last executing test programs: 3m7.645571308s ago: executing program 2 (id=297): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x20800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_clone(0x2000100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 3m5.578900306s ago: executing program 2 (id=302): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x101800, 0x0) ioctl$FBIOBLANK(r2, 0x4611, 0x3) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x3, &(0x7f0000000000)='source', &(0x7f0000000100)='[\x8b\xa4[\x13\x9b\x00w#\x9b\x94\xb6@\x874L\xf5U\xd7\xcb+3,\x999\xa9\":|\x98\xc5\x93\xba\x8d\xff\x14\x8ag+\xcd\xb1\x96d&\x8dn\x00\xdb\xd2\r!A\x1dZ\x16\xa3\x84\xa1\f\\%$\xd3\x9f\xf4a\xdb\x10\xd1&\x83\xba\x9d\x91\xf7\x92\xfb}\x91\x8d\xbav5{\xe4M;\xa2:\xe0\xfc\xa2G\xd3bBM\xe3i\xfc\x01\xc2\xa1|\x90\xd5\x8d;U\xe2', 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000f40)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3a8, 0xffffffff, 0xffffffff, 0x3a8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0x0, 0xff, 0xff], [0xffffffff, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x2, 0x24, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x1, 'syz0\x00', 0xfe}}, @common=@mh={{0x28}, {"b11c", 0x1}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000402, 0x0, &(0x7f0000000140)) ioprio_set$pid(0x3, 0x0, 0x0) 3m2.030543311s ago: executing program 2 (id=327): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x123e00, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$netlink(0x10, 0x3, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x300) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) shutdown(r0, 0x0) 3m0.914222184s ago: executing program 2 (id=316): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x6, &(0x7f0000000000)={0x7f, {{0x29, 0x0, 0x2000000, @mcast2, 0x5}}}, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x881}, 0x20044014) socket(0x1d, 0xa, 0x6) r6 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x80000, 0x8801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}], 0x1, 0x7000, 0x0, 0x3) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') pread64(r7, &(0x7f0000000500)=""/31, 0x1f, 0x40000000009) openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYBLOB="60097400de"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$alg(r7, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) 2m57.536071996s ago: executing program 2 (id=320): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x2}, {0x0, 0xfff1}, {0x4, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) 2m56.284307302s ago: executing program 2 (id=324): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) chroot(&(0x7f0000000040)='./file0\x00') sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) recvmmsg(r1, &(0x7f0000003640)=[{{&(0x7f0000000400)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000480)=""/101, 0x65}, {&(0x7f0000000500)=""/207, 0xcf}, {&(0x7f0000000600)=""/88, 0x58}], 0x3}, 0x8}, {{&(0x7f0000000680)=@can, 0x80, &(0x7f0000000800)=[{&(0x7f0000000700)=""/72, 0x48}, {&(0x7f0000000780)=""/81, 0x51}], 0x2, &(0x7f0000000980)=""/133, 0x85}, 0xfffffffa}, {{&(0x7f0000000a40)=@nfc, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000ac0)=""/133, 0x85}, {&(0x7f0000000c40)=""/118, 0x76}], 0x2, &(0x7f0000000cc0)=""/146, 0x92}, 0x2}, {{&(0x7f0000000d80)=@tipc=@name, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000e00)=""/132, 0x84}, {&(0x7f0000000ec0)=""/58, 0x3a}, {&(0x7f0000000f00)=""/47, 0x2f}], 0x3, &(0x7f0000000f80)=""/184, 0xb8}, 0x4}, {{&(0x7f0000001080)=@ax25={{0x3, @rose}, [@null, @rose, @rose, @remote, @netrom, @default, @default, @null]}, 0x80, &(0x7f0000003300)=[{&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000002100)=""/4096, 0x1000}, {&(0x7f0000003100)=""/49, 0x31}, {&(0x7f0000003140)=""/122, 0x7a}, {&(0x7f00000031c0)=""/244, 0xf4}, {&(0x7f00000032c0)=""/8, 0x8}], 0x6, &(0x7f0000003380)=""/201, 0xc9}, 0x8}, {{&(0x7f0000003480)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f00000035c0)=[{&(0x7f0000003500)=""/148, 0x94}], 0x1, &(0x7f0000003600)=""/21, 0x15}, 0x6}], 0x6, 0x10040, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lremovexattr(&(0x7f0000002180)='./file0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="73abfb"]) utimes(&(0x7f0000000080)='./file0/file0\x00', 0x0) umount2(0x0, 0x3) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) clock_settime(0x100000000000000, 0x0) chmod(0x0, 0x1a2) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)=0xffff0018) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="05030200000000002c00128009000100626f6e64000000001c0002800500010001000000080003001000000008000200", @ANYRES32=0x0, @ANYBLOB="96790c063d514f36fdf9ad2fb964d92b4dac9cae6c0fa2c99ced4d4ae8470aab137bad42f2d54e33a8226a262c179723cf5f2891505b7b63013b00623340603e32f5fee7d4bda62b69f6a2b837e3a52830b6a1eca571df4da8c4903712828f1023203275397583907809d84d30634343a111e9f85cf9c260f1102529"], 0x4c}}, 0x0) 2m41.09583407s ago: executing program 32 (id=324): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) chroot(&(0x7f0000000040)='./file0\x00') sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) recvmmsg(r1, &(0x7f0000003640)=[{{&(0x7f0000000400)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000480)=""/101, 0x65}, {&(0x7f0000000500)=""/207, 0xcf}, {&(0x7f0000000600)=""/88, 0x58}], 0x3}, 0x8}, {{&(0x7f0000000680)=@can, 0x80, &(0x7f0000000800)=[{&(0x7f0000000700)=""/72, 0x48}, {&(0x7f0000000780)=""/81, 0x51}], 0x2, &(0x7f0000000980)=""/133, 0x85}, 0xfffffffa}, {{&(0x7f0000000a40)=@nfc, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000ac0)=""/133, 0x85}, {&(0x7f0000000c40)=""/118, 0x76}], 0x2, &(0x7f0000000cc0)=""/146, 0x92}, 0x2}, {{&(0x7f0000000d80)=@tipc=@name, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000e00)=""/132, 0x84}, {&(0x7f0000000ec0)=""/58, 0x3a}, {&(0x7f0000000f00)=""/47, 0x2f}], 0x3, &(0x7f0000000f80)=""/184, 0xb8}, 0x4}, {{&(0x7f0000001080)=@ax25={{0x3, @rose}, [@null, @rose, @rose, @remote, @netrom, @default, @default, @null]}, 0x80, &(0x7f0000003300)=[{&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000002100)=""/4096, 0x1000}, {&(0x7f0000003100)=""/49, 0x31}, {&(0x7f0000003140)=""/122, 0x7a}, {&(0x7f00000031c0)=""/244, 0xf4}, {&(0x7f00000032c0)=""/8, 0x8}], 0x6, &(0x7f0000003380)=""/201, 0xc9}, 0x8}, {{&(0x7f0000003480)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f00000035c0)=[{&(0x7f0000003500)=""/148, 0x94}], 0x1, &(0x7f0000003600)=""/21, 0x15}, 0x6}], 0x6, 0x10040, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lremovexattr(&(0x7f0000002180)='./file0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="73abfb"]) utimes(&(0x7f0000000080)='./file0/file0\x00', 0x0) umount2(0x0, 0x3) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) clock_settime(0x100000000000000, 0x0) chmod(0x0, 0x1a2) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)=0xffff0018) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="05030200000000002c00128009000100626f6e64000000001c0002800500010001000000080003001000000008000200", @ANYRES32=0x0, @ANYBLOB="96790c063d514f36fdf9ad2fb964d92b4dac9cae6c0fa2c99ced4d4ae8470aab137bad42f2d54e33a8226a262c179723cf5f2891505b7b63013b00623340603e32f5fee7d4bda62b69f6a2b837e3a52830b6a1eca571df4da8c4903712828f1023203275397583907809d84d30634343a111e9f85cf9c260f1102529"], 0x4c}}, 0x0) 2m8.599756864s ago: executing program 6 (id=429): getpid() setns(0xffffffffffffffff, 0x64000080) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsmount(0xffffffffffffffff, 0x0, 0x1) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\x00\x00\x00\x00\xd4\xa2\x88\x00\xd1l,'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_io_uring_setup(0x111, &(0x7f0000000380)={0x0, 0x5887, 0x1000, 0x0, 0x36f}, &(0x7f0000001140)=0x0, &(0x7f0000001080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r4, 0x22, &(0x7f00000000c0)=@un=@file={0x1, './file0\x00'}, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x3516, 0x67f, 0x64, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x20000000) 2m7.281890489s ago: executing program 6 (id=430): r0 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x109801, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2}, &(0x7f0000000280)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) write$dsp(r0, &(0x7f0000002000)='`', 0x88020) 2m6.606839545s ago: executing program 6 (id=435): execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)={[&(0x7f0000000040)='\x00', &(0x7f0000000080)='}-]\xcd{\x00', &(0x7f00000000c0)='}\xea\x00']}, &(0x7f0000000380)={[&(0x7f0000000180)='#\xb6-\x00', &(0x7f00000001c0)='i\x00', &(0x7f0000000200)=':%,[@]*[,:!([/\x94\x00', &(0x7f0000000240)='\x00', &(0x7f0000000280)='-$]]-,\x00', &(0x7f00000002c0)='^\x00', &(0x7f0000000300)='GPL\x00', &(0x7f0000000340)='%.)\x00']}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x7}, 0x18) openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x401, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) r6 = openat$audio(0xffffff9c, &(0x7f00000004c0), 0x800, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)="b8", 0x1}], 0x1) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r6, 0x8010500d, &(0x7f0000000500)) syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x55, 0xe7, 0x64, 0x20, 0x421, 0x492, 0x49fc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x84, 0x0, 0x1, 0xd3, 0xc0, 0x44, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x8}}]}}]}}]}}, 0x0) 2m3.108223058s ago: executing program 6 (id=447): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) timer_create(0x0, 0x0, &(0x7f0000000280)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) write$dsp(r0, &(0x7f0000002000)='`', 0x88020) 1m59.685761565s ago: executing program 6 (id=456): socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x4000065}, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f00000000c0)=0x9, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x1000000010, 0x80002, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e23, 0x1, @local, 0x53b9}}, 0xfffffffd, 0x0, 0x400, 0x0, 0xb2}, 0x9c) bind$inet6(r3, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r3, 0x2) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000100)='team_slave_1\x00', 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x1a0, 0x2b8, 0x25c, 0x1a0, 0x7, 0x268, 0x3a8, 0x3a8, 0x268, 0x3a8, 0x7fffffe, 0x0, {[{{@uncond, 0x16c, 0x110, 0x178, 0xa010000, {}, [@common=@unspec=@physdev={{0x68}, {'vxcan1\x00', {0xff}, 'bridge_slave_1\x00', {0xff}, 0x13, 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x9, 0x0, 0x0, 0x14, 'syz1\x00', 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [], [], 'sit0\x00', 'ipvlan0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) unshare(0x42000000) 1m57.339603518s ago: executing program 6 (id=460): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'vxcan1\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRESOCT=r5, @ANYBLOB="0000000000000000b7080000000036aca33edfb073e00000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100003f3fdc20221802324a130102030109021b0001000010000904cdf100d3"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000100)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x5, 0x1007, &(0x7f00000005c0)=""/4103, 0x40f00, 0x4, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000006}, 0x94) 1m41.755722273s ago: executing program 33 (id=460): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'vxcan1\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRESOCT=r5, @ANYBLOB="0000000000000000b7080000000036aca33edfb073e00000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100003f3fdc20221802324a130102030109021b0001000010000904cdf100d3"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000100)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x5, 0x1007, &(0x7f00000005c0)=""/4103, 0x40f00, 0x4, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000006}, 0x94) 1m25.433000268s ago: executing program 3 (id=518): execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)={[&(0x7f0000000040)='\x00', &(0x7f0000000080)='}-]\xcd{\x00', &(0x7f00000000c0)='}\xea\x00']}, &(0x7f0000000380)={[&(0x7f0000000180)='#\xb6-\x00', &(0x7f00000001c0)='i\x00', &(0x7f0000000200)=':%,[@]*[,:!([/\x94\x00', &(0x7f0000000240)='\x00', &(0x7f0000000280)='-$]]-,\x00', &(0x7f00000002c0)='^\x00', &(0x7f0000000300)='GPL\x00', &(0x7f0000000340)='%.)\x00']}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x7}, 0x18) openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x401, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) r6 = openat$audio(0xffffff9c, &(0x7f00000004c0), 0x800, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)="b8", 0x1}], 0x1) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r6, 0x8010500d, &(0x7f0000000500)) syz_usb_connect(0x2, 0x0, 0x0, 0x0) 1m23.416546107s ago: executing program 3 (id=520): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000002c40)=ANY=[], 0x40c}, 0x1, 0x0, 0x0, 0x90}, 0x8000) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303}, "3f69f5593d99b5b9", "ad19b9f81b7051508702a27013f65558c8a01f2ae65a25a4c4580daf90219442", "1600", "84ffd4e4eb18ed49"}, 0x38) r2 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0x356e, 0x800, 0x1, 0x40000334}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1m20.261412408s ago: executing program 3 (id=523): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x4, 0x7fff0026}]}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000140)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x6, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, 0x4, 0x3}, 0xe) shutdown(r0, 0x1) recvmmsg(r0, 0x0, 0x0, 0x406, 0x0) 1m19.443757271s ago: executing program 3 (id=525): syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd600a843500140601fe80000000000000000000000087"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32=r0, @ANYBLOB="200001"], 0x38}}, 0x0) 1m17.28321025s ago: executing program 3 (id=528): getpid() setns(0xffffffffffffffff, 0x64000080) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsmount(0xffffffffffffffff, 0x0, 0x1) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\x00\x00\x00\x00\xd4\xa2\x88\x00\xd1l,'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_io_uring_setup(0x111, &(0x7f0000000380)={0x0, 0x5887, 0x1000, 0x0, 0x36f}, &(0x7f0000001140)=0x0, &(0x7f0000001080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r3, 0x22, &(0x7f00000000c0)=@un=@file={0x1, './file0\x00'}, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x3516, 0x67f, 0x64, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x20000000) 1m13.392993195s ago: executing program 3 (id=537): syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x69, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0xc, &(0x7f0000002000)=""/4096) setxattr$security_capability(0x0, &(0x7f0000000100), 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ipv6_route\x00') preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1, 0x96, 0x0) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x3) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = socket(0x8000000010, 0x2, 0x0) write(r3, &(0x7f0000000400)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400080000004000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081be021e80a062914a46ccfc510b9d1a1a9ce53c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943282c4f5e24066b6362a8963f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c8", 0xf4) socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000340), 0x10) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$apparmor_exec(r4, &(0x7f00000003c0)=ANY=[@ANYRES16], 0x15) socket$inet_smc(0x2b, 0x1, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000980)={[0x1ffffffffd]}, 0x8, 0x0) r6 = syz_io_uring_setup(0x186, 0x0, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}) io_uring_enter(r6, 0x2def, 0x9566, 0x0, 0x0, 0x0) signalfd4(r5, &(0x7f0000000140), 0x8, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 58.325015033s ago: executing program 34 (id=537): syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x69, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0xc, &(0x7f0000002000)=""/4096) setxattr$security_capability(0x0, &(0x7f0000000100), 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ipv6_route\x00') preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1, 0x96, 0x0) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x3) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = socket(0x8000000010, 0x2, 0x0) write(r3, &(0x7f0000000400)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400080000004000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081be021e80a062914a46ccfc510b9d1a1a9ce53c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943282c4f5e24066b6362a8963f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c8", 0xf4) socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000340), 0x10) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$apparmor_exec(r4, &(0x7f00000003c0)=ANY=[@ANYRES16], 0x15) socket$inet_smc(0x2b, 0x1, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000980)={[0x1ffffffffd]}, 0x8, 0x0) r6 = syz_io_uring_setup(0x186, 0x0, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}) io_uring_enter(r6, 0x2def, 0x9566, 0x0, 0x0, 0x0) signalfd4(r5, &(0x7f0000000140), 0x8, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 31.611504012s ago: executing program 4 (id=613): r0 = socket$tipc(0x1e, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x4e23, 0x20006, @empty, 0x6}}, 0x7f, 0x2, 0x0, 0x5, 0x392, 0x94}, 0x9c) shutdown(r3, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000380)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x2, 0x18, 0x0, 0xe, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_filter={0x5, 0x1a, @in6=@mcast2, @in6=@private2, 0x29, 0x10, 0x10}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = fsopen(&(0x7f0000000280)='hfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000040)='source', &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b///\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000280)=ANY=[@ANYBLOB="400100001000010028bd7000ffdbdf25ac1414aa000000000000000000000000000000000000000500000000000000000100000000000000000020000c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc000000000000000000000000000000000000206c000000e0000001000000000000000000000000feffffffffffffff000000000000000000000000000000000100000000000008c802000000000100060000000000000000000000000004000000000000000000ffffffffff1f0000080000000000000000000000000000000400000000000000000000000900000000000000000000000000000002000100030000000000000008001f0004000000480003006465666c61"], 0x140}, 0x1, 0x0, 0x0, 0x4075}, 0x4800) r5 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000012c0)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0xffff, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, {0x0, 0x5, 0x204}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@empty, 0x0, 0x32}, 0x2, @in=@broadcast, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x7}}}, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000008, 0x4010, r0, 0x10000000) r8 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x53f0, 0x80, 0x0, 0xea}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x5, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x45, 0x2004, @fd=r8, 0x10000, 0x0, 0x0, 0xd, 0x1, {0x3}}) syz_io_uring_submit(0x0, r7, &(0x7f00000004c0)=@IORING_OP_FILES_UPDATE={0x14, 0x22, 0x0, 0x0, 0xa90, &(0x7f0000000440)=[r1], 0x1}) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r6, 0xc0305710, &(0x7f0000000080)={0x1, 0xfeac, 0x5, 0x1, 0x8}) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x5}}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r11) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r6, 0xc0305710, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) 22.770186848s ago: executing program 4 (id=635): syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) 22.684492761s ago: executing program 4 (id=636): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x893}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000011100)=@newtfilter={0x4c, 0x2c, 0xd2b, 0x70bd2d, 0x25df9bfd, {0x0, 0x0, 0x0, r6, {0x9, 0xfff1}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'veth1_to_team\x00'}, @TCA_FW_MASK={0x8, 0x5, 0x15ac}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x80020) 21.340221997s ago: executing program 4 (id=638): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB='\x00\x00'], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 20.853620671s ago: executing program 4 (id=642): r0 = socket$tipc(0x1e, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x4e23, 0x20006, @empty, 0x6}}, 0x7f, 0x2, 0x0, 0x5, 0x392, 0x94}, 0x9c) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000380)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x2, 0x18, 0x0, 0xe, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_filter={0x5, 0x1a, @in6=@mcast2, @in6=@private2, 0x29, 0x10, 0x10}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = fsopen(&(0x7f0000000280)='hfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000040)='source', &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b///\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000000)={r2}) setregid(0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000040)=""/68, 0x44}, {&(0x7f0000000280)=""/103, 0x67}], 0x2, 0x0, 0x0) 12.904936036s ago: executing program 5 (id=659): socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_route(0x10, 0x3, 0x0) timerfd_create(0x0, 0x800) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000340)={0x385d, 0x1, "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"}) socket$nl_generic(0x10, 0x3, 0x10) r2 = fsopen(&(0x7f0000000140)='f2fs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000500)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc\xf8\xffo7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xc6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9\xf7dD\xd9\xd6\x18\xb7p5\x18\xe4\x13\xa9\xdf}\x9d\x1b,3`\x01\x8e\x18\xd7\xdc\xc7\v\xae\xb3\xa2\x9c\x1a\x1d\x87;M7\x04\x00\x00\x00h\x12&\xf4\xe2\xcb\x9e\x96\xc1D\xa7\x87\aq\x90\xd5ZA=\xcb\xf2\xcfF\xf7q\xcb\x10n-\xd0o\x89(\xc6T)`\xb1\x92\v\a\xfbO\xf7cP\x84\xaf\xb0\x7f\x8fb\xad\x0fe\b\xbf\xc8\'\xac_b\xea\x0f\xbbc\x00^\xbfkc\x03\xbek\x1d\xc7\xf7c\x99E\x92\x87\n\x03\xbe}\xa6\xf5\xd9\xf8\xfd\xb5\x83\x91\\\x0e~\xf6\x98\xad\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb6\x1dj\xa6\x84\x10\x02\x89\xea`3\x11\xee\xe96\xdaY\x94\xaf\xcbD\xfb\xeb\x86\xff$ZY\x16\x93\xb4\xa4\xf0\xf8\xfc\xfd\xaeHzMSZf\x9c :\xac(\"\xfe\xf4\xfc\xa9\xd5\x8ev\xcaS\xe5\xdd\xb1\xa1\xc1o\x86\xea\xacv\xb3\x7f\xf9\xae\x9c\xf5\x9a\xbd84\x1e\x89\xbc\tk\xcfg\xd3a\xa3\x974\x91\xf6\xa5\x8b\xab\x10-\x0f\a\x04,\x84\x03\x19\xb05\x91\xe2=\xad\xab\xb7\xeeKT\x92/\xf4\xc5\xe8#\xd5\fB\x89+\xde\x9b\x0e\xcdE+\xc0\xb8\n\xd1\xa7\xb4', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000001c0)={0x40, 0xe, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000005c0)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="400904000000c99ec7483d88abb25b7789506aa8a4029fbbeab6a52a4411594a5b38c08e46849031a3a76e515321fe02f80e4fa34af58b2b891efd812c76481e4db35445ca56a97a67f05e1c872b52c752551e70f1ad123d56653abe30a4af2d85bcd685788f84420026a31e42bea1695a96327eec7a58731beec0a8704987a4261d0598f09cbd3f5ce1bf2d07b4522dadf90a26136f1148"], 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_GET(r5, 0x4b72, &(0x7f0000000000)={0x1, 0x1, 0x12, 0x23, 0x10009c, 0xfffffffffffffffe}) syz_usb_control_io$cdc_ecm(r3, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x20, 0x21, 0x2d, {0x2d, 0x2, "92f4bc51b19e378b2b78059ae04a4b2665c9dcea4fc31277c36908789508b5add7970d8c25251b393b46cd"}}, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000300)={0x1c, &(0x7f0000000200)=ANY=[@ANYRES64=r3], &(0x7f0000000100)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000140)={0x0, 0x8, 0x1, 0x5}}) 12.395302452s ago: executing program 7 (id=660): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x7, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$unix(0x1, 0x1, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r3, &(0x7f0000007700), 0x318, 0xfc0, 0x0) 9.126491401s ago: executing program 8 (id=669): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) 9.116203371s ago: executing program 7 (id=670): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = syz_io_uring_setup(0xb, &(0x7f00000002c0)={0x0, 0x4200002f, 0x800, 0x1, 0x100020b}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0xc000000, &(0x7f0000000000), 0x0, 0x12}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 8.666470521s ago: executing program 7 (id=672): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006180)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmmsg$inet(r3, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x0) 8.155327722s ago: executing program 8 (id=674): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 8.073159346s ago: executing program 5 (id=675): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 7.719372767s ago: executing program 8 (id=676): openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8914, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f000058d000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) syz_open_dev$swradio(0x0, 0x0, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8000) landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)}, 0xc4) 7.590087573s ago: executing program 5 (id=677): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010000000000fbdbdf2500000000", @ANYRES32=r1, @ANYBLOB="9028000000000000300012800b00010067656e657665000020000280050009000100000004"], 0x50}, 0x1, 0x2, 0x0, 0xcc844}, 0x0) 6.864319443s ago: executing program 0 (id=679): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0xa0502, 0x6b) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 5.719420135s ago: executing program 1 (id=681): socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000280)=ANY=[@ANYBLOB="400100001000010028bd7000ffdbdf25ac1414aa000000000000000000000000000000000000000500000000000000000100000000000000000020000c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc000000000000000000000000000000000000206c000000e0000001000000000000000000000000feffffffffffffff000000000000000000000000000000000100000000000008c802000000000100060000000000000000000000000004000000000000000000ffffffffff1f0000080000000000000000000000000000000400000000000000000000000900000000000000000000000000000002000100030000000000000008001f0004000000480003006465666c61"], 0x140}, 0x1, 0x0, 0x0, 0x4075}, 0x4800) r5 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000012c0)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0xffff, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, {0x0, 0x5, 0x204}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@empty, 0x0, 0x32}, 0x2, @in=@broadcast, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x7}}}, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000008, 0x4010, r0, 0x10000000) r8 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x53f0, 0x80, 0x0, 0xea}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x45, 0x2004, @fd=r8, 0x10000, 0x0, 0x0, 0xd, 0x1, {0x3, r11}}) syz_io_uring_submit(0x0, r7, &(0x7f00000004c0)=@IORING_OP_FILES_UPDATE={0x14, 0x22, 0x0, 0x0, 0xa90, &(0x7f0000000440)=[r1], 0x1, 0x0, 0x0, {0x0, r11}}) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r6, 0xc0305710, &(0x7f0000000080)={0x1, 0xfeac, 0x5, 0x1, 0x8}) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x5}}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r12) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r6, 0xc0305710, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) 5.640117083s ago: executing program 35 (id=642): r0 = socket$tipc(0x1e, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x4e23, 0x20006, @empty, 0x6}}, 0x7f, 0x2, 0x0, 0x5, 0x392, 0x94}, 0x9c) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000380)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x2, 0x18, 0x0, 0xe, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_filter={0x5, 0x1a, @in6=@mcast2, @in6=@private2, 0x29, 0x10, 0x10}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = fsopen(&(0x7f0000000280)='hfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000040)='source', &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b///\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) 4.653399483s ago: executing program 0 (id=684): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = syz_io_uring_setup(0xb, &(0x7f00000002c0)={0x0, 0x4200002f, 0x800, 0x1, 0x100020b}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0xc000000, &(0x7f0000000000), 0x0, 0x12}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 4.47549923s ago: executing program 0 (id=685): r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0x7736, 0x80, 0x0, 0x34f}, &(0x7f0000000040)=0x0, &(0x7f00000005c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$FUSE(r2, 0x0, 0x0) 4.031276416s ago: executing program 0 (id=686): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000007d00"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 3.744382829s ago: executing program 0 (id=687): socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_route(0x10, 0x3, 0x0) timerfd_create(0x0, 0x800) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000340)={0x385d, 0x1, "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"}) socket$nl_generic(0x10, 0x3, 0x10) r2 = fsopen(&(0x7f0000000140)='f2fs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000500)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc\xf8\xffo7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xc6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9\xf7dD\xd9\xd6\x18\xb7p5\x18\xe4\x13\xa9\xdf}\x9d\x1b,3`\x01\x8e\x18\xd7\xdc\xc7\v\xae\xb3\xa2\x9c\x1a\x1d\x87;M7\x04\x00\x00\x00h\x12&\xf4\xe2\xcb\x9e\x96\xc1D\xa7\x87\aq\x90\xd5ZA=\xcb\xf2\xcfF\xf7q\xcb\x10n-\xd0o\x89(\xc6T)`\xb1\x92\v\a\xfbO\xf7cP\x84\xaf\xb0\x7f\x8fb\xad\x0fe\b\xbf\xc8\'\xac_b\xea\x0f\xbbc\x00^\xbfkc\x03\xbek\x1d\xc7\xf7c\x99E\x92\x87\n\x03\xbe}\xa6\xf5\xd9\xf8\xfd\xb5\x83\x91\\\x0e~\xf6\x98\xad\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb6\x1dj\xa6\x84\x10\x02\x89\xea`3\x11\xee\xe96\xdaY\x94\xaf\xcbD\xfb\xeb\x86\xff$ZY\x16\x93\xb4\xa4\xf0\xf8\xfc\xfd\xaeHzMSZf\x9c :\xac(\"\xfe\xf4\xfc\xa9\xd5\x8ev\xcaS\xe5\xdd\xb1\xa1\xc1o\x86\xea\xacv\xb3\x7f\xf9\xae\x9c\xf5\x9a\xbd84\x1e\x89\xbc\tk\xcfg\xd3a\xa3\x974\x91\xf6\xa5\x8b\xab\x10-\x0f\a\x04,\x84\x03\x19\xb05\x91\xe2=\xad\xab\xb7\xeeKT\x92/\xf4\xc5\xe8#\xd5\fB\x89+\xde\x9b\x0e\xcdE+\xc0\xb8\n\xd1\xa7\xb4', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000001c0)={0x40, 0xe, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000005c0)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="400904000000c99ec7483d88abb25b7789506aa8a4029fbbeab6a52a4411594a5b38c08e46849031a3a76e515321fe02f80e4fa34af58b2b891efd812c76481e4db35445ca56a97a67f05e1c872b52c752551e70f1ad123d56653abe30a4af2d85bcd685788f84420026a31e42bea1695a96327eec7a58731beec0a8704987a4261d0598f09cbd3f5ce1bf2d07b4522dadf90a26136f1148"], 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_GET(r5, 0x4b72, &(0x7f0000000000)={0x1, 0x1, 0x12, 0x23, 0x10009c, 0xfffffffffffffffe}) syz_usb_control_io$cdc_ecm(r3, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x20, 0x21, 0x2d, {0x2d, 0x2, "92f4bc51b19e378b2b78059ae04a4b2665c9dcea4fc31277c36908789508b5add7970d8c25251b393b46cd"}}, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000300)={0x1c, &(0x7f0000000200)=ANY=[@ANYRES64=r3], &(0x7f0000000100)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000140)={0x0, 0x8, 0x1, 0x5}}) 3.314348337s ago: executing program 1 (id=688): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x7, 0x6}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$TOKEN_CREATE(0x24, &(0x7f0000000780), 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 2.599686091s ago: executing program 1 (id=689): openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = socket$kcm(0x2b, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) 2.341538445s ago: executing program 5 (id=690): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000000000000000003ed300"/52], 0xb8}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000040)={0x8, 0x9, 0x4, {0x2, @vbi={0x9, 0x1, 0x7, 0x34565559, [0x34565348, 0xb22], [0x7], 0x1}}, 0x8}) socket(0x1d, 0x2, 0x6) sched_setattr(0x0, 0x0, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000000200)=0x20022a, 0x4) openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) syz_open_dev$evdev(0x0, 0x1, 0x80000) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x1, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r6, 0x2c93a000) ioctl$BLKPBSZGET(r0, 0x127b, 0x0) 2.234035116s ago: executing program 7 (id=691): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x4a000, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 1.628900478s ago: executing program 1 (id=692): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4075}, 0x4800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 1.359396366s ago: executing program 7 (id=693): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48) 724.419964ms ago: executing program 8 (id=694): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b5"], 0x0, 0x5}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0020000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd8445974b26ffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87867c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f86bb47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad91935a6ddfa8f90e79321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c1f860d050d694cc7806d294d3665016a7b29da0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d40887c58559b7dcb98a6273b8c651e57f727041c62cea5b7bd24d9f679e4fbe948dfb4cc4a389469608241630459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b83720eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb89872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d0000002000000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebed161980f2fde4f9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e9338c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc3600040543a34b195c6a8fc054282cd41b264906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e4bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af41000000000000007f5ab0d534b8d63e4ca3be71f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af0be61e58c79d497247d278888901d442ad7f8536607a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733097f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99e85b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5359dbdfbf31a562395020becaf3fd1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4b28288e78980c1184d8223edbc4bf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b5524642c248aa813edaa626f0000000000000000000000000000000003ba5bac34b611569a451564d3a5400f9097ffe7a37e765bc652be71ee24250d6d9cf19878dd62c53062d6000c409de6a6135eae8a00000000008d797190a26c933f933aff5c521eeb7a84a62d148a846e74e76b515b6b8be29e8b69310fa130cf6d6b74f33205d3cc218ca554ed8085ae044f5bf2e89ad07963acbd4dd4dc5b4552591edde7a22ad06f7567e6fec2f65011b579bf609d61a3ff4d6f490824bb035995449fc34106ae6889f036d67b6aaee784f855ebc746ac871b5d2031ac0a252ac1f86e93e245f3793cea80b6de773899d49d11d3b1ed79163b111c976cf840a2ef6214a43338fba8c9edb6be26e68fcc5d47ed74a66ce8aba726ab955b9b32ab1890e84a5e2d7476252af25e5c95c5a8b2b1b5c8a2645b017d23c0f169d6ab529cc889bb07889d9e155114cf3e26a50c527ec6d4021cd2cacfea6d7e41e39e26b3967cad65c648b170f12ea9cc69dcee64be0c27b1f4f7f5ce3e62c35602c9d2921326891901661c85b9ee4a0a0b9636bef4c23788494f094abb91ed813b42828aa93105896e0aee851a8087e169a1d69e841257d9053d0cdc3a6ac4f12084cc6470abebe8b344b1f56690a2687b428686c854c21831da277e8b8a21b7b91a46d22ba083eca7b1f8268048cde7d6f237dca42035881b29ca9c8c2937971821b613894297ff6f7796053a4de1fd77e180cc22b205d43bb4a1b59962c1f605ea1b74587100e8d579f157cb45561c357f9976cec6a43388b3049a0d9c171ff6145266ba119d00000000001ef3794a930eb12f3a6215c510bf0bca70c127e9c70cc7bef921249a7f18a0034ce3264a9e96656b47233e2ed7c76520e649c3fd550bdafd77c5cd72b4446d3e157ddd97e7622a6891fb739acd3b2cdaf65ac78490f0641be6e8c6f55bf3d228786895ff5fd5970faacd8a5025aca0aa1931f477ba06aa60051298c8bf7f3b399194f98dc3f4e8513ad06da09dc393c1284515986b8c70ac69512f6c0c04f42edb3a097a11f2ab480e3e391abffae097752300576337c6dd24c4a98280684aa1fe8c7b43ee8bce05fe979b34da18cdb44dbb030b8009cd3b3b44fd8e7b534acd3f1839cb54817668ab446d3d47848429ea831a57f26c8b05dedddceb24483f8f998b05c3ddf85c3799c9000000000000000000000000001e57cf839eb3150d6a076fb7b86fae98dbb46014f483aecb4ec4f0877371bcae8912c78aff857c669760f0e55041563c5c3e8ee4a0eef885fd43fe34a1febc82370d1d07fdfe705ada4764320889000000000000000000000000000000a790af4fc17872b55b10db99e212d18193235659df45627da300959eafc8bfb44f70d250f8f2e86532700254c9a8b14999f59c8b9034c4bb2448eaeff5db21d4a7f3d974790d4c3cba7c402f50585b9289d86400679e5c2bcacb2841ca074d51fdb4a29e84d72b6c996cfbee06aa52cd632e82ba068e8e1572ef2eb414ba5fccfc3c03e64df6a9cc3936c604aa2c0e2ec7b777475023f29b146af003472ce146a5ff997ba53c51026c0096154f9280a34bbf21d66f57a250b5397766122fc86950ce5252e96868cd04df54764cf2082153d6cedd8aaf9700c734aa4a1cb33a2e0a13c5687be4de327511bff9816d13c3219dac1c1535f10243db6f96960ea6a621f5e1b7babbedf0a6bf0cf74123d2e78d01be2b048883a2459eec630fb0293d28d9799fd3a792caff693fd9f002f14c43fb5a1051cc686b7f114d7927eed559bdf2e8ddea3e61d5d942b63fe90230b2e1948fc563ef94d437281671d2fe5032d2a091fa842b0af2e116ba"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) 637.88583ms ago: executing program 7 (id=695): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r2, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000840)={r3}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x2f00020b, 0x0, 0x0, 0x0, 0x0, 0xae5b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f0000000180)) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000140)=r4) ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f00000002c0)) 486.384845ms ago: executing program 1 (id=696): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = syz_io_uring_setup(0xb, &(0x7f00000002c0)={0x0, 0x4200002f, 0x800, 0x1, 0x100020b}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0xc000000, &(0x7f0000000000), 0x0, 0x12}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 183.496588ms ago: executing program 8 (id=697): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x1b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000023"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 53.760465ms ago: executing program 0 (id=698): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 0s ago: executing program 1 (id=699): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) kernel console output (not intermixed with test programs): 93] usb 5-1: config 0 interface 184 has no altsetting 0 [ 209.585364][ T6393] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 209.732012][ T6393] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.802071][ T6393] usb 5-1: Product: syz [ 209.815201][ T6393] usb 5-1: Manufacturer: syz [ 209.828319][ T6393] usb 5-1: SerialNumber: syz [ 209.967936][ T6393] usb 5-1: config 0 descriptor?? [ 210.033520][ T6393] smsc75xx v1.0.0 [ 210.703769][ T6393] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 210.750808][ T6393] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 210.923815][ T6393] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 210.994332][ T6393] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 211.063410][ T6393] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 211.128553][ T6393] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 211.169056][ T6393] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -32 [ 212.059133][ T6878] faux_driver vgem: [drm] Unknown color mode 269; guessing buffer size. [ 213.412050][ T975] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 213.625309][ T975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.682095][ T975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.723228][ T975] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 213.760843][ T975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.854878][ T975] usb 3-1: config 0 descriptor?? [ 215.184466][ T975] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 215.204354][ T6393] usb 5-1: USB disconnect, device number 3 [ 215.268291][ T975] cp2112 0003:10C4:EA90.0005: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 215.404416][ T975] cp2112 0003:10C4:EA90.0005: Part Number: 0x82 Device Version: 0xFE [ 215.604946][ T975] cp2112 0003:10C4:EA90.0005: error requesting SMBus config [ 215.658196][ T975] cp2112 0003:10C4:EA90.0005: probe with driver cp2112 failed with error -32 [ 216.695852][ T6917] netlink: 28 bytes leftover after parsing attributes in process `syz.1.243'. [ 216.729063][ T6917] netlink: 28 bytes leftover after parsing attributes in process `syz.1.243'. [ 217.026253][ T6393] usb 3-1: USB disconnect, device number 6 [ 218.875110][ T6936] lo speed is unknown, defaulting to 1000 [ 218.972192][ T5958] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 219.132495][ T5958] usb 4-1: Using ep0 maxpacket: 16 [ 219.140149][ T5958] usb 4-1: config 0 has no interfaces? [ 219.194477][ T5958] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 219.369540][ T5958] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 219.502401][ T5958] usb 4-1: Manufacturer: syz [ 219.530249][ T5958] usb 4-1: config 0 descriptor?? [ 220.038153][ T6937] netlink: 12 bytes leftover after parsing attributes in process `syz.3.248'. [ 222.239999][ T6951] syzkaller0: entered promiscuous mode [ 222.263297][ T6951] syzkaller0: entered allmulticast mode [ 222.559232][ T891] usb 4-1: USB disconnect, device number 7 [ 223.176315][ T6953] tipc: Enabling of bearer rejected, failed to enable media [ 224.605446][ T6955] lo speed is unknown, defaulting to 1000 [ 225.462037][ T6001] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 225.652127][ T5844] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 225.674677][ T6001] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.725512][ T6001] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.740655][ T6001] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 225.751358][ T6001] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.769238][ T6001] usb 4-1: config 0 descriptor?? [ 225.834255][ T5844] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 225.852045][ T5844] usb 2-1: config 0 has no interface number 0 [ 225.921788][ T5844] usb 2-1: New USB device found, idVendor=0421, idProduct=0492, bcdDevice=49.fc [ 225.955893][ T5844] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.032008][ T5844] usb 2-1: Product: syz [ 226.036219][ T5844] usb 2-1: Manufacturer: syz [ 226.040839][ T5844] usb 2-1: SerialNumber: syz [ 226.099095][ T5844] usb 2-1: config 0 descriptor?? [ 226.135253][ T5844] usb-storage 2-1:0.132: USB Mass Storage device detected [ 226.175836][ T5844] usb-storage 2-1:0.132: Quirks match for vid 0421 pid 0492: 400 [ 226.219479][ T6001] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 226.250994][ T6001] cp2112 0003:10C4:EA90.0006: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 226.412464][ T6001] cp2112 0003:10C4:EA90.0006: Part Number: 0x82 Device Version: 0xFE [ 226.613473][ T6001] cp2112 0003:10C4:EA90.0006: error requesting SMBus config [ 226.635541][ T6001] cp2112 0003:10C4:EA90.0006: probe with driver cp2112 failed with error -32 [ 227.115175][ T5844] usb 2-1: USB disconnect, device number 5 [ 227.142469][ T6001] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 227.331397][ T6001] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 227.345512][ T6001] usb 3-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 227.377297][ T6001] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 227.396908][ T6001] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.419894][ T6001] usb 3-1: Product: syz [ 227.424383][ T6001] usb 3-1: Manufacturer: syz [ 227.429128][ T6001] usb 3-1: SerialNumber: syz [ 228.003463][ T7008] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 228.009612][ T7008] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 228.026188][ T7008] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 228.034538][ T7008] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 228.040483][ T7008] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 228.047897][ T7008] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 228.057776][ T7008] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 228.063813][ T7008] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 228.108297][ T891] usb 4-1: USB disconnect, device number 8 [ 228.130512][ T7008] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 228.167086][ T7008] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 228.173440][ T7008] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 228.182885][ T7008] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 228.194725][ T7008] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 228.200713][ T7008] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 228.238624][ T7008] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 228.259606][ T7008] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 228.265771][ T7008] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 228.293117][ T7008] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 228.505867][ T7017] syzkaller0: entered promiscuous mode [ 228.512158][ T7017] syzkaller0: entered allmulticast mode [ 228.575758][ T7017] tipc: Enabling of bearer rejected, failed to enable media [ 228.963056][ T6001] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 229.122934][ T6001] usb 5-1: Using ep0 maxpacket: 16 [ 229.141833][ T6001] usb 5-1: config 2 has an invalid interface number: 142 but max is 0 [ 229.154463][ T6001] usb 5-1: config 2 has no interface number 0 [ 229.160580][ T6001] usb 5-1: config 2 interface 142 altsetting 0 has an endpoint descriptor with address 0xEA, changing to 0x8A [ 229.172787][ T6001] usb 5-1: config 2 interface 142 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 229.185144][ T6001] usb 5-1: config 2 interface 142 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 229.202167][ T6001] usb 5-1: config 2 interface 142 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 229.221621][ T6001] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c6.6e [ 229.236140][ T6001] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.251034][ T6001] usb 5-1: Product: syz [ 229.269927][ T6001] usb 5-1: Manufacturer: syz [ 229.277365][ T6001] usb 5-1: SerialNumber: syz [ 229.319506][ T6001] usb 5-1: NFC: intf ffff888055ff4000 id ffffffff8f325ec0 [ 229.558091][ T6001] usb 5-1: USB disconnect, device number 4 [ 229.842804][ T6310] usb 3-1: USB disconnect, device number 7 [ 230.012287][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 230.092414][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 230.092440][ T5850] Bluetooth: hci4: command 0x0c1a tx timeout [ 230.252207][ T5850] Bluetooth: hci5: command 0x0c1a tx timeout [ 230.255188][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 230.332359][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 231.103053][ T6310] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 231.315642][ T6310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.340852][ T6310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.375745][ T6310] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 231.402623][ T6310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.450169][ T6310] usb 2-1: config 0 descriptor?? [ 231.892360][ T6310] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 231.929415][ T6310] cp2112 0003:10C4:EA90.0007: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 232.083926][ T6310] cp2112 0003:10C4:EA90.0007: Part Number: 0x82 Device Version: 0xFE [ 232.096405][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 232.172744][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 232.182161][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 232.303021][ T6310] cp2112 0003:10C4:EA90.0007: error requesting SMBus config [ 232.333518][ T5850] Bluetooth: hci1: command 0x0c1a tx timeout [ 232.333531][ T52] Bluetooth: hci5: command 0x0c1a tx timeout [ 232.364294][ T6310] cp2112 0003:10C4:EA90.0007: probe with driver cp2112 failed with error -5 [ 232.424777][ T5850] Bluetooth: hci0: command 0x0c1a tx timeout [ 233.302996][ T7073] netlink: 'syz.2.290': attribute type 4 has an invalid length. [ 233.423676][ T5844] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 233.614826][ T5844] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 233.649148][ T5844] usb 5-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 233.675185][ T5844] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 233.684684][ T5844] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.693175][ T5844] usb 5-1: Product: syz [ 233.697411][ T5844] usb 5-1: Manufacturer: syz [ 233.702448][ T5844] usb 5-1: SerialNumber: syz [ 233.765684][ T6001] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 233.935662][ T6001] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 233.973056][ T6001] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 233.987202][ T891] usb 2-1: USB disconnect, device number 6 [ 234.029133][ T6001] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 234.078856][ T6001] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 234.114916][ T6001] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 234.130731][ T6001] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 234.140238][ T6001] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 234.149214][ T6001] usb 6-1: Product: syz [ 234.153599][ T6001] usb 6-1: Manufacturer: syz [ 234.172341][ T5850] Bluetooth: hci2: command 0x0c1a tx timeout [ 234.190851][ T6001] cdc_wdm 6-1:1.0: skipping garbage [ 234.229842][ T6001] cdc_wdm 6-1:1.0: skipping garbage [ 234.253187][ T5850] Bluetooth: hci4: command 0x0c1a tx timeout [ 234.253215][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 234.277754][ T6001] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 234.324825][ T6001] cdc_wdm 6-1:1.0: Unknown control protocol [ 234.412041][ T52] Bluetooth: hci5: command 0x0c1a tx timeout [ 234.412378][ T5850] Bluetooth: hci1: command 0x0c1a tx timeout [ 234.522255][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 234.837939][ C0] cdc_wdm 6-1:1.0: Unexpected error -71 [ 234.841480][ T5844] usb 6-1: USB disconnect, device number 9 [ 234.844736][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 234.856402][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 234.862484][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 236.162957][ T7122] syzkaller0: entered promiscuous mode [ 236.186575][ T7122] syzkaller0: entered allmulticast mode [ 236.242854][ T30] usb 5-1: USB disconnect, device number 5 [ 238.358811][ T6001] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 238.528742][ T6001] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.548224][ T6001] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.558673][ T6001] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 238.572380][ T6001] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.593959][ T6001] usb 5-1: config 0 descriptor?? [ 239.037371][ T6001] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 239.112344][ T6001] cp2112 0003:10C4:EA90.0008: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 239.255681][ T6001] cp2112 0003:10C4:EA90.0008: Part Number: 0x82 Device Version: 0xFE [ 239.309159][ T30] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 239.465682][ T6001] cp2112 0003:10C4:EA90.0008: error requesting SMBus config [ 239.492064][ T30] usb 1-1: Using ep0 maxpacket: 16 [ 239.517753][ T30] usb 1-1: config 0 has no interfaces? [ 239.544305][ T30] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 239.576393][ T30] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 239.603574][ T30] usb 1-1: Manufacturer: syz [ 239.623541][ T6001] cp2112 0003:10C4:EA90.0008: probe with driver cp2112 failed with error -5 [ 239.726436][ T30] usb 1-1: config 0 descriptor?? [ 240.195721][ T7158] netlink: 12 bytes leftover after parsing attributes in process `syz.0.314'. [ 241.245642][ T6001] usb 5-1: USB disconnect, device number 6 [ 242.092048][ T6001] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 242.274348][ T6001] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 242.302106][ T6001] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 242.343987][ T6001] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 242.386228][ T891] usb 1-1: USB disconnect, device number 5 [ 242.399205][ T6001] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.445822][ T6001] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 242.505173][ T6001] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 242.542688][ T6001] usb 6-1: Product: syz [ 242.563332][ T6001] usb 6-1: Manufacturer: syz [ 242.627167][ T6001] cdc_wdm 6-1:1.0: skipping garbage [ 242.666706][ T6001] cdc_wdm 6-1:1.0: skipping garbage [ 242.692663][ T6001] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 242.710101][ T6001] cdc_wdm 6-1:1.0: Unknown control protocol [ 242.952432][ T6001] usb 6-1: USB disconnect, device number 10 [ 243.522671][ T6001] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 243.733756][ T6001] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 243.766530][ T6001] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 243.805573][ T6001] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 243.817931][ T6001] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.865580][ T6001] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 243.907139][ T6001] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 243.947329][ T6001] usb 6-1: Product: syz [ 243.975838][ T6001] usb 6-1: Manufacturer: syz [ 244.028234][ T6001] cdc_wdm 6-1:1.0: skipping garbage [ 244.072125][ T6001] cdc_wdm 6-1:1.0: skipping garbage [ 244.113082][ T6001] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 244.126543][ T6001] cdc_wdm 6-1:1.0: Unknown control protocol [ 244.307122][ T7178] netlink: 8 bytes leftover after parsing attributes in process `syz.4.317'. [ 244.410802][ T7188] syzkaller0: entered promiscuous mode [ 244.442464][ T7188] syzkaller0: entered allmulticast mode [ 244.639031][ T7157] lo speed is unknown, defaulting to 1000 [ 244.724700][ T7207] lo speed is unknown, defaulting to 1000 [ 244.909080][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 244.915702][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 244.922660][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 244.929267][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 244.941314][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 244.947923][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 244.962128][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 244.968714][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 244.975141][ T30] usb 6-1: USB disconnect, device number 11 [ 244.982217][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 244.988806][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 244.994864][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 245.052083][ T6001] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 245.241612][ T6001] usb 5-1: Using ep0 maxpacket: 16 [ 245.259380][ T6001] usb 5-1: config 2 has an invalid interface number: 142 but max is 0 [ 245.288487][ T6001] usb 5-1: config 2 has no interface number 0 [ 245.307502][ T6001] usb 5-1: config 2 interface 142 altsetting 0 has an endpoint descriptor with address 0xEA, changing to 0x8A [ 245.339216][ T6001] usb 5-1: config 2 interface 142 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 245.358357][ T6001] usb 5-1: config 2 interface 142 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 245.371195][ T6001] usb 5-1: config 2 interface 142 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 245.389073][ T6001] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c6.6e [ 245.398409][ T6001] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.408048][ T6001] usb 5-1: Product: syz [ 245.415663][ T6001] usb 5-1: Manufacturer: syz [ 245.420357][ T6001] usb 5-1: SerialNumber: syz [ 245.453940][ T6001] usb 5-1: NFC: intf ffff888027ccd000 id ffffffff8f325ec0 [ 245.651019][ T6001] usb 5-1: USB disconnect, device number 7 [ 248.462095][ T30] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 248.663244][ T30] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.691367][ T30] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.713306][ T30] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 248.767272][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.852729][ T30] usb 2-1: config 0 descriptor?? [ 249.427951][ T30] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 249.564108][ T30] cp2112 0003:10C4:EA90.0009: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 249.749706][ T7259] fuse: Bad value for 'fd' [ 249.809344][ T31] kauditd_printk_skb: 13 callbacks suppressed [ 249.809363][ T31] audit: type=1326 audit(1765576981.345:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7256 comm="syz.4.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c7f18f749 code=0x7ffc0000 [ 249.832870][ T30] cp2112 0003:10C4:EA90.0009: Part Number: 0x82 Device Version: 0xFE [ 249.926248][ T31] audit: type=1326 audit(1765576981.345:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7256 comm="syz.4.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c7f18f749 code=0x7ffc0000 [ 250.009046][ T31] audit: type=1326 audit(1765576981.345:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7256 comm="syz.4.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6c7f18f749 code=0x7ffc0000 [ 250.060735][ T31] audit: type=1326 audit(1765576981.345:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7256 comm="syz.4.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c7f18f749 code=0x7ffc0000 [ 250.162986][ T31] audit: type=1326 audit(1765576981.345:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7256 comm="syz.4.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c7f18f749 code=0x7ffc0000 [ 250.217685][ T30] cp2112 0003:10C4:EA90.0009: error requesting SMBus config [ 250.233268][ T31] audit: type=1326 audit(1765576981.355:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7256 comm="syz.4.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f6c7f18f749 code=0x7ffc0000 [ 250.302806][ T30] cp2112 0003:10C4:EA90.0009: probe with driver cp2112 failed with error -5 [ 250.330261][ T31] audit: type=1326 audit(1765576981.355:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7256 comm="syz.4.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c7f18f749 code=0x7ffc0000 [ 250.412392][ T31] audit: type=1326 audit(1765576981.355:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7256 comm="syz.4.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c7f18f749 code=0x7ffc0000 [ 250.462064][ T6001] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 250.514221][ T31] audit: type=1326 audit(1765576981.355:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7256 comm="syz.4.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f6c7f18e15c code=0x7ffc0000 [ 250.579188][ T31] audit: type=1326 audit(1765576981.355:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7256 comm="syz.4.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c7f18f749 code=0x7ffc0000 [ 250.703403][ T6001] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 250.713685][ T6001] usb 6-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 250.766836][ T6001] usb 6-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 250.824583][ T6001] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.932099][ T6001] usb 6-1: Product: syz [ 250.962161][ T6001] usb 6-1: Manufacturer: syz [ 251.010845][ T6001] usb 6-1: SerialNumber: syz [ 251.930001][ T6001] usb 2-1: USB disconnect, device number 7 [ 252.430063][ T7272] netlink: 8 bytes leftover after parsing attributes in process `syz.1.335'. [ 252.502959][ T7277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.335'. [ 252.523118][ T7262] netlink: 203340 bytes leftover after parsing attributes in process `syz.4.334'. [ 252.557698][ T7277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.335'. [ 252.578869][ T7277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.335'. [ 252.972705][ T6001] usb 6-1: USB disconnect, device number 12 [ 253.012359][ T7279] syzkaller0: entered promiscuous mode [ 253.062012][ T7279] syzkaller0: entered allmulticast mode [ 255.094662][ T31] kauditd_printk_skb: 7 callbacks suppressed [ 255.094682][ T31] audit: type=1326 audit(1765576986.655:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7298 comm="syz.0.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63ebb8f749 code=0x7ffc0000 [ 255.155109][ T31] audit: type=1326 audit(1765576986.685:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7298 comm="syz.0.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f63ebb8f749 code=0x7ffc0000 [ 255.256072][ T31] audit: type=1326 audit(1765576986.685:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7298 comm="syz.0.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63ebb8f749 code=0x7ffc0000 [ 255.332061][ T31] audit: type=1326 audit(1765576986.685:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7298 comm="syz.0.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f63ebb8f749 code=0x7ffc0000 [ 255.422055][ T31] audit: type=1326 audit(1765576986.685:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7298 comm="syz.0.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63ebb8f749 code=0x7ffc0000 [ 255.482048][ T31] audit: type=1326 audit(1765576986.685:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7298 comm="syz.0.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f63ebb8f749 code=0x7ffc0000 [ 255.504694][ T7319] usb usb8: usbfs: process 7319 (syz.5.342) did not claim interface 0 before use [ 255.585436][ T31] audit: type=1326 audit(1765576986.685:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7298 comm="syz.0.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63ebb8f749 code=0x7ffc0000 [ 255.692662][ T31] audit: type=1326 audit(1765576986.685:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7298 comm="syz.0.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63ebb8f749 code=0x7ffc0000 [ 255.692720][ T31] audit: type=1326 audit(1765576986.695:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7298 comm="syz.0.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f63ebb8f749 code=0x7ffc0000 [ 255.692771][ T31] audit: type=1326 audit(1765576986.695:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7298 comm="syz.0.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63ebb8f749 code=0x7ffc0000 [ 257.014499][ T7324] netlink: 28 bytes leftover after parsing attributes in process `syz.3.345'. [ 257.093548][ T7324] netlink: 24 bytes leftover after parsing attributes in process `syz.3.345'. [ 257.373102][ T7319] xt_connbytes: Forcing CT accounting to be enabled [ 257.414011][ T7319] Cannot find del_set index 1 as target [ 257.903547][ T891] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 258.135596][ T891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.263614][ T891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.402062][ T891] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 258.457456][ T891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.675490][ T891] usb 4-1: config 0 descriptor?? [ 259.171433][ T891] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 259.194266][ T891] cp2112 0003:10C4:EA90.000A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 259.367029][ T891] cp2112 0003:10C4:EA90.000A: Part Number: 0x82 Device Version: 0xFE [ 259.642099][ T6001] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 259.944182][ T6001] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 260.028324][ T7347] syzkaller0: entered promiscuous mode [ 260.034002][ T7347] syzkaller0: entered allmulticast mode [ 260.050755][ T891] cp2112 0003:10C4:EA90.000A: error reading lock byte: -71 [ 260.060438][ T6001] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 260.076508][ T6001] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.085473][ T891] usb 4-1: USB disconnect, device number 9 [ 260.096497][ T6001] usb 2-1: Product: syz [ 260.110406][ T6001] usb 2-1: Manufacturer: syz [ 260.130102][ T6001] usb 2-1: SerialNumber: syz [ 260.190000][ T6001] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 260.831029][ T6001] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 260.885377][ T5850] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 260.913910][ T6001] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 260.915494][ T5850] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 260.930578][ T5850] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 260.939178][ T5850] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 260.949069][ T5850] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 260.953994][ T6001] usb 2-1: media controller created [ 261.021125][ T7353] lo speed is unknown, defaulting to 1000 [ 261.188415][ T6001] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 261.386112][ T7365] lo speed is unknown, defaulting to 1000 [ 261.690597][ T7353] chnl_net:caif_netlink_parms(): no params data found [ 261.886148][ T6001] usb 2-1: USB disconnect, device number 8 [ 262.680390][ T7381] netlink: 28 bytes leftover after parsing attributes in process `syz.0.359'. [ 262.711267][ T7381] netlink: 28 bytes leftover after parsing attributes in process `syz.0.359'. [ 263.052382][ T52] Bluetooth: hci6: command tx timeout [ 265.132184][ T52] Bluetooth: hci6: command tx timeout [ 265.304199][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.310542][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.832994][ T7408] syzkaller0: entered promiscuous mode [ 265.841766][ T7408] syzkaller0: entered allmulticast mode [ 265.934060][ T6001] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 266.077992][ T7353] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.106411][ T7353] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.120858][ T6001] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 266.141530][ T7353] bridge_slave_0: entered allmulticast mode [ 266.155381][ T6001] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 266.182693][ T7353] bridge_slave_0: entered promiscuous mode [ 266.192015][ T6001] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.225682][ T7353] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.242243][ T6001] usb 4-1: Product: syz [ 266.246766][ T6001] usb 4-1: Manufacturer: syz [ 266.251367][ T6001] usb 4-1: SerialNumber: syz [ 266.268227][ T7353] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.292834][ T7353] bridge_slave_1: entered allmulticast mode [ 266.307271][ T6001] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 266.336712][ T7353] bridge_slave_1: entered promiscuous mode [ 266.359827][ T7422] lo speed is unknown, defaulting to 1000 [ 266.685720][ T7353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.722419][ T6975] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 266.739623][ T6001] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 266.776820][ T6001] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 266.785485][ T6001] usb 4-1: media controller created [ 266.887124][ T6001] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 266.926450][ T6975] usb 2-1: config 0 has an invalid interface number: 205 but max is 0 [ 266.959656][ T6975] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 266.985085][ T50] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.991998][ T6975] usb 2-1: config 0 has no interface number 0 [ 267.032130][ T6975] usb 2-1: config 0 interface 205 has no altsetting 0 [ 267.065449][ T6975] usb 2-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 267.090906][ T6975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.104412][ T7353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.121765][ T6975] usb 2-1: Product: syz [ 267.152217][ T6975] usb 2-1: Manufacturer: syz [ 267.171480][ T6975] usb 2-1: SerialNumber: syz [ 267.211010][ T6975] usb 2-1: config 0 descriptor?? [ 267.216452][ T52] Bluetooth: hci6: command tx timeout [ 267.303139][ T6975] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 267.378233][ T6975] dvb-usb: bulk message failed: -22 (3/0) [ 267.390539][ T6001] usb 4-1: USB disconnect, device number 10 [ 267.527405][ T6975] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 267.574586][ T6975] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 267.642423][ T6975] usb 2-1: media controller created [ 267.687085][ T6975] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 267.699718][ T50] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.783334][ T6975] dvb-usb: bulk message failed: -22 (6/0) [ 267.807219][ T6975] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 267.830764][ T7443] netlink: 28 bytes leftover after parsing attributes in process `syz.0.375'. [ 267.868295][ T7353] team0: Port device team_slave_0 added [ 267.885715][ T7443] netlink: 28 bytes leftover after parsing attributes in process `syz.0.375'. [ 267.903986][ T6975] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input7 [ 267.964692][ T6975] dvb-usb: schedule remote query interval to 150 msecs. [ 268.008323][ T6975] dvb-usb: bulk message failed: -22 (3/0) [ 268.056462][ T6975] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 268.091723][ T7353] team0: Port device team_slave_1 added [ 268.177690][ T6975] dvb-usb: bulk message failed: -22 (1/0) [ 268.210771][ T50] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.231975][ T6975] dvb-usb: error while querying for an remote control event. [ 268.432605][ T6975] dvb-usb: bulk message failed: -22 (1/0) [ 268.448372][ T6975] dvb-usb: error while querying for an remote control event. [ 268.623654][ T6975] dvb-usb: bulk message failed: -22 (1/0) [ 268.645589][ T6975] dvb-usb: error while querying for an remote control event. [ 268.825142][ T6975] dvb-usb: bulk message failed: -22 (1/0) [ 268.862878][ T6975] dvb-usb: error while querying for an remote control event. [ 269.007374][ T50] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.040610][ T6975] dvb-usb: bulk message failed: -22 (1/0) [ 269.071224][ T6975] dvb-usb: error while querying for an remote control event. [ 269.117963][ T7353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.127993][ T7353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 269.188937][ T7353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.242713][ T7353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.251111][ T7353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 269.282239][ T6975] dvb-usb: bulk message failed: -22 (1/0) [ 269.298053][ T6975] dvb-usb: error while querying for an remote control event. [ 269.298125][ T7353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.306241][ T52] Bluetooth: hci6: command tx timeout [ 269.352252][ T5848] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 269.493485][ T6001] dvb-usb: bulk message failed: -22 (1/0) [ 269.512865][ T6001] dvb-usb: error while querying for an remote control event. [ 269.522998][ T5848] usb 6-1: Using ep0 maxpacket: 8 [ 269.581336][ T5848] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 269.621437][ T5848] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 269.692085][ T6001] dvb-usb: bulk message failed: -22 (1/0) [ 269.713840][ T6001] dvb-usb: error while querying for an remote control event. [ 269.842070][ T5848] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 269.862409][ T5848] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 269.878326][ T5848] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 269.882170][ T6001] dvb-usb: bulk message failed: -22 (1/0) [ 269.952009][ T6001] dvb-usb: error while querying for an remote control event. [ 269.973332][ T5848] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.999650][ T7353] hsr_slave_0: entered promiscuous mode [ 270.036167][ T7353] hsr_slave_1: entered promiscuous mode [ 270.077219][ T7353] debugfs: 'hsr0' already exists in 'hsr' [ 270.110226][ T7353] Cannot create hsr debugfs directory [ 270.162166][ T6001] dvb-usb: bulk message failed: -22 (1/0) [ 270.181580][ T6001] dvb-usb: error while querying for an remote control event. [ 270.256423][ T5848] usb 6-1: GET_CAPABILITIES returned 0 [ 270.287805][ T6310] usb 2-1: USB disconnect, device number 9 [ 270.305058][ T5848] usbtmc 6-1:16.0: can't read capabilities [ 270.457568][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 270.535124][ T6310] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 270.582647][ T50] bridge_slave_1: left allmulticast mode [ 270.605235][ T50] bridge_slave_1: left promiscuous mode [ 270.634955][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.700150][ T50] bridge_slave_0: left allmulticast mode [ 270.714839][ T7469] sctp: [Deprecated]: syz.4.380 (pid 7469) Use of struct sctp_assoc_value in delayed_ack socket option. [ 270.714839][ T7469] Use struct sctp_sack_info instead [ 270.743045][ T50] bridge_slave_0: left promiscuous mode [ 270.756275][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.492034][ T6001] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 271.712435][ T6001] usb 1-1: Using ep0 maxpacket: 32 [ 271.773928][ T6001] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 271.806181][ T6001] usb 1-1: config 0 has no interface number 0 [ 271.905833][ T6001] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 271.932486][ T6001] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.975577][ T6001] usb 1-1: Product: syz [ 271.990388][ T6001] usb 1-1: Manufacturer: syz [ 272.002700][ T6001] usb 1-1: SerialNumber: syz [ 272.040892][ T6001] usb 1-1: config 0 descriptor?? [ 272.071649][ T6001] smsc95xx v2.0.0 [ 272.080092][ T6001] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 272.118961][ T6001] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -22 [ 272.305972][ T6001] usb 1-1: USB disconnect, device number 6 [ 272.627499][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 272.690075][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 272.711589][ T50] bond0 (unregistering): Released all slaves [ 272.891133][ T7471] syzkaller0: entered promiscuous mode [ 272.913187][ T7471] syzkaller0: entered allmulticast mode [ 273.366148][ T5844] usb 6-1: USB disconnect, device number 13 [ 273.561622][ T31] kauditd_printk_skb: 8 callbacks suppressed [ 273.561647][ T31] audit: type=1326 audit(1765577005.115:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7494 comm="syz.3.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96e18f749 code=0x7ffc0000 [ 273.672062][ T31] audit: type=1326 audit(1765577005.155:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7494 comm="syz.3.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96e18f749 code=0x7ffc0000 [ 273.841052][ T31] audit: type=1326 audit(1765577005.155:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7494 comm="syz.3.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff96e18f749 code=0x7ffc0000 [ 273.920884][ T31] audit: type=1326 audit(1765577005.155:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7494 comm="syz.3.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96e18f749 code=0x7ffc0000 [ 273.982128][ T31] audit: type=1326 audit(1765577005.155:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7494 comm="syz.3.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96e18f749 code=0x7ffc0000 [ 274.109664][ T7520] netlink: 312 bytes leftover after parsing attributes in process `syz.1.388'. [ 274.187447][ T31] audit: type=1326 audit(1765577005.155:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7494 comm="syz.3.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7ff96e18f749 code=0x7ffc0000 [ 274.410410][ T31] audit: type=1326 audit(1765577005.155:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7494 comm="syz.3.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96e18f749 code=0x7ffc0000 [ 274.441603][ T31] audit: type=1326 audit(1765577005.155:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7494 comm="syz.3.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96e18f749 code=0x7ffc0000 [ 274.651230][ T31] audit: type=1326 audit(1765577005.155:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7494 comm="syz.3.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff96e18f749 code=0x7ffc0000 [ 274.690779][ T7527] netlink: 28 bytes leftover after parsing attributes in process `syz.4.389'. [ 274.755505][ T7527] netlink: 28 bytes leftover after parsing attributes in process `syz.4.389'. [ 274.852368][ T31] audit: type=1326 audit(1765577005.155:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7494 comm="syz.3.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96e18f749 code=0x7ffc0000 [ 275.224081][ T50] hsr_slave_0: left promiscuous mode [ 275.258490][ T50] hsr_slave_1: left promiscuous mode [ 275.280486][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.303452][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.322903][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.345667][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.415384][ T50] veth1_macvtap: left promiscuous mode [ 275.434519][ T50] veth0_macvtap: left promiscuous mode [ 275.444484][ T50] veth1_vlan: left promiscuous mode [ 275.458889][ T50] veth0_vlan: left promiscuous mode [ 276.256699][ T7554] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 276.263393][ T7554] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 276.273501][ T7554] vhci_hcd vhci_hcd.0: Device attached [ 276.452119][ T6310] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 276.526151][ T6310] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 276.634418][ T50] team0 (unregistering): Port device team_slave_1 removed [ 276.704448][ T50] team0 (unregistering): Port device team_slave_0 removed [ 277.554448][ T7554] lo speed is unknown, defaulting to 1000 [ 278.158922][ T7353] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 278.180903][ T7353] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 278.193957][ T788] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 278.270170][ T7353] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 278.320359][ T7353] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 278.330576][ T5848] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 278.382048][ T788] usb 5-1: Using ep0 maxpacket: 32 [ 278.409336][ T788] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 278.456367][ T788] usb 5-1: config 0 has no interface number 0 [ 278.488205][ T788] usb 5-1: config 0 interface 184 has no altsetting 0 [ 278.495636][ T5848] usb 1-1: device descriptor read/64, error -71 [ 278.529741][ T7555] vhci_hcd: connection reset by peer [ 278.558609][ T788] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 278.587770][ T6655] vhci_hcd vhci_hcd.1: stop threads [ 278.600529][ T6655] vhci_hcd vhci_hcd.1: release socket [ 278.648256][ T788] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.688462][ T6655] vhci_hcd vhci_hcd.1: disconnect device [ 278.708647][ T788] usb 5-1: Product: syz [ 278.729354][ T788] usb 5-1: Manufacturer: syz [ 278.765311][ T788] usb 5-1: SerialNumber: syz [ 278.783468][ T5848] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 278.819385][ T788] usb 5-1: config 0 descriptor?? [ 278.879697][ T788] smsc75xx v1.0.0 [ 278.928692][ T7353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.972119][ T5848] usb 1-1: device descriptor read/64, error -71 [ 279.104035][ T7353] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.112619][ T5848] usb usb1-port1: attempt power cycle [ 279.186492][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.193645][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.285153][ T1844] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.292370][ T1844] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.397287][ T7592] syzkaller0: entered promiscuous mode [ 279.416249][ T7592] syzkaller0: entered allmulticast mode [ 279.492263][ T5848] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 279.533467][ T5848] usb 1-1: device descriptor read/8, error -71 [ 279.691848][ T788] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 279.745031][ T788] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 279.822047][ T5848] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 279.882702][ T5848] usb 1-1: device descriptor read/8, error -71 [ 279.904830][ T788] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 279.965810][ T788] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 279.998690][ T788] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 280.042347][ T5848] usb usb1-port1: unable to enumerate USB device [ 280.090596][ T788] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 280.152464][ T788] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -32 [ 280.795926][ T7353] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.698086][ T6310] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 282.456155][ T7641] netlink: 312 bytes leftover after parsing attributes in process `syz.3.405'. [ 282.930613][ T31] kauditd_printk_skb: 13 callbacks suppressed [ 282.930689][ T31] audit: type=1326 audit(1765577014.485:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7626 comm="syz.0.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63ebb8f749 code=0x7ffc0000 [ 283.172600][ T31] audit: type=1326 audit(1765577014.525:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7626 comm="syz.0.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63ebb8f749 code=0x7ffc0000 [ 283.221544][ T7353] veth0_vlan: entered promiscuous mode [ 283.306660][ T7353] veth1_vlan: entered promiscuous mode [ 283.364020][ T31] audit: type=1326 audit(1765577014.535:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7626 comm="syz.0.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f63ebb8f749 code=0x7ffc0000 [ 283.371055][ T6975] usb 5-1: USB disconnect, device number 8 [ 283.551197][ T31] audit: type=1326 audit(1765577014.535:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7626 comm="syz.0.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63ebb8f749 code=0x7ffc0000 [ 283.578168][ T7353] veth0_macvtap: entered promiscuous mode [ 283.691013][ T7353] veth1_macvtap: entered promiscuous mode [ 283.713544][ T31] audit: type=1326 audit(1765577014.545:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7626 comm="syz.0.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63ebb8f749 code=0x7ffc0000 [ 283.825031][ T7353] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.896076][ T31] audit: type=1326 audit(1765577014.555:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7626 comm="syz.0.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f63ebb8f749 code=0x7ffc0000 [ 283.959145][ T7353] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 284.027186][ T31] audit: type=1326 audit(1765577014.555:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7626 comm="syz.0.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63ebb8f749 code=0x7ffc0000 [ 284.129497][ T31] audit: type=1326 audit(1765577014.575:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7626 comm="syz.0.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63ebb8f749 code=0x7ffc0000 [ 284.129839][ T64] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.294946][ T31] audit: type=1326 audit(1765577014.575:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7626 comm="syz.0.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f63ebb8f749 code=0x7ffc0000 [ 284.295570][ T64] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.472188][ T64] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.522479][ T31] audit: type=1326 audit(1765577014.585:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7626 comm="syz.0.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63ebb8f749 code=0x7ffc0000 [ 284.615981][ T64] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.966218][ T4315] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.023962][ T4315] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.273803][ T6271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.328230][ T6271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.412108][ T5844] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 286.441814][ T7678] lo speed is unknown, defaulting to 1000 [ 286.536361][ T6975] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 286.630403][ T5844] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 286.661963][ T5844] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 286.712533][ T5844] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 286.765918][ T6975] usb 1-1: config 0 has no interfaces? [ 286.795043][ T6975] usb 1-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34 [ 286.815838][ T5844] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 286.827298][ T6975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.888239][ T6975] usb 1-1: Product: syz [ 286.909542][ T5844] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 286.927916][ T6975] usb 1-1: Manufacturer: syz [ 286.972161][ T6975] usb 1-1: SerialNumber: syz [ 287.193004][ T5844] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 287.240900][ T5844] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 287.281493][ T7689] siw: device registration error -23 [ 287.984552][ T6975] usb 1-1: config 0 descriptor?? [ 288.046260][ T5844] usb 7-1: Product: syz [ 288.060528][ T5844] usb 7-1: Manufacturer: syz [ 288.116034][ T5844] cdc_wdm 7-1:1.0: skipping garbage [ 288.142900][ T5844] cdc_wdm 7-1:1.0: skipping garbage [ 288.178943][ T5844] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 288.203891][ T5844] cdc_wdm 7-1:1.0: Unknown control protocol [ 288.253485][ T5848] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 288.285184][ T6975] usb 1-1: USB disconnect, device number 11 [ 288.476040][ T5848] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 288.502763][ T5848] usb 4-1: config 0 has no interface number 0 [ 288.533833][ T5848] usb 4-1: New USB device found, idVendor=0421, idProduct=0492, bcdDevice=49.fc [ 288.578414][ T5848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.587853][ T5844] usb 7-1: USB disconnect, device number 2 [ 288.604083][ T5848] usb 4-1: Product: syz [ 288.622300][ T5848] usb 4-1: Manufacturer: syz [ 288.628670][ T5848] usb 4-1: SerialNumber: syz [ 288.651028][ T5848] usb 4-1: config 0 descriptor?? [ 288.670602][ T5848] usb-storage 4-1:0.132: USB Mass Storage device detected [ 288.689815][ T5848] usb-storage 4-1:0.132: Quirks match for vid 0421 pid 0492: 400 [ 288.763743][ T7704] netlink: 28 bytes leftover after parsing attributes in process `syz.4.418'. [ 288.780486][ T7704] netlink: 28 bytes leftover after parsing attributes in process `syz.4.418'. [ 289.567267][ T30] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 289.782035][ T30] usb 6-1: Using ep0 maxpacket: 8 [ 289.835645][ T30] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 289.992916][ T6975] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 290.044881][ T30] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 290.066962][ T5844] usb 4-1: USB disconnect, device number 11 [ 290.089821][ T30] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 290.160690][ T30] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 290.213281][ T6975] usb 7-1: device descriptor read/64, error -71 [ 290.222038][ T30] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 290.260202][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.327781][ T7729] fuse: Bad value for 'fd' [ 290.544529][ T30] usb 6-1: GET_CAPABILITIES returned 0 [ 290.582161][ T6975] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 290.593013][ T30] usbtmc 6-1:16.0: can't read capabilities [ 290.782444][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 290.858252][ T6975] usb 7-1: device descriptor read/64, error -71 [ 290.958547][ T7738] netlink: 312 bytes leftover after parsing attributes in process `syz.3.425'. [ 291.002403][ T6975] usb usb7-port1: attempt power cycle [ 291.382160][ T6975] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 291.411808][ T6975] usb 7-1: device descriptor read/8, error -71 [ 291.702040][ T6975] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 291.772894][ T6975] usb 7-1: device descriptor read/8, error -71 [ 291.902364][ T6975] usb usb7-port1: unable to enumerate USB device [ 294.143121][ T6310] usb 6-1: USB disconnect, device number 14 [ 294.672171][ T7767] netlink: 28 bytes leftover after parsing attributes in process `syz.3.433'. [ 294.717397][ T7767] netlink: 28 bytes leftover after parsing attributes in process `syz.3.433'. [ 295.125716][ T7777] fuse: Bad value for 'fd' [ 295.467499][ T7785] siw: device registration error -23 [ 296.198213][ T7775] lo speed is unknown, defaulting to 1000 [ 296.492059][ T6975] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 296.688329][ T6975] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 296.728876][ T6975] usb 7-1: config 0 has no interface number 0 [ 296.779066][ T6975] usb 7-1: New USB device found, idVendor=0421, idProduct=0492, bcdDevice=49.fc [ 296.826812][ T6975] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.899045][ T6975] usb 7-1: Product: syz [ 296.929069][ T6975] usb 7-1: Manufacturer: syz [ 296.955418][ T6975] usb 7-1: SerialNumber: syz [ 296.999748][ T6975] usb 7-1: config 0 descriptor?? [ 297.054081][ T6975] usb-storage 7-1:0.132: USB Mass Storage device detected [ 297.066520][ T6975] usb-storage 7-1:0.132: Quirks match for vid 0421 pid 0492: 400 [ 297.628735][ T7809] syzkaller0: entered promiscuous mode [ 297.641434][ T7809] syzkaller0: entered allmulticast mode [ 297.817855][ T7814] netlink: 312 bytes leftover after parsing attributes in process `syz.4.445'. [ 298.220282][ T7816] lo speed is unknown, defaulting to 1000 [ 298.379236][ T6310] usb 7-1: USB disconnect, device number 7 [ 302.163112][ T975] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 302.358086][ T975] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 302.422037][ T975] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 302.456992][ T975] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 302.495276][ T975] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 302.571596][ T975] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 302.649663][ T975] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 302.688002][ T7865] lo speed is unknown, defaulting to 1000 [ 302.717880][ T975] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 302.796196][ T975] usb 6-1: Product: syz [ 302.842139][ T975] usb 6-1: Manufacturer: syz [ 302.962647][ T975] cdc_wdm 6-1:1.0: skipping garbage [ 303.025888][ T975] cdc_wdm 6-1:1.0: skipping garbage [ 303.069580][ T975] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 303.098608][ T975] cdc_wdm 6-1:1.0: Unknown control protocol [ 303.582732][ T6001] usb 6-1: USB disconnect, device number 15 [ 304.407801][ T7891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.458'. [ 304.482131][ T788] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 304.668126][ T788] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 304.699656][ T788] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 304.782360][ T788] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 304.792113][ T5848] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 304.799612][ T6393] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 304.812884][ C1] raw-gadget.1 gadget.6: ignoring, device is not running [ 304.975109][ T6393] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 304.990197][ T788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.019049][ T7885] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 305.082844][ T6393] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 305.114589][ T6393] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.129224][ T6393] usb 1-1: Product: syz [ 305.152447][ T5848] usb 7-1: device descriptor read/64, error -32 [ 305.176023][ T6393] usb 1-1: Manufacturer: syz [ 305.190827][ T6393] usb 1-1: SerialNumber: syz [ 305.429726][ T5848] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 305.510147][ T788] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 305.539496][ T6393] usb 1-1: config 0 descriptor?? [ 305.928381][ T788] usb 2-1: USB disconnect, device number 10 [ 306.298390][ T5848] usb 7-1: config 0 has an invalid interface number: 205 but max is 0 [ 306.400233][ T5848] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 306.522471][ T5848] usb 7-1: config 0 has no interface number 0 [ 306.554963][ T5848] usb 7-1: config 0 interface 205 has no altsetting 0 [ 307.226367][ T5848] usb 7-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 307.290692][ T5848] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.351255][ T5848] usb 7-1: Product: syz [ 307.414024][ T5848] usb 7-1: Manufacturer: syz [ 307.462663][ T5848] usb 7-1: SerialNumber: syz [ 307.489794][ T5848] usb 7-1: config 0 descriptor?? [ 307.722605][ T7930] netlink: 312 bytes leftover after parsing attributes in process `syz.1.466'. [ 310.305259][ T7954] lo speed is unknown, defaulting to 1000 [ 310.425077][ T5844] usb 1-1: USB disconnect, device number 12 [ 311.110301][ T7966] vivid-007: disconnect [ 311.928649][ T7959] vivid-007: reconnect [ 312.578169][ T5848] usb 7-1: can't set config #0, error -110 [ 313.440117][ T7990] lo speed is unknown, defaulting to 1000 [ 315.144533][ T6001] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 315.423616][ T6001] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 315.482159][ T6001] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 315.537055][ T6001] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 315.586863][ T6001] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 315.667602][ T6001] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 315.728096][ T6001] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 315.770171][ T6001] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 315.809425][ T6001] usb 4-1: Product: syz [ 315.887761][ T6001] usb 4-1: Manufacturer: syz [ 315.993175][ T6001] cdc_wdm 4-1:1.0: skipping garbage [ 316.009865][ T6001] cdc_wdm 4-1:1.0: skipping garbage [ 316.093408][ T6001] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 316.099374][ T6001] cdc_wdm 4-1:1.0: Unknown control protocol [ 316.518428][ T975] usb 4-1: USB disconnect, device number 12 [ 319.042097][ T6975] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 319.314470][ T6975] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 319.388758][ T6975] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 319.561291][ T6975] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 319.724493][ T6975] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.134362][ T6975] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 320.277774][ T6975] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 320.323084][ T6975] usb 4-1: Product: syz [ 320.327323][ T6975] usb 4-1: Manufacturer: syz [ 320.446067][ T6975] cdc_wdm 4-1:1.0: skipping garbage [ 320.621811][ T6975] cdc_wdm 4-1:1.0: skipping garbage [ 320.684682][ T6975] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 320.731224][ T6975] cdc_wdm 4-1:1.0: Unknown control protocol [ 320.806224][ T6975] usb 4-1: USB disconnect, device number 13 [ 321.228431][ T6975] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 321.452060][ T6975] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 321.539907][ T891] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 321.549894][ T6975] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 321.650921][ T5850] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 321.687035][ T5850] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 321.712616][ T5850] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 321.793438][ T5850] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 321.807071][ T5850] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 321.807269][ T6975] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 321.825728][ T891] usb 6-1: Using ep0 maxpacket: 8 [ 321.843475][ T891] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 321.883400][ T891] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 321.922107][ T6975] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.975660][ T891] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 322.035672][ T891] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 322.086662][ T6975] usb 4-1: string descriptor 0 read error: -71 [ 322.094054][ T8045] lo speed is unknown, defaulting to 1000 [ 322.237590][ T891] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 322.256404][ T6975] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 322.306653][ T891] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.320227][ T6975] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 322.449246][ T6975] usb 4-1: can't set config #1, error -71 [ 322.549412][ T6975] usb 4-1: USB disconnect, device number 14 [ 322.608595][ T891] usb 6-1: GET_CAPABILITIES returned 0 [ 322.650252][ T891] usbtmc 6-1:16.0: can't read capabilities [ 322.835327][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 322.844442][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 322.853517][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 322.886110][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 322.932288][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 322.941480][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 322.950572][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 322.959660][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 322.968745][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 322.981280][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 322.990352][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 322.999500][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 323.035910][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 323.045017][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 323.054098][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 323.063615][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 323.252802][ T6393] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 323.299890][ T8045] chnl_net:caif_netlink_parms(): no params data found [ 323.422027][ T6393] usb 5-1: Using ep0 maxpacket: 32 [ 323.440125][ T6393] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 323.453717][ T6393] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.484598][ T6393] usb 5-1: config 0 descriptor?? [ 323.702506][ T6393] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 323.736780][ T6393] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 323.757813][ T6393] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 323.783320][ T6393] usb 5-1: media controller created [ 323.812396][ T6393] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 323.852001][ T5850] Bluetooth: hci5: command tx timeout [ 324.383761][ T8045] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.393248][ T8045] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.400521][ T8045] bridge_slave_0: entered allmulticast mode [ 324.409831][ T8045] bridge_slave_0: entered promiscuous mode [ 324.420325][ T8045] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.437980][ T8045] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.447041][ T8045] bridge_slave_1: entered allmulticast mode [ 324.458052][ T8045] bridge_slave_1: entered promiscuous mode [ 324.526587][ T8045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.546808][ T8045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.732000][ T6393] stb0899_attach: Driver disabled by Kconfig [ 324.744086][ T6393] az6027: no front-end attached [ 324.744086][ T6393] [ 324.784989][ T6393] az6027: usb out operation failed. (-71) [ 324.821954][ T6393] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 324.879149][ T6393] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input8 [ 324.935730][ T8045] team0: Port device team_slave_0 added [ 324.970999][ T8045] team0: Port device team_slave_1 added [ 325.025766][ T6393] dvb-usb: schedule remote query interval to 400 msecs. [ 325.053416][ T6393] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 325.125551][ T6393] usb 5-1: USB disconnect, device number 9 [ 325.543935][ T6393] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 325.932113][ T5850] Bluetooth: hci5: command tx timeout [ 325.965713][ T6001] usb 6-1: USB disconnect, device number 16 [ 326.738311][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 326.744820][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.008484][ T8103] ksmbd: Unknown IPC event: 0, ignore. [ 328.012155][ T5850] Bluetooth: hci5: command tx timeout [ 328.423784][ T8045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.490258][ T8045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 328.550452][ T8045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.605301][ T8045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.617405][ T8045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 328.656773][ T8045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.684987][ T31] kauditd_printk_skb: 11 callbacks suppressed [ 328.686067][ T31] audit: type=1326 audit(1765577060.235:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8107 comm="syz.1.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae88f8f749 code=0x7ffc0000 [ 328.746452][ T31] audit: type=1326 audit(1765577060.235:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8107 comm="syz.1.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fae88f8f749 code=0x7ffc0000 [ 328.770232][ T31] audit: type=1326 audit(1765577060.235:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8107 comm="syz.1.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae88f8f749 code=0x7ffc0000 [ 328.795279][ T31] audit: type=1326 audit(1765577060.235:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8107 comm="syz.1.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7fae88f8f749 code=0x7ffc0000 [ 328.823553][ T31] audit: type=1326 audit(1765577060.235:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8107 comm="syz.1.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae88f8f749 code=0x7ffc0000 [ 328.859294][ T31] audit: type=1326 audit(1765577060.235:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8107 comm="syz.1.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fae88f8f749 code=0x7ffc0000 [ 328.886163][ T31] audit: type=1326 audit(1765577060.285:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8107 comm="syz.1.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae88f8f749 code=0x7ffc0000 [ 328.908726][ T31] audit: type=1326 audit(1765577060.285:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8107 comm="syz.1.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae88f8f749 code=0x7ffc0000 [ 329.147671][ T8045] hsr_slave_0: entered promiscuous mode [ 329.174159][ T8045] hsr_slave_1: entered promiscuous mode [ 329.260961][ T8045] debugfs: 'hsr0' already exists in 'hsr' [ 329.286224][ T8045] Cannot create hsr debugfs directory [ 330.097351][ T5850] Bluetooth: hci5: command tx timeout [ 330.496281][ T8128] lo speed is unknown, defaulting to 1000 [ 331.382053][ T5958] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 331.522109][ T8045] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 331.543956][ T8045] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 331.565037][ T5958] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 331.565093][ T5958] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 331.565152][ T5958] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 331.565252][ T5958] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.571013][ T8137] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 331.600301][ T5958] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 331.646109][ T8045] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 331.672646][ T8045] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 331.806571][ T6393] usb 1-1: USB disconnect, device number 13 [ 332.381127][ T8157] lo speed is unknown, defaulting to 1000 [ 332.666592][ T8045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.916979][ T8168] netlink: 100 bytes leftover after parsing attributes in process `syz.0.512'. [ 332.959628][ T8045] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.061775][ T5979] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.069002][ T5979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.125150][ T4315] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.132336][ T4315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.458851][ T31] audit: type=1326 audit(1765577065.995:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8171 comm="syz.0.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63ebb8f749 code=0x7ffc0000 [ 334.580765][ T31] audit: type=1326 audit(1765577065.995:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8171 comm="syz.0.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f63ebb8f749 code=0x7ffc0000 [ 334.708676][ T31] audit: type=1326 audit(1765577065.995:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8171 comm="syz.0.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63ebb8f749 code=0x7ffc0000 [ 334.804023][ T31] audit: type=1326 audit(1765577065.995:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8171 comm="syz.0.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63ebb8f749 code=0x7ffc0000 [ 334.837323][ T8045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.880738][ T31] audit: type=1326 audit(1765577065.995:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8171 comm="syz.0.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f63ebb8f749 code=0x7ffc0000 [ 334.971885][ T31] audit: type=1326 audit(1765577065.995:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8171 comm="syz.0.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63ebb8f749 code=0x7ffc0000 [ 335.084226][ T31] audit: type=1326 audit(1765577065.995:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8171 comm="syz.0.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63ebb8f749 code=0x7ffc0000 [ 335.162081][ T31] audit: type=1326 audit(1765577065.995:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8171 comm="syz.0.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f63ebb8f749 code=0x7ffc0000 [ 335.256367][ T31] audit: type=1326 audit(1765577065.995:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8171 comm="syz.0.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63ebb8f749 code=0x7ffc0000 [ 335.338127][ T31] audit: type=1326 audit(1765577065.995:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8171 comm="syz.0.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63ebb8f749 code=0x7ffc0000 [ 336.585835][ T8197] siw: device registration error -23 [ 337.664024][ T8045] veth0_vlan: entered promiscuous mode [ 339.872403][ T8045] veth1_vlan: entered promiscuous mode [ 340.334065][ T8045] veth0_macvtap: entered promiscuous mode [ 340.399979][ T8045] veth1_macvtap: entered promiscuous mode [ 340.614724][ T8045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.034751][ T8045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.213256][ T742] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.306647][ T742] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.449207][ T742] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.571660][ T742] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.819609][ T8223] netlink: 100 bytes leftover after parsing attributes in process `syz.4.524'. [ 344.301083][ T8220] lo speed is unknown, defaulting to 1000 [ 344.684801][ T6000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.738980][ T6000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.570576][ T8243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.529'. [ 346.024734][ T6005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.058747][ T6005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.699986][ T8268] netlink: 48 bytes leftover after parsing attributes in process `syz.7.483'. [ 346.714017][ T5958] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 346.942035][ T5958] usb 6-1: Using ep0 maxpacket: 16 [ 346.994316][ T5958] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 347.045298][ T8271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.535'. [ 347.082840][ T5958] usb 6-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 347.149439][ T5958] usb 6-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c6.6e [ 347.219648][ T5958] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.270833][ T5958] usb 6-1: Product: syz [ 347.291117][ T5958] usb 6-1: Manufacturer: syz [ 347.311401][ T5958] usb 6-1: SerialNumber: syz [ 347.322129][ T8198] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 347.392544][ T975] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 347.522681][ T8198] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 347.564289][ T8198] usb 8-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 347.592801][ T975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 347.630220][ T8198] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.649127][ T8198] usb 8-1: Product: syz [ 347.663057][ T975] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 347.684451][ T8198] usb 8-1: Manufacturer: syz [ 347.700072][ T6393] usb 6-1: USB disconnect, device number 17 [ 347.705079][ T975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.749153][ T8198] usb 8-1: SerialNumber: syz [ 347.802444][ T975] usb 2-1: Product: syz [ 347.814065][ T8198] usb 8-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 347.832392][ T975] usb 2-1: Manufacturer: syz [ 347.843824][ T975] usb 2-1: SerialNumber: syz [ 347.946428][ T975] usb 2-1: config 0 descriptor?? [ 348.261444][ T8198] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 348.309406][ T8198] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 348.324638][ T8198] usb 8-1: media controller created [ 348.446472][ T8198] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 348.588661][ T8279] syzkaller0: entered promiscuous mode [ 348.629294][ T8279] syzkaller0: entered allmulticast mode [ 348.824715][ T8284] netlink: 100 bytes leftover after parsing attributes in process `syz.0.539'. [ 349.622720][ T8198] usb 8-1: USB disconnect, device number 2 [ 350.083567][ T8299] siw: device registration error -23 [ 351.507049][ T5844] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 352.020365][ T5844] usb 1-1: Using ep0 maxpacket: 32 [ 352.089758][ T5844] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 352.292685][ T5844] usb 1-1: config 0 has no interface number 0 [ 352.346334][ T5844] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 352.409627][ T5844] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.505848][ T5844] usb 1-1: Product: syz [ 352.536135][ T5844] usb 1-1: Manufacturer: syz [ 352.564870][ T5844] usb 1-1: SerialNumber: syz [ 352.636401][ T5844] usb 1-1: config 0 descriptor?? [ 352.921218][ T5844] smsc95xx v2.0.0 [ 352.957048][ T5844] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 353.105972][ T5844] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -22 [ 354.102815][ T5844] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 354.130951][ T6393] usb 1-1: USB disconnect, device number 14 [ 354.220133][ T30] usb 2-1: USB disconnect, device number 11 [ 354.361945][ T5844] usb 6-1: Using ep0 maxpacket: 8 [ 354.427012][ T5844] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 354.511981][ T5844] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 354.562359][ T5844] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 354.663723][ T5844] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 354.825365][ T5844] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 354.874537][ T5844] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.283892][ T5844] usb 6-1: GET_CAPABILITIES returned 0 [ 355.289410][ T5844] usbtmc 6-1:16.0: can't read capabilities [ 357.582172][ T6001] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 357.846220][ T6001] usb 5-1: Using ep0 maxpacket: 32 [ 357.856817][ T5848] usb 6-1: USB disconnect, device number 18 [ 357.884945][ T8339] netlink: 8 bytes leftover after parsing attributes in process `syz.7.551'. [ 357.902985][ T6001] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 357.981993][ T6001] usb 5-1: config 0 has no interface number 0 [ 358.034766][ T6001] usb 5-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 358.095364][ T6001] usb 5-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 358.177791][ T6001] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 358.209886][ T6001] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.234022][ T8343] netlink: 28 bytes leftover after parsing attributes in process `syz.1.554'. [ 358.253428][ T8343] netlink: 60 bytes leftover after parsing attributes in process `syz.1.554'. [ 358.258507][ T6001] usb 5-1: Product: syz [ 358.307739][ T6001] usb 5-1: Manufacturer: syz [ 358.357164][ T6001] usb 5-1: SerialNumber: syz [ 359.452410][ T6001] usb 5-1: config 0 descriptor?? [ 359.518262][ T6001] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 359.722914][ T6001] usb 5-1: qt2_setup_urbs - submit read urb failed -90 [ 359.742474][ T6001] quatech2 5-1:0.51: probe with driver quatech2 failed with error -90 [ 360.180506][ T8335] use of bytesused == 0 is deprecated and will be removed in the future, [ 360.249569][ T8335] use the actual size instead. [ 360.268403][ T5848] usb 5-1: USB disconnect, device number 10 [ 361.472016][ T10] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 361.532267][ T31] kauditd_printk_skb: 12 callbacks suppressed [ 361.532291][ T31] audit: type=1326 audit(1765577093.085:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8364 comm="syz.4.560" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6c7f18f749 code=0x0 [ 361.682772][ T10] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 361.729563][ T10] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 361.760121][ T10] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 361.792046][ T10] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 361.832105][ T10] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 361.910020][ T10] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 361.922268][ T10] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 361.941257][ T10] usb 8-1: Product: syz [ 361.956600][ T10] usb 8-1: Manufacturer: syz [ 361.979972][ T10] cdc_wdm 8-1:1.0: skipping garbage [ 361.989830][ T10] cdc_wdm 8-1:1.0: skipping garbage [ 362.013560][ T10] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 362.027514][ T10] cdc_wdm 8-1:1.0: Unknown control protocol [ 362.422553][ T10] usb 8-1: USB disconnect, device number 3 [ 362.974636][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 363.172375][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 363.309833][ T10] usb 5-1: config 2 has an invalid interface number: 142 but max is 0 [ 363.336589][ T10] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 363.416170][ T10] usb 5-1: config 2 has no interface number 0 [ 363.448726][ T10] usb 5-1: config 2 interface 142 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 363.493932][ T10] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c6.6e [ 363.518704][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.536279][ T10] usb 5-1: Product: syz [ 363.547015][ T10] usb 5-1: Manufacturer: syz [ 363.578051][ T10] usb 5-1: SerialNumber: syz [ 363.684078][ T10] usb 5-1: NFC: intf ffff88807aa3c000 id ffffffff8f325ec0 [ 363.866014][ T52] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 363.874853][ T52] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 363.883009][ T52] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 363.890957][ T52] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 363.906563][ T52] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 363.962738][ T10] usb 5-1: USB disconnect, device number 11 [ 364.332018][ T5848] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 364.522005][ T5848] usb 8-1: Using ep0 maxpacket: 8 [ 364.554507][ T5848] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 364.625384][ T5848] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 364.666884][ T5848] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 364.705651][ T5848] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 364.727093][ T5848] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 364.776824][ T5848] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.012399][ T52] Bluetooth: hci6: command tx timeout [ 366.065008][ T6104] usb 7-1: USB disconnect, device number 9 [ 366.942490][ T8198] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 367.001738][ C0] raw-gadget.2 gadget.1: ignoring, device is not running [ 367.087161][ T8405] Cannot find add_set index 0 as target [ 367.114271][ T4521] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.134992][ T8198] usb 2-1: device descriptor read/64, error -32 [ 367.412069][ T8198] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 367.594008][ T8198] usb 2-1: Using ep0 maxpacket: 32 [ 367.607367][ T4521] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.659520][ T8198] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 367.666408][ T8389] lo speed is unknown, defaulting to 1000 [ 367.822867][ T8198] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.945027][ T8198] usb 2-1: config 0 descriptor?? [ 368.093893][ T52] Bluetooth: hci6: command tx timeout [ 368.189651][ T8198] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 368.248494][ T8198] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 368.302908][ T8198] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 368.347838][ T8198] usb 2-1: media controller created [ 368.378418][ T4521] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.446783][ T5848] usb 8-1: usb_control_msg returned -71 [ 368.484402][ T8198] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 368.493301][ T5848] usbtmc 8-1:16.0: can't read capabilities [ 368.597008][ T5848] usb 8-1: USB disconnect, device number 4 [ 368.606836][ T8423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.571'. [ 368.945812][ T4521] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.392291][ T8198] stb0899_attach: Driver disabled by Kconfig [ 369.406822][ T8198] az6027: no front-end attached [ 369.406822][ T8198] [ 369.454739][ T8198] az6027: usb out operation failed. (-71) [ 369.460944][ T8198] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 369.515735][ T8198] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input9 [ 369.563235][ T8198] dvb-usb: schedule remote query interval to 400 msecs. [ 369.583605][ T8198] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 369.629932][ T8198] usb 2-1: USB disconnect, device number 13 [ 369.775185][ T8198] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 370.182595][ T52] Bluetooth: hci6: command tx timeout [ 370.190500][ T8437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.574'. [ 370.305738][ T4521] bridge_slave_1: left allmulticast mode [ 370.336681][ T4521] bridge_slave_1: left promiscuous mode [ 370.383192][ T4521] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.441577][ T4521] bridge_slave_0: left allmulticast mode [ 370.467072][ T4521] bridge_slave_0: left promiscuous mode [ 370.521059][ T4521] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.300171][ T8446] netlink: 28 bytes leftover after parsing attributes in process `syz.7.577'. [ 371.334689][ T8446] netlink: 60 bytes leftover after parsing attributes in process `syz.7.577'. [ 371.371996][ T6001] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 371.541158][ T6001] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 371.560518][ T6001] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 371.620680][ T6001] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 371.697232][ T6001] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 371.734216][ T6001] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 371.783440][ T30] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 371.793999][ T6001] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 371.827300][ T6001] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 371.862030][ T6001] usb 1-1: Product: syz [ 371.888123][ T6001] usb 1-1: Manufacturer: syz [ 371.940668][ T6001] cdc_wdm 1-1:1.0: skipping garbage [ 371.970600][ T6001] cdc_wdm 1-1:1.0: skipping garbage [ 372.034543][ T6001] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 372.060866][ T6001] cdc_wdm 1-1:1.0: Unknown control protocol [ 372.071111][ T30] usb 5-1: Using ep0 maxpacket: 32 [ 372.108660][ T30] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 372.126539][ T30] usb 5-1: config 0 has no interface number 0 [ 372.211406][ T30] usb 5-1: config 0 interface 184 has no altsetting 0 [ 372.251086][ T30] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 372.260871][ T52] Bluetooth: hci6: command tx timeout [ 372.273572][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.281702][ T30] usb 5-1: Product: syz [ 372.290164][ T30] usb 5-1: Manufacturer: syz [ 372.295085][ T30] usb 5-1: SerialNumber: syz [ 372.323413][ T30] usb 5-1: config 0 descriptor?? [ 372.353193][ T30] smsc75xx v1.0.0 [ 372.415168][ T4521] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 372.462073][ T4521] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 372.472380][ T5926] usb 1-1: USB disconnect, device number 15 [ 372.528242][ T4521] bond0 (unregistering): Released all slaves [ 372.690490][ T8389] chnl_net:caif_netlink_parms(): no params data found [ 373.025099][ T30] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 373.049130][ T30] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 373.237247][ T30] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 373.321098][ T30] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 373.374964][ T30] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 373.433992][ T30] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 373.592654][ T30] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -32 [ 373.824523][ T8389] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.839213][ T8389] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.867912][ T8389] bridge_slave_0: entered allmulticast mode [ 373.889125][ T8389] bridge_slave_0: entered promiscuous mode [ 373.914436][ T8478] tipc: Enabled bearer , priority 0 [ 373.982429][ T8389] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.039219][ T8389] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.071778][ T8389] bridge_slave_1: entered allmulticast mode [ 374.109366][ T8389] bridge_slave_1: entered promiscuous mode [ 374.136091][ T8473] tipc: Resetting bearer [ 374.240481][ T4521] hsr_slave_0: left promiscuous mode [ 374.265924][ T4521] hsr_slave_1: left promiscuous mode [ 374.294324][ T4521] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 374.310220][ T4521] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 374.338943][ T4521] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 374.366634][ T4521] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 374.475580][ T4521] veth1_macvtap: left promiscuous mode [ 374.508025][ T4521] veth0_macvtap: left promiscuous mode [ 374.526131][ T4521] veth1_vlan: left promiscuous mode [ 374.542945][ T4521] veth0_vlan: left promiscuous mode [ 375.329457][ T6001] usb 5-1: USB disconnect, device number 12 [ 376.441042][ T4521] team0 (unregistering): Port device team_slave_1 removed [ 376.588378][ T4521] team0 (unregistering): Port device team_slave_0 removed [ 377.310991][ T8481] syzkaller0: entered promiscuous mode [ 377.317895][ T8481] syzkaller0: entered allmulticast mode [ 377.326238][ T8472] tipc: Resetting bearer [ 377.341354][ T8472] tipc: Disabling bearer [ 378.389174][ T8524] cgroup: fork rejected by pids controller in /syz5 [ 378.653595][ T8389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.691979][ T8510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.589'. [ 378.770414][ T8389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.891762][ T8851] netlink: 28 bytes leftover after parsing attributes in process `syz.4.593'. [ 378.952189][ T8851] netlink: 52 bytes leftover after parsing attributes in process `syz.4.593'. [ 378.984313][ T8389] team0: Port device team_slave_0 added [ 379.024940][ T8389] team0: Port device team_slave_1 added [ 379.174919][ T8389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.198062][ T8389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.292254][ T8389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.340656][ T8389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.356700][ T8389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.431934][ T8389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.629656][ T8389] hsr_slave_0: entered promiscuous mode [ 379.654020][ T8389] hsr_slave_1: entered promiscuous mode [ 381.046275][ T8389] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 381.201711][ T8389] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 381.299028][ T8389] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 381.359952][ T8389] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 381.844840][ T8389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.882695][ T8389] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.908436][ T742] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.915674][ T742] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.998358][ T742] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.005561][ T742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.207930][ T8389] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 382.489800][ T31] audit: type=1326 audit(1765577114.045:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11167 comm="syz.4.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c7f18f749 code=0x7ffc0000 [ 382.616477][ T31] audit: type=1326 audit(1765577114.045:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11167 comm="syz.4.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c7f18f749 code=0x7ffc0000 [ 382.722488][ T31] audit: type=1326 audit(1765577114.105:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11167 comm="syz.4.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6c7f18f749 code=0x7ffc0000 [ 382.807987][ T31] audit: type=1326 audit(1765577114.105:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11167 comm="syz.4.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c7f18f749 code=0x7ffc0000 [ 382.943944][ T31] audit: type=1326 audit(1765577114.105:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11167 comm="syz.4.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c7f18f749 code=0x7ffc0000 [ 383.103814][ T31] audit: type=1326 audit(1765577114.105:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11167 comm="syz.4.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f6c7f18f749 code=0x7ffc0000 [ 383.152299][ T31] audit: type=1326 audit(1765577114.125:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11167 comm="syz.4.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c7f18f749 code=0x7ffc0000 [ 383.235842][ T31] audit: type=1326 audit(1765577114.145:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11167 comm="syz.4.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6c7f18f749 code=0x7ffc0000 [ 383.341965][ T31] audit: type=1326 audit(1765577114.145:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11167 comm="syz.4.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c7f18f749 code=0x7ffc0000 [ 383.399834][ T31] audit: type=1326 audit(1765577114.145:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11167 comm="syz.4.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c7f18f749 code=0x7ffc0000 [ 383.741835][ T8389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.799565][ T4521] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.028891][ T4521] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.209869][ T4521] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.383358][ T4521] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.706492][ T8389] veth0_vlan: entered promiscuous mode [ 385.855156][ T8389] veth1_vlan: entered promiscuous mode [ 386.038587][ T4521] bridge_slave_1: left allmulticast mode [ 386.055850][ T4521] bridge_slave_1: left promiscuous mode [ 386.068052][ T4521] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.174735][ T4521] bridge_slave_0: left allmulticast mode [ 386.180419][ T4521] bridge_slave_0: left promiscuous mode [ 386.202763][ T4521] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.292268][T11222] netlink: 28 bytes leftover after parsing attributes in process `syz.0.607'. [ 386.318743][T11222] netlink: 52 bytes leftover after parsing attributes in process `syz.0.607'. [ 387.580072][ T4521] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 387.602232][ T30] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 387.652038][ T4521] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 387.684008][ T4521] bond0 (unregistering): Released all slaves [ 387.772614][T11224] netlink: 8 bytes leftover after parsing attributes in process `syz.7.608'. [ 387.802817][ T5926] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 387.822026][ T30] usb 6-1: Using ep0 maxpacket: 8 [ 387.900885][ T30] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 387.953459][ T30] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 387.963512][ T30] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 387.981995][ T30] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 387.999126][ T30] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 388.021715][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.034749][ T5926] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 388.045598][ T5926] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 388.132102][ T5926] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 388.141578][ T5926] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 388.152835][ T5926] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 388.212034][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.232077][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 388.284545][ T5926] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 388.303888][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 388.312187][ T5926] usb 5-1: Product: syz [ 388.317686][ T5926] usb 5-1: Manufacturer: syz [ 388.394836][ T5926] cdc_wdm 5-1:1.0: skipping garbage [ 388.422039][ T5926] cdc_wdm 5-1:1.0: skipping garbage [ 388.452184][ T5926] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 388.458228][ T5926] cdc_wdm 5-1:1.0: Unknown control protocol [ 388.783842][ T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 388.951634][ C0] cdc_wdm 5-1:1.0: Unexpected error -71 [ 388.952196][ T5848] usb 5-1: USB disconnect, device number 13 [ 388.957327][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 388.969943][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 388.976016][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 389.073097][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 389.092545][ T10] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 389.133973][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.193330][ T8389] veth0_macvtap: entered promiscuous mode [ 389.212805][ T10] usb 2-1: config 0 descriptor?? [ 389.301216][ T8389] veth1_macvtap: entered promiscuous mode [ 389.448275][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 389.500613][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 389.537934][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 389.574862][ T10] usb 2-1: media controller created [ 389.656465][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 389.798547][ T8389] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 390.433661][ T30] usb 6-1: usb_control_msg returned -71 [ 390.461961][ T30] usbtmc 6-1:16.0: can't read capabilities [ 390.479283][ T30] usb 6-1: USB disconnect, device number 19 [ 390.643445][ T10] stb0899_attach: Driver disabled by Kconfig [ 390.681979][ T10] az6027: no front-end attached [ 390.681979][ T10] [ 390.693720][ T10] az6027: usb out operation failed. (-71) [ 390.699454][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 390.715903][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input10 [ 390.755197][ T10] dvb-usb: schedule remote query interval to 400 msecs. [ 390.778507][ T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 390.805232][ T10] usb 2-1: USB disconnect, device number 14 [ 391.081618][ T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 391.106938][ T8389] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 391.168528][ T37] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.234982][ T37] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.335757][T11272] netlink: 'syz.0.618': attribute type 12 has an invalid length. [ 391.570218][ T4315] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.681102][T11290] fuse: Bad value for 'fd' [ 392.316966][ T4315] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.727986][T11272] set match dimension is over the limit! [ 393.092013][ T6104] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 393.228174][ T4521] hsr_slave_0: left promiscuous mode [ 393.242460][ T6104] usb 2-1: Using ep0 maxpacket: 8 [ 393.248000][ T4521] hsr_slave_1: left promiscuous mode [ 393.256476][ T4521] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 393.257304][ T6104] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 393.340883][ T6104] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 393.344201][ T4521] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.414172][ T6104] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 393.455069][ T6104] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 393.524488][ T4521] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.532458][ T4521] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.532489][ T6104] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 393.594262][ T6104] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.662066][ T4521] veth1_macvtap: left promiscuous mode [ 393.667727][ T4521] veth0_macvtap: left promiscuous mode [ 393.682124][ T4521] veth1_vlan: left promiscuous mode [ 393.693604][ T4521] veth0_vlan: left promiscuous mode [ 394.052385][ T8198] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 394.217217][ T8198] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 394.266723][ T8198] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 394.302903][ T8198] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 394.331372][ T8198] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 394.377080][ T8198] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 394.396204][ T8198] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 394.426581][ T8198] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 394.435591][ T8198] usb 1-1: Product: syz [ 394.439929][ T8198] usb 1-1: Manufacturer: syz [ 394.461900][ T8198] cdc_wdm 1-1:1.0: skipping garbage [ 394.487406][ T8198] cdc_wdm 1-1:1.0: skipping garbage [ 394.503460][ T8198] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 394.516689][ T8198] cdc_wdm 1-1:1.0: Unknown control protocol [ 394.965754][ C0] cdc_wdm 1-1:1.0: Unexpected error -71 [ 394.971425][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 394.978119][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 394.984559][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 394.991166][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 394.997544][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 395.004166][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 395.010506][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 395.017114][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 395.023651][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 395.030256][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 395.037324][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 395.043933][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 395.050226][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 395.056827][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 395.063123][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 395.069721][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 395.075962][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 395.082567][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 395.090237][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 395.096861][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 395.113773][ T8198] usb 1-1: USB disconnect, device number 16 [ 395.119889][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 396.164651][ T4521] team0 (unregistering): Port device team_slave_1 removed [ 396.305763][ T6104] usb 2-1: usb_control_msg returned -71 [ 396.328800][ T6104] usbtmc 2-1:16.0: can't read capabilities [ 396.329390][ T4521] team0 (unregistering): Port device team_slave_0 removed [ 396.346889][ T6104] usb 2-1: USB disconnect, device number 15 [ 398.041952][ T6104] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 398.231941][ T6104] usb 2-1: Using ep0 maxpacket: 32 [ 398.313257][ T6104] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 398.341928][ T6104] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.394965][ T6104] usb 2-1: config 0 descriptor?? [ 398.641118][ T6104] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 398.669820][ T6104] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 398.707879][ T6104] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 398.733595][ T6104] usb 2-1: media controller created [ 398.764882][ T6104] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 398.894603][T11328] netlink: 8 bytes leftover after parsing attributes in process `syz.7.630'. [ 399.671967][ T6104] stb0899_attach: Driver disabled by Kconfig [ 399.696990][ T6104] az6027: no front-end attached [ 399.696990][ T6104] [ 399.721064][ T6104] az6027: usb out operation failed. (-71) [ 399.728389][ T6104] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 399.746318][ T6104] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input11 [ 399.788887][ T31] kauditd_printk_skb: 12 callbacks suppressed [ 399.788911][ T31] audit: type=1326 audit(1765577131.335:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11349 comm="syz.5.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c9a78f749 code=0x7ffc0000 [ 399.839944][ T6104] dvb-usb: schedule remote query interval to 400 msecs. [ 399.868733][ T6104] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 399.938720][ T6104] usb 2-1: USB disconnect, device number 16 [ 399.955437][ T31] audit: type=1326 audit(1765577131.335:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11349 comm="syz.5.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c9a78f749 code=0x7ffc0000 [ 400.028682][ T31] audit: type=1326 audit(1765577131.345:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11349 comm="syz.5.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5c9a78f749 code=0x7ffc0000 [ 400.119607][ T31] audit: type=1326 audit(1765577131.345:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11349 comm="syz.5.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c9a78f749 code=0x7ffc0000 [ 400.161163][ T31] audit: type=1326 audit(1765577131.345:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11349 comm="syz.5.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c9a78f749 code=0x7ffc0000 [ 400.230115][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.258338][ T31] audit: type=1326 audit(1765577131.385:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11349 comm="syz.5.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f5c9a78f749 code=0x7ffc0000 [ 400.303622][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.365052][ T31] audit: type=1326 audit(1765577131.385:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11349 comm="syz.5.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c9a78f749 code=0x7ffc0000 [ 400.451349][ T6271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.475622][ T6271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.479543][ T31] audit: type=1326 audit(1765577131.385:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11349 comm="syz.5.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c9a78f749 code=0x7ffc0000 [ 400.593286][ T31] audit: type=1326 audit(1765577131.405:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11349 comm="syz.5.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5c9a78f749 code=0x7ffc0000 [ 400.703536][ T31] audit: type=1326 audit(1765577131.405:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11349 comm="syz.5.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c9a78f749 code=0x7ffc0000 [ 400.998111][ T6104] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 401.436279][ T6104] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 401.652210][ T6104] usb 2-1: Using ep0 maxpacket: 32 [ 401.681341][ T6104] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 401.728118][ T6104] usb 2-1: config 0 has no interface number 0 [ 401.768336][ T6104] usb 2-1: config 0 interface 184 has no altsetting 0 [ 401.824926][ T6104] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 401.901973][ T6104] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.046001][ T6104] usb 2-1: Product: syz [ 402.074931][ T6104] usb 2-1: Manufacturer: syz [ 402.090737][T11388] lo speed is unknown, defaulting to 1000 [ 402.171922][ T6104] usb 2-1: SerialNumber: syz [ 402.221985][ T6104] usb 2-1: config 0 descriptor?? [ 402.329666][ T6104] smsc75xx v1.0.0 [ 403.118205][ T6104] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 403.201847][ T6104] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 403.421401][ T6104] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 403.567437][ T6104] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 403.624151][ T6104] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 403.928412][ T6104] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 404.075758][ T6104] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -32 [ 405.492253][ T5958] usb 2-1: USB disconnect, device number 17 [ 406.291966][ T788] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 406.512649][ T788] usb 8-1: Using ep0 maxpacket: 32 [ 406.572628][ T788] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 406.581729][ T788] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.651092][ T788] usb 8-1: config 0 descriptor?? [ 406.681827][T11440] Driver unsupported XDP return value 0 on prog (id 54) dev N/A, expect packet loss! [ 406.906348][ T788] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 406.959681][ T788] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 407.018327][ T788] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 407.045814][ T788] usb 8-1: media controller created [ 407.108401][ T788] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 408.101930][ T788] stb0899_attach: Driver disabled by Kconfig [ 408.124896][ T788] az6027: no front-end attached [ 408.124896][ T788] [ 408.140718][ T788] az6027: usb out operation failed. (-71) [ 408.158357][ T788] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 408.308077][ T788] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input12 [ 408.405043][ T788] dvb-usb: schedule remote query interval to 400 msecs. [ 408.446104][ T788] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 408.609828][ T788] usb 8-1: USB disconnect, device number 5 [ 409.542079][ T6393] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 409.752131][ T6393] usb 6-1: Using ep0 maxpacket: 32 [ 409.772279][ T6393] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 409.815688][ T6393] usb 6-1: config 0 has no interface number 0 [ 409.837390][ T6393] usb 6-1: config 0 interface 184 has no altsetting 0 [ 409.996223][ T6393] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 410.046282][ T6393] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.117944][ T6393] usb 6-1: Product: syz [ 410.129518][ T788] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 410.158581][ T6393] usb 6-1: Manufacturer: syz [ 410.163221][ T6393] usb 6-1: SerialNumber: syz [ 410.503175][ T6393] usb 6-1: config 0 descriptor?? [ 410.596824][ T6393] smsc75xx v1.0.0 [ 410.725808][T11481] netlink: 8 bytes leftover after parsing attributes in process `syz.7.660'. [ 411.243243][ T6393] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 411.411973][ T6393] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 411.472699][ T6393] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 411.523676][ T6393] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 411.646297][ T6393] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 411.782168][ T6393] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 411.824492][ T6393] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -32 [ 412.431460][T11505] pim6reg1: entered promiscuous mode [ 412.465323][T11505] pim6reg1: entered allmulticast mode [ 413.262286][ T6001] usb 6-1: USB disconnect, device number 20 [ 414.021078][T11537] netlink: 16 bytes leftover after parsing attributes in process `syz.5.677'. [ 416.202518][T11559] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 416.214503][T11559] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 416.235557][T11559] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 416.245387][T11559] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 416.259829][T11559] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 418.332163][ T52] Bluetooth: hci3: command tx timeout [ 418.363413][ T24] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 418.572113][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 418.631952][ T24] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 418.642082][ T24] usb 1-1: config 0 has no interface number 0 [ 418.651030][ T24] usb 1-1: config 0 interface 184 has no altsetting 0 [ 418.687709][ T24] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 418.698814][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.707205][ T24] usb 1-1: Product: syz [ 418.711428][ T24] usb 1-1: Manufacturer: syz [ 418.716364][ T24] usb 1-1: SerialNumber: syz [ 418.730416][ T24] usb 1-1: config 0 descriptor?? [ 418.832967][ T24] smsc75xx v1.0.0 [ 419.071741][T11556] sit0: entered allmulticast mode [ 419.264606][T11554] lo speed is unknown, defaulting to 1000 [ 419.334643][T11558] lo speed is unknown, defaulting to 1000 [ 419.446285][ T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 419.461792][ T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 419.601665][ T8312] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.646976][ T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 419.658354][ T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 419.678243][ T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 419.690995][ T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 419.719490][ T24] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 419.881412][T11584] pim6reg1: entered promiscuous mode [ 419.896615][T11584] pim6reg1: entered allmulticast mode [ 420.046926][ T8312] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.256344][ T8312] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.422633][ T52] Bluetooth: hci3: command tx timeout [ 420.428625][ T8312] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.376045][ T8198] usb 1-1: USB disconnect, device number 17 [ 421.553196][T11558] chnl_net:caif_netlink_parms(): no params data found [ 421.625718][ T8312] bridge_slave_1: left allmulticast mode [ 421.656202][T11612] [ 421.660017][T11612] ============================= [ 421.660158][ T8312] bridge_slave_1: left promiscuous mode [ 421.665362][T11612] WARNING: suspicious RCU usage [ 421.665381][T11612] syzkaller #0 Not tainted [ 421.677162][ T8312] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.680950][T11612] ----------------------------- [ 421.680964][T11612] kernel/events/callchain.c:163 suspicious rcu_dereference_check() usage! [ 421.701953][T11612] [ 421.701953][T11612] other info that might help us debug this: [ 421.701953][T11612] [ 421.712237][T11612] [ 421.712237][T11612] rcu_scheduler_active = 2, debug_locks = 1 [ 421.720308][T11612] 1 lock held by syz.0.698/11612: [ 421.725475][T11612] #0: ffffffff8e3c8c80 (rcu_read_lock_trace){....}-{0:0}, at: bpf_prog_test_run_syscall+0x357/0xb20 [ 421.736591][T11612] [ 421.736591][T11612] stack backtrace: [ 421.742558][T11612] CPU: 0 UID: 0 PID: 11612 Comm: syz.0.698 Not tainted syzkaller #0 PREEMPT(full) [ 421.742604][T11612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 421.742626][T11612] Call Trace: [ 421.742638][T11612] [ 421.742651][T11612] dump_stack_lvl+0x16c/0x1f0 [ 421.742702][T11612] lockdep_rcu_suspicious+0x166/0x260 [ 421.742750][T11612] get_callchain_entry+0x278/0x3f0 [ 421.742801][T11612] get_perf_callchain+0x2d6/0x980 [ 421.742841][T11612] ? __entry_text_end+0x1020b6/0x1020b9 [ 421.742884][T11612] ? finish_task_switch.isra.0+0x130/0xbd0 [ 421.742949][T11612] ? __pfx_get_perf_callchain+0x10/0x10 [ 421.742991][T11612] ? srso_alias_return_thunk+0x5/0xfbef5 [ 421.743041][T11612] ? trace_sched_exit_tp+0xd1/0x110 [ 421.743079][T11612] ? srso_alias_return_thunk+0x5/0xfbef5 [ 421.743130][T11612] ? srso_alias_return_thunk+0x5/0xfbef5 [ 421.743174][T11612] ? __lock_acquire+0x436/0x2890 [ 421.743227][T11612] __bpf_get_stack+0x74b/0x950 [ 421.743277][T11612] ? __pfx___bpf_get_stack+0x10/0x10 [ 421.743321][T11612] ? srso_alias_return_thunk+0x5/0xfbef5 [ 421.743375][T11612] bpf_get_stack+0x32/0x40 [ 421.743416][T11612] bpf_get_stack_raw_tp+0x1dd/0x280 [ 421.743467][T11612] bpf_prog_aa1f08ea8b241262+0x46/0x4e [ 421.743500][T11612] bpf_prog_test_run_syscall+0x461/0xb20 [ 421.743551][T11612] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 421.743598][T11612] ? srso_alias_return_thunk+0x5/0xfbef5 [ 421.743642][T11612] ? fput+0x70/0xf0 [ 421.743692][T11612] ? srso_alias_return_thunk+0x5/0xfbef5 [ 421.743735][T11612] ? __bpf_prog_get+0x97/0x2a0 [ 421.743795][T11612] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 421.743842][T11612] __sys_bpf+0x1035/0x4980 [ 421.743886][T11612] ? srso_alias_return_thunk+0x5/0xfbef5 [ 421.743929][T11612] ? futex_private_hash_put+0x160/0x1b0 [ 421.743984][T11612] ? __pfx___sys_bpf+0x10/0x10 [ 421.744037][T11612] ? __pfx_futex_wait+0x10/0x10 [ 421.744070][T11612] ? srso_alias_return_thunk+0x5/0xfbef5 [ 421.744126][T11612] ? srso_alias_return_thunk+0x5/0xfbef5 [ 421.744170][T11612] ? rcu_is_watching+0x12/0xc0 [ 421.744206][T11612] ? __schedule+0x10b9/0x6150 [ 421.744246][T11612] ? srso_alias_return_thunk+0x5/0xfbef5 [ 421.744290][T11612] ? __schedule+0x114c/0x6150 [ 421.744335][T11612] ? srso_alias_return_thunk+0x5/0xfbef5 [ 421.744379][T11612] ? do_futex+0x122/0x350 [ 421.744463][T11612] ? srso_alias_return_thunk+0x5/0xfbef5 [ 421.744507][T11612] ? xfd_validate_state+0x61/0x180 [ 421.744543][T11612] ? srso_alias_return_thunk+0x5/0xfbef5 [ 421.744599][T11612] __x64_sys_bpf+0x78/0xc0 [ 421.744643][T11612] ? srso_alias_return_thunk+0x5/0xfbef5 [ 421.744687][T11612] ? lockdep_hardirqs_on+0x7c/0x110 [ 421.744735][T11612] do_syscall_64+0xcd/0xf80 [ 421.744786][T11612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.744823][T11612] RIP: 0033:0x7f63ebb8f749 [ 421.744851][T11612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 421.744887][T11612] RSP: 002b:00007f63ecac7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 421.744922][T11612] RAX: ffffffffffffffda RBX: 00007f63ebde5fa0 RCX: 00007f63ebb8f749 [ 421.744947][T11612] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 421.744970][T11612] RBP: 00007f63ebc13f91 R08: 0000000000000000 R09: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 421.744993][T11612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 421.745016][T11612] R13: 00007f63ebde6038 R14: 00007f63ebde5fa0 R15: 00007ffdf2427a58 [ 421.745071][T11612] [ 422.495213][ T8312] bridge_slave_0: left allmulticast mode [ 422.500914][ T8312] bridge_slave_0: left promiscuous mode [ 422.508829][ T52] Bluetooth: hci3: command tx timeout [ 422.522085][ T8312] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.678670][ T8312] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 423.689667][ T8312] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 423.699993][ T8312] bond0 (unregistering): Released all slaves [ 424.205907][ T8312] hsr_slave_0: left promiscuous mode [ 424.221166][ T8312] hsr_slave_1: left promiscuous mode [ 424.227390][ T8312] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 424.238604][ T8312] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 424.247005][ T8312] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 424.255767][ T8312] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.280901][ T8312] veth1_macvtap: left promiscuous mode [ 424.287709][ T8312] veth0_macvtap: left promiscuous mode [ 424.294091][ T8312] veth1_vlan: left promiscuous mode [ 424.299417][ T8312] veth0_vlan: left promiscuous mode [ 424.767905][ T8312] team0 (unregistering): Port device team_slave_1 removed [ 424.808328][ T8312] team0 (unregistering): Port device team_slave_0 removed [ 425.504259][ T8312] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.565972][ T8312] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.638215][ T8312] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.738394][ T8312] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.921397][ T8312] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.998214][ T8312] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.073092][ T8312] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.142317][ T8312] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.326820][ T8312] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.405118][ T8312] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.461537][ T8312] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.553826][ T8312] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.776575][ T8312] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.861107][ T8312] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.950221][ T8312] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.045646][ T8312] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.231825][ T8312] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.301219][ T8312] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.380735][ T8312] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.470566][ T8312] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.635750][ T8312] bridge_slave_1: left allmulticast mode [ 427.641433][ T8312] bridge_slave_1: left promiscuous mode [ 427.648170][ T8312] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.659620][ T8312] bridge_slave_0: left allmulticast mode [ 427.666600][ T8312] bridge_slave_0: left promiscuous mode [ 427.672799][ T8312] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.685363][ T8312] bridge_slave_1: left allmulticast mode [ 427.691012][ T8312] bridge_slave_1: left promiscuous mode [ 427.704077][ T8312] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.714275][ T8312] bridge_slave_0: left allmulticast mode [ 427.719930][ T8312] bridge_slave_0: left promiscuous mode [ 427.727099][ T8312] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.739371][ T8312] bridge_slave_1: left allmulticast mode [ 427.745134][ T8312] bridge_slave_1: left promiscuous mode [ 427.750872][ T8312] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.765758][ T8312] bridge_slave_0: left allmulticast mode [ 427.771497][ T8312] bridge_slave_0: left promiscuous mode [ 427.779044][ T8312] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.792461][ T8312] bridge_slave_1: left allmulticast mode [ 427.798162][ T8312] bridge_slave_1: left promiscuous mode [ 427.806786][ T8312] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.820823][ T8312] bridge_slave_0: left allmulticast mode [ 427.833346][ T8312] bridge_slave_0: left promiscuous mode [ 427.839091][ T8312] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.867500][ T8312] bridge_slave_1: left allmulticast mode [ 427.874580][ T8312] bridge_slave_1: left promiscuous mode [ 427.880341][ T8312] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.890466][ T8312] bridge_slave_0: left allmulticast mode [ 427.897210][ T8312] bridge_slave_0: left promiscuous mode [ 427.903756][ T8312] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.234415][ T8312] bond0 (unregistering): Released all slaves [ 428.465803][ T8312] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 428.477007][ T8312] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 428.487549][ T8312] bond0 (unregistering): Released all slaves [ 428.710315][ T8312] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 428.722499][ T8312] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 428.734992][ T8312] bond0 (unregistering): Released all slaves [ 428.946943][ T8312] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 428.957912][ T8312] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 428.968837][ T8312] bond0 (unregistering): Released all slaves [ 429.168373][ T8312] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 429.179698][ T8312] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 429.190144][ T8312] bond0 (unregistering): Released all slaves [ 429.407406][ T8312] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 429.418321][ T8312] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 429.428894][ T8312] bond0 (unregistering): Released all slaves [ 429.607891][ T8312] tipc: Left network mode [ 430.538560][ T8312] hsr_slave_0: left promiscuous mode [ 430.547876][ T8312] hsr_slave_1: left promiscuous mode [ 430.556479][ T8312] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 430.564275][ T8312] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 430.572809][ T8312] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 430.580194][ T8312] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 430.594664][ T8312] hsr_slave_0: left promiscuous mode [ 430.600848][ T8312] hsr_slave_1: left promiscuous mode [ 430.607438][ T8312] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 430.615138][ T8312] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 430.624381][ T8312] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 430.631764][ T8312] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 430.646419][ T8312] hsr_slave_0: left promiscuous mode [ 430.653646][ T8312] hsr_slave_1: left promiscuous mode [ 430.659702][ T8312] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 430.668677][ T8312] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 430.677273][ T8312] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 430.685717][ T8312] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 430.700716][ T8312] hsr_slave_0: left promiscuous mode [ 430.707535][ T8312] hsr_slave_1: left promiscuous mode [ 430.714663][ T8312] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 430.723066][ T8312] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 430.731198][ T8312] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 430.739266][ T8312] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 430.755385][ T8312] hsr_slave_0: left promiscuous mode [ 430.761478][ T8312] hsr_slave_1: left promiscuous mode [ 430.768019][ T8312] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 430.775765][ T8312] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 430.784953][ T8312] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 430.792611][ T8312] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 430.874710][ T8312] veth1_macvtap: left promiscuous mode [ 430.880294][ T8312] veth0_macvtap: left promiscuous mode [ 430.886445][ T8312] veth1_vlan: left promiscuous mode [ 430.891781][ T8312] veth0_vlan: left promiscuous mode [ 430.899003][ T8312] veth1_macvtap: left promiscuous mode [ 430.904645][ T8312] veth0_macvtap: left promiscuous mode [ 430.910255][ T8312] veth1_vlan: left promiscuous mode [ 430.916138][ T8312] veth0_vlan: left promiscuous mode [ 430.926528][ T8312] veth1_macvtap: left promiscuous mode [ 430.932175][ T8312] veth0_macvtap: left promiscuous mode [ 430.938367][ T8312] veth1_vlan: left promiscuous mode [ 430.944400][ T8312] veth0_vlan: left promiscuous mode [ 430.951120][ T8312] veth1_macvtap: left promiscuous mode [ 430.957260][ T8312] veth0_macvtap: left promiscuous mode [ 430.963281][ T8312] veth1_vlan: left promiscuous mode [ 430.968683][ T8312] veth0_vlan: left promiscuous mode [ 430.977512][ T8312] veth1_macvtap: left promiscuous mode [ 430.983170][ T8312] veth0_macvtap: left promiscuous mode [ 430.988822][ T8312] veth1_vlan: left promiscuous mode [ 430.994774][ T8312] veth0_vlan: left promiscuous mode