last executing test programs: 28m53.982859637s ago: executing program 0 (id=104): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendmsg(r0, &(0x7f0000001040)={0x0, 0x0, 0x0}, 0x1) r1 = getpgid(0x0) r2 = syz_pidfd_open(r1, 0x0) r3 = pidfd_getfd(r2, r2, 0x0) setns(r3, 0x66020000) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r3, 0x0, 0x25, 0x5}, 0x14) sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x200, {0x0, 0x0, 0x0, r8, {0xfff2, 0x9}, {0x10}, {0x9, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 28m49.538349482s ago: executing program 0 (id=109): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x145, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x58, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x58}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r7 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x3) write$uinput_user_dev(r7, 0x0, 0x0) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, &(0x7f0000000040), 0x1) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) syz_usb_connect$uac1(0x3, 0xa2, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) 28m43.511333007s ago: executing program 0 (id=116): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='nv', 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x141000, 0x0) sched_getattr(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 28m35.284854701s ago: executing program 4 (id=123): rt_sigprocmask(0x2, &(0x7f0000000080)={[0xffffffffffffffff]}, 0x0, 0x8) r0 = gettid() openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20044000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000180)={r6, 0x1e}, 0x0, &(0x7f0000000240)="35013d35675f0b8c408f2edcec63a4240fbc459f9aedd56aa6fa779ffa94", &(0x7f0000000380)) ptrace$pokeuser(0x6, r5, 0x388, 0x41d9fda7) rt_tgsigqueueinfo(0x0, r0, 0x3, &(0x7f00000003c0)={0x1d, 0x4, 0x4}) 28m32.616651201s ago: executing program 4 (id=126): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf8"], 0x0}, 0x0) 28m32.448266705s ago: executing program 0 (id=127): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000040)={0xf0f024}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) 28m28.761033107s ago: executing program 4 (id=134): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x141000, 0x0) sched_getattr(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 28m25.355917559s ago: executing program 0 (id=139): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='nv', 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x141000, 0x0) sched_getattr(0x0, 0x0, 0x0, 0x0) ioctl$HCIINQUIRY(r4, 0x400448ca, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 28m21.438204563s ago: executing program 0 (id=142): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='nv', 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 28m18.15722073s ago: executing program 4 (id=148): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf8"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000f00)={0x1, "a2"}) 28m13.858469406s ago: executing program 4 (id=154): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) write$binfmt_format(r0, &(0x7f0000000100)='0\x00', 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) write$qrtrtun(r0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 28m12.598748917s ago: executing program 4 (id=157): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x22, &(0x7f0000000040)=0x1, 0x4) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) fcntl$dupfd(r0, 0x0, r2) connect$inet6(r2, &(0x7f0000002140)={0xa, 0x4e28, 0x80000000, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 28m3.377306326s ago: executing program 32 (id=142): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='nv', 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 27m56.329266673s ago: executing program 33 (id=157): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x22, &(0x7f0000000040)=0x1, 0x4) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) fcntl$dupfd(r0, 0x0, r2) connect$inet6(r2, &(0x7f0000002140)={0xa, 0x4e28, 0x80000000, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 27m27.22217306s ago: executing program 1 (id=203): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x141000, 0x0) sched_getattr(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 27m23.767802348s ago: executing program 1 (id=206): mkdirat(0xffffffffffffff9c, 0x0, 0x1c1) mount(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socket$netlink(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x4000, 0x1c, 0x10, 0x1a001000000}, [@ldst={0x5, 0x0, 0x5, 0x0, 0x0, 0x0, 0xe6d61e00}]}, 0x0, 0x2}, 0x94) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@var={0x2, 0x0, 0x0, 0xe, 0x2}, @volatile={0x0, 0x0, 0x0, 0x2}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x38}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x8, 0x8, 0x90, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x1, 0x2}, 0x48) 27m21.35404332s ago: executing program 1 (id=208): rt_sigprocmask(0x2, &(0x7f0000000080)={[0xffffffffffffffff]}, 0x0, 0x8) r0 = gettid() openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20044000) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000180)={r6, 0x1e}, 0x0, &(0x7f0000000240)="35013d35675f0b8c408f2edcec63a4240fbc459f9aedd56aa6fa779ffa94", &(0x7f0000000380)) ptrace$pokeuser(0x6, r5, 0x388, 0x41d9fda7) r7 = getpid() rt_tgsigqueueinfo(r7, r0, 0x3, &(0x7f00000003c0)={0x1d, 0x4, 0x4}) r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$loop(0x0, 0x3, 0x20080) ioctl$LOOP_GET_STATUS64(r8, 0x4c05, &(0x7f0000000500)) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f00000004c0)={'syz_tun\x00', &(0x7f0000000280)=@ethtool_drvinfo={0x3, "80c1ea18c60ae80c9f47de6130590a2b5f45d3b8a34577ebce27ff60d0efa7f3", "9ab28f3b42b6ec142a85e1f2482d7fd59ba5c4d125d50e5aa635bdfbeb89b66c", "e90056816391adfc327222c3e8f8b9e7ce12b8a525e81ff65144daee5036eeaf", "fc089027e46663b854b4c592cbd43e537013872f9e1f945c9159338b1a47cf10", "38879d6c1675723af97bd0fcf2a34de372fdf5f42a4e716c5be23c246f007d01", "89e077cd410ed504dc7da9b6", 0x4, 0xffff, 0x18, 0x4, 0xffffff81}}) 27m15.778152964s ago: executing program 1 (id=211): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) setreuid(0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000000c0)) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r3, &(0x7f0000002140)={0xa, 0x4e28, 0x80000000, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 27m13.850762695s ago: executing program 1 (id=213): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b0000000200000009000100"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) r3 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x50, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x16}) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x0) 27m12.64282554s ago: executing program 1 (id=215): getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x74fb01, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x60000) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004060}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000000300)={'syzkaller0\x00', @random="2b0100004ec6"}) 26m57.075370465s ago: executing program 34 (id=215): getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x74fb01, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x60000) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004060}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000000300)={'syzkaller0\x00', @random="2b0100004ec6"}) 25m32.646712624s ago: executing program 3 (id=380): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat(0xffffffffffffff9c, 0x0, 0x107842, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x33fe0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x8015, 0x3, 'dh\x00', 0x1, 0x4, 0x6d}, 0x2c) socket$inet_sctp(0x2, 0x5, 0x84) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$cgroup_int(r3, &(0x7f0000000040)=0x1f00, 0x12) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x40, 0xfe}, {0x6, 0x0, 0x0, 0x2000000}]}, 0x10) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x90) inotify_init1(0x800) 25m31.535595904s ago: executing program 3 (id=382): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 25m30.400914141s ago: executing program 3 (id=384): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r2}, 0x8) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000b00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x2, [@func_proto, @enum={0x8}, @struct={0x6, 0x3, 0x0, 0x4, 0x1, 0x400, [{0x3, 0x0, 0x3}, {0xb, 0x2, 0x7}, {0x5, 0x3, 0xfffffffa}]}]}}, 0x0, 0x62, 0x0, 0x1, 0xce}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x4008000) r4 = socket(0x10, 0x803, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2000, &(0x7f0000003700)={0x77359400}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbff, {{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x0, 0xfffe, 0x0, 0xa, 0x0, 0x20, 0x87}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0xfffffffffffffffb}, {0xffffffffffffffff, 0x1000, 0x200000000000000, 0x3}, 0x800, 0x6e6bb0}}, 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x8008010) syz_emit_ethernet(0x46, &(0x7f0000000180)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x10, 0x3a, 0xff, @local, @private2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x11, 0xe, 0xc18, 0x5932}}}}}}, 0x0) 25m29.195839782s ago: executing program 3 (id=386): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x2c, r0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x10, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xb230}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2004c015}, 0x810) 25m28.934173774s ago: executing program 3 (id=387): r0 = io_uring_setup(0x1cf1, &(0x7f0000000280)={0x0, 0xa9d, 0x80, 0x0, 0xf2}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={0x0, 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000200)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0xd4, &(0x7f00000002c0)={0x0, 0xe, 0x4, 0x9}, 0x10}, 0x94) r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x82) fchdir(r3) write$binfmt_elf32(r3, 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b87af) 25m28.806861871s ago: executing program 3 (id=389): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a80)=@newtaction={0x184, 0x30, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [{0xec, 0x1, [@m_simple={0xe8, 0x18, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x9, 0x3, '\t\x00\x00\x00\x00'}]}, {0xad, 0x6, "c92acebef543cf5eac95ff99fdfe71226f0f8ca3945cf1e27303fef4d7edee9dc07b9c204234f1518f815a1e6f9900be0653c30ee7044fc49940d26166aca9768a60e2633236607ed8e41497a644f35e0d2494ec2432e189bde8a31ee3c25d98a9d5eabb59832b6b5d302ef8dbee798a364094b288f82acbcd5acc3d37148318dc5491c9505a46e3387d31e31c2a8f31a806aff980e9556c76256efb4a5cd9c0b1d305d220c3ba3063"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}, {0x84, 0x1, [@m_simple={0x40, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x11, 0x6, "3ac47d8f66b9ada606aa60a7fc"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ct={0x40, 0x17, 0x0, 0x0, {{0x7}, {0x18, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @remote}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x4000880}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 25m13.468840026s ago: executing program 35 (id=389): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a80)=@newtaction={0x184, 0x30, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [{0xec, 0x1, [@m_simple={0xe8, 0x18, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x9, 0x3, '\t\x00\x00\x00\x00'}]}, {0xad, 0x6, "c92acebef543cf5eac95ff99fdfe71226f0f8ca3945cf1e27303fef4d7edee9dc07b9c204234f1518f815a1e6f9900be0653c30ee7044fc49940d26166aca9768a60e2633236607ed8e41497a644f35e0d2494ec2432e189bde8a31ee3c25d98a9d5eabb59832b6b5d302ef8dbee798a364094b288f82acbcd5acc3d37148318dc5491c9505a46e3387d31e31c2a8f31a806aff980e9556c76256efb4a5cd9c0b1d305d220c3ba3063"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}, {0x84, 0x1, [@m_simple={0x40, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x11, 0x6, "3ac47d8f66b9ada606aa60a7fc"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ct={0x40, 0x17, 0x0, 0x0, {{0x7}, {0x18, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @remote}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x4000880}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 37.24857413s ago: executing program 7 (id=3460): r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000009c0)=[{0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x20000000}], 0x1, 0x24000040) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f", 0x58}, {&(0x7f0000000b00)="2112f3980a4c0902dcb1918da23fb18a9d89c4f0793b7c45b722417a6401d606e033776833d550074c2b667b4e127ea79880d00aeee8d16ca6f011603c22355681cd2e9d0d8a2fea2e9b525389d2e7b95aa129fef95245bffd1ccc58bb9ca56a50cd0b4da05e78cc4aef1e9157a66caefb0ba968710bfbc7baabaa3b06bf6e5fe4fe8ebcbc81a4dbda4b1b65ea2d852cda4881d7ceda7dcbef58471a951ca1851b50dd9276e0ab06fa0e23d023766294c911bff4e6d33acdd316322f4d5a1a4eb5ae51e511f2923f3318d83b9b438b20e0560a4834edb911911c7b557e37e94f6f0a2f1d291ae3049df23212a4b50eeb9c9a0901e8", 0xf5}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000c00)}, {&(0x7f0000000cc0)="a659d6cd13b743c3883fa66b26998868e129449c58fe04d445f9c63392ec1473c4e34a11a18e0fa2c3ff1fefe4200a23a2befe7c334b021bbad3522f8f3f36083d885cb29fa1829ff0caa3eb06fcfa1cc00d19092f9d6d93590fd4671bce11ec7b2f3912c5fe0804a2647a4de1f6d804e2da914136a7a4b169f152ec6af9204c3465d58e410029e4f28574ebfef1ac2fc1d17d5133793c9e9fbe4889c2a1427cb84332f6d4dad0f47d084b27c6c5afe46d605c7c33fa61fee2bdf78c16167904fab9a81bbb8a0ee73a56e9a67549a2701def6cc0224db8d147e08f15ec7d6f38efb1ad1253", 0xe5}], 0x3, 0x0, 0x0, 0x1}], 0x2, 0x4004000) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 37.009172948s ago: executing program 7 (id=3463): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f", 0x58}, {&(0x7f0000000b00)="2112f3980a4c0902dcb1918da23fb18a9d89c4f0793b7c45b722417a6401d606e033776833d550074c2b667b4e127ea79880d00aeee8d16ca6f011603c22355681cd2e9d0d8a2fea2e9b525389d2e7b95aa129fef95245bffd1ccc58bb9ca56a50cd0b4da05e78cc4aef1e9157a66caefb0ba968710bfbc7baabaa3b06bf6e5fe4fe8ebcbc81a4dbda4b1b65ea2d852cda4881d7ceda7dcbef58471a951ca1851b50dd9276e0ab06fa0e23d023766294c911bff4e6d33acdd316322f4d5a1a4eb5ae51e511f2923f3318d83b9b438b20e0560a4834edb911911c7b557e37e94f6f0a2f1d291ae3049df23212a4b50eeb9c9a0901e8", 0xf5}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000c00)}, {&(0x7f0000000cc0)="a659d6cd13b743c3883fa66b26998868e129449c58fe04d445f9c63392ec1473c4e34a11a18e0fa2c3ff1fefe4200a23a2befe7c334b021bbad3522f8f3f36083d885cb29fa1829ff0caa3eb06fcfa1cc00d19092f9d6d93590fd4671bce11ec7b2f3912c5fe0804a2647a4de1f6d804e2da914136a7a4b169f152ec6af9204c3465d58e410029e4f28574ebfef1ac2fc1d17d5133793c9e9fbe4889c2a1427cb84332f6d4dad0f47d084b27c6c5afe46d605c7c33fa61fee2bdf78c16", 0xbd}], 0x3, 0x0, 0x0, 0x1}], 0x2, 0x4004000) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 36.863278306s ago: executing program 7 (id=3466): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ustat(0x801, &(0x7f0000000300)) socket$inet(0x2, 0x3, 0x8d) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r3], 0x80}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c00"], 0x110}}, 0x0) 36.721641643s ago: executing program 7 (id=3468): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000001c0)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 36.388086976s ago: executing program 7 (id=3471): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5b", 0x30}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$can_bcm(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x10150) 36.179762437s ago: executing program 7 (id=3473): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000009c0)=[{0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x20000000}], 0x1, 0x24000040) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f", 0x58}, {&(0x7f0000000b00)="2112f3980a4c0902dcb1918da23fb18a9d89c4f0793b7c45b722417a6401d606e033776833d550074c2b667b4e127ea79880d00aeee8d16ca6f011603c22355681cd2e9d0d8a2fea2e9b525389d2e7b95aa129fef95245bffd1ccc58bb9ca56a50cd0b4da05e78cc4aef1e9157a66caefb0ba968710bfbc7baabaa3b06bf6e5fe4fe8ebcbc81a4dbda4b1b65ea2d852cda4881d7ceda7dcbef58471a951ca1851b50dd9276e0ab06fa0e23d023766294c911bff4e6d33acdd316322f4d5a1a4eb5ae51e511f2923f3318d83b9b438b20e0560a4834edb911911c7b557e37e94f6f0a2f1d291ae3049df23212a4b50eeb9c9a0901e8", 0xf5}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000c00)}, {&(0x7f0000000cc0)="a659d6cd13b743c3883fa66b26998868e129449c58fe04d445f9c63392ec1473c4e34a11a18e0fa2c3ff1fefe4200a23a2befe7c334b021bbad3522f8f3f36083d885cb29fa1829ff0caa3eb06fcfa1cc00d19092f9d", 0x56}], 0x3, 0x0, 0x0, 0x1}], 0x2, 0x4004000) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 16.147903845s ago: executing program 5 (id=3643): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000009c0), 0x0, 0x24000040) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f", 0x58}, {&(0x7f0000000b00)="2112f3980a4c0902dcb1918da23fb18a9d89c4f0793b7c45b722417a6401d606e033776833d550074c2b667b4e127ea79880d00aeee8d16ca6f011603c22355681cd2e9d0d8a2fea2e9b525389d2e7b95aa129fef95245bffd1ccc58bb9ca56a50cd0b4da05e78cc4aef1e9157a66caefb0ba968710bfbc7baabaa3b06bf6e5fe4fe8ebcbc81a4dbda4b1b65ea2d852cda4881d7ceda7dcbef58471a951ca1851b50dd9276e0ab06fa0e23d023766294c911bff4e6d33acdd316322f4d5a1a4eb5ae51e511f2923f3318d83b9b438b20e0560a4834edb911911c7b557e37e94f6f0a2f1d291ae3049df23212a4b50eeb9c9a0901e8", 0xf5}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000c00)}, {&(0x7f0000000cc0)="a659d6cd13b743c3883fa66b26998868e129449c58fe04d445f9c63392ec1473c4e34a11a18e0fa2c3ff1fefe4200a23a2befe7c334b021bbad3522f8f3f36083d885cb29fa1829ff0caa3eb06fcfa1cc00d19092f9d6d93590fd4671bce11ec7b2f3912c5fe0804a2647a4de1f6d804e2da914136a7a4b169f152ec6af9204c3465d58e410029e4f28574ebfef1ac2fc1d17d5133793c9e9fbe4889c2a1427cb84332f6d4dad0f47d084b27c6c5afe46d605c7c33fa61fee2bdf78c16167904fab9a81bbb8a0ee73a56e9a67549a2701def6cc0224db8d147e08f15ec7d6f38efb1ad1253", 0xe5}], 0x3, 0x0, 0x0, 0x1}], 0x2, 0x4004000) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4.500153069s ago: executing program 5 (id=3812): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000009c0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x24000040) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4.330444965s ago: executing program 5 (id=3815): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000001c0)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 4.282857438s ago: executing program 8 (id=3817): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f", 0x58}, {&(0x7f0000000b00)="2112f3980a4c0902dcb1918da23fb18a9d89c4f0793b7c45b722417a6401d606e033776833d550074c2b667b4e127ea79880d00aeee8d16ca6f011603c22355681cd2e9d0d8a2fea2e9b525389d2e7b95aa129fef95245bffd1ccc58bb9ca56a50cd0b4da05e78cc4aef1e9157a66caefb0ba968710bfbc7baabaa3b06bf6e5fe4fe8ebcbc81a4dbda4b1b65ea2d852cda4881d7ceda7dcbef58471a951ca1851b50dd9276e0ab06fa0e23d023766294c911bff4e6d33acdd316322f4d5a1a4eb5ae51e511f2923f3318d83b9b438b20e0560a4834edb911911c7b557e37e94f6f0a2f1d291ae3049df23212a4b50eeb9c9a0901e8", 0xf5}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000c00)}, {&(0x7f0000000cc0)="a659d6cd13b743c3883fa66b26998868e129449c58fe04d445f9c63392ec1473c4e34a11a18e0fa2c3ff1fefe4200a23a2befe7c334b", 0x36}], 0x3, 0x0, 0x0, 0x1}], 0x2, 0x4004000) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.949958716s ago: executing program 8 (id=3819): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000203b636cce9461747fda74a0300"/28], 0x1c}, 0x1, 0x0, 0x0, 0x20004840}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x14, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x48881}, 0x24000001) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x9, 0xde, 0xa7, 0x20, 0x12d1, 0x554b, 0x5a0b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x38, 0x8, 0x80, 0x4, [{{0x9, 0x4, 0xd8, 0xe0, 0x2, 0xff, 0x4, 0x17, 0x9, [], [{{0x9, 0x5, 0x86, 0x3, 0x200, 0x8, 0x73, 0x98}}, {{0x9, 0x5, 0x8a, 0x3, 0x40, 0x2, 0x4, 0x9}}]}}]}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100000000004032150e0100000000000109022400010000c00009040000010300020009210000000122050009058103"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000540)={0x18, &(0x7f0000000380)={0x0, 0x11, 0x5, {0x5, 0x22, "96cd76"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r6, &(0x7f0000000a80)=""/188, 0xba) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000600)={0x1c4, 0x3, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_TUPLE_ORIG={0x4c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @loopback}}}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x8}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TUPLE_REPLY={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x8be, 0x67]}, @CTA_FILTER={0x24, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x82}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x4}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x800}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x100}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_NAT_SRC={0x9c, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}, @CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}, @CTA_NAT_V4_MINIP={0x8, 0x1, @remote}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x800}, 0x24040854) write$char_usb(r6, 0x0, 0x0) 2.827009848s ago: executing program 6 (id=3829): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f", 0x58}, {&(0x7f0000000b00)="2112f3980a4c0902dcb1918da23fb18a9d89c4f0793b7c45b722417a6401d606e033776833d550074c2b667b4e127ea79880d00aeee8d16ca6f011603c22355681cd2e9d0d8a2fea2e9b525389d2e7b95aa129fef95245bffd1ccc58bb9ca56a50cd0b4da05e78cc4aef1e9157a66caefb0ba968710bfbc7baabaa3b06bf6e5fe4fe8ebcbc81a4dbda4b1b65ea2d852cda4881d7ceda7dcbef58471a951ca1851b50dd9276e0ab06fa0e23d023766294c911bff4e6d33acdd316322f4d5a1a4eb5ae51e511f2923f3318d83b9b438b20e0560a4834edb911911c7b557e37e94f6f0a2f1d291ae3049df23212a4b50eeb9c9a0901e8", 0xf5}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000c00)}, {&(0x7f0000000cc0)="a659d6cd13b743c3883fa66b26998868e129449c58fe04d445f9c63392ec1473c4e34a11a18e0fa2c3ff1fefe4200a23a2befe7c334b021bbad3522f8f3f36083d885cb29fa1829ff0caa3eb06fcfa1cc00d19092f9d6d93590fd4671bce11ec7b2f3912c5fe0804a2", 0x69}], 0x3, 0x0, 0x0, 0x1}], 0x2, 0x4004000) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.343331927s ago: executing program 6 (id=3832): r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430", 0xf) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f", 0x58}, {&(0x7f0000000b00)="2112f3980a4c0902dcb1918da23fb18a9d89c4f0793b7c45b722417a6401d606e033776833d550074c2b667b4e127ea79880d00aeee8d16ca6f011603c22355681cd2e9d0d8a2fea2e9b525389d2e7b95aa129fef95245bffd1ccc58bb9ca56a50cd0b4da05e78cc4aef1e9157a66caefb0ba968710bfbc7baabaa3b06bf6e5fe4fe8ebcbc81a4dbda4b1b65ea2d852cda4881d7ceda7dcbef58471a951ca1851b50dd9276e0ab06fa0e23d023766294c911bff4e6d33acdd316322f4d5a1a4eb5ae51e511f2923f3318d83b9b438b20e0560a4834edb911911c7b557e37e94f6f0a2f1d291ae3049df23212a4b50eeb9c9a0901e8", 0xf5}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{0x0}, {0x0}, {&(0x7f0000000cc0)="a659d6cd13b743c3883fa66b26998868e129449c58fe04d445f9c63392ec1473c4e34a11a18e0fa2c3ff1fefe4200a23a2befe7c334b021bbad3522f8f3f36083d885cb29fa1829ff0caa3eb06fcfa1cc00d19092f9d6d93590fd4671bce11ec7b2f3912c5fe0804a2647a4de1f6d804e2da91", 0x73}], 0x3, 0x0, 0x0, 0x1}], 0x2, 0x4004000) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.172964176s ago: executing program 6 (id=3834): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000009c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}], 0x1, 0x24000040) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f", 0x58}, {&(0x7f0000000b00)="2112f3980a4c0902dcb1918da23fb18a9d89c4f0793b7c45b722417a6401d606e033776833d550074c2b667b4e127ea79880d00aeee8d16ca6f011603c22355681cd2e9d0d8a2fea2e9b525389d2e7b95aa129fef95245bffd1ccc58bb9ca56a50cd0b4da05e78cc4aef1e9157a66caefb0ba968710bfbc7baabaa3b06bf6e5fe4fe8ebcbc81a4dbda4b1b65ea2d852cda4881d7ceda7dcbef58471a951ca1851b50dd9276e0ab06fa0e23d023766294c911bff4e6d33acdd316322f4d5a1a4eb5ae51e511f2923f3318d83b9b438b20e0560a4834edb911911c7b557e37e94f6f0a2f1d291ae3049df23212a4b50eeb9c9a0901e8", 0xf5}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000c00)}, {&(0x7f0000000cc0)="a659d6cd13b743c3883fa66b26998868e129449c58fe04d445f9c63392ec1473c4e34a11a18e0fa2c3ff1fefe4200a23a2befe7c334b021bbad3522f8f3f36083d885cb29fa1829ff0caa3eb06fcfa1cc00d19092f9d6d93590fd4671bce11ec7b2f3912c5fe0804a2647a4de1f6d804e2da914136a7a4b169f152ec6af9204c3465d58e410029e4f28574ebfef1ac2fc1d17d5133793c9e9fbe4889c2a1427cb84332f6d4dad0f47d084b27c6c5afe46d605c7c33fa61fee2bdf78c16167904fab9a81bbb8a0ee73a56e9a67549a2701def6cc0224db8d147e08f15ec7d6f38efb1ad1253", 0xe5}], 0x3, 0x0, 0x0, 0x1}], 0x2, 0x4004000) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.003486527s ago: executing program 6 (id=3836): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000009c0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x24000040) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e", 0x42}, {&(0x7f0000000b00)="2112f3980a4c0902dcb1918da23fb18a9d89c4f0793b7c45b722417a6401d606e033776833d550074c2b667b4e127ea79880d00aeee8d16ca6f011603c22355681cd2e9d0d8a2fea2e9b525389d2e7b95aa129fef95245bffd1ccc58bb9ca56a50cd0b4da05e78cc4aef1e9157a66caefb0ba968710bfbc7baabaa3b06bf6e5fe4fe8ebcbc81a4dbda4b1b65ea2d852cda4881d7ceda7dcbef58471a951ca1851b50dd9276e0ab06fa0e23d023766294c911bff4e6d33acdd316322f4d5a1a4eb5ae51e511f2923f3318d83b9b438b20e0560a4834edb911911c7b557e37e94f6f0a2f1d291ae3049df23212a4b50eeb9c9a", 0xf2}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000c00)}], 0x2, 0x0, 0x0, 0x1}], 0x2, 0x4004000) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.996433355s ago: executing program 8 (id=3838): openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x401, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000001cff9000bca30000000000002403000020feffff620af0fff8ffffff71a4f2ff000000001f03000000000000e5000500000000002604fdffff02000015010000033800001d13fcff000000007a0af0ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 1.815540362s ago: executing program 6 (id=3840): socket(0x10, 0x803, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) pipe(0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0}, &(0x7f0000000280), &(0x7f0000000000)=r2}, 0x20) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000780)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e22, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x4, "30bd05a78f0edbcb66cce5984343e09c262fc62d381cd6515d33e142245708d9", "85db081dcb26409ecb60274324d72410", {"0c1c28b8552c9dfdf23da2340cb8cbc7", "1f5489d79cc13665174cedcb215e4a1a"}}}}}}}, 0x0) 790.864484ms ago: executing program 2 (id=3843): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430", 0xf) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f", 0x58}, {&(0x7f0000000b00)="2112f3980a4c0902dcb1918da23fb18a9d89c4f0793b7c45b722417a6401d606e033776833d550074c2b667b4e127ea79880d00aeee8d16ca6f011603c22355681cd2e9d0d8a2fea2e9b525389d2e7b95aa129fef95245bffd1ccc58bb9ca56a50cd0b4da05e78cc4aef1e9157a66caefb0ba968710bfbc7baabaa3b06bf6e5fe4fe8ebcbc81a4dbda4b1b65ea2d852cda4881d7ceda7dcbef58471a951ca1851b50dd9276e0ab06fa0e23d023766294c911bff4e6d33acdd316322f4d5a1a4eb5ae51e511f2923f3318d83b9b438b20e0560a4834edb911911c7b557e37e94f6f0a2f1d291ae3049df23212a4b50eeb9c9a0901e8", 0xf5}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{0x0}, {0x0}, {&(0x7f0000000cc0)="a659d6cd13b743c3883fa66b26998868e129449c58fe04d445f9c63392ec1473c4e34a11a18e0fa2c3ff1fefe4200a23a2befe7c334b021bbad3522f8f3f36083d885cb29fa1829ff0caa3eb06fcfa1cc00d19092f9d6d93590fd4671bce11ec7b2f3912c5fe0804a2647a4de1f6d804e2da91", 0x73}], 0x3, 0x0, 0x0, 0x1}], 0x2, 0x4004000) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 737.630528ms ago: executing program 2 (id=3844): syz_usb_connect(0x5, 0x24, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0, 0xaa, &(0x7f00000003c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000400), &(0x7f0000000480), 0x8, 0xf7, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) setsockopt$inet_tcp_int(r5, 0x6, 0x17, &(0x7f00000006c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 659.066719ms ago: executing program 8 (id=3845): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000009c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}], 0x1, 0x24000040) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f", 0x58}, {&(0x7f0000000b00)="2112f3980a4c0902dcb1918da23fb18a9d89c4f0793b7c45b722417a6401d606e033776833d550074c2b667b4e127ea79880d00aeee8d16ca6f011603c22355681cd2e9d0d8a2fea2e9b525389d2e7b95aa129fef95245bffd1ccc58bb9ca56a50cd0b4da05e78cc4aef1e9157a66caefb0ba968710bfbc7baabaa3b06bf6e5fe4fe8ebcbc81a4dbda4b1b65ea2d852cda4881d7ceda7dcbef58471a951ca1851b50dd9276e0ab06fa0e23d023766294c911bff4e6d33acdd316322f4d5a1a4eb5ae51e511f2923f3318d83b9b438b20e0560a4834edb911911c7b557e37e94f6f0a2f1d291ae3049df23212a4b50eeb9c9a0901e8", 0xf5}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000c00)}, {&(0x7f0000000cc0)="a659d6cd13b743c3883fa66b26998868e129449c58fe04d445f9c63392ec1473c4e34a11a18e0fa2c3ff1fefe4200a23a2befe7c334b021bbad3522f8f3f36083d885cb29fa1829ff0caa3eb06fcfa1cc00d19092f9d6d93590fd4671bce11ec7b2f3912c5fe0804a2647a4de1f6d804e2da914136a7a4b169f152ec6af9204c3465d58e410029e4f28574ebfef1ac2fc1d17d5133793c9e9fbe4889c2a1427cb84332f6d4dad0f47d084b27c6c5afe46d605c7c33fa61fee2bdf78c16167904fab9a81bbb8a0ee73a56e9a67549a2701def6cc0224db8d147e08f15ec7d6f38efb1ad1253", 0xe5}], 0x3, 0x0, 0x0, 0x1}], 0x2, 0x4004000) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 601.849563ms ago: executing program 6 (id=3846): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000002c0)={0x0, 0xffffffff}, &(0x7f0000000300)=0x8) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) mount$9p_fd(0x0, 0x0, 0x0, 0x8802, &(0x7f0000000600)=ANY=[@ANYBLOB="613b2592", @ANYRESHEX, @ANYBLOB=',wfdno', @ANYRESHEX]) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 539.598504ms ago: executing program 2 (id=3847): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000009c0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x24000040) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e03", 0x2c}, {&(0x7f0000000b00)="2112f3980a4c0902dcb1918da23fb18a9d89c4f0793b7c45b722417a6401d606e033776833d550074c2b667b4e127ea79880d00aeee8d16ca6f011603c22355681cd2e9d0d8a2fea2e9b525389d2e7b95aa129fef95245bffd1ccc58bb9ca56a50cd0b4da05e78cc4aef1e9157a66caefb0ba968710bfbc7baabaa3b06bf6e5fe4fe8ebcbc81a4dbda4b1b65ea2d852cda4881d7ceda7dcbef58471a951ca1851b50dd9276e0ab06fa0e23d023766294c911bff4e6d33acdd316322f4d5a1a4eb5ae51e511f2923f3318d83b9b438b20e0560a4834edb911911c7b557e37e94f6f0a2f1d291ae3049df23212a4b50eeb9c9a0901e8", 0xf5}], 0x2, 0x0, 0x0, 0x4004090}], 0x1, 0x4004000) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 482.372379ms ago: executing program 5 (id=3848): r0 = socket$alg(0x26, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000009c0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x24000040) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f", 0x58}, {&(0x7f0000000b00)="2112f3980a4c0902dcb1918da23fb18a9d89c4f0793b7c45b722417a6401d606e033776833d550074c2b667b4e127ea79880d00aeee8d16ca6f011603c22355681cd2e9d0d8a2fea2e9b525389d2e7b95aa129fef95245bffd1ccc58bb9ca56a50cd0b4da05e78cc4aef1e9157a66caefb0ba968710bfbc7baabaa3b06bf6e5fe4fe8ebcbc81a4dbda4b1b65ea2d852cda4881d7ceda7dcbef58471a951ca1851b50dd9276e0ab06fa0e23d023766294c911bff4e6d33acdd316322f4d5a1a4eb5ae51e511f2923f3318d83b9b438b20e0560a4834edb911911c7b557e37e94f6f0a2f1d291ae3049df23212a4b50eeb9c9a0901e8", 0xf5}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000c00)}, {&(0x7f0000000cc0)="a659d6cd13b743c3883fa66b26998868e129449c58fe04d445f9c63392ec1473c4e34a11a18e0fa2c3ff1fefe4200a23a2befe7c334b021bbad3522f8f3f36083d885cb29fa1829ff0caa3eb06fcfa1cc00d19092f9d6d93590fd4671bce11ec7b2f3912c5fe0804a2647a4de1f6d804e2da914136a7a4b169f152ec6af9204c3465d58e410029e4f28574ebfef1ac2fc1d17d5133793c9e9fbe4889c2a1427cb84332f6d4dad0f47d084b27c6c5afe46d605c7c33fa61fee2bdf78c16167904fab9a81bbb8a0ee73a56e9a67549a2701def6cc0224db8d1", 0xd8}], 0x3, 0x0, 0x0, 0x1}], 0x2, 0x4004000) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 377.065646ms ago: executing program 2 (id=3849): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000009c0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x24000040) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e", 0x42}, {&(0x7f0000000b00)="2112f3980a4c0902dcb1918da23fb18a9d89c4f0793b7c45b722417a6401d606e033776833d550074c2b667b4e127ea79880d00aeee8d16ca6f011603c22355681cd2e9d0d8a2fea2e9b525389d2e7b95aa129fef95245bffd1ccc58bb9ca56a50cd0b4da05e78cc4aef1e9157a66caefb0ba968710bfbc7baabaa3b06bf6e5fe4fe8ebcbc81a4dbda4b1b65ea2d852cda4881d7ceda7dcbef58471a951ca1851b50dd9276e0ab06fa0e23d023766294c911bff4e6d33acdd316322f4d5a1a4eb5ae51e511f2923f3318d83b9b438b20e0560a4834edb911911c7b557e37e94f6f0a2f1d291ae3049df23212a4b50eeb9c9a", 0xf2}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000c00)}], 0x2, 0x0, 0x0, 0x1}], 0x2, 0x4004000) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 333.92469ms ago: executing program 8 (id=3850): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000009c0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x24000040) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f", 0x58}, {&(0x7f0000000b00)="2112f3980a4c0902dcb1918da23fb18a9d89c4f0793b7c45b722417a6401d606e033776833d550074c2b667b4e127ea79880d00aeee8d16ca6f011603c22355681cd2e9d0d8a2fea2e9b525389d2e7b95aa129fef95245bffd1ccc58bb9ca56a50cd0b4da05e78cc4aef1e9157a66caefb0ba968710bfbc7baabaa3b06bf6e5fe4fe8ebcbc81a4dbda4b1b65ea2d852cda4881d7ceda7dcbef58471a951ca1851b50dd9276e0ab06fa0e23d023766294c911bff4e6d33acdd316322f4d5a1a4eb5ae51e511f2923f3318d83b9b438b20e0560a4834edb911911c7b557e37e94f6f0a2f1d291ae3049df23212a4b50eeb9c9a0901e8", 0xf5}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000c00)}, {&(0x7f0000000cc0)="a659d6cd13b743c3883fa66b26998868e129449c58fe04d445f9c63392ec1473c4e34a11a18e0fa2c3ff1fefe4200a23a2befe7c334b", 0x36}], 0x3, 0x0, 0x0, 0x1}], 0x2, 0x4004000) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 199.781169ms ago: executing program 2 (id=3851): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000009c0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x24000040) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f", 0x58}, {&(0x7f0000000b00)="2112f3980a4c0902dcb1918da23fb18a9d89c4f0793b7c45b722417a6401d606e033776833d550074c2b667b4e127ea79880d00aeee8d16ca6f011603c22355681cd2e9d0d8a2fea2e9b525389d2e7b95aa129fef95245bffd1ccc58bb9ca56a50cd0b4da05e78cc4aef1e9157a66caefb0ba968710bfbc7baabaa3b06bf6e5fe4fe8ebcbc81a4dbda4b1b65ea2d852cda4881d7ceda7dcbef58471a951ca1851b50dd9276e0ab06fa0e23d023766294c911bff4e6d33acdd316322f4d5a1a4eb5ae51e511f2923f3318d83b9b438b20e0560a4834edb911911c7b557e37e94f6f0a2f1d291ae3049df23212a4b50eeb9c9a0901e8", 0xf5}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000c00)}, {&(0x7f0000000cc0)="a659d6cd13b743c3883fa66b26998868e129449c58fe04d445f9c63392ec1473c4e34a11a18e0fa2c3ff1fefe4200a23a2befe7c334b021bbad3522f8f3f36083d885cb29fa1829ff0caa3eb06fcfa1cc00d19092f9d6d93590fd4671bce11ec7b2f3912c5fe0804a2", 0x69}], 0x3, 0x0, 0x0, 0x1}], 0x2, 0x4004000) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 199.532779ms ago: executing program 5 (id=3852): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627", 0xc) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000009c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}], 0x1, 0x24000040) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b00)}], 0x1, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000c00)}, {&(0x7f0000000cc0)="a659d6cd13b743c3883fa66b26998868e129449c58fe04d445f9c63392ec1473c4e34a11a18e0fa2c3ff1fefe4200a23a2befe7c334b021bbad3522f8f3f36083d885cb29fa1829ff0caa3eb06fcfa1cc00d19092f9d6d93590fd4671bce11ec7b2f3912c5fe0804a2647a4de1f6d804e2da91", 0x73}], 0x3, 0x0, 0x0, 0x1}], 0x2, 0x4004000) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 88.577284ms ago: executing program 8 (id=3853): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430", 0xf) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f", 0x58}, {&(0x7f0000000b00)="2112f3980a4c0902dcb1918da23fb18a9d89c4f0793b7c45b722417a6401d606e033776833d550074c2b667b4e127ea79880d00aeee8d16ca6f011603c22355681cd2e9d0d8a2fea2e9b525389d2e7b95aa129fef95245bffd1ccc58bb9ca56a50cd0b4da05e78cc4aef1e9157a66caefb0ba968710bfbc7baabaa3b06bf6e5fe4fe8ebcbc81a4dbda4b1b65ea2d852cda4881d7ceda7dcbef58471a951ca1851b50dd9276e0ab06fa0e23d023766294c911bff4e6d33acdd316322f4d5a1a4eb5ae51e511f2923f3318d83b9b438b20e0560a4834edb911911c7b557e37e94f6f0a2f1d291ae3049df23212a4b50eeb9c9a0901e8", 0xf5}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{0x0}, {0x0}, {&(0x7f0000000cc0)="a659d6cd13b743c3883fa66b26998868e129449c58fe04d445f9c63392ec1473c4e34a11a18e0fa2c3ff1fefe4200a23a2befe7c334b021bbad3522f8f3f36083d885cb29fa1829ff0caa3eb06fcfa1cc00d19092f9d6d93590fd4671bce11ec7b2f3912c5fe0804a2647a4de1f6d804e2da91", 0x73}], 0x3, 0x0, 0x0, 0x1}], 0x2, 0x4004000) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 58.95674ms ago: executing program 5 (id=3854): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000009c0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x24000040) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f", 0x58}], 0x1, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000c00)}, {&(0x7f0000000cc0)="a659d6cd13b743c3883fa66b26998868e129449c58fe04d445f9c63392ec1473c4e34a11a18e0fa2c3ff1fefe4200a23a2befe7c334b021bbad3522f8f3f36083d885cb29fa1829ff0caa3eb06fcfa1cc00d19092f9d6d93590fd4671bce11ec7b2f3912c5fe0804a2647a4de1f6d804e2da914136a7a4b169f152ec6af9204c3465d58e410029e4f28574ebfef1ac2fc1d17d5133793c9e9fbe4889c2a1427cb84332f6d4dad0f47d084b27", 0xac}], 0x3, 0x0, 0x0, 0x1}], 0x2, 0x4004000) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 0s ago: executing program 2 (id=3855): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d103200", 0x27}], 0x3}], 0x1, 0x40800) recvmsg$can_bcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/3, 0x3}, {&(0x7f0000000680)=""/112, 0xfffffef2}], 0x2}, 0x10150) kernel console output (not intermixed with test programs): : syz [ 1739.044995][ T9] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 1739.045025][ T9] usb 7-1: config 0 has no interface number 0 [ 1739.045073][ T9] usb 7-1: config 0 interface 12 has no altsetting 0 [ 1739.049644][ T9] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1739.049672][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1739.049692][ T9] usb 7-1: Product: syz [ 1739.049705][ T9] usb 7-1: Manufacturer: syz [ 1739.049719][ T9] usb 7-1: SerialNumber: syz [ 1739.109342][T15020] usb 6-1: USB disconnect, device number 31 [ 1739.135121][ T9] usb 7-1: config 0 descriptor?? [ 1739.228301][T15020] option 6-1:56.216: device disconnected [ 1739.486114][T15771] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1739.486150][T15771] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1740.205569][ T9] f81534 7-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1740.205603][ T9] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71 [ 1740.205613][ T9] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1740.206181][ T9] f81534 7-1:0.12: probe with driver f81534 failed with error -71 [ 1740.277640][ T9] usb 7-1: USB disconnect, device number 28 [ 1740.583660][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1740.583750][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1740.638024][T10009] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1740.816450][T10009] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1740.816509][T10009] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1740.816809][T10009] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1740.871664][T10009] usb 6-1: config 0 descriptor?? [ 1740.893214][T10009] pwc: Askey VC010 type 2 USB webcam detected. [ 1740.916958][T15771] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPIPE [ 1740.917730][T15771] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 1740.918259][ C0] raw-gadget.2 gadget.8: ignoring, device is not running [ 1740.918418][T15771] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPIPE [ 1740.918514][T15771] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1740.932454][T15771] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1741.001423][T15771] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -32 [ 1741.117252][T15771] usb 9-1: USB disconnect, device number 47 [ 1741.303292][T10009] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1741.304315][T10009] pwc: recv_control_msg error -32 req 02 val 2700 [ 1741.305453][T10009] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1741.308444][T10009] pwc: recv_control_msg error -32 req 04 val 1000 [ 1741.339951][T10009] pwc: recv_control_msg error -32 req 04 val 1300 [ 1741.342258][T10009] pwc: recv_control_msg error -32 req 04 val 1400 [ 1741.344295][T10009] pwc: recv_control_msg error -32 req 02 val 2000 [ 1741.346560][T10009] pwc: recv_control_msg error -32 req 02 val 2100 [ 1741.368309][T10009] pwc: recv_control_msg error -32 req 04 val 1500 [ 1741.371014][T10009] pwc: recv_control_msg error -32 req 02 val 2500 [ 1741.609649][T10009] pwc: recv_control_msg error -71 req 02 val 2600 [ 1741.611158][T10009] pwc: recv_control_msg error -71 req 02 val 2900 [ 1741.614417][T10009] pwc: recv_control_msg error -71 req 02 val 2800 [ 1741.615068][T10009] pwc: recv_control_msg error -71 req 04 val 1100 [ 1741.615565][T10009] pwc: recv_control_msg error -71 req 04 val 1200 [ 1741.662440][T10009] pwc: Registered as video103. [ 1741.665541][T10009] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input14 [ 1741.802226][T10009] usb 6-1: USB disconnect, device number 32 [ 1742.102018][T16965] sysfs: cannot create duplicate filename '/class/ieee80211/1^!l1*$pOcɔr$Gt:u' [ 1742.102044][T16965] CPU: 1 UID: 0 PID: 16965 Comm: syz.8.2388 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1742.102073][T16965] Tainted: [L]=SOFTLOCKUP [ 1742.102081][T16965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1742.102094][T16965] Call Trace: [ 1742.102102][T16965] [ 1742.102112][T16965] dump_stack_lvl+0xe8/0x150 [ 1742.102147][T16965] sysfs_warn_dup+0x8e/0xa0 [ 1742.102172][T16965] sysfs_do_create_link_sd+0xc0/0x110 [ 1742.102199][T16965] device_add_class_symlinks+0x1d2/0x240 [ 1742.102230][T16965] device_add+0x475/0xb80 [ 1742.102260][T16965] wiphy_register+0x1d6c/0x2d50 [ 1742.102302][T16965] ? __pfx_wiphy_register+0x10/0x10 [ 1742.102326][T16965] ? __pfx_netdev_run_todo+0x10/0x10 [ 1742.102350][T16965] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 1742.102379][T16965] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 1742.102414][T16965] ieee80211_register_hw+0x34d2/0x4150 [ 1742.102449][T16965] ? ieee80211_register_hw+0x14b1/0x4150 [ 1742.102479][T16965] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1742.102517][T16965] ? __hrtimer_setup+0x181/0x200 [ 1742.102542][T16965] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1742.102569][T16965] mac80211_hwsim_new_radio+0x2efe/0x5210 [ 1742.102610][T16965] ? mac80211_hwsim_new_radio+0xf0/0x5210 [ 1742.102648][T16965] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1742.102667][T16965] ? kstrndup+0xbf/0x160 [ 1742.102701][T16965] hwsim_new_radio_nl+0xf85/0x1c30 [ 1742.102729][T16965] ? __pfx___nla_validate_parse+0x10/0x10 [ 1742.102769][T16965] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1742.102797][T16965] ? rcu_is_watching+0x15/0xb0 [ 1742.102827][T16965] ? __nla_parse+0x40/0x60 [ 1742.102854][T16965] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1742.102885][T16965] genl_family_rcv_msg_doit+0x22a/0x330 [ 1742.102914][T16965] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1742.102934][T16965] ? rcu_is_watching+0x15/0xb0 [ 1742.102971][T16965] ? bpf_lsm_capable+0x9/0x20 [ 1742.102992][T16965] ? security_capable+0x7e/0x2c0 [ 1742.103019][T16965] genl_rcv_msg+0x61c/0x7a0 [ 1742.103047][T16965] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1742.103067][T16965] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1742.103102][T16965] netlink_rcv_skb+0x232/0x4b0 [ 1742.103129][T16965] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1742.103152][T16965] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1742.103203][T16965] genl_rcv+0x28/0x40 [ 1742.103221][T16965] netlink_unicast+0x831/0x9f0 [ 1742.103255][T16965] ? __pfx_netlink_unicast+0x10/0x10 [ 1742.103278][T16965] ? __alloc_skb+0x193/0x390 [ 1742.103306][T16965] ? netlink_sendmsg+0x650/0xb40 [ 1742.103330][T16965] ? skb_put+0x11b/0x210 [ 1742.103352][T16965] netlink_sendmsg+0x813/0xb40 [ 1742.103386][T16965] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1742.103418][T16965] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1742.103440][T16965] ____sys_sendmsg+0xa4e/0xac0 [ 1742.103451][T16965] ? __might_fault+0xaf/0x130 [ 1742.103470][T16965] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1742.103487][T16965] ? import_iovec+0x73/0xa0 [ 1742.103502][T16965] ___sys_sendmsg+0x2a5/0x360 [ 1742.103513][T16965] ? __lock_acquire+0x6b5/0x2cf0 [ 1742.103527][T16965] ? __pfx____sys_sendmsg+0x10/0x10 [ 1742.103543][T16965] ? futex_wake+0x4af/0x580 [ 1742.103571][T16965] ? __fget_files+0x2a/0x420 [ 1742.103581][T16965] ? __fget_files+0x3a6/0x420 [ 1742.103601][T16965] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1742.103614][T16965] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1742.103631][T16965] ? rcu_is_watching+0x15/0xb0 [ 1742.103652][T16965] do_syscall_64+0xe2/0xf80 [ 1742.103667][T16965] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1742.103677][T16965] ? trace_irq_disable+0x37/0x100 [ 1742.103690][T16965] ? clear_bhb_loop+0x60/0xb0 [ 1742.103703][T16965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1742.103713][T16965] RIP: 0033:0x7f86e7baaeb9 [ 1742.103729][T16965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1742.103745][T16965] RSP: 002b:00007f86e5dc4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1742.103769][T16965] RAX: ffffffffffffffda RBX: 00007f86e7e26180 RCX: 00007f86e7baaeb9 [ 1742.103782][T16965] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000009 [ 1742.103795][T16965] RBP: 00007f86e7c18c1f R08: 0000000000000000 R09: 0000000000000000 [ 1742.103806][T16965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1742.103818][T16965] R13: 00007f86e7e26218 R14: 00007f86e7e26180 R15: 00007ffd824e6508 [ 1742.103846][T16965] [ 1744.277985][T15691] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1744.427986][T15691] usb 3-1: Using ep0 maxpacket: 32 [ 1744.431865][T15691] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 1744.431882][T15691] usb 3-1: config 0 has no interface number 0 [ 1744.431919][T15691] usb 3-1: config 0 interface 12 has no altsetting 0 [ 1744.434117][T15691] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1744.434135][T15691] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1744.434145][T15691] usb 3-1: Product: syz [ 1744.434153][T15691] usb 3-1: Manufacturer: syz [ 1744.434161][T15691] usb 3-1: SerialNumber: syz [ 1744.437603][T15691] usb 3-1: config 0 descriptor?? [ 1746.843649][T15691] f81534 3-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 1746.843705][T15691] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 1746.843721][T15691] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1746.843812][T15691] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 1746.901194][T15691] usb 3-1: USB disconnect, device number 23 [ 1747.268673][T15771] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1747.317994][T10009] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1747.426448][T15771] usb 7-1: Using ep0 maxpacket: 32 [ 1747.706327][T10009] usb 8-1: Using ep0 maxpacket: 32 [ 1747.743916][T10009] usb 8-1: config 0 has an invalid interface number: 12 but max is 0 [ 1747.743935][T10009] usb 8-1: config 0 has no interface number 0 [ 1747.743965][T10009] usb 8-1: config 0 interface 12 has no altsetting 0 [ 1748.803937][T10009] usb 8-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1748.803957][T10009] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1748.803967][T10009] usb 8-1: Product: syz [ 1748.803975][T10009] usb 8-1: Manufacturer: syz [ 1748.803982][T10009] usb 8-1: SerialNumber: syz [ 1749.049502][T10009] usb 8-1: config 0 descriptor?? [ 1749.692384][T15771] usb 7-1: unable to read config index 0 descriptor/all [ 1749.692415][T15771] usb 7-1: can't read configurations, error -71 [ 1750.298328][T10009] f81534 8-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1750.299467][T10009] f81534 8-1:0.12: f81534_find_config_idx: read failed: -71 [ 1750.301950][T10009] f81534 8-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1750.302014][T10009] f81534 8-1:0.12: probe with driver f81534 failed with error -71 [ 1750.319798][T10009] usb 8-1: USB disconnect, device number 26 [ 1750.849410][T15771] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1751.038034][T15771] usb 7-1: Using ep0 maxpacket: 16 [ 1751.041204][T15771] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1751.041267][T15771] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1751.041295][T15771] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1751.041317][T15771] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1751.041340][T15771] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1751.043980][T15771] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1751.044008][T15771] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1751.044028][T15771] usb 7-1: Manufacturer: syz [ 1751.160439][T15771] usb 7-1: config 0 descriptor?? [ 1751.692994][T15771] rc_core: IR keymap rc-hauppauge not found [ 1751.693015][T15771] Registered IR keymap rc-empty [ 1751.694471][T15771] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1751.718198][T15771] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1751.747588][T15771] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1751.772402][T15771] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input15 [ 1751.793234][T15771] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1751.819984][T15771] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1751.840011][T15771] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1751.857995][T15771] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1751.878073][T15771] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1751.899921][T15771] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1751.926702][T17031] sysfs: cannot create duplicate filename '/class/ieee80211/1^!l1*$pOcɔr$Gt:u' [ 1751.926729][T17031] CPU: 0 UID: 0 PID: 17031 Comm: syz.8.2409 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1751.926761][T17031] Tainted: [L]=SOFTLOCKUP [ 1751.926768][T17031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1751.926781][T17031] Call Trace: [ 1751.926789][T17031] [ 1751.926799][T17031] dump_stack_lvl+0xe8/0x150 [ 1751.926834][T17031] sysfs_warn_dup+0x8e/0xa0 [ 1751.926860][T17031] sysfs_do_create_link_sd+0xc0/0x110 [ 1751.926887][T17031] device_add_class_symlinks+0x1d2/0x240 [ 1751.926918][T17031] device_add+0x475/0xb80 [ 1751.926957][T17031] wiphy_register+0x1d6c/0x2d50 [ 1751.927001][T17031] ? __pfx_wiphy_register+0x10/0x10 [ 1751.927025][T17031] ? __pfx_netdev_run_todo+0x10/0x10 [ 1751.927049][T17031] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 1751.927078][T17031] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 1751.927114][T17031] ieee80211_register_hw+0x34d2/0x4150 [ 1751.927150][T17031] ? ieee80211_register_hw+0x14b1/0x4150 [ 1751.927182][T17031] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1751.927208][T17031] ? preempt_schedule_common+0x82/0xd0 [ 1751.927247][T17031] ? __hrtimer_setup+0x181/0x200 [ 1751.927271][T17031] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1751.927299][T17031] mac80211_hwsim_new_radio+0x2efe/0x5210 [ 1751.927341][T17031] ? mac80211_hwsim_new_radio+0xf0/0x5210 [ 1751.927380][T17031] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1751.927400][T17031] ? kstrndup+0xbf/0x160 [ 1751.927435][T17031] hwsim_new_radio_nl+0xf85/0x1c30 [ 1751.927462][T17031] ? __pfx___nla_validate_parse+0x10/0x10 [ 1751.927502][T17031] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1751.927529][T17031] ? rcu_is_watching+0x15/0xb0 [ 1751.927559][T17031] ? __nla_parse+0x40/0x60 [ 1751.927587][T17031] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1751.927619][T17031] genl_family_rcv_msg_doit+0x22a/0x330 [ 1751.927648][T17031] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1751.927668][T17031] ? rcu_is_watching+0x15/0xb0 [ 1751.927705][T17031] ? bpf_lsm_capable+0x9/0x20 [ 1751.927728][T17031] ? security_capable+0x7e/0x2c0 [ 1751.927755][T17031] genl_rcv_msg+0x61c/0x7a0 [ 1751.927784][T17031] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1751.927804][T17031] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1751.927831][T17031] ? __pfx_ref_tracker_free+0x10/0x10 [ 1751.927849][T17031] ? __skb_clone+0x63/0x7a0 [ 1751.927874][T17031] netlink_rcv_skb+0x232/0x4b0 [ 1751.927901][T17031] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1751.927921][T17031] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1751.927959][T17031] ? netlink_deliver_tap+0x2e/0x1b0 [ 1751.927984][T17031] ? netlink_deliver_tap+0x2e/0x1b0 [ 1751.928012][T17031] genl_rcv+0x28/0x40 [ 1751.928030][T17031] netlink_unicast+0x831/0x9f0 [ 1751.928063][T17031] ? __pfx_netlink_unicast+0x10/0x10 [ 1751.928087][T17031] ? __alloc_skb+0x193/0x390 [ 1751.928113][T17031] ? netlink_sendmsg+0x650/0xb40 [ 1751.928134][T17031] ? skb_put+0x11b/0x210 [ 1751.928156][T17031] netlink_sendmsg+0x813/0xb40 [ 1751.928190][T17031] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1751.928223][T17031] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1751.928254][T17031] ____sys_sendmsg+0xa4e/0xac0 [ 1751.928275][T17031] ? __might_fault+0xaf/0x130 [ 1751.928311][T17031] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1751.928351][T17031] ? import_iovec+0x73/0xa0 [ 1751.928380][T17031] ___sys_sendmsg+0x2a5/0x360 [ 1751.928400][T17031] ? __lock_acquire+0x6b5/0x2cf0 [ 1751.928425][T17031] ? __pfx____sys_sendmsg+0x10/0x10 [ 1751.928454][T17031] ? futex_wait+0x29a/0x380 [ 1751.928507][T17031] ? __fget_files+0x2a/0x420 [ 1751.928525][T17031] ? __fget_files+0x3a6/0x420 [ 1751.928552][T17031] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1751.928573][T17031] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1751.928600][T17031] ? rcu_is_watching+0x15/0xb0 [ 1751.928635][T17031] do_syscall_64+0xe2/0xf80 [ 1751.928659][T17031] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1751.928676][T17031] ? trace_irq_disable+0x37/0x100 [ 1751.928699][T17031] ? clear_bhb_loop+0x60/0xb0 [ 1751.928729][T17031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1751.928749][T17031] RIP: 0033:0x7f86e7baaeb9 [ 1751.928769][T17031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1751.928788][T17031] RSP: 002b:00007f86e5dc4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1751.928811][T17031] RAX: ffffffffffffffda RBX: 00007f86e7e26180 RCX: 00007f86e7baaeb9 [ 1751.928827][T17031] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000009 [ 1751.928841][T17031] RBP: 00007f86e7c18c1f R08: 0000000000000000 R09: 0000000000000000 [ 1751.928855][T17031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1751.928867][T17031] R13: 00007f86e7e26218 R14: 00007f86e7e26180 R15: 00007ffd824e6508 [ 1751.928902][T17031] [ 1751.988139][T15771] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1752.018042][T15771] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1752.038017][T15771] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1752.059899][T15771] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1752.081055][T15771] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1752.081080][T15771] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1752.243099][T15771] usb 7-1: USB disconnect, device number 30 [ 1755.418251][ T1902] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1755.580124][ T1902] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1755.580151][ T1902] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1755.580161][ T1902] usb 8-1: Product: syz [ 1755.580169][ T1902] usb 8-1: Manufacturer: syz [ 1755.580178][ T1902] usb 8-1: SerialNumber: syz [ 1755.996353][ T1902] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1755.996414][ T1902] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1756.199065][T17074] loop8: detected capacity change from 0 to 8 [ 1756.200109][T17074] Dev loop8: unable to read RDB block 8 [ 1756.200137][T17074] loop8: unable to read partition table [ 1756.200257][T17074] loop8: partition table beyond EOD, truncated [ 1756.200270][T17074] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1756.228024][ T9] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1756.377926][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 1756.385573][ T9] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 1756.385602][ T9] usb 7-1: config 0 has no interface number 0 [ 1756.385649][ T9] usb 7-1: config 0 interface 12 has no altsetting 0 [ 1756.389881][ T9] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1756.389919][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1756.389939][ T9] usb 7-1: Product: syz [ 1756.389953][ T9] usb 7-1: Manufacturer: syz [ 1756.389967][ T9] usb 7-1: SerialNumber: syz [ 1756.397290][ T9] usb 7-1: config 0 descriptor?? [ 1756.835964][T17078] sysfs: cannot create duplicate filename '/class/ieee80211/1^!l1*$pOcɔr$Gt:u' [ 1756.836060][T17078] CPU: 0 UID: 0 PID: 17078 Comm: syz.5.2421 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1756.836091][T17078] Tainted: [L]=SOFTLOCKUP [ 1756.836099][T17078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1756.836110][T17078] Call Trace: [ 1756.836118][T17078] [ 1756.836128][T17078] dump_stack_lvl+0xe8/0x150 [ 1756.836166][T17078] sysfs_warn_dup+0x8e/0xa0 [ 1756.836191][T17078] sysfs_do_create_link_sd+0xc0/0x110 [ 1756.836217][T17078] device_add_class_symlinks+0x1d2/0x240 [ 1756.836248][T17078] device_add+0x475/0xb80 [ 1756.836278][T17078] wiphy_register+0x1d6c/0x2d50 [ 1756.836318][T17078] ? __pfx_wiphy_register+0x10/0x10 [ 1756.836342][T17078] ? __pfx_netdev_run_todo+0x10/0x10 [ 1756.836365][T17078] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 1756.836393][T17078] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 1756.836426][T17078] ieee80211_register_hw+0x34d2/0x4150 [ 1756.836470][T17078] ? ieee80211_register_hw+0x14b1/0x4150 [ 1756.836499][T17078] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1756.836536][T17078] ? __hrtimer_setup+0x181/0x200 [ 1756.836563][T17078] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1756.836590][T17078] mac80211_hwsim_new_radio+0x2efe/0x5210 [ 1756.836623][T17078] ? mac80211_hwsim_new_radio+0xf0/0x5210 [ 1756.836659][T17078] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1756.836674][T17078] ? kstrndup+0xbf/0x160 [ 1756.836708][T17078] hwsim_new_radio_nl+0xf85/0x1c30 [ 1756.836735][T17078] ? __pfx___nla_validate_parse+0x10/0x10 [ 1756.836773][T17078] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1756.836810][T17078] ? rcu_is_watching+0x15/0xb0 [ 1756.836839][T17078] ? __nla_parse+0x40/0x60 [ 1756.836866][T17078] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1756.836898][T17078] genl_family_rcv_msg_doit+0x22a/0x330 [ 1756.836926][T17078] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1756.836942][T17078] ? rcu_is_watching+0x15/0xb0 [ 1756.836976][T17078] ? bpf_lsm_capable+0x9/0x20 [ 1756.836997][T17078] ? security_capable+0x7e/0x2c0 [ 1756.837023][T17078] genl_rcv_msg+0x61c/0x7a0 [ 1756.837050][T17078] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1756.837071][T17078] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1756.837106][T17078] netlink_rcv_skb+0x232/0x4b0 [ 1756.837133][T17078] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1756.837155][T17078] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1756.837204][T17078] genl_rcv+0x28/0x40 [ 1756.837222][T17078] netlink_unicast+0x831/0x9f0 [ 1756.837254][T17078] ? __pfx_netlink_unicast+0x10/0x10 [ 1756.837276][T17078] ? __alloc_skb+0x193/0x390 [ 1756.837304][T17078] ? netlink_sendmsg+0x650/0xb40 [ 1756.837327][T17078] ? skb_put+0x11b/0x210 [ 1756.837349][T17078] netlink_sendmsg+0x813/0xb40 [ 1756.837386][T17078] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1756.837419][T17078] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1756.837446][T17078] ____sys_sendmsg+0xa4e/0xac0 [ 1756.837466][T17078] ? __might_fault+0xaf/0x130 [ 1756.837500][T17078] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1756.837531][T17078] ? import_iovec+0x73/0xa0 [ 1756.837562][T17078] ___sys_sendmsg+0x2a5/0x360 [ 1756.837582][T17078] ? __lock_acquire+0x6b5/0x2cf0 [ 1756.837609][T17078] ? __pfx____sys_sendmsg+0x10/0x10 [ 1756.837637][T17078] ? futex_wake+0x4af/0x580 [ 1756.837689][T17078] ? __fget_files+0x2a/0x420 [ 1756.837708][T17078] ? __fget_files+0x3a6/0x420 [ 1756.837738][T17078] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1756.837763][T17078] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1756.837803][T17078] ? rcu_is_watching+0x15/0xb0 [ 1756.837839][T17078] do_syscall_64+0xe2/0xf80 [ 1756.837866][T17078] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1756.837898][T17078] ? clear_bhb_loop+0x60/0xb0 [ 1756.837923][T17078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1756.837941][T17078] RIP: 0033:0x7f8cc698aeb9 [ 1756.837961][T17078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1756.837980][T17078] RSP: 002b:00007f8cc4ba4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1756.838002][T17078] RAX: ffffffffffffffda RBX: 00007f8cc6c06180 RCX: 00007f8cc698aeb9 [ 1756.838018][T17078] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000009 [ 1756.838031][T17078] RBP: 00007f8cc69f8c1f R08: 0000000000000000 R09: 0000000000000000 [ 1756.838044][T17078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1756.838057][T17078] R13: 00007f8cc6c06218 R14: 00007f8cc6c06180 R15: 00007ffed3fb45c8 [ 1756.838091][T17078] [ 1757.432962][ T1902] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPIPE [ 1757.433926][ T1902] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 1757.434270][ C1] raw-gadget.0 gadget.7: ignoring, device is not running [ 1757.434401][ T1902] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPIPE [ 1757.434457][ T1902] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1757.435195][ T1902] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1757.525548][ T1902] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -32 [ 1757.571751][ T1902] usb 8-1: USB disconnect, device number 27 [ 1757.592195][ T9] f81534 7-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1757.592226][ T9] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71 [ 1757.592235][ T9] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1757.592292][ T9] f81534 7-1:0.12: probe with driver f81534 failed with error -71 [ 1757.614733][ T9] usb 7-1: USB disconnect, device number 31 [ 1758.338467][ T1902] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1758.514360][ T1902] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1758.514378][ T1902] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1758.514389][ T1902] usb 8-1: Product: syz [ 1758.514398][ T1902] usb 8-1: Manufacturer: syz [ 1758.514406][ T1902] usb 8-1: SerialNumber: syz [ 1760.012100][ T1902] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1760.012145][ T1902] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1760.378074][T15691] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 1760.549358][T15691] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1760.549398][T15691] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1760.585525][T15691] usb 9-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 1760.585544][T15691] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1760.585555][T15691] usb 9-1: Product: syz [ 1760.585563][T15691] usb 9-1: Manufacturer: syz [ 1760.585570][T15691] usb 9-1: SerialNumber: syz [ 1760.681618][T15691] usb 9-1: config 0 descriptor?? [ 1760.721840][T15691] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1760.857096][T15691] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1760.877334][T15691] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1760.877650][T15691] usb 9-1: media controller created [ 1760.968361][T15691] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1761.339285][ T1902] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1761.339773][ T1902] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 1761.340275][ T1902] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1761.340319][ T1902] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1761.341047][ T1902] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1761.442387][ T1902] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 1761.456290][T15691] DVB: Unable to find symbol tda10046_attach() [ 1761.456409][T15691] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1761.456475][T15691] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1761.505948][ T1902] usb 8-1: USB disconnect, device number 28 [ 1761.539673][T16683] udevd[16683]: setting mode of /dev/bus/usb/008/028 to 020664 failed: No such file or directory [ 1761.539858][T16683] udevd[16683]: setting owner of /dev/bus/usb/008/028 to uid=0, gid=0 failed: No such file or directory [ 1761.892330][T15691] dvb_usb_m920x 9-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1761.945970][T15691] usb 9-1: USB disconnect, device number 48 [ 1766.188014][ T9] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 1766.417917][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 1766.419582][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1766.419615][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1766.419631][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1766.419642][ T9] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1766.419654][ T9] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1766.420518][ T9] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1766.420533][ T9] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1766.420544][ T9] usb 8-1: Manufacturer: syz [ 1766.430708][ T9] usb 8-1: config 0 descriptor?? [ 1766.858111][ T9] rc_core: IR keymap rc-hauppauge not found [ 1766.858133][ T9] Registered IR keymap rc-empty [ 1766.858298][ T9] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1766.878044][ T9] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1766.899604][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 1766.969508][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input16 [ 1767.000891][ T9] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1767.018194][ T9] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1767.038102][ T9] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1767.058034][ T9] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1767.078133][ T9] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1767.098005][ T9] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1767.118027][ T9] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1767.140516][ T9] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1767.158091][ T9] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1767.178787][ T9] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1767.200970][ T9] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1767.200995][ T9] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1767.244531][ T9] usb 8-1: USB disconnect, device number 29 [ 1770.367953][T15691] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 1770.527958][T15691] usb 9-1: Using ep0 maxpacket: 32 [ 1770.530269][T15691] usb 9-1: config 0 has an invalid interface number: 12 but max is 0 [ 1770.530295][T15691] usb 9-1: config 0 has no interface number 0 [ 1770.530339][T15691] usb 9-1: config 0 interface 12 has no altsetting 0 [ 1770.533534][T15691] usb 9-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1770.533563][T15691] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1770.533582][T15691] usb 9-1: Product: syz [ 1770.533596][T15691] usb 9-1: Manufacturer: syz [ 1770.533610][T15691] usb 9-1: SerialNumber: syz [ 1770.638003][T15691] usb 9-1: config 0 descriptor?? [ 1770.928038][ T9] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1771.079515][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 1771.082906][ T9] usb 7-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config [ 1771.082953][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1771.082968][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 1771.082985][ T9] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1771.083008][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1771.092647][ T9] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1771.092678][ T9] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1771.092698][ T9] usb 7-1: Manufacturer: syz [ 1771.118145][ T9] usb 7-1: config 0 descriptor?? [ 1771.568238][ T9] rc_core: IR keymap rc-hauppauge not found [ 1771.568260][ T9] Registered IR keymap rc-empty [ 1771.568953][ T9] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1771.589338][ T9] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1771.617345][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1771.636382][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input17 [ 1771.654580][T15691] f81534 9-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1771.654631][T15691] f81534 9-1:0.12: f81534_find_config_idx: read failed: -71 [ 1771.654648][T15691] f81534 9-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1771.654736][T15691] f81534 9-1:0.12: probe with driver f81534 failed with error -71 [ 1771.663379][ T9] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1771.679493][ T9] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1771.699542][ T9] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1771.726932][ T9] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1771.740203][ T9] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1771.754763][T15691] usb 9-1: USB disconnect, device number 49 [ 1771.763062][ T9] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1771.790562][ T9] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1771.810787][ T9] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1771.828155][ T9] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1771.848165][ T9] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1771.885698][ T9] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1771.885714][ T9] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1771.987347][ T9] usb 7-1: USB disconnect, device number 32 [ 1774.746527][T17266] loop8: detected capacity change from 0 to 7 [ 1774.748959][T17266] Dev loop8: unable to read RDB block 7 [ 1774.749003][T17266] loop8: unable to read partition table [ 1774.749217][T17266] loop8: partition table beyond EOD, truncated [ 1774.749247][T17266] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1775.774282][T17098] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1775.960255][T17098] usb 7-1: Using ep0 maxpacket: 16 [ 1775.962772][T17098] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1775.962828][T17098] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1775.962856][T17098] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1775.962878][T17098] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1775.962902][T17098] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1775.964384][T17098] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1775.964412][T17098] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1775.964433][T17098] usb 7-1: Manufacturer: syz [ 1776.064665][T17098] usb 7-1: config 0 descriptor?? [ 1776.067961][ T9] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1776.147975][T15771] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 1776.221000][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1776.221064][ T9] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1776.221088][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1776.227017][ T9] usb 6-1: config 0 descriptor?? [ 1776.252165][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 1776.298031][T15771] usb 9-1: Using ep0 maxpacket: 16 [ 1776.300990][T15771] usb 9-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 1776.301052][T15771] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1776.301133][T15771] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 1776.301160][T15771] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1776.301183][T15771] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1776.321735][T15771] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1776.321765][T15771] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1776.321830][T15771] usb 9-1: Manufacturer: syz [ 1776.362311][T15771] usb 9-1: config 0 descriptor?? [ 1776.477936][T17098] rc_core: IR keymap rc-hauppauge not found [ 1776.477955][T17098] Registered IR keymap rc-empty [ 1776.478114][T17098] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1776.498165][T17098] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1776.519548][T17098] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1776.522187][T17098] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input18 [ 1776.558051][T17098] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1776.575327][T17098] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1776.587983][T17098] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1776.608050][T17098] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1776.628061][T17098] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1776.647985][T17098] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1776.668003][T17098] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1776.688029][T17098] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1776.691848][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1776.696541][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 1776.697141][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1776.697788][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 1776.707978][T17098] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1776.709241][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 1776.710474][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 1776.718280][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 1776.725087][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 1776.726153][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 1776.727177][ T9] pwc: recv_control_msg error -32 req 02 val 2500 [ 1776.727976][T17098] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1776.728355][ T9] pwc: recv_control_msg error -32 req 02 val 2400 [ 1776.751900][T17098] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1776.751927][T17098] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1776.819318][T17098] usb 7-1: USB disconnect, device number 33 [ 1776.888072][T15771] rc_core: IR keymap rc-hauppauge not found [ 1776.888092][T15771] Registered IR keymap rc-empty [ 1776.889922][T15771] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1776.914499][T15771] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1776.939459][ T9] pwc: recv_control_msg error -32 req 02 val 2900 [ 1776.950135][T15771] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc1 [ 1777.017465][T15771] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc1/input19 [ 1777.059087][T15771] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1777.079899][T15771] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1777.101088][T15771] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1777.119252][T15771] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1777.138952][T15771] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1777.142029][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 1777.142404][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 1777.158390][T15771] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1777.183903][T15771] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1777.195235][ T9] pwc: Registered as video103. [ 1777.199175][T15771] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1777.222042][T15771] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1777.239673][T15771] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1777.342503][T15771] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1777.342530][T15771] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1777.351553][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input20 [ 1777.395370][ T9] usb 6-1: USB disconnect, device number 33 [ 1777.464682][T15771] usb 9-1: USB disconnect, device number 50 [ 1778.612994][T17370] loop8: detected capacity change from 0 to 8 [ 1778.641007][T17370] Dev loop8: unable to read RDB block 8 [ 1778.641050][T17370] loop8: unable to read partition table [ 1778.641264][T17370] loop8: partition table beyond EOD, truncated [ 1778.641326][T17370] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1779.548014][ T1902] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1779.707949][ T1902] usb 6-1: Using ep0 maxpacket: 32 [ 1779.761273][ T1902] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 1779.761303][ T1902] usb 6-1: config 0 has no interface number 0 [ 1779.766527][ T1902] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1779.766555][ T1902] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1779.766572][ T1902] usb 6-1: Product: syz [ 1779.766586][ T1902] usb 6-1: Manufacturer: syz [ 1779.766608][ T1902] usb 6-1: SerialNumber: syz [ 1779.854495][ T1902] usb 6-1: config 0 descriptor?? [ 1779.883764][ T1902] asix 6-1:0.188: probe with driver asix failed with error -22 [ 1779.976749][T17391] loop8: detected capacity change from 0 to 8 [ 1780.038108][T17391] Dev loop8: unable to read RDB block 8 [ 1780.038162][T17391] loop8: unable to read partition table [ 1780.038381][T17391] loop8: partition table beyond EOD, truncated [ 1780.038417][T17391] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1780.310114][T17400] loop8: detected capacity change from 0 to 8 [ 1780.312469][T17400] Dev loop8: unable to read RDB block 8 [ 1780.312512][T17400] loop8: unable to read partition table [ 1780.312726][T17400] loop8: partition table beyond EOD, truncated [ 1780.312744][T17400] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1780.494413][T17402] loop8: detected capacity change from 0 to 8 [ 1780.495768][T17402] Dev loop8: unable to read RDB block 8 [ 1780.495811][T17402] loop8: unable to read partition table [ 1780.496030][T17402] loop8: partition table beyond EOD, truncated [ 1780.496047][T17402] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1781.832517][ T5871] usb 6-1: USB disconnect, device number 34 [ 1782.947284][T17459] loop8: detected capacity change from 0 to 8 [ 1783.000184][T17459] Dev loop8: unable to read RDB block 8 [ 1783.000227][T17459] loop8: unable to read partition table [ 1783.000398][T17459] loop8: partition table beyond EOD, truncated [ 1783.000423][T17459] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1783.168028][ T9] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1783.323557][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1783.325794][ T9] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1783.325823][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1783.334823][ T9] usb 6-1: config 0 descriptor?? [ 1783.409392][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 1783.786509][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1783.794721][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 1783.795421][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1783.796359][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 1783.797508][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 1783.808351][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 1783.828480][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 1783.837527][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 1783.842182][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 1784.043498][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 1784.044006][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 1784.047994][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 1784.053116][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 1784.055109][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 1784.055598][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 1784.080684][ T9] pwc: Registered as video103. [ 1784.110030][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input21 [ 1784.196413][ T9] usb 6-1: USB disconnect, device number 35 [ 1785.178032][ T9] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1785.259744][T15771] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1785.368334][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 1785.372182][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1785.372234][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1785.372263][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1785.372285][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1785.372307][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1785.373594][ T9] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1785.373610][ T9] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1785.373623][ T9] usb 6-1: Manufacturer: syz [ 1785.396457][ T9] usb 6-1: config 0 descriptor?? [ 1785.483108][T15771] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1785.483128][T15771] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1785.483139][T15771] usb 3-1: Product: syz [ 1785.483146][T15771] usb 3-1: Manufacturer: syz [ 1785.483153][T15771] usb 3-1: SerialNumber: syz [ 1785.978193][T15771] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1785.978252][T15771] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1786.148113][ T9] rc_core: IR keymap rc-hauppauge not found [ 1786.148134][ T9] Registered IR keymap rc-empty [ 1786.148446][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1786.168168][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1786.193860][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1786.262211][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input22 [ 1786.296062][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1786.308251][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1786.328324][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1786.358052][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1786.385039][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1786.398180][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1786.421597][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1786.438233][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1786.468082][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1786.498411][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1786.522176][ T9] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1786.522200][ T9] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1786.582889][ T9] usb 6-1: USB disconnect, device number 36 [ 1787.451525][T17527] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2605'. [ 1787.457267][T15771] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPIPE [ 1787.460654][T15771] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 1787.465063][T15771] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1787.465116][T15771] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1787.465866][T15771] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1787.560269][T15771] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 1787.595566][T15771] usb 3-1: USB disconnect, device number 24 [ 1787.980798][T17543] loop8: detected capacity change from 0 to 8 [ 1787.981854][T17543] Dev loop8: unable to read RDB block 8 [ 1787.981896][T17543] loop8: unable to read partition table [ 1787.982099][T17543] loop8: partition table beyond EOD, truncated [ 1787.982118][T17543] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1789.357997][ T1902] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1789.528011][ T1902] usb 6-1: Using ep0 maxpacket: 16 [ 1789.544325][ T1902] usb 6-1: config 0 has an invalid descriptor of length 37, skipping remainder of the config [ 1789.544384][ T1902] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1789.544412][ T1902] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 1789.544439][ T1902] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1789.544462][ T1902] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1789.547129][ T1902] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1789.547158][ T1902] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1789.547177][ T1902] usb 6-1: Manufacturer: syz [ 1789.557409][ T1902] usb 6-1: config 0 descriptor?? [ 1790.137950][ T1902] rc_core: IR keymap rc-hauppauge not found [ 1790.137972][ T1902] Registered IR keymap rc-empty [ 1790.139523][ T1902] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1790.158268][ T1902] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1790.190958][ T1902] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1790.195587][ T1902] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input23 [ 1790.251425][ T1902] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1790.382127][ T1902] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1790.406977][ T1902] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1790.418185][ T1902] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1790.438353][ T1902] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1790.458368][ T1902] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1790.478319][ T1902] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1790.499568][ T1902] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1790.597107][ T1902] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1790.615049][ T1902] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1790.630287][ T1902] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1790.630314][ T1902] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1790.674501][ T1902] usb 6-1: USB disconnect, device number 37 [ 1791.519495][T17606] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2636'. [ 1791.943048][T17619] loop8: detected capacity change from 0 to 8 [ 1791.956155][T17619] Dev loop8: unable to read RDB block 8 [ 1791.956200][T17619] loop8: unable to read partition table [ 1791.956413][T17619] loop8: partition table beyond EOD, truncated [ 1791.956444][T17619] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1792.308308][ T5871] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1792.471824][ T5871] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1792.471882][ T5871] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1792.471908][ T5871] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1792.476817][ T5871] usb 6-1: config 0 descriptor?? [ 1792.494499][ T5871] pwc: Askey VC010 type 2 USB webcam detected. [ 1792.615767][T17641] loop8: detected capacity change from 0 to 8 [ 1792.648928][T17641] Dev loop8: unable to read RDB block 8 [ 1792.649087][T17641] loop8: unable to read partition table [ 1792.649308][T17641] loop8: partition table beyond EOD, truncated [ 1792.649327][T17641] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1792.731951][T17643] loop8: detected capacity change from 0 to 8 [ 1792.732943][T17643] Dev loop8: unable to read RDB block 8 [ 1792.732997][T17643] loop8: unable to read partition table [ 1792.733211][T17643] loop8: partition table beyond EOD, truncated [ 1792.733229][T17643] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1792.938238][ T5871] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1792.938993][ T5871] pwc: recv_control_msg error -32 req 02 val 2700 [ 1792.939898][ T5871] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1792.946045][ T5871] pwc: recv_control_msg error -32 req 04 val 1000 [ 1792.950852][ T5871] pwc: recv_control_msg error -32 req 04 val 1300 [ 1792.951666][ T5871] pwc: recv_control_msg error -32 req 04 val 1400 [ 1792.952458][ T5871] pwc: recv_control_msg error -32 req 02 val 2000 [ 1792.953287][ T5871] pwc: recv_control_msg error -32 req 02 val 2100 [ 1792.954198][ T5871] pwc: recv_control_msg error -32 req 04 val 1500 [ 1793.161339][ T5871] pwc: recv_control_msg error -71 req 02 val 2400 [ 1793.161843][ T5871] pwc: recv_control_msg error -71 req 02 val 2600 [ 1793.164026][ T5871] pwc: recv_control_msg error -71 req 02 val 2900 [ 1793.164477][ T5871] pwc: recv_control_msg error -71 req 02 val 2800 [ 1793.165117][ T5871] pwc: recv_control_msg error -71 req 04 val 1100 [ 1793.165586][ T5871] pwc: recv_control_msg error -71 req 04 val 1200 [ 1793.200082][ T5871] pwc: Registered as video103. [ 1793.203140][ T5871] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input24 [ 1793.329798][ T5871] usb 6-1: USB disconnect, device number 38 [ 1794.138682][T17676] loop8: detected capacity change from 0 to 8 [ 1794.152039][T17676] Dev loop8: unable to read RDB block 8 [ 1794.152086][T17676] loop8: unable to read partition table [ 1794.152289][T17676] loop8: partition table beyond EOD, truncated [ 1794.152307][T17676] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1796.103603][T17714] loop8: detected capacity change from 0 to 8 [ 1796.106754][T17714] Dev loop8: unable to read RDB block 8 [ 1796.106799][T17714] loop8: unable to read partition table [ 1796.107025][T17714] loop8: partition table beyond EOD, truncated [ 1796.138363][T17714] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1796.289047][T17722] warning: `syz.5.2685' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1796.557045][T17735] loop8: detected capacity change from 0 to 8 [ 1796.567405][T17735] Dev loop8: unable to read RDB block 8 [ 1796.567450][T17735] loop8: unable to read partition table [ 1796.567677][T17735] loop8: partition table beyond EOD, truncated [ 1796.567709][T17735] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1796.948243][ T5871] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1797.058616][T17098] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 1797.100716][ T5871] usb 3-1: Using ep0 maxpacket: 16 [ 1797.107049][ T5871] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1797.107105][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1797.107134][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1797.107155][ T5871] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1797.107169][ T5871] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1797.129222][ T5871] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1797.129255][ T5871] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1797.129275][ T5871] usb 3-1: Manufacturer: syz [ 1797.140231][ T5871] usb 3-1: config 0 descriptor?? [ 1797.212081][T17098] usb 9-1: Using ep0 maxpacket: 32 [ 1797.271313][T17098] usb 9-1: config 0 has an invalid interface number: 188 but max is 0 [ 1797.271332][T17098] usb 9-1: config 0 has no interface number 0 [ 1797.298573][T17098] usb 9-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1797.298592][T17098] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1797.298604][T17098] usb 9-1: Product: syz [ 1797.298830][T17098] usb 9-1: Manufacturer: syz [ 1797.298841][T17098] usb 9-1: SerialNumber: syz [ 1797.367263][T17098] usb 9-1: config 0 descriptor?? [ 1797.395014][T17098] asix 9-1:0.188: probe with driver asix failed with error -22 [ 1797.456953][T17750] No source specified [ 1798.103543][ T5871] rc_core: IR keymap rc-hauppauge not found [ 1798.103566][ T5871] Registered IR keymap rc-empty [ 1798.103800][ T5871] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1798.118201][ T5871] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1798.139561][ T5871] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1798.142486][ T5871] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input25 [ 1798.215593][ T5871] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1798.227984][ T5871] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1798.251250][ T5871] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1798.268068][ T5871] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1798.295690][ T5871] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1798.308839][ T5871] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1798.328007][ T5871] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1798.348022][ T5871] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1798.368005][ T5871] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1798.524891][ T5871] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1798.549585][ T5871] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1798.549611][ T5871] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1798.580058][ T5871] usb 3-1: USB disconnect, device number 25 [ 1798.703840][T17767] process 'syz.6.2702' launched './file0' with NULL argv: empty string added [ 1799.198808][T17774] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2705'. [ 1799.439613][T17777] loop8: detected capacity change from 0 to 8 [ 1799.440331][T17777] Dev loop8: unable to read RDB block 8 [ 1799.440357][T17777] loop8: unable to read partition table [ 1799.440480][T17777] loop8: partition table beyond EOD, truncated [ 1799.440490][T17777] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1799.566133][ T5928] usb 9-1: USB disconnect, device number 51 [ 1802.023960][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1802.024067][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1802.313675][T17842] loop8: detected capacity change from 0 to 8 [ 1802.315853][T17842] Dev loop8: unable to read RDB block 8 [ 1802.315895][T17842] loop8: unable to read partition table [ 1802.316113][T17842] loop8: partition table beyond EOD, truncated [ 1802.316144][T17842] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1802.362080][ T5165] Dev loop8: unable to read RDB block 8 [ 1802.362134][ T5165] loop8: unable to read partition table [ 1802.362384][ T5165] loop8: partition table beyond EOD, truncated [ 1802.547995][ T5871] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1802.777918][ T5871] usb 3-1: Using ep0 maxpacket: 16 [ 1802.786526][ T5871] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1802.786583][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1802.786612][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1802.786634][ T5871] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1802.786657][ T5871] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1802.790086][ T5871] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1802.790115][ T5871] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1802.790135][ T5871] usb 3-1: Manufacturer: syz [ 1802.806472][ T5871] usb 3-1: config 0 descriptor?? [ 1804.026590][T17879] loop8: detected capacity change from 0 to 7 [ 1804.202792][T16688] Dev loop8: unable to read RDB block 7 [ 1804.202836][T16688] loop8: unable to read partition table [ 1804.203095][T16688] loop8: partition table beyond EOD, truncated [ 1804.247253][T17879] Dev loop8: unable to read RDB block 7 [ 1804.247300][T17879] loop8: unable to read partition table [ 1804.247747][T17879] loop8: partition table beyond EOD, truncated [ 1804.268138][T17879] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1805.117222][T17901] loop8: detected capacity change from 0 to 8 [ 1805.135631][T17901] Dev loop8: unable to read RDB block 8 [ 1805.135679][T17901] loop8: unable to read partition table [ 1805.135887][T17901] loop8: partition table beyond EOD, truncated [ 1805.135904][T17901] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1805.488172][ T5871] rc_core: IR keymap rc-hauppauge not found [ 1805.488193][ T5871] Registered IR keymap rc-empty [ 1805.488339][ T5871] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1805.508060][T17098] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1805.508445][ T5871] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1805.540911][ T5871] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1805.542879][ T5871] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input26 [ 1805.561966][ T5871] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1805.582425][ T5871] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1805.615908][ T5871] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1805.628021][ T5871] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1805.649512][ T5871] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1805.662023][T17098] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1805.662081][T17098] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1805.662105][T17098] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1805.668161][ T5871] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1805.676784][T17098] usb 7-1: config 0 descriptor?? [ 1805.688078][ T5871] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1805.708074][ T5871] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1805.714177][T17098] pwc: Askey VC010 type 2 USB webcam detected. [ 1805.728327][ T5871] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1805.748049][ T5871] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1805.833787][ T5871] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 1805.833988][ T5871] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1805.935174][ T5871] usb 3-1: USB disconnect, device number 26 [ 1806.152081][T17098] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1806.152852][T17098] pwc: recv_control_msg error -32 req 02 val 2700 [ 1806.154249][T17098] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1806.156545][T17098] pwc: recv_control_msg error -32 req 04 val 1000 [ 1806.157441][T17098] pwc: recv_control_msg error -32 req 04 val 1300 [ 1806.167993][ T5928] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1806.183760][T17098] pwc: recv_control_msg error -32 req 04 val 1400 [ 1806.224713][T17098] pwc: recv_control_msg error -32 req 02 val 2000 [ 1806.259808][T17098] pwc: recv_control_msg error -32 req 02 val 2100 [ 1806.267339][T17098] pwc: recv_control_msg error -32 req 04 val 1500 [ 1806.317931][ T5928] usb 6-1: Using ep0 maxpacket: 16 [ 1806.335242][ T5928] usb 6-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 1806.335300][ T5928] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1806.335327][ T5928] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 1806.335342][ T5928] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1806.335354][ T5928] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1806.396967][ T5928] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1806.396997][ T5928] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1806.397017][ T5928] usb 6-1: Manufacturer: syz [ 1806.432872][ T5928] usb 6-1: config 0 descriptor?? [ 1806.483995][T17098] pwc: recv_control_msg error -71 req 02 val 2400 [ 1806.484534][T17098] pwc: recv_control_msg error -71 req 02 val 2600 [ 1806.484958][T17098] pwc: recv_control_msg error -71 req 02 val 2900 [ 1806.485379][T17098] pwc: recv_control_msg error -71 req 02 val 2800 [ 1806.486006][T17098] pwc: recv_control_msg error -71 req 04 val 1100 [ 1806.486464][T17098] pwc: recv_control_msg error -71 req 04 val 1200 [ 1806.606595][T17098] pwc: Registered as video103. [ 1806.610870][T17098] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input27 [ 1806.671673][T17098] usb 7-1: USB disconnect, device number 34 [ 1806.894872][ T5928] rc_core: IR keymap rc-hauppauge not found [ 1806.894893][ T5928] Registered IR keymap rc-empty [ 1806.895334][ T5928] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1806.908306][ T5928] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1806.934447][ T5928] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1806.965158][ T5928] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input28 [ 1806.989484][ T5928] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1807.008488][ T5928] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1807.028578][ T5928] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1807.048789][ T5928] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1807.068392][ T5928] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1807.088537][ T5928] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1807.108673][ T5928] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1807.129585][ T5928] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1807.151431][ T5928] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1807.168382][ T5928] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1807.201168][ T5928] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1807.201195][ T5928] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1807.320754][ T5928] usb 6-1: USB disconnect, device number 39 [ 1808.138165][T17952] loop8: detected capacity change from 0 to 7 [ 1808.145261][T17952] Dev loop8: unable to read RDB block 7 [ 1808.145307][T17952] loop8: unable to read partition table [ 1808.145534][T17952] loop8: partition table beyond EOD, truncated [ 1808.145553][T17952] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1808.583230][T17971] loop8: detected capacity change from 0 to 8 [ 1808.585147][T17971] Dev loop8: unable to read RDB block 8 [ 1808.585175][T17971] loop8: unable to read partition table [ 1808.585299][T17971] loop8: partition table beyond EOD, truncated [ 1808.585325][T17971] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1810.376348][T18002] loop8: detected capacity change from 0 to 8 [ 1810.381413][T18002] Dev loop8: unable to read RDB block 8 [ 1810.381442][T18002] loop8: unable to read partition table [ 1810.381574][T18002] loop8: partition table beyond EOD, truncated [ 1810.381586][T18002] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1811.468118][T15771] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 1811.631526][T15771] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1811.631585][T15771] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1811.631609][T15771] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1811.636510][T15771] usb 9-1: config 0 descriptor?? [ 1811.694024][T15771] pwc: Askey VC010 type 2 USB webcam detected. [ 1812.075813][T15771] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1812.077249][T15771] pwc: recv_control_msg error -32 req 02 val 2700 [ 1812.096664][T15771] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1812.097563][T15771] pwc: recv_control_msg error -32 req 04 val 1000 [ 1812.113579][T15771] pwc: recv_control_msg error -32 req 04 val 1300 [ 1812.114136][T15771] pwc: recv_control_msg error -32 req 04 val 1400 [ 1812.114777][T15771] pwc: recv_control_msg error -32 req 02 val 2000 [ 1812.115447][T15771] pwc: recv_control_msg error -32 req 02 val 2100 [ 1812.116269][T15771] pwc: recv_control_msg error -32 req 04 val 1500 [ 1812.516268][T15771] pwc: recv_control_msg error -71 req 02 val 2400 [ 1812.529111][T15771] pwc: recv_control_msg error -71 req 02 val 2600 [ 1812.529661][T15771] pwc: recv_control_msg error -71 req 02 val 2900 [ 1812.530117][T15771] pwc: recv_control_msg error -71 req 02 val 2800 [ 1812.530768][T15771] pwc: recv_control_msg error -71 req 04 val 1100 [ 1812.531218][T15771] pwc: recv_control_msg error -71 req 04 val 1200 [ 1812.539345][T15771] pwc: Registered as video103. [ 1812.542383][T15771] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input29 [ 1814.649065][T15771] usb 9-1: USB disconnect, device number 52 [ 1817.207443][T18090] loop8: detected capacity change from 0 to 8 [ 1817.213782][T18090] Dev loop8: unable to read RDB block 8 [ 1817.213828][T18090] loop8: unable to read partition table [ 1817.214042][T18090] loop8: partition table beyond EOD, truncated [ 1817.214061][T18090] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1817.677990][T15771] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 1817.828004][T15771] usb 9-1: Using ep0 maxpacket: 32 [ 1817.830519][T15771] usb 9-1: config 0 has an invalid interface number: 184 but max is 0 [ 1817.830547][T15771] usb 9-1: config 0 has no interface number 0 [ 1817.830599][T15771] usb 9-1: config 0 interface 184 has no altsetting 0 [ 1817.873695][T15771] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1817.873728][T15771] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1817.873747][T15771] usb 9-1: Product: syz [ 1817.873762][T15771] usb 9-1: Manufacturer: syz [ 1817.873776][T15771] usb 9-1: SerialNumber: syz [ 1817.920853][T15771] usb 9-1: config 0 descriptor?? [ 1817.943868][T15771] smsc75xx v1.0.0 [ 1819.060953][T15771] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1819.060999][T15771] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1819.167998][ T9] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1819.348015][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 1819.357544][ T9] usb 7-1: config 0 has an invalid interface number: 188 but max is 0 [ 1819.357574][ T9] usb 7-1: config 0 has no interface number 0 [ 1819.358754][ T5928] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 1819.401919][ T9] usb 7-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1819.402320][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1819.402343][ T9] usb 7-1: Product: syz [ 1819.402359][ T9] usb 7-1: Manufacturer: syz [ 1819.402374][ T9] usb 7-1: SerialNumber: syz [ 1819.456375][ T9] usb 7-1: config 0 descriptor?? [ 1819.469913][T15771] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1819.469945][T15771] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1819.469965][T15771] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1819.469982][T15771] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1819.470296][T15771] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -71 [ 1819.531390][ T5928] usb 6-1: device descriptor read/64, error -71 [ 1819.549222][ T9] asix 7-1:0.188: probe with driver asix failed with error -22 [ 1819.549769][T15771] usb 9-1: USB disconnect, device number 53 [ 1819.768079][ T5928] usb 6-1: new full-speed USB device number 41 using dummy_hcd [ 1819.898021][ T5928] usb 6-1: device descriptor read/64, error -71 [ 1820.013956][ T5928] usb usb6-port1: attempt power cycle [ 1820.348028][ T5928] usb 6-1: new full-speed USB device number 42 using dummy_hcd [ 1820.368711][ T5928] usb 6-1: device descriptor read/8, error -71 [ 1820.417969][ T5871] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 1820.591678][ T5871] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1820.591734][ T5871] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1820.591759][ T5871] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1820.609319][ T5871] usb 9-1: config 0 descriptor?? [ 1820.609812][ T5928] usb 6-1: new full-speed USB device number 43 using dummy_hcd [ 1820.638713][ T5928] usb 6-1: device descriptor read/8, error -71 [ 1820.655706][ T5871] pwc: Askey VC010 type 2 USB webcam detected. [ 1820.748355][ T5928] usb usb6-port1: unable to enumerate USB device [ 1821.094427][ T5871] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1821.096908][ T5871] pwc: recv_control_msg error -32 req 02 val 2700 [ 1821.097569][ T5871] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1821.100658][ T5871] pwc: recv_control_msg error -32 req 04 val 1000 [ 1821.102529][ T5871] pwc: recv_control_msg error -32 req 04 val 1300 [ 1821.104285][ T5871] pwc: recv_control_msg error -32 req 04 val 1400 [ 1821.105732][ T5871] pwc: recv_control_msg error -32 req 02 val 2000 [ 1821.110513][ T5871] pwc: recv_control_msg error -32 req 02 val 2100 [ 1821.111499][ T5871] pwc: recv_control_msg error -32 req 04 val 1500 [ 1821.215974][ T5928] usb 7-1: USB disconnect, device number 35 [ 1821.327971][ T5871] pwc: recv_control_msg error -71 req 02 val 2400 [ 1821.328545][ T5871] pwc: recv_control_msg error -71 req 02 val 2600 [ 1821.329014][ T5871] pwc: recv_control_msg error -71 req 02 val 2900 [ 1821.329461][ T5871] pwc: recv_control_msg error -71 req 02 val 2800 [ 1821.331852][ T5871] pwc: recv_control_msg error -71 req 04 val 1100 [ 1821.332342][ T5871] pwc: recv_control_msg error -71 req 04 val 1200 [ 1821.392098][ T5871] pwc: Registered as video103. [ 1821.399653][ T5871] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input30 [ 1821.446830][ T5871] usb 9-1: USB disconnect, device number 54 [ 1822.927436][ T8649] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1822.947172][ T8649] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1822.951860][ T8649] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1822.967766][ T8649] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1822.980391][ T8649] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1823.776069][T15771] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1823.935904][T15771] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1823.935941][T15771] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1823.935962][T15771] usb 6-1: Product: syz [ 1823.935976][T15771] usb 6-1: Manufacturer: syz [ 1823.935999][T15771] usb 6-1: SerialNumber: syz [ 1824.087963][T17098] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1824.095647][T18255] chnl_net:caif_netlink_parms(): no params data found [ 1824.259122][T17098] usb 7-1: Using ep0 maxpacket: 16 [ 1824.261323][T17098] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1824.261404][T17098] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1824.261433][T17098] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1824.261454][T17098] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1824.261476][T17098] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1824.262977][T17098] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1824.263004][T17098] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1824.263023][T17098] usb 7-1: Manufacturer: syz [ 1824.269822][T17098] usb 7-1: config 0 descriptor?? [ 1824.406879][T15771] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1824.406938][T15771] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1824.620189][T17098] rc_core: IR keymap rc-hauppauge not found [ 1824.620210][T17098] Registered IR keymap rc-empty [ 1824.620362][T17098] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1824.637982][T17098] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1824.659588][T17098] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1824.666979][T17098] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input31 [ 1824.704334][T17098] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1824.721104][T17098] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1824.739828][T17098] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1824.758035][T17098] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1824.778280][T17098] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1824.800810][T17098] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1824.821178][T17098] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1824.855039][T17098] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1824.869130][T17098] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1824.889978][T17098] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1824.946270][T17098] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1824.946293][T17098] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1825.015172][T17098] usb 7-1: USB disconnect, device number 36 [ 1825.057940][ T5798] Bluetooth: hci3: command tx timeout [ 1825.385516][T15409] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1825.417758][T15771] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 1825.417923][T15771] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1825.420284][T15771] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1825.515197][T15771] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32 [ 1825.632068][T18255] bridge0: port 1(bridge_slave_0) entered blocking state [ 1825.646469][T18255] bridge0: port 1(bridge_slave_0) entered disabled state [ 1825.646773][T18255] bridge_slave_0: entered allmulticast mode [ 1825.664337][T18255] bridge_slave_0: entered promiscuous mode [ 1825.794940][T18339] loop8: detected capacity change from 0 to 8 [ 1825.796422][T18339] Dev loop8: unable to read RDB block 8 [ 1825.796464][T18339] loop8: unable to read partition table [ 1825.796689][T18339] loop8: partition table beyond EOD, truncated [ 1825.796708][T18339] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1825.922091][T15409] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1825.980960][T18255] bridge0: port 2(bridge_slave_1) entered blocking state [ 1825.981121][T18255] bridge0: port 2(bridge_slave_1) entered disabled state [ 1825.981397][T18255] bridge_slave_1: entered allmulticast mode [ 1825.983986][T18255] bridge_slave_1: entered promiscuous mode [ 1825.998298][T18348] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2958'. [ 1826.302853][T15409] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1826.307955][T17098] usb 7-1: new full-speed USB device number 37 using dummy_hcd [ 1826.360550][T18255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1826.365184][T18255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1826.468956][T17098] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1826.469469][T17098] usb 7-1: not running at top speed; connect to a high speed hub [ 1826.470529][T17098] usb 7-1: config 56 has an invalid interface number: 216 but max is 0 [ 1826.470553][T17098] usb 7-1: config 56 has no interface number 0 [ 1826.470593][T17098] usb 7-1: config 56 interface 216 altsetting 224 endpoint 0x86 has invalid maxpacket 512, setting to 64 [ 1826.470620][T17098] usb 7-1: config 56 interface 216 has no altsetting 0 [ 1826.472889][T17098] usb 7-1: New USB device found, idVendor=12d1, idProduct=554b, bcdDevice=5a.0b [ 1826.472914][T17098] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1826.472934][T17098] usb 7-1: Product: syz [ 1826.472948][T17098] usb 7-1: Manufacturer: syz [ 1826.472961][T17098] usb 7-1: SerialNumber: syz [ 1826.474542][T15771] usb 6-1: USB disconnect, device number 44 [ 1826.516091][T18348] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1826.766752][T18348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1826.767278][T18348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1826.769307][T18348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1826.799206][T18348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1826.830729][T17098] hub 7-1:56.216: bad descriptor, ignoring hub [ 1826.830771][T17098] hub 7-1:56.216: probe with driver hub failed with error -5 [ 1826.832345][T17098] option 7-1:56.216: GSM modem (1-port) converter detected [ 1826.928857][T17098] usb 7-1: USB disconnect, device number 37 [ 1826.933298][T17098] option 7-1:56.216: device disconnected [ 1827.003384][T15409] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1827.048031][T15771] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1827.084195][T18255] team0: Port device team_slave_0 added [ 1827.128938][ T5798] Bluetooth: hci3: command tx timeout [ 1827.208119][T15771] usb 6-1: Using ep0 maxpacket: 16 [ 1827.210814][T15771] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1827.210888][T15771] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1827.210916][T15771] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 1827.210941][T15771] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1827.210962][T15771] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1827.212907][T15771] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1827.212936][T15771] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1827.212956][T15771] usb 6-1: Manufacturer: syz [ 1827.304470][T15771] usb 6-1: config 0 descriptor?? [ 1827.309781][T18255] team0: Port device team_slave_1 added [ 1827.498924][T18255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1827.498942][T18255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1827.498969][T18255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1827.505049][T18255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1827.505065][T18255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1827.505093][T18255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1827.708474][T15771] rc_core: IR keymap rc-hauppauge not found [ 1827.708493][T15771] Registered IR keymap rc-empty [ 1827.709385][T15771] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1827.728329][T15771] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1827.749721][T15771] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1827.755372][T15771] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input32 [ 1827.785940][T15771] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1827.801791][T15771] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1827.818909][T15771] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1827.838310][T15771] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1827.868635][T15771] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1827.898344][T15771] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1827.923403][T15771] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1827.935254][T18255] hsr_slave_0: entered promiscuous mode [ 1827.936825][T18255] hsr_slave_1: entered promiscuous mode [ 1827.952556][T18255] debugfs: 'hsr0' already exists in 'hsr' [ 1827.952585][T18255] Cannot create hsr debugfs directory [ 1827.973827][T15771] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1827.988330][T15771] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1828.008341][T15771] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1828.063023][T15771] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1828.063040][T15771] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1828.107268][T15771] usb 6-1: USB disconnect, device number 45 [ 1829.207924][ T5798] Bluetooth: hci3: command tx timeout [ 1829.585351][T15409] bridge_slave_1: left allmulticast mode [ 1829.585380][T15409] bridge_slave_1: left promiscuous mode [ 1829.585612][T15409] bridge0: port 2(bridge_slave_1) entered disabled state [ 1829.669127][T15409] bridge_slave_0: left allmulticast mode [ 1829.669150][T15409] bridge_slave_0: left promiscuous mode [ 1829.669349][T15409] bridge0: port 1(bridge_slave_0) entered disabled state [ 1831.300195][ T5798] Bluetooth: hci3: command tx timeout [ 1832.674814][T15409] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1832.748743][T15409] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1832.791745][T15409] bond0 (unregistering): Released all slaves [ 1834.280833][T15409] bond1 (unregistering): Released all slaves [ 1834.635254][T15409] : left promiscuous mode [ 1834.848874][ T1902] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1835.004649][ T1902] usb 6-1: Using ep0 maxpacket: 16 [ 1835.014852][ T1902] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1835.014909][ T1902] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1835.014937][ T1902] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1835.014960][ T1902] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1835.014984][ T1902] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1835.016149][ T1902] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1835.016177][ T1902] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1835.016197][ T1902] usb 6-1: Manufacturer: syz [ 1835.201280][ T1902] usb 6-1: config 0 descriptor?? [ 1835.627928][ T1902] rc_core: IR keymap rc-hauppauge not found [ 1835.627949][ T1902] Registered IR keymap rc-empty [ 1835.628101][ T1902] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1835.656481][ T1902] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1835.669608][ T1902] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1835.672741][ T1902] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input33 [ 1835.754911][ T1902] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1835.774383][ T1902] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1835.788176][ T1902] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1835.810191][ T1902] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1835.830343][ T1902] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1835.850559][ T1902] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1835.871867][ T1902] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1835.889226][ T1902] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1835.908087][ T1902] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1835.928356][ T1902] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1835.965261][ T1902] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1835.965343][ T1902] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1836.048552][T15771] usb 6-1: USB disconnect, device number 46 [ 1837.150206][T18741] futex_wake_op: syz.5.3136 tries to shift op by 146; fix this program [ 1837.348334][T18735] futex_wake_op: syz.6.3137 tries to shift op by 146; fix this program [ 1841.381214][T18829] loop8: detected capacity change from 0 to 8 [ 1841.399558][T18829] Dev loop8: unable to read RDB block 8 [ 1841.399611][T18829] loop8: unable to read partition table [ 1841.399835][T18829] loop8: partition table beyond EOD, truncated [ 1841.399854][T18829] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1841.745147][T15409] hsr_slave_0: left promiscuous mode [ 1841.868564][T15409] hsr_slave_1: left promiscuous mode [ 1841.869557][T15409] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1841.869582][T15409] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1841.958015][ T5871] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1841.979236][T15409] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1841.979263][T15409] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1842.104253][T15409] veth1_macvtap: left promiscuous mode [ 1842.104348][T15409] veth0_macvtap: left promiscuous mode [ 1842.106362][T15409] veth1_vlan: left promiscuous mode [ 1842.106552][T15409] veth0_vlan: left promiscuous mode [ 1842.131018][ T5871] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1842.133630][ T5871] usb 7-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 1842.133656][ T5871] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1842.133678][ T5871] usb 7-1: Product: syz [ 1842.133692][ T5871] usb 7-1: Manufacturer: syz [ 1842.133707][ T5871] usb 7-1: SerialNumber: syz [ 1842.139536][ T5871] usb 7-1: config 0 descriptor?? [ 1842.975680][T15409] pim6reg (unregistering): left allmulticast mode [ 1844.690616][T17098] usb 7-1: USB disconnect, device number 38 [ 1845.227923][T17098] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1845.388024][T17098] usb 7-1: Using ep0 maxpacket: 16 [ 1845.390094][T17098] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1845.390147][T17098] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1845.390175][T17098] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 1845.390202][T17098] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1845.390225][T17098] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1845.391692][T17098] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1845.391718][T17098] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1845.391738][T17098] usb 7-1: Manufacturer: syz [ 1845.396739][T17098] usb 7-1: config 0 descriptor?? [ 1845.758042][T17098] rc_core: IR keymap rc-hauppauge not found [ 1845.758063][T17098] Registered IR keymap rc-empty [ 1845.761081][T17098] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1845.778321][T17098] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1845.799451][T17098] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1845.802418][T17098] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input34 [ 1845.810265][T17098] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1845.921312][T17098] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1845.938304][T17098] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1846.003340][T17098] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1846.020821][T17098] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1846.038848][T17098] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1846.058276][T17098] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1846.078289][T17098] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1846.098461][T17098] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1846.118790][T17098] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1846.142776][T17098] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1846.142804][T17098] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1846.209914][T17098] usb 7-1: USB disconnect, device number 39 [ 1848.156304][T15409] team0 (unregistering): Port device team_slave_1 removed [ 1848.699391][T15409] team0 (unregistering): Port device team_slave_0 removed [ 1853.391207][T18255] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1853.501567][T18255] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1853.578187][ T5871] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1853.587977][ T1902] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1853.600276][T18255] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1853.727975][T18255] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1853.756965][ T1902] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1853.757042][ T1902] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1853.757062][ T1902] usb 6-1: Product: syz [ 1853.757076][ T1902] usb 6-1: Manufacturer: syz [ 1853.757089][ T1902] usb 6-1: SerialNumber: syz [ 1853.799148][ T5871] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1853.799206][ T5871] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1853.799279][ T5871] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1853.842026][ T5871] usb 7-1: config 0 descriptor?? [ 1853.867969][ T5871] pwc: Askey VC010 type 2 USB webcam detected. [ 1854.028834][ T1902] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1854.028938][ T1902] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 1854.028959][ T1902] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1854.157747][ T1902] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32 [ 1854.258686][ T5871] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1854.260156][ T5871] pwc: recv_control_msg error -32 req 02 val 2700 [ 1854.261114][ T5871] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1854.262092][ T5871] pwc: recv_control_msg error -32 req 04 val 1000 [ 1854.262882][ T5871] pwc: recv_control_msg error -32 req 04 val 1300 [ 1854.263706][ T5871] pwc: recv_control_msg error -32 req 04 val 1400 [ 1854.264381][ T5871] pwc: recv_control_msg error -32 req 02 val 2000 [ 1854.265190][ T5871] pwc: recv_control_msg error -32 req 02 val 2100 [ 1854.266013][ T5871] pwc: recv_control_msg error -32 req 04 val 1500 [ 1854.424322][T18255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1854.468445][ T5871] pwc: recv_control_msg error -71 req 02 val 2400 [ 1854.468909][ T5871] pwc: recv_control_msg error -71 req 02 val 2600 [ 1854.469360][ T5871] pwc: recv_control_msg error -71 req 02 val 2900 [ 1854.469817][ T5871] pwc: recv_control_msg error -71 req 02 val 2800 [ 1854.470510][ T5871] pwc: recv_control_msg error -71 req 04 val 1100 [ 1854.470962][ T5871] pwc: recv_control_msg error -71 req 04 val 1200 [ 1854.474820][ T5871] pwc: Registered as video103. [ 1854.522542][ T5871] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input35 [ 1854.539317][ T5871] usb 7-1: USB disconnect, device number 40 [ 1854.581057][T18255] 8021q: adding VLAN 0 to HW filter on device team0 [ 1854.678600][T15408] bridge0: port 1(bridge_slave_0) entered blocking state [ 1854.678741][T15408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1854.697300][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1854.697446][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1855.528112][ T9] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1855.623261][T18255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1855.678857][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 1855.685199][ T9] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 1855.685227][ T9] usb 7-1: config 0 has no interface number 0 [ 1855.686206][ T9] usb 7-1: config 0 interface 12 has no altsetting 0 [ 1855.715659][ T9] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1855.715690][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1855.715711][ T9] usb 7-1: Product: syz [ 1855.715726][ T9] usb 7-1: Manufacturer: syz [ 1855.715741][ T9] usb 7-1: SerialNumber: syz [ 1855.723633][ T9] usb 7-1: config 0 descriptor?? [ 1856.449693][ T1902] usb 6-1: USB disconnect, device number 47 [ 1856.548119][T18255] veth0_vlan: entered promiscuous mode [ 1856.551146][ T9] f81534 7-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 1856.551197][ T9] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71 [ 1856.551214][ T9] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1856.551303][ T9] f81534 7-1:0.12: probe with driver f81534 failed with error -71 [ 1856.584308][ T9] usb 7-1: USB disconnect, device number 41 [ 1856.636701][T18255] veth1_vlan: entered promiscuous mode [ 1856.747452][T18255] veth0_macvtap: entered promiscuous mode [ 1856.762160][T18255] veth1_macvtap: entered promiscuous mode [ 1856.797489][T18255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1856.833587][T18255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1856.865415][ T6981] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1856.865495][ T6981] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1856.865545][ T6981] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1856.865579][ T6981] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1857.353843][T15394] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1857.353865][T15394] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1857.435146][T15394] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1857.435169][T15394] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1858.154449][T19484] lo speed is unknown, defaulting to 1000 [ 1858.164275][T19484] lo speed is unknown, defaulting to 1000 [ 1858.245586][T19484] lo speed is unknown, defaulting to 1000 [ 1858.397878][T19484] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1858.452208][T19484] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1858.519410][T19484] lo speed is unknown, defaulting to 1000 [ 1858.522721][T19484] lo speed is unknown, defaulting to 1000 [ 1858.527719][T19484] lo speed is unknown, defaulting to 1000 [ 1858.530299][T19484] lo speed is unknown, defaulting to 1000 [ 1858.532838][T19484] lo speed is unknown, defaulting to 1000 [ 1858.535265][T19484] lo speed is unknown, defaulting to 1000 [ 1859.355160][ T8649] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1859.385281][ T8649] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1859.395356][ T8649] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1859.397187][ T8649] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1859.412035][ T8649] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1859.490556][T19504] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3479'. [ 1860.186052][T19499] lo speed is unknown, defaulting to 1000 [ 1860.727071][T19527] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3486'. [ 1861.397577][T19499] chnl_net:caif_netlink_parms(): no params data found [ 1861.695117][T19499] bridge0: port 1(bridge_slave_0) entered blocking state [ 1861.696558][T19499] bridge0: port 1(bridge_slave_0) entered disabled state [ 1861.697129][T19499] bridge_slave_0: entered allmulticast mode [ 1861.751584][T19499] bridge_slave_0: entered promiscuous mode [ 1861.805388][T19499] bridge0: port 2(bridge_slave_1) entered blocking state [ 1861.805503][T19499] bridge0: port 2(bridge_slave_1) entered disabled state [ 1861.811972][T19499] bridge_slave_1: entered allmulticast mode [ 1861.931097][T19499] bridge_slave_1: entered promiscuous mode [ 1862.007999][ T8649] Bluetooth: hci4: command tx timeout [ 1863.466519][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1863.466562][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1863.597242][T19558] loop8: detected capacity change from 0 to 8 [ 1863.604462][T19558] Dev loop8: unable to read RDB block 8 [ 1863.604508][T19558] loop8: unable to read partition table [ 1863.604747][T19558] loop8: partition table beyond EOD, truncated [ 1863.604781][T19558] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1863.961784][ T43] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1864.054907][T19499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1864.061570][T19499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1864.088060][ T8649] Bluetooth: hci4: command tx timeout [ 1864.180537][T19499] team0: Port device team_slave_0 added [ 1864.183871][T19499] team0: Port device team_slave_1 added [ 1864.237922][ T5871] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 1864.387946][ T5871] usb 9-1: Using ep0 maxpacket: 16 [ 1864.431886][ T5871] usb 9-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 1864.431942][ T5871] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1864.431970][ T5871] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 1864.431997][ T5871] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1864.432020][ T5871] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1864.433201][ T5871] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1864.433228][ T5871] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1864.433248][ T5871] usb 9-1: Manufacturer: syz [ 1864.525484][ T5871] usb 9-1: config 0 descriptor?? [ 1864.787344][ T43] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1864.976714][T19499] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1864.976733][T19499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1864.976758][T19499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1865.037696][T19499] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1865.037708][T19499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1865.037724][T19499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1865.207909][ T5871] rc_core: IR keymap rc-hauppauge not found [ 1865.207931][ T5871] Registered IR keymap rc-empty [ 1865.212425][ T5871] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1865.228289][ T5871] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1865.249545][ T5871] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 1865.252607][ T5871] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input36 [ 1865.282804][ T5871] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1865.298600][ T5871] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1865.329931][ T5871] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1865.348276][ T5871] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1865.368447][ T5871] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1865.388999][ T5871] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1865.408313][ T5871] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1865.428414][ T5871] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1865.452600][ T5871] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1865.474031][ T5871] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1865.502899][ T5871] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1865.502925][ T5871] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1865.566241][ T5871] usb 9-1: USB disconnect, device number 55 [ 1865.697533][ T43] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1866.204390][ T8649] Bluetooth: hci4: command tx timeout [ 1866.380196][ T43] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1866.457207][T19499] hsr_slave_0: entered promiscuous mode [ 1866.471413][T19499] hsr_slave_1: entered promiscuous mode [ 1866.488237][ T5871] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1866.537948][T15771] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 1866.659019][ T5871] usb 7-1: Using ep0 maxpacket: 32 [ 1866.664539][ T5871] usb 7-1: config 0 has an invalid interface number: 188 but max is 0 [ 1866.664564][ T5871] usb 7-1: config 0 has no interface number 0 [ 1866.693266][ T5871] usb 7-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1866.693295][ T5871] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1866.693314][ T5871] usb 7-1: Product: syz [ 1866.693328][ T5871] usb 7-1: Manufacturer: syz [ 1866.693343][ T5871] usb 7-1: SerialNumber: syz [ 1866.703500][T15771] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1866.703530][T15771] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1866.703551][T15771] usb 9-1: Product: syz [ 1866.703566][T15771] usb 9-1: Manufacturer: syz [ 1866.703580][T15771] usb 9-1: SerialNumber: syz [ 1866.776643][ T5871] usb 7-1: config 0 descriptor?? [ 1866.799521][ T5871] asix 7-1:0.188: probe with driver asix failed with error -22 [ 1867.377976][T15771] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1867.378039][T15771] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1867.386245][T15771] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1867.386301][T15771] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1867.387065][T15771] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1867.460024][T15771] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -32 [ 1868.553506][ T8649] Bluetooth: hci4: command tx timeout [ 1868.663099][T19641] loop8: detected capacity change from 0 to 8 [ 1868.695230][T19641] Dev loop8: unable to read RDB block 8 [ 1868.695277][T19641] loop8: unable to read partition table [ 1868.695422][T19641] loop8: partition table beyond EOD, truncated [ 1868.695448][T19641] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1869.215831][ T43] bridge_slave_1: left allmulticast mode [ 1869.215860][ T43] bridge_slave_1: left promiscuous mode [ 1869.216583][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 1869.299111][ T43] bridge_slave_0: left allmulticast mode [ 1869.299137][ T43] bridge_slave_0: left promiscuous mode [ 1869.300877][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 1869.347400][T15771] usb 9-1: USB disconnect, device number 56 [ 1869.651126][T10009] usb 7-1: USB disconnect, device number 42 [ 1871.600406][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1871.678871][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1871.722204][ T43] bond0 (unregistering): Released all slaves [ 1872.926478][ T43] bond1 (unregistering): Released all slaves [ 1873.988882][T19810] loop8: detected capacity change from 0 to 8 [ 1873.996302][T19810] Dev loop8: unable to read RDB block 8 [ 1873.996349][T19810] loop8: unable to read partition table [ 1873.996565][T19810] loop8: partition table beyond EOD, truncated [ 1873.996582][T19810] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1874.533844][T19829] loop8: detected capacity change from 0 to 8 [ 1874.546309][T19829] Dev loop8: unable to read RDB block 8 [ 1874.546354][T19829] loop8: unable to read partition table [ 1874.546619][T19829] loop8: partition table beyond EOD, truncated [ 1874.546661][T19829] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1876.754326][T19870] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3637'. [ 1876.917558][T19879] sysfs: cannot create duplicate filename '/class/ieee80211/1^!l1*$pOcɔr$Gt:u' [ 1876.917588][T19879] CPU: 0 UID: 0 PID: 19879 Comm: syz.6.3637 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1876.917619][T19879] Tainted: [L]=SOFTLOCKUP [ 1876.917627][T19879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1876.917641][T19879] Call Trace: [ 1876.917650][T19879] [ 1876.917660][T19879] dump_stack_lvl+0xe8/0x150 [ 1876.917700][T19879] sysfs_warn_dup+0x8e/0xa0 [ 1876.917728][T19879] sysfs_do_create_link_sd+0xc0/0x110 [ 1876.917756][T19879] device_add_class_symlinks+0x1d2/0x240 [ 1876.917791][T19879] device_add+0x475/0xb80 [ 1876.917820][T19879] wiphy_register+0x1d6c/0x2d50 [ 1876.917861][T19879] ? __pfx_wiphy_register+0x10/0x10 [ 1876.917884][T19879] ? __pfx_netdev_run_todo+0x10/0x10 [ 1876.917910][T19879] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 1876.917939][T19879] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 1876.917974][T19879] ieee80211_register_hw+0x34d2/0x4150 [ 1876.918011][T19879] ? ieee80211_register_hw+0x14b1/0x4150 [ 1876.918040][T19879] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1876.918077][T19879] ? __hrtimer_setup+0x181/0x200 [ 1876.918102][T19879] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1876.918129][T19879] mac80211_hwsim_new_radio+0x2efe/0x5210 [ 1876.918160][T19879] ? mac80211_hwsim_new_radio+0xf0/0x5210 [ 1876.918199][T19879] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1876.918218][T19879] ? kstrndup+0xbf/0x160 [ 1876.918253][T19879] hwsim_new_radio_nl+0xf85/0x1c30 [ 1876.918288][T19879] ? __pfx___nla_validate_parse+0x10/0x10 [ 1876.918329][T19879] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1876.918357][T19879] ? rcu_is_watching+0x15/0xb0 [ 1876.918390][T19879] ? __nla_parse+0x40/0x60 [ 1876.918416][T19879] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1876.918448][T19879] genl_family_rcv_msg_doit+0x22a/0x330 [ 1876.918477][T19879] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1876.918497][T19879] ? rcu_is_watching+0x15/0xb0 [ 1876.918533][T19879] ? bpf_lsm_capable+0x9/0x20 [ 1876.918555][T19879] ? security_capable+0x7e/0x2c0 [ 1876.918583][T19879] genl_rcv_msg+0x61c/0x7a0 [ 1876.918612][T19879] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1876.918632][T19879] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1876.918658][T19879] ? __pfx_ref_tracker_free+0x10/0x10 [ 1876.918679][T19879] ? __skb_clone+0x63/0x7a0 [ 1876.918709][T19879] netlink_rcv_skb+0x232/0x4b0 [ 1876.918738][T19879] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1876.918760][T19879] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1876.918802][T19879] ? netlink_deliver_tap+0x2e/0x1b0 [ 1876.918827][T19879] ? netlink_deliver_tap+0x2e/0x1b0 [ 1876.918858][T19879] genl_rcv+0x28/0x40 [ 1876.918876][T19879] netlink_unicast+0x831/0x9f0 [ 1876.918910][T19879] ? __pfx_netlink_unicast+0x10/0x10 [ 1876.918934][T19879] ? __alloc_skb+0x193/0x390 [ 1876.918963][T19879] ? netlink_sendmsg+0x650/0xb40 [ 1876.918988][T19879] ? skb_put+0x11b/0x210 [ 1876.919011][T19879] netlink_sendmsg+0x813/0xb40 [ 1876.919048][T19879] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1876.919076][T19879] ? tomoyo_path_number_perm+0x501/0x630 [ 1876.919202][T19879] ? security_file_ioctl+0xc3/0x2a0 [ 1876.919258][T19879] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1876.919312][T19879] ____sys_sendmsg+0xa4e/0xac0 [ 1876.919335][T19879] ? __might_fault+0xaf/0x130 [ 1876.919371][T19879] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1876.919403][T19879] ? import_iovec+0x73/0xa0 [ 1876.919433][T19879] ___sys_sendmsg+0x2a5/0x360 [ 1876.919453][T19879] ? __lock_acquire+0x6b5/0x2cf0 [ 1876.919482][T19879] ? __pfx____sys_sendmsg+0x10/0x10 [ 1876.919542][T19879] ? __fget_files+0x2a/0x420 [ 1876.919560][T19879] ? __fget_files+0x3a6/0x420 [ 1876.919591][T19879] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1876.919616][T19879] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1876.919652][T19879] ? __pfx_kcov_ioctl+0x10/0x10 [ 1876.919700][T19879] do_syscall_64+0xe2/0xf80 [ 1876.919729][T19879] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1876.919749][T19879] ? trace_irq_disable+0x37/0x100 [ 1876.919774][T19879] ? clear_bhb_loop+0x60/0xb0 [ 1876.919800][T19879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1876.919820][T19879] RIP: 0033:0x7f059911aeb9 [ 1876.919841][T19879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1876.919860][T19879] RSP: 002b:00007f0596ae6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1876.919882][T19879] RAX: ffffffffffffffda RBX: 00007f0599396360 RCX: 00007f059911aeb9 [ 1876.919899][T19879] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000008 [ 1876.919913][T19879] RBP: 00007f0599188c1f R08: 0000000000000000 R09: 0000000000000000 [ 1876.919927][T19879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1876.919940][T19879] R13: 00007f05993963f8 R14: 00007f0599396360 R15: 00007ffc0770dc58 [ 1876.919975][T19879] [ 1877.708010][T10009] usb 9-1: new high-speed USB device number 57 using dummy_hcd [ 1877.861070][T10009] usb 9-1: Using ep0 maxpacket: 32 [ 1877.863719][T10009] usb 9-1: config 0 has an invalid interface number: 12 but max is 0 [ 1877.863745][T10009] usb 9-1: config 0 has no interface number 0 [ 1877.863790][T10009] usb 9-1: config 0 interface 12 has no altsetting 0 [ 1877.866951][T10009] usb 9-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1877.866980][T10009] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1877.867001][T10009] usb 9-1: Product: syz [ 1877.867016][T10009] usb 9-1: Manufacturer: syz [ 1877.867030][T10009] usb 9-1: SerialNumber: syz [ 1877.879600][T10009] usb 9-1: config 0 descriptor?? [ 1877.881314][ T43] hsr_slave_0: left promiscuous mode [ 1877.947948][ T43] hsr_slave_1: left promiscuous mode [ 1877.953887][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1877.953907][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1878.001183][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1878.001203][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1878.529082][ T43] veth1_macvtap: left promiscuous mode [ 1878.531468][ T43] veth0_macvtap: left promiscuous mode [ 1878.532241][ T43] veth1_vlan: left promiscuous mode [ 1878.532562][ T43] veth0_vlan: left promiscuous mode [ 1878.890337][ C0] raw-gadget.0 gadget.8: ignoring, device is not running [ 1878.896380][T10009] f81534 9-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1878.896436][T10009] f81534 9-1:0.12: f81534_find_config_idx: read failed: -71 [ 1878.896452][T10009] f81534 9-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1878.896535][T10009] f81534 9-1:0.12: probe with driver f81534 failed with error -71 [ 1878.908053][T10009] usb 9-1: USB disconnect, device number 57 [ 1879.382642][T19920] loop8: detected capacity change from 0 to 8 [ 1879.387116][T19819] Dev loop8: unable to read RDB block 8 [ 1879.387159][T19819] loop8: unable to read partition table [ 1879.387418][T19819] loop8: partition table beyond EOD, truncated [ 1879.473911][T19920] Dev loop8: unable to read RDB block 8 [ 1879.473956][T19920] loop8: unable to read partition table [ 1879.474179][T19920] loop8: partition table beyond EOD, truncated [ 1879.474212][T19920] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1881.832949][T19943] loop8: detected capacity change from 0 to 8 [ 1881.838936][T19943] Dev loop8: unable to read RDB block 8 [ 1881.838981][T19943] loop8: unable to read partition table [ 1881.839204][T19943] loop8: partition table beyond EOD, truncated [ 1881.849529][T19943] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1885.348757][ T43] team0 (unregistering): Port device team_slave_1 removed [ 1885.691077][ T43] team0 (unregistering): Port device team_slave_0 removed [ 1889.215712][T19499] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1889.314948][T19499] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1889.428508][T19499] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1889.642077][T19499] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1889.766785][T20254] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3819'. [ 1889.827982][T17098] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1890.049672][T17098] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1890.049703][T17098] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1890.049722][T17098] usb 6-1: Product: syz [ 1890.049736][T17098] usb 6-1: Manufacturer: syz [ 1890.049750][T17098] usb 6-1: SerialNumber: syz [ 1890.088031][T10009] usb 9-1: new full-speed USB device number 58 using dummy_hcd [ 1890.283902][T10009] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1890.287196][T10009] usb 9-1: not running at top speed; connect to a high speed hub [ 1890.288649][T10009] usb 9-1: config 56 has an invalid interface number: 216 but max is 0 [ 1890.288675][T10009] usb 9-1: config 56 has no interface number 0 [ 1890.288726][T10009] usb 9-1: config 56 interface 216 altsetting 224 endpoint 0x86 has invalid maxpacket 512, setting to 64 [ 1890.288756][T10009] usb 9-1: config 56 interface 216 has no altsetting 0 [ 1890.293298][T10009] usb 9-1: New USB device found, idVendor=12d1, idProduct=554b, bcdDevice=5a.0b [ 1890.293326][T10009] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1890.293346][T10009] usb 9-1: Product: syz [ 1890.293362][T10009] usb 9-1: Manufacturer: syz [ 1890.293376][T10009] usb 9-1: SerialNumber: syz [ 1890.378475][T20254] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1890.426319][T19499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1890.498944][T17098] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1890.499006][T17098] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1890.667165][T20284] loop8: detected capacity change from 0 to 8 [ 1890.727210][T20283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1890.733125][T20283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1890.735851][T20284] Dev loop8: unable to read RDB block 8 [ 1890.735984][T20284] loop8: unable to read partition table [ 1890.740431][T20284] loop8: partition table beyond EOD, truncated [ 1890.740454][T20284] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1890.757609][T19499] 8021q: adding VLAN 0 to HW filter on device team0 [ 1890.769517][T20254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1890.785205][T20254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1890.843787][T10009] hub 9-1:56.216: bad descriptor, ignoring hub [ 1890.843826][T10009] hub 9-1:56.216: probe with driver hub failed with error -5 [ 1890.845378][T10009] option 9-1:56.216: GSM modem (1-port) converter detected [ 1890.898907][T10009] usb 9-1: USB disconnect, device number 58 [ 1890.906789][T17098] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1890.906823][T17098] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1890.907255][T17098] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1890.966057][ T6981] bridge0: port 1(bridge_slave_0) entered blocking state [ 1890.966224][ T6981] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1890.968537][T10009] option 9-1:56.216: device disconnected [ 1891.081994][T15408] bridge0: port 2(bridge_slave_1) entered blocking state [ 1891.082230][T15408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1891.094991][T17098] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32 [ 1892.185655][T20333] siw: device registration error -23 [ 1893.156460][T19499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1893.172988][T15771] usb 6-1: USB disconnect, device number 48 [ 1893.507925][T10009] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 1893.671728][T19499] veth0_vlan: entered promiscuous mode [ 1893.690904][T10009] usb 7-1: Using ep0 maxpacket: 16 [ 1893.693249][T10009] usb 7-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 1893.693306][T10009] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1893.693333][T10009] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 1893.693359][T10009] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1893.693382][T10009] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1893.695473][T10009] usb 7-1: New USB device found, idVendor=2040, idProduct=b[ 1893.695473][T10009] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1893.695499][T10009] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1893.695528][T10009] usb 7-1: Manufacturer: syz [ 1893.701915][T10009] usb 7-1: config 0 descriptor?? [ 1893.722290][T19499] veth1_vlan: entered promiscuous mode [ 1893.764196][T15391] ------------[ cut here ]------------ [ 1893.764212][T15391] in_task() && kcov_mode_enabled(mode) [ 1893.764229][T15391] WARNING: kernel/kcov.c:872 at kcov_remote_start+0x5d8/0x710, CPU#0: kworker/u8:12/15391 [ 1893.764280][T15391] Modules linked in: [ 1893.764308][T15391] CPU: 0 UID: 0 PID: 15391 Comm: kworker/u8:12 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1893.764337][T15391] Tainted: [L]=SOFTLOCKUP [ 1893.764345][T15391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1893.764359][T15391] Workqueue: events_unbound cfg80211_wiphy_work [ 1893.764389][T15391] RIP: 0010:kcov_remote_start+0x5d8/0x710 [ 1893.764416][T15391] Code: 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 22 2e cd 02 90 0f 0b 90 e9 62 fa ff ff 90 0f 0b 90 0f b7 83 80 04 00 00 e9 a3 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 4a 52 4a 09 89 c0 48 c7 c7 a0 03 26 [ 1893.764434][T15391] RSP: 0018:ffffc90004dff978 EFLAGS: 00010202 [ 1893.764451][T15391] RAX: 0000000000000002 RBX: ffff8880354b3c80 RCX: 0000000000000000 [ 1893.764465][T15391] RDX: 0000000000000000 RSI: ffffffff8b85e960 RDI: ffffffff8b85e920 [ 1893.764486][T15391] RBP: ffff88802075a3c0 R08: ffffffff8b0fcd50 R09: ffffffff8dbc77c0 [ 1893.764503][T15391] R10: dffffc0000000000 R11: fffffbfff1e8fcaf R12: ffff888089249d08 [ 1893.764519][T15391] R13: ffff888031a107c0 R14: 0000000000000000 R15: ffff888089249d20 [ 1893.764535][T15391] FS: 0000000000000000(0000) GS:ffff8881265c9000(0000) knlGS:0000000000000000 [ 1893.764552][T15391] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1893.764567][T15391] CR2: 00007f71a6056080 CR3: 000000002fe52000 CR4: 00000000003526f0 [ 1893.764585][T15391] Call Trace: [ 1893.764594][T15391] [ 1893.764607][T15391] ieee80211_iface_work+0x211/0x12b0 [ 1893.764645][T15391] cfg80211_wiphy_work+0x2ab/0x450 [ 1893.764670][T15391] ? process_scheduled_works+0xa0f/0x17a0 [ 1893.764721][T15391] process_scheduled_works+0xaec/0x17a0 [ 1893.764769][T15391] ? __pfx_process_scheduled_works+0x10/0x10 [ 1893.764788][T15391] ? do_raw_spin_lock+0x12b/0x2f0 [ 1893.764821][T15391] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1893.764847][T15391] ? schedule+0x90/0x360 [ 1893.764884][T15391] worker_thread+0xda6/0x1360 [ 1893.764930][T15391] kthread+0x726/0x8b0 [ 1893.764957][T15391] ? __pfx_worker_thread+0x10/0x10 [ 1893.764977][T15391] ? __pfx_kthread+0x10/0x10 [ 1893.764998][T15391] ? rt_spin_unlock+0x14f/0x200 [ 1893.765024][T15391] ? rt_spin_unlock+0x160/0x200 [ 1893.765043][T15391] ? __pfx_kthread+0x10/0x10 [ 1893.765068][T15391] ret_from_fork+0x51b/0xa40 [ 1893.765103][T15391] ? __pfx_ret_from_fork+0x10/0x10 [ 1893.765123][T15391] ? __switch_to+0xc82/0x1410 [ 1893.765170][T15391] ? __pfx_kthread+0x10/0x10 [ 1893.765195][T15391] ret_from_fork_asm+0x1a/0x30 [ 1893.765239][T15391] [ 1893.765254][T15391] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1893.765271][T15391] CPU: 0 UID: 0 PID: 15391 Comm: kworker/u8:12 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1893.765298][T15391] Tainted: [L]=SOFTLOCKUP [ 1893.765306][T15391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1893.765319][T15391] Workqueue: events_unbound cfg80211_wiphy_work [ 1893.765343][T15391] Call Trace: [ 1893.765352][T15391] [ 1893.765361][T15391] vpanic+0x1e0/0x670 [ 1893.765396][T15391] panic+0xc5/0xd0 [ 1893.765423][T15391] ? __pfx_panic+0x10/0x10 [ 1893.765459][T15391] ? ret_from_fork_asm+0x1a/0x30 [ 1893.765522][T15391] __warn+0x315/0x4a0 [ 1893.765547][T15391] ? kcov_remote_start+0x5d8/0x710 [ 1893.765575][T15391] ? kcov_remote_start+0x5d8/0x710 [ 1893.765602][T15391] __report_bug+0x29a/0x540 [ 1893.765716][T15391] ? kcov_remote_start+0x5d8/0x710 [ 1893.765744][T15391] ? __pfx___report_bug+0x10/0x10 [ 1893.765769][T15391] ? do_raw_spin_lock+0x12b/0x2f0 [ 1893.765799][T15391] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 1893.765826][T15391] ? rt_spin_lock+0x1e0/0x400 [ 1893.765849][T15391] ? rt_spin_lock+0x1e0/0x400 [ 1893.765871][T15391] ? kcov_remote_start+0x5d8/0x710 [ 1893.765896][T15391] report_bug+0x16a/0x220 [ 1893.765921][T15391] ? kcov_remote_start+0x5d8/0x710 [ 1893.765945][T15391] ? kcov_remote_start+0x5da/0x710 [ 1893.765969][T15391] handle_bug+0x98/0x200 [ 1893.765998][T15391] exc_invalid_op+0x1a/0x50 [ 1893.766027][T15391] asm_exc_invalid_op+0x1a/0x20 [ 1893.766047][T15391] RIP: 0010:kcov_remote_start+0x5d8/0x710 [ 1893.766072][T15391] Code: 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 22 2e cd 02 90 0f 0b 90 e9 62 fa ff ff 90 0f 0b 90 0f b7 83 80 04 00 00 e9 a3 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 4a 52 4a 09 89 c0 48 c7 c7 a0 03 26 [ 1893.766089][T15391] RSP: 0018:ffffc90004dff978 EFLAGS: 00010202 [ 1893.766106][T15391] RAX: 0000000000000002 RBX: ffff8880354b3c80 RCX: 0000000000000000 [ 1893.766120][T15391] RDX: 0000000000000000 RSI: ffffffff8b85e960 RDI: ffffffff8b85e920 [ 1893.766135][T15391] RBP: ffff88802075a3c0 R08: ffffffff8b0fcd50 R09: ffffffff8dbc77c0 [ 1893.766151][T15391] R10: dffffc0000000000 R11: fffffbfff1e8fcaf R12: ffff888089249d08 [ 1893.766167][T15391] R13: ffff888031a107c0 R14: 0000000000000000 R15: ffff888089249d20 [ 1893.766189][T15391] ? rt_spin_lock+0x1e0/0x400 [ 1893.766216][T15391] ? kcov_remote_start+0xe0/0x710 [ 1893.766244][T15391] ieee80211_iface_work+0x211/0x12b0 [ 1893.766279][T15391] cfg80211_wiphy_work+0x2ab/0x450 [ 1893.766303][T15391] ? process_scheduled_works+0xa0f/0x17a0 [ 1893.766325][T15391] process_scheduled_works+0xaec/0x17a0 [ 1893.766372][T15391] ? __pfx_process_scheduled_works+0x10/0x10 [ 1893.766390][T15391] ? do_raw_spin_lock+0x12b/0x2f0 [ 1893.766421][T15391] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1893.766449][T15391] ? schedule+0x90/0x360 [ 1893.766488][T15391] worker_thread+0xda6/0x1360 [ 1893.766535][T15391] kthread+0x726/0x8b0 [ 1893.766563][T15391] ? __pfx_worker_thread+0x10/0x10 [ 1893.766583][T15391] ? __pfx_kthread+0x10/0x10 [ 1893.766605][T15391] ? rt_spin_unlock+0x14f/0x200 [ 1893.766630][T15391] ? rt_spin_unlock+0x160/0x200 [ 1893.766650][T15391] ? __pfx_kthread+0x10/0x10 [ 1893.766675][T15391] ret_from_fork+0x51b/0xa40 [ 1893.766698][T15391] ? __pfx_ret_from_fork+0x10/0x10 [ 1893.766717][T15391] ? __switch_to+0xc82/0x1410 [ 1893.766749][T15391] ? __pfx_kthread+0x10/0x10 [ 1893.766774][T15391] ret_from_fork_asm+0x1a/0x30 [ 1893.766818][T15391] [ 1893.767252][T15391] Kernel Offset: disabled