb write operation failed. (-71) [ 180.818823][ T788] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 180.834699][ T5981] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 180.847420][ T788] dvbdev: DVB: registering new adapter (Terratec H7) [ 180.866282][ T5981] lan78xx: probe of 2-1:1.0 failed with error -71 [ 180.874051][ T788] usb 3-1: media controller created [ 180.888349][ T788] usb read operation failed. (-71) [ 180.906654][ T788] usb write operation failed. (-71) [ 180.911965][ T5981] usb 2-1: USB disconnect, device number 9 [ 180.926965][ T788] dvb_usb_az6007: probe of 3-1:0.0 failed with error -5 [ 180.940484][ T788] usb 3-1: USB disconnect, device number 7 [ 181.494074][ T5969] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 181.602521][ T7993] input: syz0 as /devices/virtual/input/input10 [ 181.793667][ T788] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 181.864304][ T5969] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 181.871905][ T5969] usb 5-1: can't read configurations, error -61 [ 181.983825][ T788] usb 3-1: Using ep0 maxpacket: 8 [ 181.994677][ T788] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 182.007312][ T788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.036387][ T788] usb 3-1: Product: syz [ 182.055054][ T788] usb 3-1: Manufacturer: syz [ 182.067556][ T5969] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 182.072431][ T788] usb 3-1: SerialNumber: syz [ 182.123269][ T788] usb 3-1: config 0 descriptor?? [ 183.909344][ T788] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 183.954001][ T788] gspca_sunplus: reg_w_riv err -71 [ 183.968734][ T788] sunplus: probe of 3-1:0.0 failed with error -71 [ 184.023636][ T788] usb 3-1: USB disconnect, device number 8 [ 184.294944][ T8000] binder_alloc: 7999: binder_alloc_buf, no vma [ 184.337465][ T5969] usb 5-1: device descriptor read/all, error -71 [ 184.359337][ T5969] usb usb5-port1: attempt power cycle [ 184.569352][ T8006] loop0: detected capacity change from 0 to 128 [ 184.578058][ T8006] FAT-fs (loop0): Unrecognized mount option "18446744073709551615ÿÿÿ" or missing value [ 184.705210][ T5754] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 185.193920][ T5981] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 185.502673][ T5981] usb 3-1: config index 0 descriptor too short (expected 65535, got 146) [ 185.603528][ T5981] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.689533][ T5981] usb 3-1: config 0 has no interfaces? [ 185.705209][ T5981] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 185.798852][ T5981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 185.827493][ T5981] usb 3-1: SerialNumber: syz [ 185.933290][ T5981] usb 3-1: config 0 descriptor?? [ 186.203736][ T5775] Bluetooth: hci0: command 0x0406 tx timeout [ 188.526801][ T5969] usb 3-1: USB disconnect, device number 9 [ 188.732077][ T8040] loop0: detected capacity change from 0 to 128 [ 188.741439][ T8040] FAT-fs (loop0): Unrecognized mount option "18446744073709551615ÿÿÿ" or missing value [ 188.983687][ T5969] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 189.023777][ T8048] input: syz0 as /devices/virtual/input/input11 [ 189.203587][ T5969] usb 3-1: Using ep0 maxpacket: 8 [ 189.217586][ T5969] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 189.226820][ T5969] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.235241][ T5969] usb 3-1: Product: syz [ 189.239471][ T5969] usb 3-1: Manufacturer: syz [ 189.244575][ T5969] usb 3-1: SerialNumber: syz [ 189.266714][ T5969] usb 3-1: config 0 descriptor?? [ 189.483889][ T5969] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 189.503083][ T5969] gspca_sunplus: reg_w_riv err -71 [ 189.525034][ T5969] sunplus: probe of 3-1:0.0 failed with error -71 [ 189.552214][ T5969] usb 3-1: USB disconnect, device number 10 [ 192.143554][ T5981] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 192.614621][ T5981] usb 3-1: config index 0 descriptor too short (expected 65535, got 146) [ 192.655433][ T5981] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.793644][ T5981] usb 3-1: config 0 has no interfaces? [ 192.816351][ T5981] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 192.833511][ T5981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 193.532708][ T5981] usb 3-1: SerialNumber: syz [ 193.609622][ T5981] usb 3-1: config 0 descriptor?? [ 194.384457][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.390797][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.585154][ T8089] syzkaller0: entered promiscuous mode [ 194.590861][ T8089] syzkaller0: entered allmulticast mode [ 194.818810][ T8091] netlink: 'syz.4.594': attribute type 1 has an invalid length. [ 194.827544][ T8091] netlink: 'syz.4.594': attribute type 4 has an invalid length. [ 194.840560][ T8091] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.594'. [ 196.458481][ T5775] Bluetooth: hci3: command 0x0406 tx timeout [ 196.705112][ T5969] usb 3-1: USB disconnect, device number 11 [ 196.753854][ T8107] syz_tun: entered promiscuous mode [ 196.765632][ T8107] macvtap1: entered promiscuous mode [ 196.776896][ T8110] loop2: detected capacity change from 0 to 128 [ 196.787636][ T8107] macvtap1: entered allmulticast mode [ 196.794416][ T8110] FAT-fs (loop2): Unrecognized mount option "18446744073709551615ÿÿÿ" or missing value [ 196.806738][ T8107] syz_tun: entered allmulticast mode [ 196.821833][ T8107] syz_tun: left allmulticast mode [ 196.845951][ T8107] syz_tun: left promiscuous mode [ 197.144172][ T8116] syzkaller0: entered promiscuous mode [ 197.149913][ T8116] syzkaller0: entered allmulticast mode [ 199.207099][ T8140] syzkaller0: entered promiscuous mode [ 199.212752][ T8140] syzkaller0: entered allmulticast mode [ 199.644821][ T5768] Bluetooth: hci2: command 0x0406 tx timeout [ 200.316758][ T8166] netlink: 'syz.1.621': attribute type 1 has an invalid length. [ 200.334634][ T5976] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 200.342681][ T8166] netlink: 'syz.1.621': attribute type 4 has an invalid length. [ 200.367296][ T8166] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.621'. [ 200.581233][ T5976] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 200.608519][ T5976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.632810][ T5976] usb 3-1: Product: syz [ 200.646125][ T5976] usb 3-1: Manufacturer: syz [ 200.657939][ T5976] usb 3-1: SerialNumber: syz [ 200.782713][ T5976] usb 3-1: config 0 descriptor?? [ 200.836699][ T5976] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 202.718894][ T5988] usb 3-1: USB disconnect, device number 12 [ 203.173547][ T5969] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 203.521668][ T5969] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 203.544362][ T5969] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 203.554126][ T5969] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.572770][ T5969] usb 1-1: config 0 descriptor?? [ 203.582524][ T5969] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 203.687124][ T8198] netlink: 'syz.1.630': attribute type 1 has an invalid length. [ 203.724239][ T8198] netlink: 'syz.1.630': attribute type 4 has an invalid length. [ 203.731927][ T8198] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.630'. [ 204.268748][ T8213] tipc: Enabled bearer , priority 0 [ 204.286936][ T8213] syzkaller0: entered promiscuous mode [ 204.303636][ T8213] syzkaller0: entered allmulticast mode [ 204.426471][ T8213] tipc: Resetting bearer [ 204.434619][ T8212] tipc: Resetting bearer [ 204.457708][ T8212] tipc: Disabling bearer [ 205.445554][ T8225] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.638'. [ 205.668091][ T8230] netlink: 'syz.4.640': attribute type 1 has an invalid length. [ 205.722438][ T8230] netlink: 'syz.4.640': attribute type 4 has an invalid length. [ 205.756778][ T8230] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.640'. [ 205.826018][ T5969] usb 1-1: USB disconnect, device number 6 [ 206.009645][ T8241] loop2: detected capacity change from 0 to 128 [ 206.017351][ T8241] FAT-fs (loop2): Unrecognized mount option "18446744073709551615ÿÿÿ" or missing value [ 206.064991][ T8238] syzkaller0: entered promiscuous mode [ 206.070501][ T8238] syzkaller0: entered allmulticast mode [ 206.151799][ T8243] binder: BINDER_SET_CONTEXT_MGR already set [ 206.174121][ T8243] binder: 8242:8243 ioctl 4018620d 200000000040 returned -16 [ 206.188881][ T5776] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 207.272822][ T8261] input: syz0 as /devices/virtual/input/input12 [ 207.406852][ T8264] netlink: 'syz.1.652': attribute type 1 has an invalid length. [ 207.454436][ T8264] netlink: 'syz.1.652': attribute type 4 has an invalid length. [ 207.485701][ T8264] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.652'. [ 208.723587][ T788] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 209.871834][ T788] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 209.885138][ T788] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 209.894657][ T788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.961314][ T788] usb 2-1: config 0 descriptor?? [ 209.970175][ T788] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 210.246738][ T8303] tipc: Enabled bearer , priority 0 [ 210.262364][ T8303] syzkaller0: entered promiscuous mode [ 210.334760][ T8303] syzkaller0: entered allmulticast mode [ 210.380173][ T8303] tipc: Resetting bearer [ 210.444527][ T8302] tipc: Resetting bearer [ 210.566872][ T8302] tipc: Disabling bearer [ 211.568744][ T5768] Bluetooth: hci2: command 0x0406 tx timeout [ 212.027175][ T5969] usb 2-1: USB disconnect, device number 10 [ 214.957750][ T8364] binder: 8363:8364 ioctl c0306201 0 returned -14 [ 214.994030][ T8366] netlink: 4 bytes leftover after parsing attributes in process `syz.4.682'. [ 217.021549][ T8387] syz.2.687: attempt to access beyond end of device [ 217.021549][ T8387] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 217.834225][ T788] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 218.283681][ T5981] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 218.517403][ T5981] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 218.526627][ T5981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.553344][ T5981] usb 3-1: Product: syz [ 218.595126][ T5981] usb 3-1: Manufacturer: syz [ 218.642203][ T5981] usb 3-1: SerialNumber: syz [ 218.670637][ T5981] usb 3-1: config 0 descriptor?? [ 219.282708][ T788] usb 1-1: device descriptor read/all, error -71 [ 219.289274][ T5981] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 219.458512][ T8402] binder: 8401:8402 ioctl c0306201 0 returned -14 [ 219.609204][ T8404] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.692'. [ 219.746640][ T8410] netlink: 4 bytes leftover after parsing attributes in process `syz.0.693'. [ 222.002082][ T5981] usb 3-1: dvb_usb_v2: will use the device's hardware PID filter (table count: 32) [ 222.016859][ T5981] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 222.026818][ T5981] usb 3-1: media controller created [ 222.049645][ T5981] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 222.071873][ T5981] dvb_usb_rtl28xxu 3-1:0.0: unknown tuner MT2266 [ 222.483775][ T5981] usb 3-1: USB disconnect, device number 13 [ 222.567086][ T8437] syzkaller0: entered promiscuous mode [ 222.578406][ T8437] syzkaller0: entered allmulticast mode [ 223.051125][ T8446] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.702'. [ 223.311465][ T8451] tipc: Enabled bearer , priority 0 [ 223.339391][ T8451] syzkaller0: entered promiscuous mode [ 223.369500][ T8451] syzkaller0: entered allmulticast mode [ 223.392631][ T8454] netlink: 4 bytes leftover after parsing attributes in process `syz.0.703'. [ 223.448647][ T8451] tipc: Resetting bearer [ 223.500967][ T8450] tipc: Resetting bearer [ 223.524069][ T8450] tipc: Disabling bearer [ 223.763087][ T8469] syzkaller0: entered promiscuous mode [ 223.768997][ T8469] syzkaller0: entered allmulticast mode [ 224.257937][ T8476] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.711'. [ 224.716690][ T8489] netlink: 4 bytes leftover after parsing attributes in process `syz.0.714'. [ 224.859842][ T8496] tipc: Enabled bearer , priority 0 [ 224.885980][ T8496] syzkaller0: entered promiscuous mode [ 224.891459][ T8496] syzkaller0: entered allmulticast mode [ 224.939680][ T8496] tipc: Resetting bearer [ 224.953071][ T8494] tipc: Resetting bearer [ 224.977555][ T8494] tipc: Disabling bearer [ 225.013693][ T5969] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 225.223631][ T5969] usb 5-1: Using ep0 maxpacket: 8 [ 225.230366][ T5969] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 225.240668][ T5969] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 225.250716][ T5969] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 225.263034][ T5969] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 225.282389][ T5969] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 225.282413][ T5969] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.501593][ T5969] usb 5-1: usb_control_msg returned -32 [ 225.546217][ T5969] usbtmc 5-1:16.0: can't read capabilities [ 225.599767][ T5969] usb 5-1: USB disconnect, device number 7 [ 226.027096][ T5976] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 226.235447][ T5976] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.257146][ T5976] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 226.266807][ T5976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.292507][ T5976] usb 2-1: config 0 descriptor?? [ 226.526000][ T8525] netlink: 4 bytes leftover after parsing attributes in process `syz.0.725'. [ 226.735642][ T5976] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 226.772320][ T5976] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0001/input/input14 [ 226.985846][ T5976] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 227.226171][ T788] usb 2-1: USB disconnect, device number 11 [ 227.348772][ T8541] fido_id[8541]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 229.963750][ T788] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 230.123684][ T788] usb 1-1: device descriptor read/64, error -71 [ 230.404461][ T788] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 230.583639][ T788] usb 1-1: device descriptor read/64, error -71 [ 230.719343][ T788] usb usb1-port1: attempt power cycle [ 231.031986][ T27] audit: type=1326 audit(1769204379.997:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8605 comm="syz.2.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44e739acb9 code=0x7ffc0000 [ 231.056657][ T27] audit: type=1326 audit(1769204380.007:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8605 comm="syz.2.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44e739acb9 code=0x7ffc0000 [ 231.092994][ T27] audit: type=1326 audit(1769204380.057:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8605 comm="syz.2.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44e739acb9 code=0x7ffc0000 [ 231.153768][ T27] audit: type=1326 audit(1769204380.057:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8605 comm="syz.2.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f44e739acb9 code=0x7ffc0000 [ 231.176210][ T788] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 231.193083][ T8608] pim6reg: entered allmulticast mode [ 231.211446][ T27] audit: type=1326 audit(1769204380.057:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8605 comm="syz.2.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44e739acb9 code=0x7ffc0000 [ 231.251925][ T27] audit: type=1326 audit(1769204380.057:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8605 comm="syz.2.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f44e739acb9 code=0x7ffc0000 [ 231.285343][ T8616] pim6reg: left allmulticast mode [ 231.285504][ T788] usb 1-1: device descriptor read/8, error -71 [ 231.305412][ T27] audit: type=1326 audit(1769204380.057:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8605 comm="syz.2.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44e739acb9 code=0x7ffc0000 [ 231.359078][ T27] audit: type=1326 audit(1769204380.067:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8605 comm="syz.2.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f44e739acb9 code=0x7ffc0000 [ 231.518180][ T27] audit: type=1326 audit(1769204380.067:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8605 comm="syz.2.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44e739acb9 code=0x7ffc0000 [ 231.580411][ T27] audit: type=1326 audit(1769204380.067:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8605 comm="syz.2.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f44e739acb9 code=0x7ffc0000 [ 231.673552][ T788] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 231.785970][ T788] usb 1-1: device descriptor read/8, error -71 [ 232.011737][ T788] usb usb1-port1: unable to enumerate USB device [ 232.473653][ T5976] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 232.655045][ T5976] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 232.684436][ T5976] usb 3-1: config 0 interface 0 has no altsetting 0 [ 232.725980][ T5976] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 232.735479][ T5976] usb 3-1: New USB device strings: Mfr=49, Product=228, SerialNumber=2 [ 232.749232][ T5976] usb 3-1: Product: syz [ 232.753404][ T5976] usb 3-1: Manufacturer: syz [ 232.766894][ T5976] usb 3-1: SerialNumber: syz [ 232.787854][ T5976] usb 3-1: config 0 descriptor?? [ 232.802134][ T5976] usb 3-1: selecting invalid altsetting 0 [ 233.060472][ T8633] [ 233.062840][ T8633] ============================================ [ 233.068997][ T8633] WARNING: possible recursive locking detected [ 233.075161][ T8633] syzkaller #0 Not tainted [ 233.079580][ T8633] -------------------------------------------- [ 233.085730][ T8633] syz.2.755/8633 is trying to acquire lock: [ 233.091613][ T8633] ffff888026b9ab30 (&chip->mutex){+.+.}-{3:3}, at: snd_usb_endpoint_close+0x3c/0x4c0 [ 233.101103][ T8633] [ 233.101103][ T8633] but task is already holding lock: [ 233.108451][ T8633] ffff888026b9ab30 (&chip->mutex){+.+.}-{3:3}, at: snd_usb_endpoint_set_params+0x6d/0x2b40 [ 233.118448][ T8633] [ 233.118448][ T8633] other info that might help us debug this: [ 233.126491][ T8633] Possible unsafe locking scenario: [ 233.126491][ T8633] [ 233.133921][ T8633] CPU0 [ 233.137185][ T8633] ---- [ 233.140443][ T8633] lock(&chip->mutex); [ 233.144586][ T8633] lock(&chip->mutex); [ 233.148726][ T8633] [ 233.148726][ T8633] *** DEADLOCK *** [ 233.148726][ T8633] [ 233.156849][ T8633] May be due to missing lock nesting notation [ 233.156849][ T8633] [ 233.165148][ T8633] 3 locks held by syz.2.755/8633: [ 233.170156][ T8633] #0: ffff88802c2044e0 (&runtime->oss.params_lock){+.+.}-{3:3}, at: snd_pcm_oss_sync+0x2a7/0xc20 [ 233.180763][ T8633] #1: ffff88802c204238 (&runtime->buffer_mutex){+.+.}-{3:3}, at: snd_pcm_hw_params+0x163/0x1ce0 [ 233.191276][ T8633] #2: ffff888026b9ab30 (&chip->mutex){+.+.}-{3:3}, at: snd_usb_endpoint_set_params+0x6d/0x2b40 [ 233.201704][ T8633] [ 233.201704][ T8633] stack backtrace: [ 233.207591][ T8633] CPU: 1 PID: 8633 Comm: syz.2.755 Not tainted syzkaller #0 [ 233.214858][ T8633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 233.224905][ T8633] Call Trace: [ 233.228176][ T8633] [ 233.231094][ T8633] dump_stack_lvl+0x18c/0x250 [ 233.235769][ T8633] ? show_regs_print_info+0x20/0x20 [ 233.240962][ T8633] ? print_deadlock_bug+0x435/0x5d0 [ 233.246157][ T8633] __lock_acquire+0x5dbc/0x7d40 [ 233.251009][ T8633] ? verify_lock_unused+0x140/0x140 [ 233.256203][ T8633] lock_acquire+0x19e/0x420 [ 233.260694][ T8633] ? snd_usb_endpoint_close+0x3c/0x4c0 [ 233.266144][ T8633] ? trace_contention_end+0x39/0xe0 [ 233.271327][ T8633] ? __might_sleep+0xe0/0xe0 [ 233.275905][ T8633] ? read_lock_is_recursive+0x20/0x20 [ 233.281267][ T8633] ? wait_clear_urbs+0x184/0x390 [ 233.286195][ T8633] ? snd_usb_endpoint_sync_pending_stop+0x30/0x30 [ 233.292617][ T8633] __mutex_lock+0x136/0xcc0 [ 233.297125][ T8633] ? snd_usb_endpoint_close+0x3c/0x4c0 [ 233.302585][ T8633] ? usb_free_coherent+0x5d/0x90 [ 233.307518][ T8633] ? release_urbs+0x3fe/0x4a0 [ 233.312189][ T8633] ? snd_usb_endpoint_close+0x3c/0x4c0 [ 233.317643][ T8633] ? mutex_lock_nested+0x20/0x20 [ 233.322571][ T8633] ? snd_usb_endpoint_set_params+0x407/0x2b40 [ 233.328628][ T8633] snd_usb_endpoint_close+0x3c/0x4c0 [ 233.333910][ T8633] snd_usb_hw_params+0x1356/0x19d0 [ 233.339012][ T8633] ? snd_dma_alloc_dir_pages+0x15c/0x230 [ 233.344634][ T8633] ? snd_usb_pcm_close+0x300/0x300 [ 233.349733][ T8633] ? snd_pcm_lib_malloc_pages+0x350/0x750 [ 233.355439][ T8633] ? fixup_unreferenced_params+0x767/0xb00 [ 233.361236][ T8633] snd_pcm_hw_params+0x8a6/0x1ce0 [ 233.366251][ T8633] ? snd_pcm_hw_param_first+0x676/0xb40 [ 233.371781][ T8633] ? snd_pcm_forward+0x6d0/0x6d0 [ 233.376706][ T8633] ? snd_pcm_hw_param_near+0x3d0/0x450 [ 233.382156][ T8633] snd_pcm_oss_change_params_locked+0x2040/0x3cd0 [ 233.388564][ T8633] ? snd_pcm_oss_read2+0x3d0/0x3d0 [ 233.393658][ T8633] ? ima_file_free+0x16b/0x4b0 [ 233.398406][ T8633] ? mutex_lock_nested+0x20/0x20 [ 233.403333][ T8633] ? __fsnotify_parent+0x6d8/0x7c0 [ 233.408433][ T8633] snd_pcm_oss_sync+0x363/0xc20 [ 233.413271][ T8633] snd_pcm_oss_release+0x102/0x240 [ 233.418373][ T8633] ? snd_pcm_oss_open+0x1bd0/0x1bd0 [ 233.423559][ T8633] __fput+0x234/0x970 [ 233.427536][ T8633] task_work_run+0x1d4/0x260 [ 233.432115][ T8633] ? task_work_cancel+0x220/0x220 [ 233.437135][ T8633] ? exit_to_user_mode_loop+0x3b/0x110 [ 233.442590][ T8633] exit_to_user_mode_loop+0xe6/0x110 [ 233.447861][ T8633] exit_to_user_mode_prepare+0xee/0x180 [ 233.453395][ T8633] syscall_exit_to_user_mode+0x1a/0x50 [ 233.458837][ T8633] do_syscall_64+0x61/0xa0 [ 233.463239][ T8633] ? clear_bhb_loop+0x40/0x90 [ 233.467900][ T8633] ? clear_bhb_loop+0x40/0x90 [ 233.472565][ T8633] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 233.478446][ T8633] RIP: 0033:0x7f44e739acb9 [ 233.482854][ T8633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.502447][ T8633] RSP: 002b:00007f44e82bf028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 233.510847][ T8633] RAX: 0000000000000000 RBX: 00007f44e7615fa0 RCX: 00007f44e739acb9 [ 233.518804][ T8633] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000004 [ 233.526761][ T8633] RBP: 00007f44e7408bf7 R08: 0000000000000000 R09: 0000000000000000 [ 233.534718][ T8633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.542671][ T8633] R13: 00007f44e7616038 R14: 00007f44e7615fa0 R15: 00007ffca07a75f8 [ 233.550630][ T8633] [ 234.358128][ T8642] syz.1.757: attempt to access beyond end of device [ 234.358128][ T8642] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 234.371068][ T8642] PM: Image not found (code -5)