last executing test programs: 4m56.487572749s ago: executing program 2 (id=174): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) 4m55.882430788s ago: executing program 2 (id=175): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x58040, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000040)=0x1000) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000080)="ab67e4b23d9f7595151970f1d71b57a8bd4934d8c386a48ee3865f792655a496d0ee3fee4f0e9bf5e304df96b833ff892c5d82cf351d20d94b5c8372ad29681ba50bd10f6b886beaecdf1f121f87cf", &(0x7f0000000100)=""/236, 0x4}, 0x20) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x0) r2 = dup3(r1, r0, 0x0) r3 = syz_usb_connect$uac2(0x3, 0x92, &(0x7f0000000280)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x403, 0xb8d8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x80, 0x3, 0x1, 0x5, 0x60, 0x1, {0x8, 0xb, 0x2, 0x0, 0x1, 0xb, 0x20, 0x51}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xf, 0x0, 0x18, 0x84}, [@feature_unit={0x7, 0x24, 0x6, 0x6, 0x4, [0x0]}, @source_unit={0x8, 0x24, 0xa, 0x9, 0x3, 0xa, 0x19, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x8, 0x92, 0x4, {0x8, 0x25, 0x1, 0x0, 0x3c, 0x1, 0xc7e}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x7, 0x3, 0x8, 0x9}]}, {{0x9, 0x5, 0x82, 0x9, 0x210, 0x1, 0x1, 0xf8, {0x8, 0x25, 0x1, 0x82, 0x3, 0x7, 0x6}}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x201, 0x42, 0xe2, 0x9, 0x20}, 0xf, &(0x7f0000000380)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x2, 0x2, 0x99e}]}, 0x3, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x44b}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x180a}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x1004}}]}) syz_usb_control_io$uac2(r3, &(0x7f0000000640)={0x14, &(0x7f0000000540)={0x40, 0x6, 0xd, {0xd, 0x22, "5f7489d837258475e1b671"}}, 0x0}, &(0x7f0000000880)={0x44, &(0x7f0000000680)={0x0, 0x14, 0x26, "3e7dee92e5767e9bca620521fdb4620dd6bb1dadd801e80e7841481d69361c00623da8965e7b"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000740)={0x20, 0x81, 0x2, "399b"}, &(0x7f0000000780)={0x20, 0x82, 0x2, "5f03"}, &(0x7f00000007c0)={0x20, 0x83, 0x1, '\b'}, &(0x7f0000000800)={0x20, 0x84, 0x1, "a1"}, &(0x7f0000000840)={0x20, 0x85, 0x3, "82e8ad"}}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f0000000900)={0x40, 0x5, 0x62fc}) syz_open_pts(0xffffffffffffffff, 0x600000) r4 = syz_usb_connect$cdc_ecm(0x6, 0x5b, &(0x7f0000000980)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x49, 0x1, 0x1, 0x5, 0x30, 0x8, "", [{{0x9, 0x4, 0x0, 0x2b, 0x2, 0x2, 0x6, 0x0, 0x5, {{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0xffffff01, 0xe, 0x8, 0x1}, [@obex={0x5, 0x24, 0x15, 0xf}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x9, 0x4, 0x49}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x4, 0x4, 0xa}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x3, 0x0, 0x1}}}}}]}}]}}, &(0x7f0000000d00)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x110, 0x40, 0x9, 0x3, 0xff, 0x8}, 0x58, &(0x7f0000000a40)={0x5, 0xf, 0x58, 0x4, [@ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0xe, 0x5, 0xbb8, 0xf000, 0x84, [0xcf, 0x0, 0x180f0, 0xff, 0x3f00]}, @generic={0x2d, 0x10, 0x4, "677d79dc8f191a91cdb427490c290edc3b205f830ac5f380f4a3181b55e86beea7679bf7f168240bfd4c"}, @ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x447}}, {0x77, &(0x7f0000000c40)=@string={0x77, 0x3, "d03d0814eae95b863fbd17563d70c8b099537885b4d6e5f9e57fe6a4b4a01743dccae6019a77f159a34553651ab066654d59991093c89f1291c29bebe3f967d3241e89aaf738025e3f25d2711a738754d9526cfb64f4b1be52fc269891e5e9d7805a12a3ef66c7de59308fd6605d7fc69bb608d614"}}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x409}}]}) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000ec0)={0x14, &(0x7f0000000d80)={0x0, 0x7, 0xbd, {0xbd, 0xf, "8f73a8fd12d790c37dcdc20da8b21969e3e7a3de34c5af656ba988f90dad4a32db66a4b16d86c83b21da30fdcf2da75939cedfd2c5f96ad561dfc73c57cbf25596c13fbe58413c366225cab515274d55371986d0b4d54ab5e4b2678095ce2ca2246a57bf1983277cb7eba4ffb4c12cbacc9aa258190b28ef6e0b45761a97986393b7175053e1c9d4dae77faa7345136d03126ce88c5fd3604f9cbcabca98ee44dc57e3e6cc86276d022b13f8fa7774802fd9e33bf15f17a77c7e49"}}, &(0x7f0000000e80)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001000)={0x1c, &(0x7f0000000f00)={0x20, 0xe, 0x79, "127a95defbe265d69735fe3be78acfc52315261be8d52c2dcbe7a9b3325cdd3bea333dc51d9db6fd6a724b76e92b482e2937749bdf5734fe81c24d54435f2db59a1c192b8acd4344aac99068007ef75e74be2b32b4af654b92bf31f169a775cbe722a5ff58b0bf0ce0bbbc082186ddde769df79ac7808b701d"}, &(0x7f0000000f80)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000fc0)={0x0, 0x8, 0x1, 0x5}}) ioctl$XFS_IOC_GETBMAPX(r2, 0xc0205838, &(0x7f0000001040)={0x6, 0x6, 0x7, 0x6, 0x5, 0x8, 0x8}) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001080), 0x163180, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000010c0)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0\x00'}) r7 = accept4$unix(r6, 0x0, &(0x7f0000001100), 0x80000) connect$unix(r7, &(0x7f0000001140)=@abs={0x1, 0x0, 0x4e20}, 0x6e) socketpair(0x28, 0x800, 0xe5, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup3(r8, r0, 0x80000) ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(r0, 0xc0386447, &(0x7f0000001240)={{0x8, 0x1, &(0x7f0000001200)=[{0x4, 0x0, 0x9}]}, 0x1, 0x7, 0x40, 0x2, 0x0, 0xea00, 0x3, 0x4}) sched_setscheduler(0xffffffffffffffff, 0x6, &(0x7f0000001280)=0x2) sendmsg$IPSET_CMD_PROTOCOL(r10, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x44, 0x1, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x881}, 0x894) connect$pptp(r9, &(0x7f0000001400)={0x18, 0x2, {0x1, @private=0xa010100}}, 0x1e) r11 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000001440), 0x88000, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r2, 0xc01464a6, &(0x7f0000001480)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CURSOR2(r11, 0xc02464bb, &(0x7f00000014c0)={0x1, r12, 0x5, 0x40, 0x347c, 0x2, 0x9, 0x5, 0x6ec6f9cc}) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) getsockopt$CAN_RAW_FD_FRAMES(r8, 0x65, 0x5, &(0x7f0000001500), &(0x7f0000001540)=0x4) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000001580)=r10, 0x1) 4m52.006730259s ago: executing program 2 (id=181): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x2, 0x23, 0x3c, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote, {[@timestamp_addr={0x44, 0x14, 0x9, 0x1, 0x7, [{@dev={0xac, 0x14, 0x14, 0x1c}, 0xfff}, {@multicast1}]}]}}, {{0x4e26, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x6071, 0x0, 0xe7}}}}}}, 0x0) 4m50.610453166s ago: executing program 2 (id=186): socket(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3b}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0xc831, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(0x0, 0x100) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) close(r4) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) openat$binfmt(0xffffffffffffff9c, r3, 0x2, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000340), 0x2000011a) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 4m37.640263209s ago: executing program 2 (id=237): iopl(0x3) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0xec5, &(0x7f0000000c00)={0x0, 0x0, 0x2}, &(0x7f0000001080), &(0x7f0000000600)) sendmsg$unix(0xffffffffffffffff, 0x0, 0x240408c1) connect$qrtr(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000040)) unshare(0x68040200) open(&(0x7f0000000440)='./file0\x00', 0x600100, 0xd8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000000000000a7283c93847e4cc420ce0000005be42a5a370a79d65dfd3672469cd1f07c24e3744c345d0c291af98d037535dcac0571cb18581e5f9c7ae88de98a01ea7e3bc1f0a13b3ddcc01761f4d0f325ff18daf7e1e6851b34d34e1136ca946e96951115c51da71e59f33caf6901d3", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x8100, 0x0, 0x0, 0x0, 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000080)={'filter\x00', 0x0, [0x5, 0xef, 0x20000004, 0x3, 0x6]}, &(0x7f0000000040)=0x54) io_uring_enter(r0, 0x12ed, 0x10a5, 0x3, &(0x7f0000000040)={[0xce]}, 0x8) 4m34.106154244s ago: executing program 2 (id=247): socket(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3b}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0xc831, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(0x0, 0x100) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) close(r4) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) openat$binfmt(0xffffffffffffff9c, r3, 0x2, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000340), 0x2000011a) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 4m18.383805268s ago: executing program 32 (id=247): socket(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3b}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0xc831, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(0x0, 0x100) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) close(r4) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) openat$binfmt(0xffffffffffffff9c, r3, 0x2, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000340), 0x2000011a) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 3m34.482745s ago: executing program 1 (id=417): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xb2, &(0x7f0000000140)=""/178, 0x1f00, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r3, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3m33.013278735s ago: executing program 1 (id=418): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x8c, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0x40000) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r4, &(0x7f0000000500)={'#! ', './file0', [{0x20, '\x00\x00\x02'}, {0x20, '\xb0!'}, {0x20, 'GP\xd4\x82h\xb2\xc0\x00\xfce\"\xefL\x00'}]}, 0x21) close(r4) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80c80, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0xeeef0000, 0xdddd1000, 0x0, 0x0, 0xff, 0x8, 0xa, 0x4, 0x0, 0x6, 0x80, 0x10}, {0x1000, 0x0, 0x3, 0x6, 0x7c, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x2fff, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0xdc}, {0x4000, 0x8080000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4, 0x1}, {0xf000, 0x3000, 0x9, 0xfd, 0x0, 0x4, 0x20, 0xc3, 0x0, 0x3c}, {0x3000, 0x0, 0xd, 0x7, 0x0, 0x0, 0x2, 0xfe, 0x0, 0x0, 0x82, 0x4}, {0x10000, 0x0, 0xf, 0x6, 0x5, 0x0, 0x3, 0x0, 0x8, 0x0, 0x0, 0xfe}, {0x80a0000, 0xdddd0000, 0xd, 0x1, 0x0, 0x0, 0x0, 0xa, 0x26, 0xa, 0xf8}, {0x80a0000, 0x4}, {0x6000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0x0, 0x0, [0x0, 0xfffffffffffffffc, 0x1, 0x400000000]}) ioctl$KVM_GET_SREGS2(0xffffffffffffffff, 0x8140aecc, &(0x7f0000000540)) 3m29.011724082s ago: executing program 1 (id=420): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000740)={0xffffffffffffffff, &(0x7f0000000300)='\x00', 0x40, &(0x7f0000000340)={@align=0xdc, {0xecd, 0x1ff, 0x7fffffff, 0x8000}}, 0x800, &(0x7f0000000540)={@_ha_fsid}, &(0x7f0000000700)=0x8}) openat$cgroup_procs(r0, &(0x7f0000000780)='tasks\x00', 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x17, 0x11, 0x839, 0x70bd2c, 0x100003, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x2, 0xa}, {0xf, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0xc8, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x20}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x4, 0x1, 0x98}}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x89}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2a}}, {0x14, 0x4, @mcast1}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x86}}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x2, 0x3, 0x0, 0xad7}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x481d5) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, 0x0, 0x0, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3m28.565261179s ago: executing program 1 (id=426): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000340)={@align=0xdc, {0xecd, 0x1ff, 0x7fffffff, 0x8000}}, 0x800, 0x0, &(0x7f0000000700)=0x8}) openat$cgroup_procs(r0, &(0x7f0000000780)='tasks\x00', 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x17, 0x11, 0x839, 0x70bd2c, 0x100003, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x2, 0xa}, {0xf, 0xfff1}}}, 0x24}}, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f00000005c0)=0x18) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0xc8, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x20}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x4, 0x1, 0x98}}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x89}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2a}}, {0x14, 0x4, @mcast1}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x86}}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x2, 0x3, 0x0, 0xad7}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x481d5) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3m28.363525478s ago: executing program 1 (id=428): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x2, 0x23, 0x34, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote, {[@timestamp_addr={0x44, 0xc, 0x9, 0x1, 0x7, [{@dev={0xac, 0x14, 0x14, 0x1c}, 0xfff}]}]}}, {{0x4e26, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x6071, 0x0, 0xe7}}}}}}, 0x0) 3m28.182148382s ago: executing program 1 (id=431): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) socket$packet(0x11, 0x2, 0x300) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r0, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd86) 3m12.80902324s ago: executing program 33 (id=431): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) socket$packet(0x11, 0x2, 0x300) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r0, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd86) 1m22.162752436s ago: executing program 4 (id=732): openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000780)='tasks\x00', 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x17, 0x11, 0x839, 0x70bd2c, 0x100003, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x2, 0xa}, {0xf, 0xfff1}}}, 0x24}}, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f00000005c0)=0x18) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0xc8, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x20}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x4, 0x1, 0x98}}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x89}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2a}}, {0x14, 0x4, @mcast1}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x86}}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x2, 0x3, 0x0, 0xad7}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x481d5) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085", 0xcb}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1m20.770901102s ago: executing program 4 (id=738): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102384, 0x18ff0) socket$can_bcm(0x1d, 0x2, 0x2) openat$snapshot(0xffffff9c, 0x0, 0x20900, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x44814}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='pagemap\x00') preadv(r1, &(0x7f0000000640)=[{&(0x7f0000000b00)=""/152, 0x98}, {&(0x7f0000000500)=""/189, 0x7fffef68}], 0x2, 0x300100, 0x0) 1m11.094003256s ago: executing program 4 (id=769): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002020000000000000000100095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x24004004) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x78}, 0x2160) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x5, @private2={0xfc, 0x2, '\x00', 0x2}}}}, &(0x7f0000000040)=0xc6) 1m10.763522664s ago: executing program 4 (id=775): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x50) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000140)={0x8080000, 0xf000, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwrite64(r1, &(0x7f0000000800)="5b8529ae2468f4df9c", 0x9, 0x7) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(r2, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) 1m9.159046262s ago: executing program 4 (id=779): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket(0x2c, 0x3, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) r3 = syz_io_uring_setup(0x3af2, &(0x7f00000000c0)={0x0, 0xa5f5, 0x80, 0x2, 0x131}, &(0x7f0000000140), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_MEM_REGION(r3, 0x22, &(0x7f0000000240)={&(0x7f0000000200)={&(0x7f00000001c0), 0x0, 0x0, 0xc45, 0x1}}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000001f000000bca30000000000002403000020feffff620af0fff8ffffff71a4f2ff000000001f03000000000000e5000500000000002604fdffff02000014010000033800001d13f8ff000000007a0af0ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 1m5.558111074s ago: executing program 4 (id=785): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x8c, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000080)=0x40000) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r3, &(0x7f0000000500)={'#! ', './file0', [{0x20, '\x00\x00\x02'}, {0x20, '\xb0!'}, {0x20, 'GP\xd4\x82h\xb2\xc0\x00\xfce\"\xefL\x00'}]}, 0x21) close(r3) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80c80, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0xeeef0000, 0xdddd1000, 0x0, 0x0, 0xff, 0x8, 0xa, 0x4, 0x0, 0x6, 0x80, 0x10}, {0x1000, 0x0, 0x3, 0x6, 0x7c, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x2fff, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0xdc}, {0x4000, 0x8080000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4, 0x1}, {0xf000, 0x3000, 0x9, 0xfd, 0x0, 0x4, 0x20, 0xc3, 0x0, 0x3c}, {0x3000, 0x0, 0xd, 0x7, 0x0, 0x0, 0x2, 0xfe, 0x0, 0x0, 0x82, 0x4}, {0x10000, 0x0, 0xf, 0x6, 0x5, 0x0, 0x3, 0x0, 0x8, 0x0, 0x0, 0xfe}, {0x80a0000, 0xdddd0000, 0xd, 0x1, 0x0, 0x0, 0x0, 0xa, 0x26, 0xa, 0xf8}, {0x80a0000, 0x4}, {0x6000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0x0, 0x0, [0x0, 0xfffffffffffffffc, 0x1, 0x400000000]}) ioctl$KVM_GET_SREGS2(0xffffffffffffffff, 0x8140aecc, &(0x7f0000000540)) 50.110997129s ago: executing program 34 (id=785): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x8c, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000080)=0x40000) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r3, &(0x7f0000000500)={'#! ', './file0', [{0x20, '\x00\x00\x02'}, {0x20, '\xb0!'}, {0x20, 'GP\xd4\x82h\xb2\xc0\x00\xfce\"\xefL\x00'}]}, 0x21) close(r3) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80c80, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0xeeef0000, 0xdddd1000, 0x0, 0x0, 0xff, 0x8, 0xa, 0x4, 0x0, 0x6, 0x80, 0x10}, {0x1000, 0x0, 0x3, 0x6, 0x7c, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x2fff, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0xdc}, {0x4000, 0x8080000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4, 0x1}, {0xf000, 0x3000, 0x9, 0xfd, 0x0, 0x4, 0x20, 0xc3, 0x0, 0x3c}, {0x3000, 0x0, 0xd, 0x7, 0x0, 0x0, 0x2, 0xfe, 0x0, 0x0, 0x82, 0x4}, {0x10000, 0x0, 0xf, 0x6, 0x5, 0x0, 0x3, 0x0, 0x8, 0x0, 0x0, 0xfe}, {0x80a0000, 0xdddd0000, 0xd, 0x1, 0x0, 0x0, 0x0, 0xa, 0x26, 0xa, 0xf8}, {0x80a0000, 0x4}, {0x6000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0x0, 0x0, [0x0, 0xfffffffffffffffc, 0x1, 0x400000000]}) ioctl$KVM_GET_SREGS2(0xffffffffffffffff, 0x8140aecc, &(0x7f0000000540)) 21.305507476s ago: executing program 6 (id=888): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0xf87, &(0x7f0000002140)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd606410a60f510000fc020000000000000000000000000001fe8000000000000000000000000000aa8400000000000000223427d5c9a46b9fa14172170a013589317d2af31ba55431762f462a5abc3f46494ee91bfca594d52f8c3785143e92da5d2d81edc09f68f122fbf741257bf1319408347a17c89212dfe27a0fc65362487e5afe673f0954f60d9d08b61276ce0b3aa520b5f30a9f52c4aa53fc003f8570383ca63530d93b78a7875338b3d7645ef2c24ab05db63cfdcde7b3cac2248c9d1c73d0d4382b3f520ad6e9be698eaa9bf5b939ce09919c9485c4725690ee2483315829a196f85a5ae552ebe19a2d6768ce2a6bf60fbb53104c7919b7cf28fa555fc9460df11e72eddebb2fc4eb6f83b16e0d65307e4210dfc209f0c68df65b57f420fd215546b798af6b6ab7bfb2fe6bd6142f877852717370b1ca39d199c149c3ead97c4e16229ce4c08a111a0fc64651c21e9174dd72442a9ae2a42d9433c7b54c8dd4b59203f9a2e227e9b043eb430e606cf98f3428ac8511948dd553bc0728c0626fbda71bd2a1d734d605e27bdb0be93b7b91284689e31fccb70c15f2c39da9011c84d36fe4b4b36ff26e45a34685fc638dbdaa068a3d3d4f5d44b74afc0fc7956e5fcc3fe405ac6d292d1d90f257f18fe14a3192d28ed369956aa2f91f9fee773cf7fb5d90705347eeadc1af86de78a498fa1a20e5b3f481a0595769654d969299506d8ffbc172a7fb9453a8a3787e80b167936863f2cc16c1d03481bd40e1abcf87a292559771572136932bf30e48174012a1d4d5f138f93140af2ceb9c821c7966ea7592d762975b5b33ef141b6b91eb388c91b924945c3231d0f299adb5a36e0c95a17872e7ebf0bc0e33baf5c46f9e2087b77bad0794d519ce7bc8674a70f3545d020454ded22f164185df3b4f952b132947b75333993fd73a6bac5836dd5720e559bcb82a4926734c5c3b1287c5fec219a99f71eb398430001f007306e9232c269c2886357f75d935e8de054341ac36f1df1fc77fbc347d90660f4d5658cfeb9e289f70968a7c0b38ae34c4bfa46b47964e223ac34f472e3231e8c285add5713592c76c062c3477beb55b279846f04f8d6a5ce2743c6a2020f0c5164953b8dca7e57239dc8a7f507bcf77767ab0b4602437171a09c8e80f5a165c4c37eaae386cfcb927dd1a935fa717fa1608792b34bafbc20cf11a678455894ede62788309ab7a7075535847a2b48260a613e521b01d75648263ad78e6176528dbf3e6c4e4d72066e617be5387183a51dd97d2e846c5d173b51e17a4c8d78a49c914cbe44236c52c78de45b44f9d80bc6f77c75135922a84579bce77baa71311889f5b7b90c5124b8298d5e9c81c442d60df00795854d3213a1ac254c8963c109f68b3ff5451c381f6fb56c116f86b71f988d1e9f732280cbf3d4e9791fefc4bdec5dc293fb77b02d5aab6bd8cd179b7e425126b7f78c0d004bc6470ecc2bbc422bd06a6bd8f717009509e6a88b01347b7996da62b9dea6f7a7446a371f422499a6e66eeb6a7b0beb4a86a61f875a9bfe0f5d5f0d0e4c85852afaea97d74ebc80d6491a8a1c998c4b5bc34b3edaeba2df902cd5e14e016720e6c3c8b15287b2471c34251e26dc442720cd5d984e30b110b7370f233f865b9ac129fdf49ff02b303d7d4f91039d3bb58a9d64d7a72d8b8eba6b45a000370d4f0e9c0d411768441372e7112e5d4e7d70a9d6b428b8b85ee6209d6f73e7b024740c052166deeb843e4ab78d1d354d75a5827ff0d49d8964e75785f3594c7299c09f1cf50efe0360963c2e3ee390ed2a4c39f42e856eced0f2ee7beacd2ecbece493e911ca0460584323ea6d4a0c00864693c979cae38f0c5841bfaeebf609d1075163c120fea0bd0207d2dd07e5e2e0a5afe3efee0ee6bb9a926a8dba7a27a82c5421a5b20bfb5dbdef532a12435fcd899f15603209831711e0dcfaaf2104b2016f087fce44848c70b65a34b9be83df2064391fc5a8d169dc1943d226e57ab5ba06c656273d4efba73a8a61aae19df4d2445f3ce7e649af1b4ffc86106c9092ddd0aafeb45653d181cb32b06a1dd41573495f15c3b8c0019ba72a2eb163dfcbdbb235322ae27d7116af506f295c2424ab9191aa8ce0e4617b212af21983f8d2b19d7fdeec881f6fa448acc7c3e133b6f281583fad4467c05801e69f6ffc1ae2e1f54655534d884c2f8f60303da33ccbe47a293643edb61c7d9fad4e3e54028bc64be8e5b1da53446869b136660b8e96ff96c48641ece275967b27b291c5c240b3399b5b901b699227735f821938bc88ded45bada2b257b1a4bcab7ed6647f2027e5680c87329e9cfdba6bde2f2a9b676be016001702bebbabb2eae3eba01d6f49ab70245a4c5ef0e136b531e1843487b3f69c5b811217d6d2f5e71b47f40c28117bd09a88bb21887a06e2cc164d4281d0df47cbd5781f1524098d89ccae32f24c5f9d86469106685fdc683ad5e873030b621dc00354e0621106da90aca69bb53848dd57251a45bc1898aca9bc84c9a8d2f8aabeed888560771c8cb03aab02620430fec8e9740880790060ccbffd5b8edaa219ca61587eff1b1b03ae8af53059f121efdec8b3ee8aba06f494a5b4575bc848d5a9773d2346f75811cb82a078fc960c9bd374555d78b1b4ba0b438ef00e8aa75810ca5efc5c70936e2cb0e515912cb7f625a2130a9ad58f29e58ae6eac5c3f15f22f0163ee6dead6947c4390b92c8dfb146fec7bfc0b37e8ff2c9de90c30f2d8b5e334107f9835bc47fbc193c60ebd5ac4e677c7fd5b6261ff96e97c185c726ec02941bc2336946f181fd2aff43f0e95f06105a049fcb8e4e3738407d6356856f533f17fae281a3be9f2050ae3d19d1b8350d424087ac9b7875824a9b7e098775b53d6ec960fc052ecd165d17a7897de75f15316a072bb9ccf6ce1ec085bb5356c271b985a437a32f12308fc927410fd444bcded9859e7b8a3cfaaf29ebfb92cc7cbfad2559bbe4f90e189e8708e93827b221869cc78fa41fd5bcb6577b7dfe4c3927dc25a58aa84419f76e71d1f3c10cbb5e52ab2bebe0d39bdffda0fa1b55fe3a03683f882a82dd58498d62b101acd710fd436aa7409fe3cf5352dffb399d560323e14d564bdb3121b89c1f43fc9a892b799cd32f7ce2ededb868920b4547735ef0bf3e148251a4f65dddb7f96b2f33734522a8cffdc51520ac98926b3406e96618cf15a042a67239e755afc70ec6a9c99f8e08ec2946e5901364d85223a63d49572519137d93b6b0798e72acf9da120e706ee73367dec1450a68def886c149bcd734469e10b933899501011cd548e99d638821d5709fde050ab382d4896ecfd7999d40ea9c690c26d396545224c8f9e19705593df2688eb592e2476a0193f7054ab6f703d41c545a80bf285bbc7cc735bd306c9ea5eb64f40752fd4c741d9b6e03cd41b636ef8f5e810047a21c0b24c6fde1f2e98f2f27730c90d93af9e7564e4e209a61ff626b666fcc4f75f7d560da688169ff0af5e674a0b89a99fb54bb438a65f953c2db0faec2ce09cec33b6d25620b5a0393ac473fed48a38beaca5223997419876d571ce969b83b5b3ae54de83dd89fd92ed2a93c087828bef49a24ed1a97778c47fdc691a94fd5b437dfe494b5c6fadf499d9d15583b0439d3d5ecb61a32a2508a6960be6009accfd1d5d75a16dbc4121c6ef07bda12646792449c18a56e7aa3893f3f0e55a8e09ca64193dd29ea24ed8614ee8e717f046dd99a8e3750506655331125a502aa89c0d7e8e30c36a4be22cd911322695144d3bf034f38ef32d49431d50da583d08a3e4c5862483cdd52d031b12c89fdaafc3334e877e464134baece883d301193a9c06311a987d4dae82a061f48182cc747cd64441e88b68e26e4975f0fdde3129a9e6af80009962581d5349676df9c73b81514b175709d9193749660f480bd4009b528c1db4f76f42b6a175126603c39a374e890f871c97b2eebb4500451d827cc15497dc5ae89edc6f47f25db7efa4b4b2afbbb2ee543e3db8d20fe93faf300247f59075921e8b2f2a025af8a1d46f274e0c6cb4be0293c7c16c88e98d7d189e9733e4c0e3b96be4aa3fa6ecf42732e0b1432d38aeaf2330d92713cd5580ce42bfe47fb98fea64783de23f456300dd193008211a5ba408d32dedbf12aa8237a6e1a2c9890a2c1011855241fea186906a5139d1c300be57dc7ff493de80010520d10fc3eda0ee9cd413e075d3dc02258fdab567a16e43edbeecc366a69d8d75512f43a2b79cbb9132cdcd00c531730d05f1eabf66613d6e7ebb8c4c3f4f7efd415d41049786352808b22a3bde40121968af39c8f00296001662adc72b7963c8bafab4a496b50f3237a29d19ad4a51a62b1c77a04c14004734189cf7ec49e3d041a1e5658d080f09df77f39782e7133968c1f39ab3ae2a5f24a60073288f3c5825dafd614a379b8b905aaf961caa14ffa38de0d632918d31e4a9291b0f0789248e232e4276840a1ed0257300e522d83111dffd424b1b33148981e3794b2b649ba9174e6697bcc96049f4f3dcc7cf4ca97e2006ec8a146014bb49184632e4fb159a34b6530e959e60a6b4e0427cc697f14cfe6bb7a662a6f5012744f3cf2307abc19c58449864d98fcfebc5d598cd32a1c38c207896468fe8da75eb1edb1d6e7cb1eab671e4e92f139c81d79f15df2a2dc075acc982dec769e2f49aad0fdf594cb590e054616e4f4582b6c4a149ae45d844903ef68d211df2a180178e178b7c7a5012ccf8a1e677586588620365e6111f5192ecfdbd97e2284128de02e08ebc13d4bb4d114faa1e6c16c51c12da2c52d68f73640ce866ce4e794b9fafdc392c91c1f824bc301b3069a02b9c86d2ffac3ed63ddee130cbc248d6a3345d3f9553db78077072d569a6633f8bdbdb1a209a8be9b6830225994f9021b57ddd6a44e8ea40b205c6cf437f45bffaef053a5916dcc6de62ee02bdb8ce3acec8ad97fc95dab1307d254790c71f32e4678957cf0121dccabe73a03c6cacbcbdaad8801b04d9836555a982c357a06e2db7e9bf62aed8cdebbb7a71a2410b929015b61f16e54bffd038996a717b9c7cc3696d8a1205e8266bf782c3a45b0e31461d6a3ed62396088833f69248b24fbf6f81dcc0dda3ebd796aa135ffe0e860b96356d988b98826c3bd2325ade54f614f2d4a153e3e3527d93978483f2bfeada6b64bc43f2a725c30e843d13e6ab34cfc38d488b3ef50cd04318fac1f89905f017644cfa2de058ad399871d1316264813c2289d0b6cfeddfbca36ce93fd4a1bfc93bb74453cfbb9c6ca22320ffc9cb0a3fff046a5678c066e617cd3ac024dfead04b99877f448b78208938585c7563efe815ff0cc47da5fff521d9730ddc89f4aeceadd06f2ea6b9ae72c9407aa550a0155db3b4bc6aaa382a30552f699cb6a1af9972a8ccc483f98952dfbde3d712ea8673eacdbb77490d833fc90f0f02e7c073d2917db70831496a88defc10667dc4c1b7399191bdc7857eb090e79c332bf9f71bb5377178e6232800c93d22318dc5ab8d5dfa2f074a6c23acb61c89f2f078ec91e9817e11a4c8295c19634b5ca2df7400"/3993], 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x8, r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[], 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r4) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 18.670678879s ago: executing program 6 (id=892): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001304000200000000fb27307a6566a085bb0000000000000000000001fe8000"/45], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 18.391015087s ago: executing program 6 (id=896): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r2}, 0xc) 15.535550987s ago: executing program 6 (id=899): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xd, 0x5, 0x4, 0x7, 0x0, r0, 0x10000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r2, &(0x7f0000000080), 0x0}, 0x20) 15.127574382s ago: executing program 6 (id=900): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc) 14.845626687s ago: executing program 6 (id=902): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb7907051175f37538e486dd6300800701082c00db5b686158bbcfe8875a0603"], 0xfdef) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[], 0xfdef) 5.813117397s ago: executing program 3 (id=929): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x87, 0x80, 0x9, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x2, 0xd, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x29, 0x7f, 0x7}}}}}]}}]}}, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2c2e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x70, 0x1, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x0, 0x7, {0x9, 0x21, 0xff7f, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x1, 0x2}}}}}]}}]}}, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x52, &(0x7f0000000440)={{0x12, 0x1, 0x10, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x40, 0x1, 0x1, 0xd, 0x0, 0x7, "", [{{0x9, 0x4, 0x0, 0x10, 0x3, 0x2, 0x6, 0x0, 0xb, {{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x3, 0x0, 0xc5}, [@obex={0x5, 0x24, 0x15, 0x786}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0xfc, 0x5, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x9, 0x1}}}}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x100, 0x9, 0x1, 0xe, 0x8, 0x1}, 0x0, 0x0, 0x6, [{0x40, &(0x7f0000000580)=@string={0x40, 0x3, "df8a57bf1ce9cb9e819af53e8e9ab8a5efe2e50e2acc1cbfe31b5d40a21cd290802152fcc80f8333aac56c707092b586fa2639fc39049390965d0f15336b"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4}}, {0x0, 0x0}, {0x14, &(0x7f0000000640)=@string={0x14, 0x3, "d5700f470fdfbc36eb66c75af667069e126e"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x425}}, {0xdb, &(0x7f00000006c0)=@string={0xdb, 0x3, "3562ea4c7360afe8799222e10a7d10d03cc9d2a6c496fc41a8966853895dc032d5210b278c23105dd6efbc0af3780ecf25f48e0cea8f22752a6cbe357e8597980bb7f4a3250e0e060a7fe7ac9f018419205c4904f1c2a572104963b4a0b69b96ef44ef86bfe460c383b277d71a423638ba95d71504b62cbcf092fda6e0181df4776686ea57ac25f14dc86252d8f3f8165a87298aa2e96000b74a2854665e7456a98c2e4a19728a1ac3a5afdf1a1238c056c6405f2999bb4d70771e4b6027e2267eafd073d211d2accb40a6bcf7127220843cf22ff520f4708d"}}]}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xad, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029b0003010000000904000000010100000a2401000000020102092408000000004c58062404000052072405000053f10b24050000133b9bda531c092405000596efc359090401000001020000090401010101020000090501090000000000072501000000000904020000010200000904020101010200000b240281000200018b7e8e072401000000000905820910"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000004600)={0x24, 0x0, 0x0, &(0x7f0000004580), 0x0}, 0x0) r3 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="120100015ae4c41096050100f5050100030109021b0001000000000904d60001b5e14500090583"], 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000340)={0x20, 0xd, 0xb, "4b625f300237af1d8e4dc6"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x12ba, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xd1, 0x0, 0x3, "", [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x7, 0x1, {0x22, 0x892}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x9, 0xd6, 0x1}}}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x3, 0x1, 0x3, 0xff, 0x2f}, 0x4f, &(0x7f0000000100)={0x5, 0xf, 0x4f, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "b70054369841b16fc36614d817806996"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x7c, 0x8, 0x40, 0x3ff, 0x5}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "5b74eec7ef8da0335918ffb1bd22e477"}, @ss_container_id={0x14, 0x10, 0x4, 0x81, "272a357fa12e90a24127d4e844bf0d78"}]}, 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x81a}}, {0x28, &(0x7f00000001c0)=@string={0x28, 0x3, "cec9fe5b9ee47b8044741be9d0326baa9b061ee263bf5e4cf902919d2595198dbe99a064192b"}}, {0xa9, &(0x7f0000000200)=@string={0xa9, 0x3, "ff16a58519a8c244fece98806914fb5b345d73c0ac19d044cce4a99545e51cf3c46ea14f8667f15d1b83c83b28cb278a4f0d8854904fb11918ad83e44fee762cd4c7ee3ad2c851f039bff7ae7c211a728e9c1c5edc34193b69037815f68cf44159d564fc0bb34cb876bd9f13c03b9ee092c06df2d99e9b77e09ac9925943e69c34aae0f25131a694bbfdab922efb3b53d316851a771c7f68ccf80d1830174e15cb64b71415f17a"}}, {0xc0, &(0x7f00000002c0)=@string={0xc0, 0x3, "5f7bc8e9b2aa5ada0e97a95d3abab3831672f831b71bb219c4d0cc93dc6d63789a819c24646920ddfca404971e25ff1547fa4d569f06a074169422a0b1c7a1eb77757e3c1a8bd1c79059b9d47902eb3781ef9ef1abd31d631302aa64ab95bc5f016dde6c363bfda3441726a616118856ac795eb5ed53a6f5d126217fefed31f245a0592696c02e122fb9aa34f489d57b6682a6cd1e547e4a95a8f70791fc68eee4f484d0d29310d2b3768029322619555d3aaba65dd99c354281cbe48a5e"}}, {0x3c, &(0x7f0000000380)=@string={0x3c, 0x3, "f9a990d52045f951f6c2530d4299bc40e697e073741bc5fb319d1579c3a5665f82357abc55984b060b1e0c982abf50f862489405e94ead989576"}}]}) 2.743435891s ago: executing program 3 (id=962): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x183000, 0x0) fcntl$setstatus(r0, 0x4, 0x800) 2.499444007s ago: executing program 3 (id=965): fsopen(&(0x7f0000000040)='ceph\x00', 0x1) 2.337208998s ago: executing program 3 (id=967): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x880, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) read$FUSE(r1, &(0x7f0000000500)={0x2020}, 0x2020) 2.188501107s ago: executing program 3 (id=969): fsopen(&(0x7f0000007500)='ecryptfs\x00', 0x0) 1.987111465s ago: executing program 3 (id=971): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000000904004001030000000921010000012205"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000140)='P') 822.840188ms ago: executing program 0 (id=991): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fcntl$notify(r0, 0x402, 0x40) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/udp6\x00') pread64(r1, &(0x7f0000000600)=""/4099, 0x1003, 0x110) 731.415521ms ago: executing program 0 (id=993): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000013c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000001440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000001400)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000001480)={0x6, 0x118, 0xfa00, {{0x6, 0xb, "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", 0x8, 0x1, 0x5, 0x8, 0xf, 0x9, 0x8, 0x1}, r1}}, 0x120) 702.381041ms ago: executing program 5 (id=994): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9401"}, @global=@item_4={0x3, 0x1, 0x0, "0f00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x3, 0x48, &(0x7f0000000040)=ANY=[], 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_connect$printer(0x6, 0x0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 611.623752ms ago: executing program 0 (id=995): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/sync_on_suspend', 0x20881, 0x6a) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000040)=ANY=[], 0x28) 602.890087ms ago: executing program 5 (id=996): syz_usb_connect$uac2(0x5, 0x7b, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8213, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x3, 0xb0, 0x3, {0x8, 0xb, 0x0, 0x2, 0x1, 0x5, 0x20, 0x3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x7, 0x2, 0x9, 0x32}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x3, 0xb4, 0x0, {0x8, 0x25, 0x1, 0x1, 0x3, 0xa2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x8, 0xdc, 0x9, {0x8, 0x25, 0x1, 0x81, 0x3, 0x1, 0x9}}}}}}}}]}}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0}) 513.393672ms ago: executing program 0 (id=997): r0 = epoll_create(0x10001) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000000)={0x70000008}) 375.621437ms ago: executing program 5 (id=998): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp6\x00') read$FUSE(r0, &(0x7f0000001f80)={0x2020}, 0x2020) pread64(r0, &(0x7f00000001c0)=""/179, 0xb3, 0x4003c) 291.296612ms ago: executing program 0 (id=999): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) read$sequencer(r0, 0x0, 0x0) 278.015836ms ago: executing program 5 (id=1000): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r0, 0x0, 0xe) 107.135152ms ago: executing program 5 (id=1001): symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) ioctl$FS_IOC_SETFLAGS(r0, 0xc0606610, &(0x7f0000000040)=0x60) 106.889726ms ago: executing program 0 (id=1002): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x4001, &(0x7f00000000c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000180)={0x28, 0x2, 0x0, {0x80000000000001, 0x8, 0x400000002}}, 0x28) 0s ago: executing program 5 (id=1003): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000100)=""/54, 0x36) getdents64(r1, 0xfffffffffffffffe, 0xff80) kernel console output (not intermixed with test programs): 02154 phy0 wpan0: encryption failed: -22 [ 132.692560][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.873380][ T6126] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 138.446778][ T6149] netlink: 'syz.4.60': attribute type 1 has an invalid length. [ 138.467183][ T6149] netlink: 8 bytes leftover after parsing attributes in process `syz.4.60'. [ 138.467204][ T6149] netlink: 4 bytes leftover after parsing attributes in process `syz.4.60'. [ 141.571198][ T37] audit: type=1326 audit(1774319390.501:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6180 comm="syz.4.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84b36c799 code=0x7ffc0000 [ 141.571256][ T37] audit: type=1326 audit(1774319390.501:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6180 comm="syz.4.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84b36c799 code=0x7ffc0000 [ 141.571300][ T37] audit: type=1326 audit(1774319390.501:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6180 comm="syz.4.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7ff84b36c799 code=0x7ffc0000 [ 141.571331][ T37] audit: type=1326 audit(1774319390.511:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6180 comm="syz.4.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84b36c799 code=0x7ffc0000 [ 141.571362][ T37] audit: type=1326 audit(1774319390.511:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6180 comm="syz.4.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7ff84b36c799 code=0x7ffc0000 [ 141.571393][ T37] audit: type=1326 audit(1774319390.521:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6180 comm="syz.4.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84b36c799 code=0x7ffc0000 [ 141.571423][ T37] audit: type=1326 audit(1774319390.521:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6180 comm="syz.4.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84b36c799 code=0x7ffc0000 [ 145.083409][ T6195] netlink: 'syz.1.72': attribute type 1 has an invalid length. [ 145.145709][ T6195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.72'. [ 145.145727][ T6195] netlink: 4 bytes leftover after parsing attributes in process `syz.1.72'. [ 149.208775][ T6234] netlink: 'syz.4.80': attribute type 2 has an invalid length. [ 149.208805][ T6234] netlink: 'syz.4.80': attribute type 2 has an invalid length. [ 152.045542][ T6254] netlink: 'syz.1.86': attribute type 1 has an invalid length. [ 152.084974][ T6257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.86'. [ 152.084995][ T6257] netlink: 4 bytes leftover after parsing attributes in process `syz.1.86'. [ 152.933779][ T37] audit: type=1326 audit(1774319401.901:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6263 comm="syz.1.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d8c68c799 code=0x7ffc0000 [ 152.937603][ T37] audit: type=1326 audit(1774319401.901:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6263 comm="syz.1.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f2d8c68c799 code=0x7ffc0000 [ 152.938651][ T37] audit: type=1326 audit(1774319401.901:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6263 comm="syz.1.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d8c68c799 code=0x7ffc0000 [ 152.938932][ T37] audit: type=1326 audit(1774319401.901:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6263 comm="syz.1.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f2d8c68c799 code=0x7ffc0000 [ 152.942098][ T37] audit: type=1326 audit(1774319401.901:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6263 comm="syz.1.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2d8c68c502 code=0x7ffc0000 [ 153.064344][ T37] audit: type=1326 audit(1774319402.021:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6263 comm="syz.1.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2d8c68c502 code=0x7ffc0000 [ 153.203017][ T37] audit: type=1326 audit(1774319402.131:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6263 comm="syz.1.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d8c68c799 code=0x7ffc0000 [ 153.203368][ T37] audit: type=1326 audit(1774319402.171:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6263 comm="syz.1.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d8c68c799 code=0x7ffc0000 [ 153.314877][ T37] audit: type=1326 audit(1774319402.281:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6263 comm="syz.1.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f2d8c68c799 code=0x7ffc0000 [ 153.314926][ T37] audit: type=1326 audit(1774319402.281:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6263 comm="syz.1.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d8c68c799 code=0x7ffc0000 [ 155.649581][ T6280] netlink: 'syz.4.93': attribute type 2 has an invalid length. [ 155.649602][ T6280] netlink: 'syz.4.93': attribute type 2 has an invalid length. [ 156.680953][ T6292] tipc: Started in network mode [ 156.680987][ T6292] tipc: Node identity ac1414aa, cluster identity 4711 [ 156.682707][ T6292] tipc: Enabled bearer , priority 10 [ 156.705434][ T6292] tipc: Enabled bearer , priority 0 [ 157.297910][ T6301] netlink: 4 bytes leftover after parsing attributes in process `syz.0.97'. [ 157.825057][ T5804] tipc: Node number set to 2886997162 [ 158.680592][ T6307] netlink: 'syz.3.99': attribute type 1 has an invalid length. [ 160.619988][ T6319] syz.0.101 uses obsolete (PF_INET,SOCK_PACKET) [ 165.143178][ T6394] netlink: 'syz.4.112': attribute type 1 has an invalid length. [ 165.197139][ T6400] netlink: 8 bytes leftover after parsing attributes in process `syz.4.112'. [ 173.081472][ T37] kauditd_printk_skb: 9 callbacks suppressed [ 173.081490][ T37] audit: type=1326 audit(1774319422.041:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6415 comm="syz.1.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d8c68c799 code=0x7ffc0000 [ 173.081534][ T37] audit: type=1326 audit(1774319422.041:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6415 comm="syz.1.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d8c68c799 code=0x7ffc0000 [ 173.081572][ T37] audit: type=1326 audit(1774319422.041:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6415 comm="syz.1.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f2d8c68c799 code=0x7ffc0000 [ 173.081611][ T37] audit: type=1326 audit(1774319422.041:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6415 comm="syz.1.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d8c68c799 code=0x7ffc0000 [ 173.081648][ T37] audit: type=1326 audit(1774319422.041:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6415 comm="syz.1.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f2d8c68c799 code=0x7ffc0000 [ 173.082488][ T37] audit: type=1326 audit(1774319422.041:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6415 comm="syz.1.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d8c68c799 code=0x7ffc0000 [ 173.082533][ T37] audit: type=1326 audit(1774319422.041:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6415 comm="syz.1.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f2d8c68c799 code=0x7ffc0000 [ 173.176578][ T37] audit: type=1326 audit(1774319422.121:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6415 comm="syz.1.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d8c68c799 code=0x7ffc0000 [ 173.176767][ T37] audit: type=1326 audit(1774319422.141:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6415 comm="syz.1.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d8c68c799 code=0x7ffc0000 [ 174.062982][ T5815] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 174.230618][ T5815] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.230646][ T5815] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 174.255535][ T5815] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 174.255555][ T5815] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.255568][ T5815] usb 4-1: Product: syz [ 174.255577][ T5815] usb 4-1: Manufacturer: syz [ 174.255587][ T5815] usb 4-1: SerialNumber: syz [ 174.346186][ T5815] usb 4-1: config 0 descriptor?? [ 175.379617][ T6441] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 175.379645][ T6441] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 175.386763][ T6441] vhci_hcd vhci_hcd.0: Device attached [ 175.397821][ T6441] random: crng reseeded on system resumption [ 175.791760][ T6442] vhci_hcd: connection closed [ 175.888012][ T5901] usb 42-1: SetAddress Request (2) to port 0 [ 175.889708][ T5901] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 176.044370][ T137] vhci_hcd vhci_hcd.4: stop threads [ 176.045018][ T137] vhci_hcd vhci_hcd.4: release socket [ 176.387394][ T137] vhci_hcd vhci_hcd.4: disconnect device [ 176.403010][ T5815] usb 4-1: USB disconnect, device number 2 [ 176.533304][ T6449] netlink: 'syz.3.126': attribute type 1 has an invalid length. [ 176.563086][ T6450] netlink: 'syz.0.125': attribute type 1 has an invalid length. [ 176.597827][ T6454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.126'. [ 176.941028][ T6450] 8021q: adding VLAN 0 to HW filter on device bond1 [ 176.959486][ T6452] tipc: Started in network mode [ 176.959514][ T6452] tipc: Node identity ac1414aa, cluster identity 4711 [ 176.961436][ T6452] tipc: Enabled bearer , priority 10 [ 178.304836][ T6455] bond1: (slave veth3): Enslaving as an active interface with a down link [ 178.599581][ T6458] bond1: (slave dummy0): making interface the new active one [ 178.600714][ T6458] dummy0: entered promiscuous mode [ 178.601240][ T6458] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 178.692477][ T5804] tipc: Node number set to 2886997162 [ 178.707991][ T6466] tipc: Enabled bearer , priority 0 [ 180.926761][ T5901] usb 42-1: device descriptor read/8, error -110 [ 181.423409][ T5901] usb usb42-port1: attempt power cycle [ 184.856569][ T5901] usb usb42-port1: unable to enumerate USB device [ 188.485062][ T31] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 188.642995][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 188.677084][ T31] usb 2-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice= 0.40 [ 188.677111][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.677135][ T31] usb 2-1: Product: င [ 188.677144][ T31] usb 2-1: Manufacturer: ᠊ [ 188.677154][ T31] usb 2-1: SerialNumber: syz [ 190.075180][ T31] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 190.075877][ T31] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 190.174747][ T31] usb 2-1: USB disconnect, device number 2 [ 190.302965][ T810] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 190.476555][ T810] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 190.476612][ T810] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 190.476631][ T810] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 190.476650][ T810] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 190.476669][ T810] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 190.480068][ T810] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 190.480101][ T810] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 190.480119][ T810] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 190.480136][ T810] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 190.480152][ T810] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 190.511106][ T810] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 190.511296][ T810] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 190.511370][ T810] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 190.511454][ T810] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 190.511535][ T810] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 190.534185][ T810] usb 4-1: string descriptor 0 read error: -22 [ 190.534561][ T810] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 190.534615][ T810] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.813256][ T810] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 191.523412][ T810] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 191.852963][ T810] usb 3-1: Using ep0 maxpacket: 8 [ 191.858031][ T810] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.858055][ T810] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 191.860460][ T810] usb 3-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 191.860487][ T810] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.860506][ T810] usb 3-1: Product: syz [ 191.860519][ T810] usb 3-1: Manufacturer: syz [ 191.860533][ T810] usb 3-1: SerialNumber: syz [ 191.952006][ T810] usb 3-1: config 0 descriptor?? [ 192.358675][ T31] usb 3-1: USB disconnect, device number 4 [ 192.653310][ T6553] vlan2: entered promiscuous mode [ 192.653522][ T6553] vlan2: entered allmulticast mode [ 192.653535][ T6553] hsr_slave_1: entered allmulticast mode [ 192.814767][ T6553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.152'. [ 194.072657][ T810] usb 4-1: USB disconnect, device number 3 [ 194.156139][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.156201][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.772994][ T810] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 195.944433][ T810] usb 4-1: Using ep0 maxpacket: 32 [ 195.964461][ T810] usb 4-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice= 0.40 [ 195.964491][ T810] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.964513][ T810] usb 4-1: Product: င [ 195.964537][ T810] usb 4-1: Manufacturer: ᠊ [ 195.964550][ T810] usb 4-1: SerialNumber: syz [ 196.189099][ T6609] netlink: 'syz.1.162': attribute type 1 has an invalid length. [ 196.305921][ T6609] 8021q: adding VLAN 0 to HW filter on device bond2 [ 196.504700][ T6612] bond2: (slave geneve2): making interface the new active one [ 196.506924][ T6612] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 196.532292][ T810] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 196.534242][ T810] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 196.728195][ T6616] vti0: entered promiscuous mode [ 196.783397][ T810] usb 4-1: USB disconnect, device number 4 [ 196.924819][ T1472] dummy0: left promiscuous mode [ 196.973111][ T6622] netlink: 'syz.1.164': attribute type 1 has an invalid length. [ 197.025828][ T6622] 8021q: adding VLAN 0 to HW filter on device bond3 [ 197.475086][ T6629] netlink: 14 bytes leftover after parsing attributes in process `syz.1.164'. [ 200.248514][ T6622] bond3: (slave veth3): Enslaving as an active interface with a down link [ 200.338903][ T6625] bond3: (slave dummy0): making interface the new active one [ 200.340213][ T6625] dummy0: entered promiscuous mode [ 200.340646][ T6625] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 200.414613][ T6629] bond3: (slave dummy0): Releasing active interface [ 200.414786][ T6629] dummy0 (unregistering): left promiscuous mode [ 202.662982][ T5941] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 202.812916][ T5941] usb 3-1: Using ep0 maxpacket: 32 [ 202.819370][ T5941] usb 3-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice= 0.40 [ 202.819399][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.819420][ T5941] usb 3-1: Product: င [ 202.819435][ T5941] usb 3-1: Manufacturer: ᠊ [ 202.819450][ T5941] usb 3-1: SerialNumber: syz [ 203.044075][ T6666] netlink: 'syz.0.178': attribute type 2 has an invalid length. [ 203.044098][ T6666] netlink: 'syz.0.178': attribute type 2 has an invalid length. [ 203.113705][ T6666] lo speed is unknown, defaulting to 1000 [ 203.113819][ T6666] lo speed is unknown, defaulting to 1000 [ 203.117098][ T6666] lo speed is unknown, defaulting to 1000 [ 203.431242][ T6666] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 203.460455][ T6666] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 204.787172][ T5941] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 204.788079][ T5941] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 204.826808][ T5941] usb 3-1: USB disconnect, device number 5 [ 205.463738][ T6666] lo speed is unknown, defaulting to 1000 [ 205.466630][ T6666] lo speed is unknown, defaulting to 1000 [ 205.505071][ T6666] lo speed is unknown, defaulting to 1000 [ 205.507882][ T6666] lo speed is unknown, defaulting to 1000 [ 205.510863][ T6666] lo speed is unknown, defaulting to 1000 [ 208.222097][ T5941] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 208.392048][ T5941] usb 1-1: Using ep0 maxpacket: 32 [ 208.439074][ T5941] usb 1-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice= 0.40 [ 208.439102][ T5941] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.439121][ T5941] usb 1-1: Product: င [ 208.439134][ T5941] usb 1-1: Manufacturer: ᠊ [ 208.439146][ T5941] usb 1-1: SerialNumber: syz [ 211.239739][ T5941] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 211.253511][ T5941] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 211.468888][ T5941] usb 1-1: USB disconnect, device number 2 [ 212.131783][ T6751] netlink: 'syz.1.197': attribute type 1 has an invalid length. [ 212.395257][ T6757] bond4: (slave bridge3): making interface the new active one [ 212.414129][ T6757] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 212.659296][ T37] audit: type=1326 audit(1774319461.621:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6760 comm="syz.4.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84b36c799 code=0x7ffc0000 [ 212.684097][ T37] audit: type=1326 audit(1774319461.651:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6760 comm="syz.4.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84b36c799 code=0x7ffc0000 [ 212.687606][ T37] audit: type=1326 audit(1774319461.651:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6760 comm="syz.4.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7ff84b36c799 code=0x7ffc0000 [ 212.713438][ T37] audit: type=1326 audit(1774319461.671:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6760 comm="syz.4.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84b36c799 code=0x7ffc0000 [ 212.713558][ T37] audit: type=1326 audit(1774319461.671:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6760 comm="syz.4.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84b36c799 code=0x7ffc0000 [ 212.713686][ T37] audit: type=1326 audit(1774319461.671:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6760 comm="syz.4.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7ff84b36c799 code=0x7ffc0000 [ 212.713791][ T37] audit: type=1326 audit(1774319461.671:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6760 comm="syz.4.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff84b36c502 code=0x7ffc0000 [ 212.763364][ T5813] Bluetooth: hci0: command 0x0406 tx timeout [ 212.763604][ T5813] Bluetooth: hci2: command 0x0406 tx timeout [ 212.763761][ T5813] Bluetooth: hci1: command 0x0406 tx timeout [ 212.763869][ T5813] Bluetooth: hci3: command 0x0406 tx timeout [ 212.763964][ T5813] Bluetooth: hci4: command 0x0406 tx timeout [ 212.783181][ T37] audit: type=1326 audit(1774319461.751:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6760 comm="syz.4.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff84b36c502 code=0x7ffc0000 [ 213.075282][ T37] audit: type=1326 audit(1774319462.031:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6760 comm="syz.4.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84b36c799 code=0x7ffc0000 [ 213.089057][ T37] audit: type=1326 audit(1774319462.051:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6760 comm="syz.4.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84b36c799 code=0x7ffc0000 [ 213.898685][ T6782] netlink: 'syz.0.207': attribute type 2 has an invalid length. [ 213.898712][ T6782] netlink: 'syz.0.207': attribute type 2 has an invalid length. [ 217.134741][ T6814] netlink: 4 bytes leftover after parsing attributes in process `syz.1.216'. [ 217.858013][ T6817] netlink: 'syz.3.219': attribute type 2 has an invalid length. [ 217.858029][ T6817] netlink: 'syz.3.219': attribute type 2 has an invalid length. [ 217.911868][ T6817] siw: device registration error -23 [ 219.194281][ T6847] netlink: 'syz.0.231': attribute type 2 has an invalid length. [ 219.194306][ T6847] netlink: 'syz.0.231': attribute type 2 has an invalid length. [ 220.835654][ T6881] lo speed is unknown, defaulting to 1000 [ 223.172174][ T6888] netlink: 'syz.0.246': attribute type 2 has an invalid length. [ 223.172199][ T6888] netlink: 'syz.0.246': attribute type 2 has an invalid length. [ 237.086157][ T6985] ======================================================= [ 237.086157][ T6985] WARNING: The mand mount option has been deprecated and [ 237.086157][ T6985] and is ignored by this kernel. Remove the mand [ 237.086157][ T6985] option from the mount to silence this warning. [ 237.086157][ T6985] ======================================================= [ 238.266549][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 238.266568][ T37] audit: type=1800 audit(1774319487.191:88): pid=6990 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.280" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 238.267561][ T6990] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 238.267589][ T6990] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 238.267603][ T6990] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 238.338660][ T6990] syz.3.280 (6990) used greatest stack depth: 16728 bytes left [ 239.983808][ T7021] netlink: 'syz.0.289': attribute type 2 has an invalid length. [ 239.983831][ T7021] netlink: 'syz.0.289': attribute type 2 has an invalid length. [ 244.091648][ T7057] netlink: 'syz.1.299': attribute type 2 has an invalid length. [ 244.091670][ T7057] netlink: 'syz.1.299': attribute type 2 has an invalid length. [ 244.144850][ T7057] siw: device registration error -23 [ 244.616205][ T5802] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 244.626629][ T5802] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 244.631664][ T5802] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 244.653140][ T5802] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 244.653978][ T5802] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 245.300414][ T7017] lo speed is unknown, defaulting to 1000 [ 245.515838][ T7085] netlink: 'syz.4.309': attribute type 2 has an invalid length. [ 245.515860][ T7085] netlink: 'syz.4.309': attribute type 2 has an invalid length. [ 245.567564][ T7088] siw: device registration error -23 [ 245.948674][ T7017] chnl_net:caif_netlink_parms(): no params data found [ 246.766028][ T5802] Bluetooth: hci5: command tx timeout [ 247.292943][ T36] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 247.468485][ T36] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.468515][ T36] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.468536][ T36] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 247.468567][ T36] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 247.468583][ T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.509564][ T36] usb 1-1: config 0 descriptor?? [ 247.940484][ T205] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.140933][ T36] usbhid 1-1:0.0: can't add hid device: -71 [ 248.141050][ T36] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 248.180730][ T36] usb 1-1: USB disconnect, device number 3 [ 248.832187][ T205] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.066239][ T5802] Bluetooth: hci5: command tx timeout [ 249.233635][ T7017] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.233756][ T7017] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.234007][ T7017] bridge_slave_0: entered allmulticast mode [ 249.236617][ T7017] bridge_slave_0: entered promiscuous mode [ 249.286204][ T7017] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.286440][ T7017] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.287088][ T7017] bridge_slave_1: entered allmulticast mode [ 249.372393][ T7017] bridge_slave_1: entered promiscuous mode [ 249.705329][ T205] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.151248][ T205] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.221713][ T7017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.246539][ T7017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.334347][ T7158] netlink: 'syz.4.323': attribute type 2 has an invalid length. [ 250.334370][ T7158] netlink: 'syz.4.323': attribute type 2 has an invalid length. [ 250.516149][ T7017] team0: Port device team_slave_0 added [ 250.522758][ T7158] lo speed is unknown, defaulting to 1000 [ 250.531769][ T7017] team0: Port device team_slave_1 added [ 250.531840][ T7158] lo speed is unknown, defaulting to 1000 [ 250.738704][ T7158] lo speed is unknown, defaulting to 1000 [ 250.844979][ T7158] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 250.848888][ T7017] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.848903][ T7017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 250.848930][ T7017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.976293][ T7017] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.976310][ T7017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 250.976337][ T7017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.182483][ T7158] lo speed is unknown, defaulting to 1000 [ 251.231138][ T7158] lo speed is unknown, defaulting to 1000 [ 251.287028][ T5802] Bluetooth: hci5: command tx timeout [ 251.311627][ T7158] lo speed is unknown, defaulting to 1000 [ 252.333248][ T7158] lo speed is unknown, defaulting to 1000 [ 253.262470][ T7193] netlink: 'syz.0.330': attribute type 1 has an invalid length. [ 253.278593][ T7017] hsr_slave_0: entered promiscuous mode [ 253.281002][ T7017] hsr_slave_1: entered promiscuous mode [ 253.292873][ T7017] debugfs: 'hsr0' already exists in 'hsr' [ 253.292913][ T7017] Cannot create hsr debugfs directory [ 253.302601][ T7158] lo speed is unknown, defaulting to 1000 [ 253.340616][ T5802] Bluetooth: hci5: command tx timeout [ 253.533901][ T7193] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 253.534853][ T7158] lo speed is unknown, defaulting to 1000 [ 253.772034][ T205] bridge_slave_1: left allmulticast mode [ 253.772130][ T205] bridge_slave_1: left promiscuous mode [ 253.786421][ T205] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.903031][ T5804] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 253.906030][ T205] bridge_slave_0: left allmulticast mode [ 253.906048][ T205] bridge_slave_0: left promiscuous mode [ 253.906217][ T205] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.062527][ T5804] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 254.062582][ T5804] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 254.062602][ T5804] usb 2-1: config 0 interface 0 has no altsetting 0 [ 254.090035][ T5804] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 254.090064][ T5804] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 254.090083][ T5804] usb 2-1: Product: syz [ 254.090096][ T5804] usb 2-1: Manufacturer: syz [ 254.090110][ T5804] usb 2-1: SerialNumber: syz [ 254.134569][ T5804] usb 2-1: config 0 descriptor?? [ 254.142413][ T5804] hub 2-1:0.0: bad descriptor, ignoring hub [ 254.142437][ T5804] hub 2-1:0.0: probe with driver hub failed with error -5 [ 254.205390][ T5804] usb 2-1: selecting invalid altsetting 0 [ 255.604121][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.604171][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.342675][ T5804] usb 2-1: USB disconnect, device number 3 [ 261.742153][ T7244] netlink: 'syz.4.342': attribute type 1 has an invalid length. [ 261.816716][ T205] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 261.883667][ T205] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 261.925143][ T205] bond0 (unregistering): Released all slaves [ 261.997305][ T7247] dummy0: entered allmulticast mode [ 262.220540][ T7254] netlink: 'syz.4.345': attribute type 1 has an invalid length. [ 262.513916][ T7254] 8021q: adding VLAN 0 to HW filter on device bond3 [ 262.639334][ T7257] bond3: (slave geneve2): making interface the new active one [ 262.656585][ T7257] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 262.687758][ T7259] vti0: entered promiscuous mode [ 262.714979][ T7245] dummy0: left allmulticast mode [ 262.975750][ T7276] netlink: 'syz.4.352': attribute type 2 has an invalid length. [ 262.975775][ T7276] netlink: 'syz.4.352': attribute type 2 has an invalid length. [ 263.465835][ T7289] netlink: 'syz.3.354': attribute type 1 has an invalid length. [ 263.938304][ T7311] netlink: 'syz.0.362': attribute type 1 has an invalid length. [ 264.825611][ T7311] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 264.886092][ T7313] vti0: entered promiscuous mode [ 265.157685][ T7017] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 265.215338][ T7325] netlink: 'syz.3.365': attribute type 2 has an invalid length. [ 265.215362][ T7325] netlink: 'syz.3.365': attribute type 2 has an invalid length. [ 265.267747][ T7328] siw: device registration error -23 [ 265.505913][ T7017] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 265.905399][ T205] hsr_slave_0: left promiscuous mode [ 265.941420][ T7342] netlink: 'syz.3.371': attribute type 1 has an invalid length. [ 265.957806][ T205] hsr_slave_1: left promiscuous mode [ 265.959310][ T205] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.959403][ T205] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.045193][ T205] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.045211][ T205] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.307793][ T205] veth1_macvtap: left promiscuous mode [ 266.307953][ T205] veth0_macvtap: left promiscuous mode [ 266.312353][ T205] veth1_vlan: left promiscuous mode [ 266.312593][ T205] veth0_vlan: left promiscuous mode [ 266.672944][ T36] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 266.822954][ T36] usb 1-1: Using ep0 maxpacket: 32 [ 266.827565][ T36] usb 1-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice= 0.40 [ 266.827591][ T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.827608][ T36] usb 1-1: Product: င [ 266.827620][ T36] usb 1-1: Manufacturer: ᠊ [ 266.827633][ T36] usb 1-1: SerialNumber: syz [ 267.322211][ T36] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 267.333136][ T36] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 267.370334][ T36] usb 1-1: USB disconnect, device number 4 [ 267.833923][ T7351] netlink: 'syz.4.374': attribute type 1 has an invalid length. [ 268.223668][ T205] team0 (unregistering): Port device team_slave_1 removed [ 268.287718][ T205] team0 (unregistering): Port device team_slave_0 removed [ 268.484153][ T7017] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 268.515681][ T7342] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 268.708921][ T7351] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 268.711378][ T7017] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 268.974053][ T7374] netlink: 'syz.4.379': attribute type 2 has an invalid length. [ 268.974080][ T7374] netlink: 'syz.4.379': attribute type 2 has an invalid length. [ 269.289427][ T7017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.306797][ T7017] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.366886][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.382604][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.414081][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.414211][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.173631][ T5941] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 271.359760][ T5941] usb 1-1: Using ep0 maxpacket: 32 [ 271.374485][ T5941] usb 1-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice= 0.40 [ 271.374513][ T5941] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.374531][ T5941] usb 1-1: Product: င [ 271.374545][ T5941] usb 1-1: Manufacturer: ᠊ [ 271.374558][ T5941] usb 1-1: SerialNumber: syz [ 272.127088][ T7017] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.472413][ T5941] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 272.473438][ T5941] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 272.548064][ T5941] usb 1-1: USB disconnect, device number 5 [ 272.843748][ T7419] netlink: 'syz.0.388': attribute type 1 has an invalid length. [ 272.895681][ T7419] 8021q: adding VLAN 0 to HW filter on device bond2 [ 276.130553][ T7017] veth0_vlan: entered promiscuous mode [ 276.607594][ T7017] veth1_vlan: entered promiscuous mode [ 276.759609][ T7017] veth0_macvtap: entered promiscuous mode [ 276.797727][ T7017] veth1_macvtap: entered promiscuous mode [ 276.864238][ T7017] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.899971][ T7017] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.939252][ T59] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.949151][ T59] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.033417][ T59] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.050474][ T6372] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.392882][ T959] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 277.552892][ T959] usb 2-1: Using ep0 maxpacket: 32 [ 277.557459][ T959] usb 2-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice= 0.40 [ 277.557484][ T959] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.557502][ T959] usb 2-1: Product: င [ 277.557514][ T959] usb 2-1: Manufacturer: ᠊ [ 277.557527][ T959] usb 2-1: SerialNumber: syz [ 277.645600][ T7469] netlink: 'syz.3.399': attribute type 1 has an invalid length. [ 277.968228][ T7469] 8021q: adding VLAN 0 to HW filter on device bond4 [ 278.014255][ T7474] bond4: (slave geneve2): making interface the new active one [ 278.016115][ T7474] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 278.070906][ T7477] vti0: entered promiscuous mode [ 278.139417][ T959] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 278.164582][ T959] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 278.228973][ T959] usb 2-1: USB disconnect, device number 4 [ 278.254869][ T205] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.254886][ T205] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.601211][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.601232][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.750888][ T7490] netlink: 12 bytes leftover after parsing attributes in process `syz.1.406'. [ 281.712923][ T31] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 281.866857][ T31] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 281.866911][ T31] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 281.866937][ T31] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 281.866963][ T31] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 281.866988][ T31] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 281.868441][ T31] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 281.868492][ T31] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 281.868518][ T31] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 281.868544][ T31] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 281.868568][ T31] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 281.871041][ T31] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 281.871093][ T31] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 281.871120][ T31] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 281.871146][ T31] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 281.871172][ T31] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 281.919652][ T31] usb 6-1: string descriptor 0 read error: -22 [ 281.919974][ T31] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 281.920028][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.099621][ T7533] netlink: 'syz.0.411': attribute type 1 has an invalid length. [ 282.138095][ T31] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 282.300956][ T7533] 8021q: adding VLAN 0 to HW filter on device bond3 [ 282.366002][ T31] usb 6-1: USB disconnect, device number 2 [ 284.343061][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 284.502893][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 284.582526][ T10] usb 1-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice= 0.40 [ 284.582554][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.582572][ T10] usb 1-1: Product: င [ 284.582584][ T10] usb 1-1: Manufacturer: ᠊ [ 284.582597][ T10] usb 1-1: SerialNumber: syz [ 288.437212][ T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 288.438100][ T10] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 288.517453][ T10] usb 1-1: USB disconnect, device number 6 [ 288.585376][ T7552] syz.5.415 (7552) used greatest stack depth: 16720 bytes left [ 288.691686][ T7575] netlink: 'syz.4.424': attribute type 1 has an invalid length. [ 288.827167][ T7575] 8021q: adding VLAN 0 to HW filter on device bond4 [ 292.713423][ T5942] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 296.644067][ T7629] netlink: 'syz.0.440': attribute type 1 has an invalid length. [ 296.777447][ T7629] 8021q: adding VLAN 0 to HW filter on device bond4 [ 297.092966][ T5941] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 297.242972][ T5941] usb 5-1: Using ep0 maxpacket: 32 [ 297.250002][ T5941] usb 5-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice= 0.40 [ 297.250024][ T5941] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.250050][ T5941] usb 5-1: Product: င [ 297.250060][ T5941] usb 5-1: Manufacturer: ᠊ [ 297.250070][ T5941] usb 5-1: SerialNumber: syz [ 297.803492][ T5941] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 297.804497][ T5941] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 297.894189][ T5941] usb 5-1: USB disconnect, device number 2 [ 304.203419][ T7685] fuse: Unknown parameter 'group_id00000000000000000000' [ 304.477166][ T7690] netlink: 'syz.0.456': attribute type 1 has an invalid length. [ 304.590941][ T7690] 8021q: adding VLAN 0 to HW filter on device bond5 [ 307.385916][ T5113] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 307.403639][ T5113] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 307.409797][ T5113] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 307.488917][ T5113] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 307.495069][ T5113] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 309.801207][ T7707] lo speed is unknown, defaulting to 1000 [ 309.963277][ T5113] Bluetooth: hci0: command tx timeout [ 310.968705][ T7738] fuse: Unknown parameter 'group_id00000000000000000000' [ 311.168126][ T7748] netlink: 4 bytes leftover after parsing attributes in process `syz.5.470'. [ 311.243307][ T36] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 311.797497][ T36] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 311.798176][ T36] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 311.798293][ T36] usb 5-1: config 0 interface 0 has no altsetting 0 [ 312.015131][ T36] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 312.015160][ T36] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 312.015179][ T36] usb 5-1: Product: syz [ 312.015193][ T36] usb 5-1: Manufacturer: syz [ 312.015207][ T36] usb 5-1: SerialNumber: syz [ 312.043420][ T5113] Bluetooth: hci0: command tx timeout [ 312.062449][ T36] usb 5-1: config 0 descriptor?? [ 312.117398][ T36] hub 5-1:0.0: bad descriptor, ignoring hub [ 312.117435][ T36] hub 5-1:0.0: probe with driver hub failed with error -5 [ 312.141824][ T36] usb 5-1: selecting invalid altsetting 0 [ 312.515992][ T7742] vlan2: entered promiscuous mode [ 312.516119][ T7742] vlan2: entered allmulticast mode [ 312.516128][ T7742] hsr_slave_1: entered allmulticast mode [ 316.489337][ T5113] Bluetooth: hci0: command tx timeout [ 316.806542][ T36] usb 5-1: USB disconnect, device number 3 [ 316.872271][ T7762] netlink: 'syz.0.477': attribute type 1 has an invalid length. [ 317.039849][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.039923][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.093860][ T6688] udevd[6688]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 319.127225][ T5113] Bluetooth: hci0: command tx timeout [ 319.185674][ T1180] tipc: Resetting bearer [ 319.446966][ T7781] fuse: Unknown parameter 'group_id00000000000000000000' [ 319.630374][ T57] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.655403][ T7788] netlink: 'syz.5.482': attribute type 1 has an invalid length. [ 319.865006][ T7788] 8021q: adding VLAN 0 to HW filter on device bond1 [ 319.987098][ T7799] vti0: entered promiscuous mode [ 320.286530][ T57] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.653467][ T37] audit: type=1326 audit(1774319569.621:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7790 comm="syz.4.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84b36c799 code=0x7fc00000 [ 321.231954][ T7707] chnl_net:caif_netlink_parms(): no params data found [ 321.251191][ T7825] netlink: 'syz.0.490': attribute type 1 has an invalid length. [ 321.317578][ T7829] netlink: 12 bytes leftover after parsing attributes in process `syz.4.491'. [ 321.500794][ T57] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.577381][ T7825] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 322.477809][ T57] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.503144][ T5941] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 322.595738][ T7869] fuse: Bad value for 'user_id' [ 322.595759][ T7869] fuse: Bad value for 'user_id' [ 322.667615][ T5941] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 322.667690][ T5941] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 322.667732][ T5941] usb 5-1: config 0 interface 0 has no altsetting 0 [ 322.699956][ T5941] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 322.699986][ T5941] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 322.700007][ T5941] usb 5-1: Product: syz [ 322.700022][ T5941] usb 5-1: Manufacturer: syz [ 322.700037][ T5941] usb 5-1: SerialNumber: syz [ 322.868107][ T5941] usb 5-1: config 0 descriptor?? [ 322.879571][ T5941] hub 5-1:0.0: bad descriptor, ignoring hub [ 322.879606][ T5941] hub 5-1:0.0: probe with driver hub failed with error -5 [ 322.940572][ T5941] usb 5-1: selecting invalid altsetting 0 [ 323.397658][ T7881] netlink: 'syz.3.497': attribute type 1 has an invalid length. [ 326.258479][ T7707] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.259387][ T7707] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.306357][ T7707] bridge_slave_0: entered allmulticast mode [ 326.681992][ T7707] bridge_slave_0: entered promiscuous mode [ 326.706218][ T7881] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 326.793081][ T7707] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.793209][ T7707] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.793462][ T7707] bridge_slave_1: entered allmulticast mode [ 326.796115][ T7707] bridge_slave_1: entered promiscuous mode [ 326.838970][ T5881] usb 5-1: USB disconnect, device number 4 [ 327.060826][ T7897] netlink: 'syz.3.501': attribute type 1 has an invalid length. [ 327.593247][ T5881] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 327.628842][ T7913] fuse: Bad value for 'user_id' [ 327.628859][ T7913] fuse: Bad value for 'user_id' [ 327.742119][ T7707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.755085][ T5881] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.755133][ T5881] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.755156][ T5881] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 327.755198][ T5881] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 327.755222][ T5881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.761925][ T5881] usb 1-1: config 0 descriptor?? [ 328.189482][ T7707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.499078][ T5881] usbhid 1-1:0.0: can't add hid device: -71 [ 330.499163][ T5881] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 330.563322][ T5881] usb 1-1: USB disconnect, device number 7 [ 330.615299][ T57] bridge_slave_1: left allmulticast mode [ 330.615339][ T57] bridge_slave_1: left promiscuous mode [ 330.615584][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.731651][ T57] bridge_slave_0: left allmulticast mode [ 330.731672][ T57] bridge_slave_0: left promiscuous mode [ 330.731954][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.173633][ T7937] netlink: 'syz.5.511': attribute type 1 has an invalid length. [ 333.482271][ T7945] fuse: Bad value for 'user_id' [ 333.482290][ T7945] fuse: Bad value for 'user_id' [ 333.574648][ T7947] netlink: 'syz.4.515': attribute type 1 has an invalid length. [ 333.684356][ T7948] netlink: 28 bytes leftover after parsing attributes in process `syz.4.515'. [ 334.344482][ T57] bond2 (unregistering): (slave geneve2): Releasing active interface [ 334.576393][ T7961] netlink: 12 bytes leftover after parsing attributes in process `syz.0.519'. [ 334.744577][ T57] bond4 (unregistering): (slave bridge3): Releasing active interface [ 335.178292][ T7972] fuse: Bad value for 'fd' [ 335.193687][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 335.273523][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 335.297002][ T57] bond0 (unregistering): Released all slaves [ 335.308866][ T57] bond1 (unregistering): Released all slaves [ 335.327855][ T57] bond2 (unregistering): Released all slaves [ 335.375554][ T57] bond3 (unregistering): (slave veth3): Releasing active interface [ 335.434633][ T57] bond3 (unregistering): Released all slaves [ 335.451285][ T57] bond4 (unregistering): Released all slaves [ 335.558254][ T7937] 8021q: adding VLAN 0 to HW filter on device bond2 [ 335.665336][ T7707] team0: Port device team_slave_0 added [ 335.688589][ T57] tipc: Disabling bearer [ 335.688936][ T57] tipc: Disabling bearer [ 335.964140][ T57] tipc: Left network mode [ 335.967561][ T7707] team0: Port device team_slave_1 added [ 336.030376][ T7988] netlink: 12 bytes leftover after parsing attributes in process `syz.5.529'. [ 336.251209][ T7993] netlink: 'syz.5.531': attribute type 2 has an invalid length. [ 336.251234][ T7993] netlink: 'syz.5.531': attribute type 2 has an invalid length. [ 336.299410][ T7993] siw: device registration error -23 [ 336.378374][ T7707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.378386][ T7707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 336.378404][ T7707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.425741][ T7707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.425757][ T7707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 336.425829][ T7707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 336.702720][ T8001] netlink: 'syz.5.535': attribute type 1 has an invalid length. [ 336.756171][ T8002] netlink: 28 bytes leftover after parsing attributes in process `syz.5.535'. [ 336.998091][ T8005] fuse: Bad value for 'fd' [ 337.057198][ T8007] netlink: 'syz.0.537': attribute type 1 has an invalid length. [ 337.186776][ T8007] 8021q: adding VLAN 0 to HW filter on device bond7 [ 337.279463][ T8013] netlink: 12 bytes leftover after parsing attributes in process `syz.0.540'. [ 339.754362][ T7707] hsr_slave_0: entered promiscuous mode [ 339.755689][ T7707] hsr_slave_1: entered promiscuous mode [ 339.826499][ T8037] fuse: Bad value for 'fd' [ 341.852997][ T57] hsr_slave_0: left promiscuous mode [ 341.853947][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 341.853970][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 341.993545][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 341.993570][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 341.998422][ T8048] netlink: 'syz.0.550': attribute type 1 has an invalid length. [ 342.125067][ T57] veth1_macvtap: left promiscuous mode [ 342.125183][ T57] veth0_macvtap: left promiscuous mode [ 342.126898][ T57] veth1_vlan: left promiscuous mode [ 342.127095][ T57] veth0_vlan: left promiscuous mode [ 346.980101][ T37] audit: type=1326 audit(1774319595.901:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8068 comm="syz.5.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4520dc799 code=0x7ffc0000 [ 346.980151][ T37] audit: type=1326 audit(1774319595.901:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8068 comm="syz.5.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7ff4520dc799 code=0x7ffc0000 [ 346.980186][ T37] audit: type=1326 audit(1774319595.901:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8068 comm="syz.5.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4520dc799 code=0x7ffc0000 [ 346.980213][ T37] audit: type=1326 audit(1774319595.901:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8068 comm="syz.5.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7ff4520dc799 code=0x7ffc0000 [ 346.980241][ T37] audit: type=1326 audit(1774319595.901:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8068 comm="syz.5.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff4520dc502 code=0x7ffc0000 [ 346.980268][ T37] audit: type=1326 audit(1774319595.911:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8068 comm="syz.5.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff4520dc502 code=0x7ffc0000 [ 346.980294][ T37] audit: type=1326 audit(1774319595.921:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8068 comm="syz.5.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4520dc799 code=0x7ffc0000 [ 346.980331][ T37] audit: type=1326 audit(1774319595.931:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8068 comm="syz.5.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4520dc799 code=0x7ffc0000 [ 346.980377][ T37] audit: type=1326 audit(1774319595.931:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8068 comm="syz.5.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7ff4520dc799 code=0x7ffc0000 [ 346.980408][ T37] audit: type=1326 audit(1774319595.931:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8068 comm="syz.5.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4520dc799 code=0x7ffc0000 [ 348.260566][ T57] team0 (unregistering): Port device team_slave_1 removed [ 348.321807][ T57] team0 (unregistering): Port device team_slave_0 removed [ 348.713520][ T8082] fuse: Bad value for 'fd' [ 350.362931][ T5941] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 350.502193][ T7707] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 350.555470][ T5941] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 350.555522][ T5941] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 350.555556][ T5941] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 350.555577][ T5941] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 350.555599][ T5941] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 350.559633][ T5941] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 350.559685][ T5941] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 350.559841][ T5941] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 350.559868][ T5941] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 350.559893][ T5941] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 350.603821][ T5941] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 350.603879][ T5941] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 350.603899][ T5941] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 350.603917][ T5941] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 350.603935][ T5941] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 350.753314][ T5941] usb 4-1: string descriptor 0 read error: -22 [ 350.753462][ T5941] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 350.753485][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.760186][ T7707] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 350.839272][ T5941] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 350.873070][ T7707] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 350.930773][ T7707] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 350.961241][ T8121] netlink: 'syz.4.568': attribute type 1 has an invalid length. [ 351.668951][ T8138] netlink: 'syz.4.570': attribute type 2 has an invalid length. [ 351.668973][ T8138] netlink: 'syz.4.570': attribute type 2 has an invalid length. [ 351.961650][ T7707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.158011][ T7707] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.298282][ T6196] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.298363][ T6196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.494210][ T1449] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.496567][ T1449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.698312][ T8150] fuse: Bad value for 'fd' [ 353.366708][ T10] usb 4-1: USB disconnect, device number 5 [ 354.295330][ T8176] netlink: 'syz.3.578': attribute type 1 has an invalid length. [ 354.715642][ T7707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.923402][ T8192] netlink: 'syz.4.583': attribute type 2 has an invalid length. [ 354.923430][ T8192] netlink: 'syz.4.583': attribute type 2 has an invalid length. [ 356.221952][ T7707] veth0_vlan: entered promiscuous mode [ 356.249942][ T7707] veth1_vlan: entered promiscuous mode [ 356.340259][ T7707] veth0_macvtap: entered promiscuous mode [ 356.356657][ T7707] veth1_macvtap: entered promiscuous mode [ 356.415830][ T7707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 356.441893][ T7707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.467633][ T1449] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.467856][ T1449] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.467914][ T1449] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.467953][ T1449] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.926774][ T8221] fuse: Bad value for 'fd' [ 357.865751][ T810] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 358.014998][ T810] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 358.015047][ T810] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 358.015065][ T810] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 358.015081][ T810] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 358.015098][ T810] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 358.016161][ T810] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 358.016211][ T810] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 358.016237][ T810] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 358.016262][ T810] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 358.016288][ T810] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 358.030255][ T810] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 358.030306][ T810] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 358.030331][ T810] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 358.030353][ T810] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 358.030375][ T810] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 358.383052][ T810] usb 5-1: string descriptor 0 read error: -22 [ 358.383191][ T810] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 358.383215][ T810] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.006258][ T810] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 359.155759][ T810] usb 5-1: USB disconnect, device number 5 [ 359.243189][ T205] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.243211][ T205] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.394860][ T8242] netlink: 'syz.0.590': attribute type 1 has an invalid length. [ 365.290164][ T8293] netlink: 'syz.4.601': attribute type 1 has an invalid length. [ 365.637194][ T5802] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 365.641289][ T5802] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 365.642463][ T5802] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 365.678549][ T5802] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 365.680224][ T5802] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 365.875030][ T8302] lo speed is unknown, defaulting to 1000 [ 365.981196][ T8313] netlink: 'syz.3.607': attribute type 1 has an invalid length. [ 366.020871][ T8315] netlink: 'syz.0.608': attribute type 2 has an invalid length. [ 366.020897][ T8315] netlink: 'syz.0.608': attribute type 2 has an invalid length. [ 366.062188][ T8315] siw: device registration error -23 [ 366.418779][ T8313] 8021q: adding VLAN 0 to HW filter on device bond6 [ 366.579597][ T8317] bond6: (slave veth3): Enslaving as an active interface with a down link [ 366.584453][ T8321] bond6: (slave dummy0): making interface the new active one [ 366.598881][ T8321] dummy0: entered promiscuous mode [ 366.599742][ T8321] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 368.207357][ T5802] Bluetooth: hci0: command tx timeout [ 369.200308][ T6196] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.727781][ T8350] netlink: 'syz.0.615': attribute type 1 has an invalid length. [ 370.014203][ T6196] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.285640][ T5802] Bluetooth: hci5: command 0x0406 tx timeout [ 370.285674][ T5802] Bluetooth: hci0: command tx timeout [ 370.959319][ T6196] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.089522][ T8365] netlink: 'syz.4.620': attribute type 2 has an invalid length. [ 371.089545][ T8365] netlink: 'syz.4.620': attribute type 2 has an invalid length. [ 371.568062][ T6196] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.813116][ T5113] Bluetooth: hci0: command tx timeout [ 374.257603][ T8302] chnl_net:caif_netlink_parms(): no params data found [ 374.597433][ T6196] bridge_slave_1: left allmulticast mode [ 374.597463][ T6196] bridge_slave_1: left promiscuous mode [ 374.597707][ T6196] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.794513][ T6196] bridge_slave_0: left allmulticast mode [ 374.794544][ T6196] bridge_slave_0: left promiscuous mode [ 374.794823][ T6196] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.913743][ T8413] netlink: 'syz.4.632': attribute type 2 has an invalid length. [ 374.913767][ T8413] netlink: 'syz.4.632': attribute type 2 has an invalid length. [ 375.483205][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 375.483226][ T37] audit: type=1326 audit(1774319624.391:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8421 comm="syz.4.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84b36c799 code=0x7ffc0000 [ 375.502033][ T37] audit: type=1326 audit(1774319624.391:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8421 comm="syz.4.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84b36c799 code=0x7ffc0000 [ 375.502087][ T37] audit: type=1326 audit(1774319624.391:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8421 comm="syz.4.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7ff84b36c799 code=0x7ffc0000 [ 375.502130][ T37] audit: type=1326 audit(1774319624.391:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8421 comm="syz.4.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84b36c799 code=0x7ffc0000 [ 375.502157][ T37] audit: type=1326 audit(1774319624.391:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8421 comm="syz.4.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84b36c799 code=0x7ffc0000 [ 375.502186][ T37] audit: type=1326 audit(1774319624.391:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8421 comm="syz.4.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7ff84b36c799 code=0x7ffc0000 [ 375.502214][ T37] audit: type=1326 audit(1774319624.391:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8421 comm="syz.4.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff84b36c502 code=0x7ffc0000 [ 375.502242][ T37] audit: type=1326 audit(1774319624.401:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8421 comm="syz.4.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff84b36c502 code=0x7ffc0000 [ 375.502270][ T37] audit: type=1326 audit(1774319624.401:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8421 comm="syz.4.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84b36c799 code=0x7ffc0000 [ 375.502297][ T37] audit: type=1326 audit(1774319624.411:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8421 comm="syz.4.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7ff84b36c799 code=0x7ffc0000 [ 375.920853][ T5113] Bluetooth: hci0: command tx timeout [ 376.229258][ T8429] can: request_module (can-proto-0) failed. [ 376.723869][ T6196] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 376.783746][ T6196] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 376.825372][ T6196] bond0 (unregistering): Released all slaves [ 376.869885][ T8431] warning: `syz.5.635' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 377.138526][ T8447] vlan2: entered promiscuous mode [ 377.138802][ T8447] vlan2: entered allmulticast mode [ 377.138818][ T8447] hsr_slave_1: entered allmulticast mode [ 377.313381][ T8302] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.313496][ T8302] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.313737][ T8302] bridge_slave_0: entered allmulticast mode [ 377.322254][ T8302] bridge_slave_0: entered promiscuous mode [ 377.323307][ T8447] netlink: 4 bytes leftover after parsing attributes in process `syz.3.639'. [ 377.978694][ T8459] netlink: 'syz.5.643': attribute type 2 has an invalid length. [ 377.978710][ T8459] netlink: 'syz.5.643': attribute type 2 has an invalid length. [ 378.019834][ T8459] siw: device registration error -23 [ 378.449177][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.449227][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.565746][ T8302] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.565833][ T8302] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.566038][ T8302] bridge_slave_1: entered allmulticast mode [ 378.567954][ T8302] bridge_slave_1: entered promiscuous mode [ 379.173762][ T31] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 381.403771][ T31] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 381.403838][ T31] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 381.403867][ T31] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 381.403893][ T31] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 381.403920][ T31] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 381.408884][ T31] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 381.408938][ T31] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 381.408964][ T31] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 381.408988][ T31] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 381.409011][ T31] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 381.426339][ T31] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 381.426465][ T31] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 381.426530][ T31] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 381.426600][ T31] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 381.426655][ T31] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 381.904721][ T31] usb 1-1: string descriptor 0 read error: -71 [ 381.904889][ T31] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 381.904917][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.918843][ T8302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.939049][ T31] usb 1-1: can't set config #168, error -71 [ 382.027932][ T31] usb 1-1: USB disconnect, device number 8 [ 382.039302][ T8302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.006464][ T8497] netlink: 'syz.4.654': attribute type 2 has an invalid length. [ 385.006496][ T8497] netlink: 'syz.4.654': attribute type 2 has an invalid length. [ 385.011032][ T8302] team0: Port device team_slave_0 added [ 385.103212][ T8515] can: request_module (can-proto-0) failed. [ 385.239449][ T6196] hsr_slave_0: left promiscuous mode [ 385.311665][ T6196] hsr_slave_1: left promiscuous mode [ 385.312654][ T6196] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 385.312678][ T6196] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 385.363812][ T6196] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 385.363835][ T6196] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 385.454676][ T6196] veth1_macvtap: left promiscuous mode [ 385.454747][ T6196] veth0_macvtap: left promiscuous mode [ 385.454911][ T6196] veth1_vlan: left promiscuous mode [ 385.455030][ T6196] veth0_vlan: left promiscuous mode [ 385.652929][ T5942] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 385.808942][ T5942] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 385.808995][ T5942] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 385.809021][ T5942] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 385.809043][ T5942] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 385.809067][ T5942] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 385.832879][ T5942] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 385.832932][ T5942] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 385.832957][ T5942] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 385.832980][ T5942] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 385.833004][ T5942] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 385.843979][ T5942] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 385.844033][ T5942] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 385.844059][ T5942] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 385.844084][ T5942] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 385.844109][ T5942] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 385.953985][ T5942] usb 5-1: string descriptor 0 read error: -22 [ 385.954121][ T5942] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 385.954142][ T5942] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.028812][ T5942] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 386.733585][ T6196] team0 (unregistering): Port device team_slave_1 removed [ 386.774208][ T6196] team0 (unregistering): Port device team_slave_0 removed [ 386.990909][ T8302] team0: Port device team_slave_1 added [ 387.300865][ T8302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 387.300883][ T8302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 387.300911][ T8302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 387.306787][ T8302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 387.306802][ T8302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 387.306849][ T8302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 387.809952][ T8302] hsr_slave_0: entered promiscuous mode [ 387.811353][ T8302] hsr_slave_1: entered promiscuous mode [ 389.793904][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 389.793922][ T37] audit: type=1326 audit(1774319638.661:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8571 comm="syz.0.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ed0f6c799 code=0x7ffc0000 [ 389.797788][ T37] audit: type=1326 audit(1774319638.761:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8571 comm="syz.0.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f7ed0f6c799 code=0x7ffc0000 [ 389.801971][ T37] audit: type=1326 audit(1774319638.761:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8571 comm="syz.0.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ed0f6c799 code=0x7ffc0000 [ 389.802364][ T37] audit: type=1326 audit(1774319638.761:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8571 comm="syz.0.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f7ed0f6c799 code=0x7ffc0000 [ 389.895717][ T37] audit: type=1326 audit(1774319638.801:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8571 comm="syz.0.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7ed0f6c502 code=0x7ffc0000 [ 390.235342][ T6372] dummy0: left promiscuous mode [ 392.751082][ T31] usb 5-1: USB disconnect, device number 6 [ 396.410967][ T37] audit: type=1326 audit(1774319645.371:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8624 comm="syz.3.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769a86c799 code=0x7ffc0000 [ 396.411073][ T37] audit: type=1326 audit(1774319645.371:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8624 comm="syz.3.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769a86c799 code=0x7ffc0000 [ 396.411183][ T37] audit: type=1326 audit(1774319645.371:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8624 comm="syz.3.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f769a86c799 code=0x7ffc0000 [ 396.411231][ T37] audit: type=1326 audit(1774319645.371:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8624 comm="syz.3.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769a86c799 code=0x7ffc0000 [ 396.411325][ T37] audit: type=1326 audit(1774319645.371:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8624 comm="syz.3.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f769a86c799 code=0x7ffc0000 [ 396.501049][ T37] audit: type=1326 audit(1774319645.461:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8624 comm="syz.3.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f769a86c502 code=0x7ffc0000 [ 396.540537][ T37] audit: type=1326 audit(1774319645.501:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8624 comm="syz.3.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f769a86c502 code=0x7ffc0000 [ 396.592900][ T37] audit: type=1326 audit(1774319645.551:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8624 comm="syz.3.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769a86c799 code=0x7ffc0000 [ 396.593086][ T37] audit: type=1326 audit(1774319645.551:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8624 comm="syz.3.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769a86c799 code=0x7ffc0000 [ 398.340545][ T8646] netlink: 'syz.3.684': attribute type 2 has an invalid length. [ 398.340564][ T8646] netlink: 'syz.3.684': attribute type 2 has an invalid length. [ 398.403961][ T8649] siw: device registration error -23 [ 402.481930][ T37] audit: type=1326 audit(1774319651.441:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8682 comm="syz.4.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84b36c799 code=0x7ffc0000 [ 402.501396][ T37] audit: type=1326 audit(1774319651.461:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8682 comm="syz.4.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84b36c799 code=0x7ffc0000 [ 402.501589][ T37] audit: type=1326 audit(1774319651.461:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8682 comm="syz.4.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7ff84b36c799 code=0x7ffc0000 [ 402.501698][ T37] audit: type=1326 audit(1774319651.461:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8682 comm="syz.4.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84b36c799 code=0x7ffc0000 [ 402.501794][ T37] audit: type=1326 audit(1774319651.461:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8682 comm="syz.4.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84b36c799 code=0x7ffc0000 [ 402.501909][ T37] audit: type=1326 audit(1774319651.461:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8682 comm="syz.4.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7ff84b36c799 code=0x7ffc0000 [ 402.502019][ T37] audit: type=1326 audit(1774319651.461:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8682 comm="syz.4.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff84b36c502 code=0x7ffc0000 [ 402.552026][ T37] audit: type=1326 audit(1774319651.511:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8682 comm="syz.4.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff84b36c502 code=0x7ffc0000 [ 402.560998][ T37] audit: type=1326 audit(1774319651.521:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8682 comm="syz.4.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84b36c799 code=0x7ffc0000 [ 402.561147][ T37] audit: type=1326 audit(1774319651.521:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8682 comm="syz.4.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84b36c799 code=0x7ffc0000 [ 402.845921][ T8691] netlink: 'syz.3.695': attribute type 2 has an invalid length. [ 402.845938][ T8691] netlink: 'syz.3.695': attribute type 2 has an invalid length. [ 402.915358][ T8691] siw: device registration error -23 [ 402.916081][ T8302] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 403.347931][ T8302] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 404.884267][ T8302] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 404.999770][ T8302] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 405.046925][ T8705] netlink: 4 bytes leftover after parsing attributes in process `syz.3.697'. [ 406.486782][ T8710] netlink: 'syz.4.699': attribute type 1 has an invalid length. [ 406.881171][ T8717] netlink: 14 bytes leftover after parsing attributes in process `syz.4.699'. [ 406.900550][ T8710] 8021q: adding VLAN 0 to HW filter on device bond6 [ 408.234178][ T8713] bond6: (slave veth3): Enslaving as an active interface with a down link [ 408.269543][ T8714] bond6: (slave dummy0): making interface the new active one [ 408.271014][ T8714] dummy0: entered promiscuous mode [ 408.271415][ T8714] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 408.388803][ T8717] bond6: (slave dummy0): Releasing active interface [ 408.388898][ T8717] dummy0 (unregistering): left promiscuous mode [ 409.441486][ T8302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.520855][ T8302] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.788717][ T205] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.789242][ T205] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.831887][ T205] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.831977][ T205] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.033259][ T5881] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 410.217128][ T5881] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.217162][ T5881] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 410.217185][ T5881] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 410.217230][ T5881] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 410.217254][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.223198][ T5881] usb 5-1: config 0 descriptor?? [ 410.491387][ T8778] netlink: 'syz.0.716': attribute type 1 has an invalid length. [ 410.836698][ T5881] usbhid 5-1:0.0: can't add hid device: -71 [ 410.836788][ T5881] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 410.869128][ T5881] usb 5-1: USB disconnect, device number 7 [ 411.038383][ T8785] binder: 8784:8785 ioctl c0306201 0 returned -14 [ 411.039918][ T8785] binder: BINDER_SET_CONTEXT_MGR already set [ 411.039926][ T8785] binder: 8784:8785 ioctl 4018620d 200000000040 returned -16 [ 411.198181][ T8302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.270113][ T8783] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 411.270149][ T8783] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 411.270251][ T8783] vhci_hcd vhci_hcd.0: Device attached [ 411.310994][ T8783] random: crng reseeded on system resumption [ 411.532940][ T5804] usb 40-1: SetAddress Request (2) to port 0 [ 411.533026][ T5804] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 411.537962][ T8788] vhci_hcd: connection closed [ 411.633055][ T12] vhci_hcd vhci_hcd.3: stop threads [ 411.633073][ T12] vhci_hcd vhci_hcd.3: release socket [ 411.633762][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 411.842908][ T5941] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 412.012862][ T5941] usb 5-1: Using ep0 maxpacket: 32 [ 412.019203][ T5941] usb 5-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice= 0.40 [ 412.019230][ T5941] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.019250][ T5941] usb 5-1: Product: င [ 412.019259][ T5941] usb 5-1: Manufacturer: ᠊ [ 412.019276][ T5941] usb 5-1: SerialNumber: syz [ 412.408572][ T8302] veth0_vlan: entered promiscuous mode [ 412.489855][ T8302] veth1_vlan: entered promiscuous mode [ 412.555933][ T5941] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 412.556608][ T5941] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 412.636530][ T5941] usb 5-1: USB disconnect, device number 8 [ 412.653563][ T8302] veth0_macvtap: entered promiscuous mode [ 412.724320][ T8302] veth1_macvtap: entered promiscuous mode [ 412.810068][ T8302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 412.861500][ T8302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 412.905303][ T69] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.909475][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.909965][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.910216][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.665941][ T205] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.665962][ T205] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.914523][ T137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.914537][ T137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.665809][ T8820] netlink: 'syz.3.727': attribute type 1 has an invalid length. [ 414.849788][ T8820] 8021q: adding VLAN 0 to HW filter on device bond7 [ 414.930016][ T8820] netlink: 14 bytes leftover after parsing attributes in process `syz.3.727'. [ 415.227534][ T8822] bond7: (slave veth5): Enslaving as an active interface with a down link [ 415.383585][ T8823] bond6: (slave dummy0): Releasing active interface [ 415.532079][ T8823] bond7: (slave dummy0): making interface the new active one [ 415.542389][ T8823] dummy0: entered promiscuous mode [ 415.552181][ T8823] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 415.966480][ T8820] bond7: (slave dummy0): Releasing active interface [ 415.966569][ T8820] dummy0 (unregistering): left promiscuous mode [ 416.572683][ T8843] vti0: entered promiscuous mode [ 416.685351][ T5804] usb 40-1: device descriptor read/8, error -110 [ 417.099151][ T5804] usb usb40-port1: attempt power cycle [ 417.732961][ T5804] usb usb40-port1: unable to enumerate USB device [ 418.220620][ T8881] netlink: 8 bytes leftover after parsing attributes in process `syz.5.749'. [ 418.222208][ T8881] netlink: 16 bytes leftover after parsing attributes in process `syz.5.749'. [ 418.222242][ T8881] netlink: 64 bytes leftover after parsing attributes in process `syz.5.749'. [ 418.632888][ T6977] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 418.785914][ T6977] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 418.785971][ T6977] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 418.785994][ T6977] usb 1-1: config 0 interface 0 has no altsetting 0 [ 418.809956][ T6977] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 418.810030][ T6977] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 418.810090][ T6977] usb 1-1: Product: syz [ 418.810122][ T6977] usb 1-1: Manufacturer: syz [ 418.810154][ T6977] usb 1-1: SerialNumber: syz [ 418.889348][ T6977] usb 1-1: config 0 descriptor?? [ 418.900479][ T6977] hub 1-1:0.0: bad descriptor, ignoring hub [ 418.900506][ T6977] hub 1-1:0.0: probe with driver hub failed with error -5 [ 418.929702][ T6977] usb 1-1: selecting invalid altsetting 0 [ 420.686037][ T6977] usb 1-1: USB disconnect, device number 9 [ 420.801845][ T8113] udevd[8113]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 420.917125][ T8907] netlink: 4 bytes leftover after parsing attributes in process `syz.3.758'. [ 423.937708][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 423.937728][ T37] audit: type=1326 audit(1774319672.891:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8913 comm="syz.5.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4520dc799 code=0x7ffc0000 [ 423.974922][ T37] audit: type=1326 audit(1774319672.931:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8913 comm="syz.5.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4520dc799 code=0x7ffc0000 [ 423.976016][ T37] audit: type=1326 audit(1774319672.941:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8913 comm="syz.5.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7ff4520dc799 code=0x7ffc0000 [ 423.981247][ T37] audit: type=1326 audit(1774319672.941:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8913 comm="syz.5.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4520dc799 code=0x7ffc0000 [ 423.993796][ T37] audit: type=1326 audit(1774319672.961:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8913 comm="syz.5.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7ff4520dc799 code=0x7ffc0000 [ 424.014724][ T37] audit: type=1326 audit(1774319672.981:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8913 comm="syz.5.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff4520dc502 code=0x7ffc0000 [ 424.033621][ T37] audit: type=1326 audit(1774319672.991:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8913 comm="syz.5.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff4520dc502 code=0x7ffc0000 [ 424.153682][ T37] audit: type=1326 audit(1774319673.121:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8913 comm="syz.5.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4520dc799 code=0x7ffc0000 [ 424.153746][ T37] audit: type=1326 audit(1774319673.121:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8913 comm="syz.5.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4520dc799 code=0x7ffc0000 [ 424.213604][ T37] audit: type=1326 audit(1774319673.181:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8913 comm="syz.5.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff4520dc799 code=0x7ffc0000 [ 424.447283][ T8922] can: request_module (can-proto-0) failed. [ 427.262889][ T36] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 427.542878][ T36] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 427.542933][ T36] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 427.542960][ T36] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 427.542983][ T36] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 427.543007][ T36] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 427.572656][ T36] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 427.572883][ T36] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 427.572910][ T36] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 427.572935][ T36] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 427.572960][ T36] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 427.574545][ T36] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 427.574589][ T36] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 427.574608][ T36] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 427.574625][ T36] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 427.574642][ T36] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 427.579219][ T36] usb 5-1: string descriptor 0 read error: -22 [ 427.579345][ T36] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 427.579361][ T36] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.667276][ T36] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 427.924936][ T5941] usb 5-1: USB disconnect, device number 9 [ 429.939366][ T37] audit: type=1326 audit(1774319678.901:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8976 comm="syz.4.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84b36c799 code=0x7ffc0000 [ 429.982913][ T37] audit: type=1326 audit(1774319678.901:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8976 comm="syz.4.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7ff84b36c799 code=0x7ffc0000 [ 429.982964][ T37] audit: type=1326 audit(1774319678.901:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8976 comm="syz.4.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84b36c799 code=0x7ffc0000 [ 429.983004][ T37] audit: type=1326 audit(1774319678.901:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8976 comm="syz.4.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7ff84b36c799 code=0x7ffc0000 [ 429.983045][ T37] audit: type=1326 audit(1774319678.901:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8976 comm="syz.4.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff84b36c502 code=0x7ffc0000 [ 429.983086][ T37] audit: type=1326 audit(1774319678.901:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8976 comm="syz.4.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff84b36c502 code=0x7ffc0000 [ 429.983129][ T37] audit: type=1326 audit(1774319678.911:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8976 comm="syz.4.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84b36c799 code=0x7ffc0000 [ 429.983181][ T37] audit: type=1326 audit(1774319678.911:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8976 comm="syz.4.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7ff84b36c799 code=0x7ffc0000 [ 429.983221][ T37] audit: type=1326 audit(1774319678.911:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8976 comm="syz.4.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84b36c799 code=0x7ffc0000 [ 429.983290][ T37] audit: type=1326 audit(1774319678.911:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8976 comm="syz.4.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff84b36c799 code=0x7ffc0000 [ 432.540005][ T9002] dummy0: entered allmulticast mode [ 433.242444][ T9001] dummy0: left allmulticast mode [ 439.969232][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.971257][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.948940][ T9066] netlink: 28 bytes leftover after parsing attributes in process `syz.3.810'. [ 441.249098][ T9074] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 441.249125][ T9074] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 441.249217][ T9074] vhci_hcd vhci_hcd.0: Device attached [ 441.260772][ T9074] random: crng reseeded on system resumption [ 441.348379][ T137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.348394][ T137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.652936][ T5942] usb 44-1: SetAddress Request (2) to port 0 [ 441.653016][ T5942] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 441.902258][ T9075] vhci_hcd: connection reset by peer [ 441.929248][ T57] vhci_hcd vhci_hcd.5: stop threads [ 441.929273][ T57] vhci_hcd vhci_hcd.5: release socket [ 441.929350][ T57] vhci_hcd vhci_hcd.5: disconnect device [ 446.692913][ T5942] usb 44-1: device descriptor read/8, error -110 [ 447.124073][ T5942] usb usb44-port1: attempt power cycle [ 447.529105][ T9121] netlink: 28 bytes leftover after parsing attributes in process `syz.0.822'. [ 447.701696][ T5808] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 447.723622][ T5808] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 447.724789][ T5808] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 447.726051][ T5808] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 447.726752][ T5808] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 447.735190][ T5942] usb usb44-port1: unable to enumerate USB device [ 447.842887][ T5804] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 448.005563][ T5804] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 448.005641][ T5804] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 448.005667][ T5804] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 448.005691][ T5804] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 448.005716][ T5804] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 448.012011][ T9127] lo speed is unknown, defaulting to 1000 [ 448.014178][ T5804] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 448.014231][ T5804] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 448.014258][ T5804] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 448.014285][ T5804] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 448.014311][ T5804] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 448.016320][ T5804] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 448.016353][ T5804] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 448.016371][ T5804] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 448.016399][ T5804] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 448.016416][ T5804] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 448.069541][ T5804] usb 7-1: string descriptor 0 read error: -22 [ 448.069904][ T5804] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 448.069968][ T5804] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.273309][ T5804] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 449.802897][ T5113] Bluetooth: hci4: command tx timeout [ 450.769670][ T9145] netlink: 'syz.3.830': attribute type 2 has an invalid length. [ 450.769697][ T9145] netlink: 'syz.3.830': attribute type 2 has an invalid length. [ 450.820512][ T9145] siw: device registration error -23 [ 453.050537][ T5113] Bluetooth: hci4: command tx timeout [ 454.845441][ T9127] chnl_net:caif_netlink_parms(): no params data found [ 455.082922][ T5113] Bluetooth: hci4: command tx timeout [ 455.294525][ T5942] usb 7-1: USB disconnect, device number 2 [ 455.351744][ T9163] netlink: 28 bytes leftover after parsing attributes in process `syz.5.834'. [ 457.752848][ T5113] Bluetooth: hci4: command tx timeout [ 459.463345][ T9127] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.463566][ T9127] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.463810][ T9127] bridge_slave_0: entered allmulticast mode [ 459.503007][ T9127] bridge_slave_0: entered promiscuous mode [ 459.509005][ T9127] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.509135][ T9127] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.509338][ T9127] bridge_slave_1: entered allmulticast mode [ 459.549432][ T9127] bridge_slave_1: entered promiscuous mode [ 460.436946][ T9127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 460.441112][ T9127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 460.484558][ T9191] netlink: 'syz.6.841': attribute type 2 has an invalid length. [ 460.484585][ T9191] netlink: 'syz.6.841': attribute type 2 has an invalid length. [ 461.406598][ T9127] team0: Port device team_slave_0 added [ 461.410466][ T9127] team0: Port device team_slave_1 added [ 461.467063][ T9127] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 461.467081][ T9127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 461.467108][ T9127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 461.469577][ T9127] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 461.469592][ T9127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 461.469623][ T9127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 461.484066][ T9191] siw: device registration error -23 [ 461.718176][ T9127] hsr_slave_0: entered promiscuous mode [ 461.719595][ T9127] hsr_slave_1: entered promiscuous mode [ 461.720583][ T9127] debugfs: 'hsr0' already exists in 'hsr' [ 461.720609][ T9127] Cannot create hsr debugfs directory [ 462.705776][ T9207] netlink: 28 bytes leftover after parsing attributes in process `syz.5.845'. [ 467.744047][ T9127] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 469.252881][ T9127] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 469.271506][ T9283] netlink: 28 bytes leftover after parsing attributes in process `syz.0.863'. [ 469.307812][ T5953] tipc: Resetting bearer [ 469.479204][ T9287] fuse: Unknown parameter 'fd0x0000000000000004' [ 469.636614][ T6371] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.716207][ T9127] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 469.870161][ T9127] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 470.434761][ T6371] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.010105][ T6371] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.303152][ T9326] netlink: 'syz.0.876': attribute type 2 has an invalid length. [ 472.303171][ T9326] netlink: 'syz.0.876': attribute type 2 has an invalid length. [ 472.347142][ T9326] siw: device registration error -23 [ 472.350401][ T9328] netlink: 12 bytes leftover after parsing attributes in process `syz.3.877'. [ 472.718481][ T6371] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.416675][ T9127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 473.679851][ T9127] 8021q: adding VLAN 0 to HW filter on device team0 [ 474.764924][ T6371] bridge_slave_1: left allmulticast mode [ 474.764956][ T6371] bridge_slave_1: left promiscuous mode [ 474.765717][ T6371] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.954657][ T6371] bridge_slave_0: left allmulticast mode [ 475.954686][ T6371] bridge_slave_0: left promiscuous mode [ 475.954954][ T6371] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.105952][ T9358] netlink: 'syz.5.887': attribute type 2 has an invalid length. [ 476.105980][ T9358] netlink: 'syz.5.887': attribute type 2 has an invalid length. [ 476.141093][ T9358] siw: device registration error -23 [ 476.846592][ T9363] netlink: 12 bytes leftover after parsing attributes in process `syz.5.889'. [ 477.674471][ T6371] bond3 (unregistering): (slave geneve2): Releasing active interface [ 477.968793][ T6371] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 478.026358][ T6371] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 478.055359][ T6371] bond0 (unregistering): Released all slaves [ 478.070847][ T6371] bond1 (unregistering): Released all slaves [ 478.088895][ T6371] bond2 (unregistering): Released all slaves [ 478.108491][ T6371] bond3 (unregistering): Released all slaves [ 478.130589][ T6371] bond4 (unregistering): Released all slaves [ 478.151781][ T6371] bond5 (unregistering): Released all slaves [ 478.193516][ T6371] bond6 (unregistering): (slave veth3): Releasing active interface [ 478.255739][ T6371] bond6 (unregistering): Released all slaves [ 478.384887][ T1512] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.384971][ T1512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.483401][ T1512] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.483543][ T1512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.677221][ T6371] tipc: Disabling bearer [ 478.677419][ T6371] tipc: Disabling bearer [ 478.802979][ T6371] tipc: Left network mode [ 483.342880][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 483.442914][ T36] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 483.467424][ T5941] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 483.526099][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.526144][ T10] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 483.526161][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.530590][ T10] usb 1-1: config 0 descriptor?? [ 483.642838][ T36] usb 6-1: Using ep0 maxpacket: 8 [ 483.643503][ T5941] usb 4-1: Using ep0 maxpacket: 16 [ 483.646484][ T5941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.646574][ T5941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 483.646599][ T5941] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 483.646644][ T5941] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 483.646661][ T5941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.647561][ T36] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 483.647587][ T36] usb 6-1: config 179 has no interface number 0 [ 483.647633][ T36] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 483.647660][ T36] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 483.647690][ T36] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 483.647719][ T36] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 483.647748][ T36] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 483.647791][ T36] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 483.647815][ T36] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.827803][ T9449] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 483.881983][ T5941] usb 4-1: config 0 descriptor?? [ 484.179545][ T10] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 484.273475][ T9449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.321571][ T9449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.356790][ T36] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input5 [ 484.360372][ T5881] usb 6-1: USB disconnect, device number 4 [ 484.360435][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 484.360771][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 484.419746][ T10] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0001/input/input6 [ 484.610996][ T9451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.614052][ T9451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.687466][ T5941] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0002/input/input7 [ 484.904274][ T10] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 484.917449][ T10] usb 1-1: USB disconnect, device number 10 [ 485.068258][ T9452] fido_id[9452]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 485.133686][ T5941] microsoft 0003:045E:07DA.0002: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 485.177984][ T5941] usb 4-1: USB disconnect, device number 6 [ 485.439677][ T9457] fido_id[9457]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 485.642968][ T5881] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 485.810601][ T5881] usb 6-1: Using ep0 maxpacket: 8 [ 485.819135][ T5881] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 485.819187][ T5881] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 485.819204][ T5881] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 485.819221][ T5881] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 485.821857][ T5881] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 485.821887][ T5881] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 485.821913][ T5881] usb 6-1: Product: syz [ 485.821923][ T5881] usb 6-1: Manufacturer: syz [ 485.821932][ T5881] usb 6-1: SerialNumber: syz [ 485.838804][ T5881] usb 6-1: config 0 descriptor?? [ 485.992906][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 485.993107][ T5941] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 486.113089][ T5881] radio-si470x 6-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 486.113466][ T5881] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -5 [ 486.123799][ T5881] usb 6-1: USB disconnect, device number 5 [ 486.172769][ T5941] usb 4-1: Using ep0 maxpacket: 16 [ 486.178194][ T5941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 486.178227][ T5941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 486.178371][ T5941] usb 4-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 486.178394][ T5941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.181175][ T10] usb 1-1: config index 0 descriptor too short (expected 65183, got 72) [ 486.208505][ T10] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 486.208588][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.208653][ T10] usb 1-1: Product: syz [ 486.208667][ T10] usb 1-1: Manufacturer: syz [ 486.208681][ T10] usb 1-1: SerialNumber: syz [ 486.229407][ T5941] usb 4-1: config 0 descriptor?? [ 486.302057][ T10] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 486.568726][ T5846] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 486.678112][ T5941] ntrig 0003:1B96:0008.0003: item fetching failed at offset 3/7 [ 486.680256][ T5941] ntrig 0003:1B96:0008.0003: parse failed [ 486.680574][ T5941] ntrig 0003:1B96:0008.0003: probe with driver ntrig failed with error -22 [ 486.829235][ T5880] usb 1-1: USB disconnect, device number 11 [ 486.875859][ T36] usb 4-1: USB disconnect, device number 7 [ 487.112906][ T5941] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 487.290708][ T5941] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 487.290739][ T5941] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 487.290761][ T5941] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 487.290816][ T5941] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 487.292600][ T5941] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 487.292628][ T5941] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 487.292642][ T5941] usb 6-1: Product: syz [ 487.292651][ T5941] usb 6-1: Manufacturer: syz [ 487.370545][ T5941] cdc_wdm 6-1:1.0: skipping garbage [ 487.370563][ T5941] cdc_wdm 6-1:1.0: skipping garbage [ 487.402451][ T5941] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 487.402481][ T5941] cdc_wdm 6-1:1.0: Unknown control protocol [ 487.570837][ T5881] usb 6-1: USB disconnect, device number 6 [ 487.657448][ T5846] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 487.658759][ T5846] ath9k_htc: Failed to initialize the device [ 487.661277][ T5880] usb 1-1: ath9k_htc: USB layer deinitialized [ 487.773031][ T5941] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 487.922836][ T5941] usb 4-1: Using ep0 maxpacket: 8 [ 487.925106][ T5941] usb 4-1: config 0 interface 0 has no altsetting 0 [ 487.927949][ T5941] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 487.927976][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.927990][ T5941] usb 4-1: Product: syz [ 487.928000][ T5941] usb 4-1: Manufacturer: syz [ 487.928010][ T5941] usb 4-1: SerialNumber: syz [ 487.932046][ T5941] usb 4-1: config 0 descriptor?? [ 488.002975][ T5880] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 488.005145][ T5941] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 488.066812][ T5881] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 488.069076][ T5802] Bluetooth: hci0: command 0x0406 tx timeout [ 488.165237][ T5880] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 488.165274][ T5880] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 488.165319][ T5880] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 488.165342][ T5880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.187416][ T5880] usb 1-1: config 0 descriptor?? [ 488.230889][ T5941] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 488.241966][ T5941] snd_usb_toneport 4-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 488.282880][ T5881] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 488.282912][ T5881] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 488.282933][ T5881] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 488.282985][ T5881] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 488.287197][ T5881] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 488.287226][ T5881] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 488.287248][ T5881] usb 6-1: Product: syz [ 488.287263][ T5881] usb 6-1: Manufacturer: syz [ 488.382616][ T5881] cdc_wdm 6-1:1.0: skipping garbage [ 488.382635][ T5881] cdc_wdm 6-1:1.0: skipping garbage [ 488.395657][ T5881] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 488.395677][ T5881] cdc_wdm 6-1:1.0: Unknown control protocol [ 488.435639][ T36] usb 4-1: USB disconnect, device number 8 [ 488.513125][ T5880] usb 1-1: can't set config #0, error -71 [ 488.520343][ T5880] usb 1-1: USB disconnect, device number 12 [ 488.872919][ T5880] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 489.036504][ T5880] usb 1-1: config 127 has an invalid interface number: 127 but max is 0 [ 489.036531][ T5880] usb 1-1: config 127 has no interface number 0 [ 489.039111][ T5880] usb 1-1: New USB device found, idVendor=0424, idProduct=9d00, bcdDevice=53.27 [ 489.039134][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.039149][ T5880] usb 1-1: Product: syz [ 489.039159][ T5880] usb 1-1: Manufacturer: syz [ 489.039170][ T5880] usb 1-1: SerialNumber: syz [ 489.282898][ T6977] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 489.434486][ T6977] usb 4-1: Using ep0 maxpacket: 32 [ 489.459229][ T6977] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 489.459251][ T6977] usb 4-1: config 0 has no interface number 0 [ 489.461830][ T6977] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 489.461849][ T6977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.461862][ T6977] usb 4-1: Product: syz [ 489.461911][ T6977] usb 4-1: Manufacturer: syz [ 489.461922][ T6977] usb 4-1: SerialNumber: syz [ 489.516611][ T6977] usb 4-1: config 0 descriptor?? [ 489.919540][ T5846] usb 1-1: USB disconnect, device number 13 [ 489.997585][ T9468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.001949][ T9468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.661840][ T9468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.674330][ T9468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.774619][ T5880] usb 6-1: USB disconnect, device number 7 [ 490.914067][ T6977] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 490.914102][ T6977] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 490.914877][ T6977] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 490.915647][ T6977] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 490.921466][ T6977] usb 4-1: USB disconnect, device number 9 [ 491.491121][ T5880] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 491.642978][ T5880] usb 1-1: Using ep0 maxpacket: 32 [ 491.677101][ T5880] usb 1-1: unable to get BOS descriptor or descriptor too short [ 491.679494][ T5880] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 232, changing to 7 [ 491.682094][ T5880] usb 1-1: New USB device found, idVendor=1235, idProduct=8012, bcdDevice= 0.40 [ 491.682120][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.682140][ T5880] usb 1-1: Product: syz [ 491.682153][ T5880] usb 1-1: Manufacturer: syz [ 491.682166][ T5880] usb 1-1: SerialNumber: syz [ 491.792835][ T5846] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 491.952834][ T5846] usb 4-1: Using ep0 maxpacket: 8 [ 491.955319][ T5846] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 491.955368][ T5846] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 491.955390][ T5846] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 491.955414][ T5846] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 491.955435][ T5846] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 491.955470][ T5846] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 491.955493][ T5846] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.961629][ T9479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.047624][ T9479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.097317][ T5880] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 492.292090][ T5846] usb 4-1: usb_control_msg returned -32 [ 492.292137][ T5846] usbtmc 4-1:16.0: can't read capabilities [ 492.670080][ T5880] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 492.744537][ T5880] usb 1-1: USB disconnect, device number 14 [ 492.748692][ T9489] usbtmc 4-1:16.0: usb_control_msg returned -71 [ 492.781440][ T9507] usbtmc 4-1:16.0: send_request_dev_dep_msg_in returned -90 [ 492.785083][ T810] usb 4-1: USB disconnect, device number 10 [ 492.841350][ T8112] udevd[8112]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 493.345170][ T810] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 493.512528][ T9531] evm: overlay not supported [ 493.522838][ T810] usb 4-1: Using ep0 maxpacket: 8 [ 493.527018][ T810] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 493.527072][ T810] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 493.527093][ T810] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 493.527120][ T810] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 493.527136][ T810] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 493.527165][ T810] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 493.527180][ T810] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.751936][ T9489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.778460][ T9489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.793671][ T9489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.801040][ T9489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.848627][ T9489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.862525][ T9489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.893425][ T9489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.914612][ T9489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.962369][ T810] usb 4-1: usb_control_msg returned -71 [ 493.962420][ T810] usbtmc 4-1:16.0: can't read capabilities [ 494.042249][ T810] usb 4-1: USB disconnect, device number 11 [ 495.612885][ T5881] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 495.795443][ T5881] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.795491][ T5881] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 495.795516][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.800433][ T5881] usb 4-1: config 0 descriptor?? [ 496.067458][ T5881] usbhid 4-1:0.0: can't add hid device: -71 [ 496.067568][ T5881] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 496.094281][ T5881] usb 4-1: USB disconnect, device number 12 [ 496.552909][ T5881] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 496.716003][ T5881] usb 4-1: Using ep0 maxpacket: 16 [ 496.719100][ T5881] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 496.719132][ T5881] usb 4-1: config 0 interface 0 has no altsetting 0 [ 496.719165][ T5881] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 496.719189][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.725436][ T5881] usb 4-1: config 0 descriptor?? [ 497.189199][ T5881] mcp2221 0003:04D8:00DD.0004: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 497.383521][ C0] ================================================================== [ 497.383541][ C0] BUG: KASAN: slab-out-of-bounds in mcp2221_raw_event+0x106a/0x1240 [ 497.383665][ C0] Read of size 1 at addr ffff88805f59ffff by task ktimers/0/16 [ 497.383705][ C0] [ 497.383752][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 497.383795][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 497.383857][ C0] Call Trace: [ 497.383867][ C0] [ 497.383878][ C0] dump_stack_lvl+0xe8/0x150 [ 497.383966][ C0] print_report+0xba/0x230 [ 497.384046][ C0] ? mcp2221_raw_event+0x106a/0x1240 [ 497.384087][ C0] kasan_report+0x117/0x150 [ 497.384148][ C0] ? mcp2221_raw_event+0x106a/0x1240 [ 497.384195][ C0] mcp2221_raw_event+0x106a/0x1240 [ 497.384253][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 497.384334][ C0] ? down_trylock+0x50/0xb0 [ 497.384385][ C0] hid_input_report+0x420/0x580 [ 497.384444][ C0] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 497.384502][ C0] hid_irq_in+0x47e/0x6d0 [ 497.384560][ C0] __usb_hcd_giveback_urb+0x3b3/0x5e0 [ 497.384634][ C0] dummy_timer+0x8a6/0x4710 [ 497.384732][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 497.384800][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 497.384931][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 497.384984][ C0] __hrtimer_run_queues+0x55f/0xda0 [ 497.385045][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 497.385094][ C0] ? read_tsc+0x9/0x20 [ 497.385162][ C0] hrtimer_run_softirq+0x192/0x5d0 [ 497.385217][ C0] handle_softirqs+0x1de/0x6f0 [ 497.385304][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 497.385373][ C0] run_ktimerd+0x69/0x100 [ 497.385408][ C0] smpboot_thread_fn+0x541/0xa50 [ 497.385505][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 497.385609][ C0] kthread+0x388/0x470 [ 497.385663][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 497.385738][ C0] ? __pfx_kthread+0x10/0x10 [ 497.385791][ C0] ret_from_fork+0x51e/0xb90 [ 497.385867][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 497.385926][ C0] ? __switch_to+0xc7d/0x1450 [ 497.385997][ C0] ? __pfx_kthread+0x10/0x10 [ 497.386037][ C0] ret_from_fork_asm+0x1a/0x30 [ 497.386097][ C0] [ 497.386107][ C0] [ 497.386131][ C0] Allocated by task 5794: [ 497.386142][ C0] kasan_save_track+0x3e/0x80 [ 497.386217][ C0] __kasan_kmalloc+0x93/0xb0 [ 497.386290][ C0] __kmalloc_node_track_caller_noprof+0x372/0x7e0 [ 497.386367][ C0] kmemdup_noprof+0x2b/0x70 [ 497.386437][ C0] neigh_sysctl_register+0xae/0xa90 [ 497.386514][ C0] devinet_sysctl_register+0xad/0x200 [ 497.386571][ C0] inetdev_init+0x2a4/0x4e0 [ 497.386625][ C0] inetdev_event+0x30d/0x1610 [ 497.386717][ C0] notifier_call_chain+0x1be/0x400 [ 497.386762][ C0] register_netdevice+0x1751/0x1d10 [ 497.386812][ C0] xfrmi_newlink+0x49d/0x7c0 [ 497.386847][ C0] rtnl_newlink_create+0x329/0xb70 [ 497.386919][ C0] rtnl_newlink+0x1666/0x1be0 [ 497.387001][ C0] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 497.387067][ C0] netlink_rcv_skb+0x232/0x4b0 [ 497.387130][ C0] netlink_unicast+0x831/0x9f0 [ 497.387179][ C0] netlink_sendmsg+0x813/0xb40 [ 497.387250][ C0] __sys_sendto+0x67f/0x710 [ 497.387320][ C0] __x64_sys_sendto+0xde/0x100 [ 497.387390][ C0] do_syscall_64+0x14d/0xf80 [ 497.387437][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.387477][ C0] [ 497.387483][ C0] Freed by task 6371: [ 497.387508][ C0] kasan_save_track+0x3e/0x80 [ 497.387584][ C0] kasan_save_free_info+0x46/0x50 [ 497.387634][ C0] __kasan_slab_free+0x5c/0x80 [ 497.387699][ C0] kfree+0x1c1/0x6c0 [ 497.387750][ C0] inetdev_event+0x7cd/0x1610 [ 497.387817][ C0] notifier_call_chain+0x1be/0x400 [ 497.387849][ C0] unregister_netdevice_many_notify+0x186a/0x2360 [ 497.387899][ C0] ops_undo_list+0x3d3/0x940 [ 497.387964][ C0] cleanup_net+0x56e/0x800 [ 497.388027][ C0] process_scheduled_works+0xb6e/0x18c0 [ 497.388091][ C0] worker_thread+0xa53/0xfc0 [ 497.388157][ C0] kthread+0x388/0x470 [ 497.388190][ C0] ret_from_fork+0x51e/0xb90 [ 497.388255][ C0] ret_from_fork_asm+0x1a/0x30 [ 497.388308][ C0] [ 497.388314][ C0] The buggy address belongs to the object at ffff88805f59f000 [ 497.388314][ C0] which belongs to the cache kmalloc-cg-2k of size 2048 [ 497.388360][ C0] The buggy address is located 2047 bytes to the right of [ 497.388360][ C0] allocated 2048-byte region [ffff88805f59f000, ffff88805f59f800) [ 497.388408][ C0] [ 497.388414][ C0] The buggy address belongs to the physical page: [ 497.388450][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805f59d000 pfn:0x5f598 [ 497.388506][ C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 497.388539][ C0] flags: 0x80000000000240(workingset|head|node=0|zone=1) [ 497.388582][ C0] page_type: f5(slab) [ 497.388631][ C0] raw: 0080000000000240 ffff88813fe363c0 ffffea00018a0410 ffffea0001026a10 [ 497.388677][ C0] raw: ffff88805f59d000 0000000800080004 00000000f5000000 0000000000000000 [ 497.388724][ C0] head: 0080000000000240 ffff88813fe363c0 ffffea00018a0410 ffffea0001026a10 [ 497.388768][ C0] head: ffff88805f59d000 0000000800080004 00000000f5000000 0000000000000000 [ 497.388814][ C0] head: 0080000000000003 ffffea00017d6601 00000000ffffffff 00000000ffffffff [ 497.388847][ C0] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 497.388872][ C0] page dumped because: kasan: bad access detected [ 497.388901][ C0] page_owner tracks the page as allocated [ 497.388909][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5796, tgid 5796 (syz-executor), ts 87868986968, free_ts 0 [ 497.388991][ C0] post_alloc_hook+0x231/0x280 [ 497.389064][ C0] get_page_from_freelist+0x28bb/0x2950 [ 497.389113][ C0] __alloc_frozen_pages_noprof+0x18d/0x380 [ 497.389162][ C0] allocate_slab+0x77/0x660 [ 497.389213][ C0] refill_objects+0x334/0x3c0 [ 497.389262][ C0] __pcs_replace_empty_main+0x35c/0x710 [ 497.389316][ C0] __kmalloc_node_track_caller_noprof+0x60b/0x7e0 [ 497.389388][ C0] kmemdup_noprof+0x2b/0x70 [ 497.389462][ C0] neigh_sysctl_register+0xae/0xa90 [ 497.389538][ C0] devinet_sysctl_register+0xad/0x200 [ 497.389599][ C0] inetdev_init+0x2a4/0x4e0 [ 497.389647][ C0] inetdev_event+0x30d/0x1610 [ 497.389708][ C0] notifier_call_chain+0x1be/0x400 [ 497.389738][ C0] register_netdevice+0x1751/0x1d10 [ 497.389783][ C0] xfrmi_newlink+0x49d/0x7c0 [ 497.389812][ C0] rtnl_newlink_create+0x329/0xb70 [ 497.389876][ C0] page_owner free stack trace missing [ 497.389897][ C0] [ 497.389901][ C0] Memory state around the buggy address: [ 497.389922][ C0] ffff88805f59fe80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 497.389948][ C0] ffff88805f59ff00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 497.389975][ C0] >ffff88805f59ff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 497.390015][ C0] ^ [ 497.390039][ C0] ffff88805f5a0000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 497.390076][ C0] ffff88805f5a0080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 497.390105][ C0] ================================================================== [ 497.390161][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 497.390191][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 497.390245][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 497.390273][ C0] Call Trace: [ 497.390282][ C0] [ 497.390305][ C0] vpanic+0x56c/0xa60 [ 497.390398][ C0] ? __pfx_vpanic+0x10/0x10 [ 497.390483][ C0] panic+0xc5/0xd0 [ 497.390557][ C0] ? __pfx_panic+0x10/0x10 [ 497.390633][ C0] ? mcp2221_raw_event+0x106a/0x1240 [ 497.390687][ C0] ? rcu_is_watching+0x15/0xb0 [ 497.390743][ C0] ? mcp2221_raw_event+0x106a/0x1240 [ 497.390782][ C0] check_panic_on_warn+0x89/0xb0 [ 497.390837][ C0] ? mcp2221_raw_event+0x106a/0x1240 [ 497.390889][ C0] end_report+0x73/0x180 [ 497.390924][ C0] ? mcp2221_raw_event+0x106a/0x1240 [ 497.390975][ C0] kasan_report+0x128/0x150 [ 497.391013][ C0] ? mcp2221_raw_event+0x106a/0x1240 [ 497.391071][ C0] mcp2221_raw_event+0x106a/0x1240 [ 497.391124][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 497.391204][ C0] ? down_trylock+0x50/0xb0 [ 497.391242][ C0] hid_input_report+0x420/0x580 [ 497.391320][ C0] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 497.391374][ C0] hid_irq_in+0x47e/0x6d0 [ 497.391419][ C0] __usb_hcd_giveback_urb+0x3b3/0x5e0 [ 497.391502][ C0] dummy_timer+0x8a6/0x4710 [ 497.391621][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 497.391704][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 497.391802][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 497.391876][ C0] __hrtimer_run_queues+0x55f/0xda0 [ 497.391967][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 497.392023][ C0] ? read_tsc+0x9/0x20 [ 497.392085][ C0] hrtimer_run_softirq+0x192/0x5d0 [ 497.392146][ C0] handle_softirqs+0x1de/0x6f0 [ 497.392239][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 497.392324][ C0] run_ktimerd+0x69/0x100 [ 497.392354][ C0] smpboot_thread_fn+0x541/0xa50 [ 497.392421][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 497.392507][ C0] kthread+0x388/0x470 [ 497.392541][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 497.392605][ C0] ? __pfx_kthread+0x10/0x10 [ 497.392650][ C0] ret_from_fork+0x51e/0xb90 [ 497.392725][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 497.392793][ C0] ? __switch_to+0xc7d/0x1450 [ 497.392843][ C0] ? __pfx_kthread+0x10/0x10 [ 497.392889][ C0] ret_from_fork_asm+0x1a/0x30 [ 497.392942][ C0] [ 497.393559][ C0] Kernel Offset: disabled