last executing test programs: 5.989781663s ago: executing program 2 (id=1443): capset(0x0, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x236, &(0x7f0000000400)={0x0, 0x400f691, 0x10100, 0x1, 0x2b4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000015c0)={0x2d8, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x3d}}}}, [@NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x6}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0xb}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x2}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x8}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x40}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xfffffffffffffff2}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x3}]}, @NL80211_ATTR_TX_RATES={0x274, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x36, 0x3, 0xc, 0x18, 0x7, 0x24, 0x1b, 0xc, 0x48, 0x6, 0x5, 0x1, 0xb, 0x48, 0x3, 0x2]}]}, @NL80211_BAND_2GHZ={0xa0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x5635, 0x7f, 0x5, 0x7, 0xc89d, 0x101]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x1, 0x1, 0x2, 0x200, 0x6, 0x6, 0x98b9]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xffff, 0x6, 0x4, 0x8, 0x9, 0xf, 0xb]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x6, 0x5}, {0x7, 0x8}, {0x1, 0x5}, {0x3, 0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x6}, {0x6, 0x7}, {0x5, 0x1}, {0x2}, {0x0, 0x2}, {0x5, 0x1}, {0x0, 0x8}, {0x7, 0x6}, {0x0, 0x9}, {0x4, 0x7}, {0x2, 0x4}, {0x0, 0x3}, {0x1, 0x5}, {0x2}, {0x3, 0x8}, {0x6, 0x2}, {0x0, 0x1}, {0x4, 0x6}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x7, 0x6}, {0x7, 0x9}, {0x7, 0x5}, {0x0, 0xa}, {0x6, 0x2}, {0x4, 0x2}, {0x7, 0x4}, {0x4, 0x5}, {0x0, 0x5}, {0x7, 0xa}, {0x2, 0x9}, {0x6, 0x5}, {0x2, 0x3}, {0x6, 0x2}, {0x2, 0x3}, {0x6, 0x2}, {0x2, 0x4}, {0x3, 0x12}, {0x2, 0x4}, {0x2, 0x6}, {0x2, 0x6}, {0x4, 0x8}, {0x3, 0x3}, {0x5, 0x8}, {0x5, 0x9}, {0x4}, {0x5, 0xa}, {0x4}, {0x7, 0x5}, {0x6}, {0x0, 0xa}, {0x7}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x4}, {0x3, 0x4}, {0x2, 0x3}, {0x0, 0x4}, {0x4, 0x2}, {}, {0x3, 0x1}, {0x0, 0x3}, {0x3, 0xa}, {0x3, 0x1}]}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x0, 0x7fff, 0x53, 0x0, 0x7ff, 0x80, 0x4]}}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x0, 0x5}, {0x5, 0x6}, {0x1, 0x1}, {0x2, 0xa}, {0x7, 0x7}, {0x1, 0x8}, {0x3, 0x7}, {0x7, 0x9}, {0x0, 0xa}, {0x2, 0x1}, {0x2, 0x4}, {0x3, 0x5}, {0x2, 0x9}, {0x3, 0x9}, {0x3, 0x5}, {0x3, 0x6}, {0x5, 0x9}, {0x3, 0x4}, {0x4, 0x9}, {0x7}, {0x1, 0x2}, {0x4, 0x9}, {0x5, 0x1}, {0x6, 0x1}, {0x5, 0x9}, {0x6}, {0x1, 0x2}, {0x0, 0x7}, {0x7}, {0x5, 0x3}, {0x6, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x3, 0x1, 0x9, 0x8, 0x9, 0xf, 0x101]}}]}, @NL80211_BAND_60GHZ={0xac, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x35, 0x2, [{0x4}, {0x6, 0x5}, {0x6, 0x2}, {0x7, 0x2}, {0x5, 0x8}, {0x2}, {0x5, 0x3}, {0x3, 0x8}, {0x1, 0x3}, {0x1}, {0x0, 0x2}, {0x5, 0x5}, {0x3, 0x1}, {0x7, 0x5}, {0x2, 0x3}, {0x4, 0x9}, {0x7, 0x3}, {0x7, 0x4}, {0x2, 0x1}, {0x1, 0x7}, {0x2, 0xa}, {0x5, 0x7}, {0x5, 0xa}, {0x6, 0x8}, {0x3, 0x6}, {0x0, 0x3}, {0x7, 0x9}, {0x3, 0x6}, {0x3, 0x5}, {0x3, 0x8}, {0x4, 0x3}, {0x7, 0x9}, {0x5, 0x4}, {0x1, 0x5}, {0x5, 0x9}, {0x1, 0x5}, {0x4, 0x3}, {0x0, 0x8}, {0x3, 0x4}, {0x0, 0x7}, {0x1, 0x3}, {}, {0x0, 0x3}, {0x6, 0x3}, {0x7, 0x3}, {0x6, 0x9}, {0x7, 0x3}, {0x3, 0x6}, {0x2, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfc7b, 0x1, 0x4, 0x4, 0x0, 0x5, 0x8, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x5, 0x48, 0x2, 0x2, 0x24]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0xb, 0x30, 0x16, 0x12, 0x4, 0x16, 0x24, 0x1, 0x4, 0x36, 0x48, 0x6, 0x6c, 0xc, 0xb, 0x1b, 0x24, 0x1, 0x21, 0x4, 0x12, 0x1b, 0xb, 0x48, 0x9, 0x9, 0x11, 0xc, 0x16]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x8, 0x1, 0x5, 0x8, 0xb2, 0xbdd]}}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x51, 0x5, 0x8, 0x7, 0x7, 0x6, 0x7, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xfff9, 0x9, 0x6, 0x0, 0x6, 0x343e, 0x7fff]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xb6, 0x81, 0x4, 0x8b, 0xe8, 0x4, 0x7fff]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0x1, 0x23, 0x4239, 0x4, 0x2, 0x200, 0x3800]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x7e0, 0x9, 0x2, 0x7, 0x0, 0x8001, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffe, 0x3, 0x91, 0x4, 0xc, 0x2, 0x4, 0x10]}}, @NL80211_TXRATE_HE_GI={0x5}]}]}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) recvmsg$unix(r5, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}, 0x10020) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r6 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r6, &(0x7f0000000240)=""/112, 0x349b7f55) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r8, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r9 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c8, &(0x7f0000000480)={r8, r8, 0x8, 0x0, 0x0, 0x86, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) 5.899921327s ago: executing program 2 (id=1444): sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001b00)=""/102392, 0x18ff8) openat$procfs(0xffffff9c, &(0x7f0000000180)='/proc/asound/timers\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, 0x0, 0x400c000) syz_open_dev$tty20(0xc, 0x4, 0x1) socket(0x400000000010, 0x3, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x80400, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0x1, 0x8}, 0x0, &(0x7f0000000680)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0xc3ad}, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00007fd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) madvise(&(0x7f00003c1000/0x1000)=nil, 0xdfc3efff, 0x15) 5.819447961s ago: executing program 0 (id=1445): setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) ioprio_get$pid(0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f0000000280)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025", 0x1d}, {&(0x7f0000000580)="fa21bd2b5c40cc420740358ffc7f9f4b6e68fc8d1aa2597e7b484f301f11e35f22", 0x21}], 0x2) r4 = socket$rxrpc(0x21, 0x2, 0xa) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0xffffffffffffff2b) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0xb8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kvm_userspace_exit\x00', r5}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) bind$rxrpc(r4, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x3, @empty, 0xd}}, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000e1ff00000000000000008500000027000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x0, 0xe, 0x0, &(0x7f00000000c0)="ff07000000000000ab5becdc7da9", 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_io_uring_setup(0x414, &(0x7f00000005c0)={0x0, 0x4427, 0x0, 0x14, 0x28b}, &(0x7f0000000140), &(0x7f0000000200)) 5.499918399s ago: executing program 3 (id=1446): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x23b, &(0x7f0000000200)={0x0, 0x4533, 0x10100, 0x0, 0x0, 0x0, r1}, 0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x301, 0x0, 0x2, 0x0, 0x0}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000440)='./file1\x00') pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x7, 0x0) 4.799738435s ago: executing program 0 (id=1450): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x4, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, 0x0) read$dsp(r3, &(0x7f0000000300)=""/79, 0x4f) 3.929448709s ago: executing program 1 (id=1454): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x4) read(r0, &(0x7f0000000040)=""/148, 0xffffff96) openat$ptmx(0xffffff9c, &(0x7f0000000140), 0x200, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x8014}, 0x44000) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x0, 0x0, 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r3, 0x7) accept4$x25(r3, 0x0, 0x0, 0x80800) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x18) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000000)={0x7fffffff, r0, 0x8, {0x7, 0x6}}, 0x1) 3.928249272s ago: executing program 0 (id=1455): pipe2$9p(0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x3) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000200)={0xffffffff80000001, 0x0, 0x4, r3, 0x1}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0xf000, 0x0, 0x0, r3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') migrate_pages(r0, 0xa94b, &(0x7f0000000b80), &(0x7f0000000bc0)=0x27e0407a) r7 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r7, 0xc2c45512, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x8, 0x3, 0x260, 0x0, 0x11, 0x148, 0x0, 0x10, 0x20c, 0x2a8, 0x2a8, 0x20c, 0x2a8, 0xac, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'veth1_vlan\x00', 'sit0\x00'}, 0x10, 0xb4, 0xfc, 0x1c, {}, [@common=@unspec=@helper={{0x44}, {0x0, 'irc-20000\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@local, 'ip6gre0\x00', {0x2}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x0, 0x5, 0x7, 0x6, 0x1], 0x5, 0x3}, {0x3, [0x2, 0x2, 0x3, 0x6, 0x2, 0x3], 0x2, 0x3}}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x2bc) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="feffffff00000000000000000000000000000000c607b93355c2f8b414a2628bdbaa447e405884687d0865853973d0d7d5f91af2d0a570704720555b1df4bb9f015d94b729e114c0508231494a36e6161188c84858631f770607088c85cff63d15f9090ce7744558d1a004d076e66898710be79f33d6424746fb9311a7f3002018b93df2a9ae417821d2b9dd99fc9a6b627431995f299a493aa7e3c87392d053365b4d15a019e1ea3e30537a88ab2450296d1af95f3afa30097d3a58f9b02e917814f7e47fb5463238363a865f6d6d01b200715219200cca975d91a99a8686f18b999919f63a8de21ba96c810de653afdca0275d6f8cb4f9719e53199e37927a0de975c08fe868486848adc42794257e0ba6172b8634f79e3772c46ab25f718a5536131ed89f0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000ff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000d1444cce000000e544c85d0e06667e2c7dbade8e729790d64f1653d354167887f2da96d3701a34b97ff0a77a8dacb67b676dbdb91cd599bec2fa4a0bcc48"], 0x48) 3.410075015s ago: executing program 2 (id=1456): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000740)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800190007000200060001c00200bc24eab556a705251e618294ff4051f60a84c9f4d4938037e786a6d00010000400000000000000c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) (async) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r3) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000000c0)=0xffff) (async) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000000c0)=0xffff) execveat$binfmt(r4, 0x0, &(0x7f0000000080)={[&(0x7f0000000000)='\x00']}, &(0x7f0000000280)={[&(0x7f00000000c0)='%-:]-+/+\x00/\x7f:\x00', &(0x7f0000000140)='geneve0\x00', &(0x7f0000000180)='\x00', &(0x7f00000001c0)=']#-]\'\x00', &(0x7f0000000240)='string\x00']}, 0x1000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000007006003000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000007006003000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c8, 0x0, 0xc8, 0x8, 0x1ac, 0x5803, 0x300, 0x2e8, 0x2e8, 0x300, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [], [0xff], 'geneve0\x00', 'geneve1\x00', {0x80}}, 0x0, 0x188, 0x1ac, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x2}}, @common=@inet=@socket1={{0x24}}]}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00', 0x0, {0x5}}}, {{@ipv6={@private0, @local, [0x0, 0xff000000], [0x0, 0xff, 0xffffff00, 0xffffff00], 'nr0\x00', 'macvlan0\x00', {0xff}, {}, 0x6, 0xfa, 0x4, 0x4}, 0x0, 0xec, 0x154, 0x0, {}, [@common=@ipv6header={{0x24}}, @inet=@rpfilter={{0x24}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x424) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_open_dev$loop(&(0x7f00000002c0), 0x9, 0x147282) (async) r7 = syz_open_dev$loop(&(0x7f00000002c0), 0x9, 0x147282) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000000480)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0xf, 0x4, 0x0, 0x6, 0xb, 0xd, "fee881ab78fc179fd1f807000000000049000000deff00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x400000001000000, 0xfffffffffffffffc]}}) 3.309784894s ago: executing program 2 (id=1457): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x18, 0x30, 0x2, 0x3, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000c80)=[{0x20, 0x0, 0x0, 0xfffff028}, {0x6}]}, 0x8) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000400)="b97e75f200ff645859c16a930000af", 0x0, 0x40000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) write$binfmt_script(r4, &(0x7f0000000100), 0xfffffd9d) r6 = socket(0x1e, 0x4, 0x0) r7 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) add_key$fscrypt_provisioning(&(0x7f0000000180), 0x0, 0x0, 0x48, r7) connect$tipc(r6, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(r6, r4, 0x0, 0x8010002b) 3.050075323s ago: executing program 1 (id=1458): setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) ioprio_get$pid(0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f0000000280)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025", 0x1d}, {&(0x7f0000000580)="fa21bd2b5c40cc420740358ffc7f9f4b6e68fc8d1aa2597e7b484f301f11e35f22", 0x21}], 0x2) r4 = socket$rxrpc(0x21, 0x2, 0xa) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0xffffffffffffff2b) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0xb8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kvm_userspace_exit\x00', r5}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) bind$rxrpc(r4, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x3, @empty, 0xd}}, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000e1ff00000000000000008500000027000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x0, 0xe, 0x0, &(0x7f00000000c0)="ff07000000000000ab5becdc7da9", 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_io_uring_setup(0x414, &(0x7f00000005c0)={0x0, 0x4427, 0x0, 0x14, 0x28b}, &(0x7f0000000140), &(0x7f0000000200)) 2.819551715s ago: executing program 0 (id=1459): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="050000007f000000f00e000080000000000009", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32], 0x50) socket$kcm(0x10, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f0000000180)=0x1, 0x4) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@newtfilter={0xc08, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r6, {0xfffd, 0x2}, {0x2, 0x1}, {0xfff2, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xbcc, 0x2, [@TCA_MATCHALL_ACT={0xa64, 0x2, [@m_police={0x8f4, 0x19, 0x0, 0x0, {{0xb}, {0x890, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0x80000001}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0xc}, @TCA_POLICE_RESULT={0x8, 0x5, 0x80000001}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3ff}, @TCA_POLICE_RATE={0x404, 0x2, [0xa, 0x7, 0x9d, 0x0, 0x1, 0x6, 0xfffffff9, 0x9, 0x7, 0x6, 0x10001, 0xc6, 0x6, 0x853, 0x7, 0x6, 0x7, 0x8, 0x462a62d5, 0x7, 0x9, 0x1000, 0x7, 0x3, 0x8, 0x5, 0x7, 0x101, 0x8, 0x81, 0x7, 0x10, 0x2, 0x9, 0x0, 0xffffffc0, 0x10000, 0x1, 0x70000, 0xfa, 0x1, 0x8, 0x8, 0x7, 0x9, 0x4, 0xfffffff9, 0x1, 0xc, 0xa6, 0x7, 0x0, 0x101, 0x7, 0x2, 0x6, 0x4, 0x7, 0x3, 0x3, 0xf01, 0x9, 0x2, 0x4, 0xcf9, 0xfffffffb, 0x3, 0x80000000, 0x10000, 0x8, 0x4, 0x9, 0xee, 0xf44, 0x0, 0x4, 0x1, 0x7d92, 0x4, 0xb54, 0xa0000, 0x1, 0x6, 0x7, 0x100, 0x5, 0x6, 0x6, 0x10001, 0xecdd, 0x9, 0x400, 0x6, 0x3, 0x8, 0xed5d, 0x5, 0x7, 0x1, 0x4, 0x959f, 0x6, 0x8, 0x3938, 0x9, 0xa6c1, 0x93, 0x2, 0xfd21, 0x8, 0x8, 0x0, 0x9, 0x8, 0x3, 0xb, 0xa, 0x6, 0xede3, 0x3, 0x1, 0x3, 0xc7, 0x5, 0x101, 0x40, 0x2, 0xffffffff, 0x0, 0x9, 0x2, 0x5, 0xf80000, 0x30f, 0x3, 0x7, 0x5, 0x1, 0x67d, 0x9094, 0x80000001, 0x2, 0x2, 0x8, 0x90, 0x0, 0x1, 0x3, 0x5, 0x3, 0x8, 0x597, 0xffffff04, 0x8, 0x3ff, 0x1, 0x7fff, 0x7, 0x1, 0x10001, 0x8001, 0x8, 0x5, 0x4, 0xf, 0xfffffff8, 0x9ad, 0x100, 0x1, 0x62, 0x4, 0x4, 0x3, 0x3ff, 0x6, 0x1, 0x5, 0x89b6, 0x6, 0x8000, 0x4, 0x5, 0x2, 0x1, 0x9, 0x3ff, 0xc975, 0xf31, 0x5, 0x9515, 0xfffffff8, 0xe26, 0x2, 0x8, 0x6, 0x4, 0x8, 0x8, 0x4, 0x200, 0x4, 0xac, 0x2, 0x6, 0xffffffff, 0x1000, 0x8, 0x10, 0x1f7, 0xffffff80, 0x1, 0x81, 0x7fff, 0x8, 0xffff0288, 0x536, 0x7, 0x7, 0x3, 0xd4, 0x7, 0x100, 0x0, 0xc39, 0x5, 0xfffffffa, 0x8, 0x5, 0x2, 0x0, 0xfffffffd, 0x7f, 0xfffffffa, 0x38f, 0xfa2, 0x134b, 0x2, 0xa56, 0x1, 0x3, 0x0, 0x81, 0x30a, 0x1, 0x5, 0x6, 0x1, 0x99, 0x2000, 0x6, 0x121, 0xa, 0xff, 0x4, 0x7ff, 0x4]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}], [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffff7fff, 0x6c1, 0x27, 0x8, 0x8, 0x0, 0x7, 0x9, 0x7, 0x0, 0xa44, 0x1, 0x1, 0x10001, 0x8001, 0x100, 0x1000, 0x6, 0x0, 0x2, 0x7fffffff, 0x7ff, 0x4, 0xffffffff, 0x5, 0x2b6, 0x9, 0xc, 0x6, 0x9, 0x40, 0x8, 0x0, 0x41331768, 0x81, 0xa70, 0xd5, 0x4, 0x0, 0x2, 0x2, 0x1, 0x1ebb15e0, 0x3, 0xf, 0x9, 0x8, 0x6, 0x6, 0x4, 0x6, 0x7, 0x9, 0x1000, 0xa58e, 0x8000, 0xb35, 0x80, 0x9, 0x80000001, 0x3, 0x2, 0xb, 0x5, 0xc883, 0x3ff, 0x1000, 0xffffff7f, 0x6, 0x0, 0x0, 0x8dac, 0x3, 0x8, 0x6, 0x800, 0x7ff, 0x1, 0x9244, 0x20ac, 0x100, 0x2, 0x4, 0x101, 0xfffffffc, 0x4, 0x8000, 0x3, 0xd5, 0x800, 0x3, 0x4, 0x1, 0x5, 0x2000, 0x1000, 0x6, 0x3, 0x7, 0x6, 0x5, 0xffff66c4, 0x0, 0xed, 0x80000000, 0x9, 0x5, 0x0, 0xa, 0x5, 0x5, 0x5, 0xfffffc65, 0x8, 0x1ff, 0x9a, 0x7, 0x0, 0x100, 0x8001, 0x200, 0x0, 0x0, 0x9, 0x98, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x7, 0x4, 0x401, 0xaa, 0x7, 0x22, 0x7f, 0x3a619444, 0x3, 0x9d59, 0x8001, 0x9, 0xffff, 0x18f8, 0x8, 0x4, 0x40, 0x4, 0x6b418000, 0x3, 0x5, 0x0, 0x7, 0x80000000, 0x80000001, 0x5, 0x8001, 0x7ff, 0x6, 0x2, 0x5, 0xffffffff, 0xfffffffa, 0x1, 0x7f, 0x516b, 0x7, 0xfffffff7, 0x8, 0x0, 0x867, 0x7, 0x9, 0x9, 0x8, 0x8, 0x4, 0x3, 0x9, 0x6, 0x8001, 0x73c, 0x9, 0x8, 0x8, 0x5, 0x8, 0x7, 0xffffffff, 0x8c, 0xff, 0x1ff, 0x1ff, 0x8, 0x100, 0x0, 0x4d, 0x4, 0x4, 0x9, 0x0, 0x5, 0x8, 0x3, 0x8000, 0x2, 0x0, 0x0, 0x6, 0x10, 0x3, 0x2, 0x10000, 0x0, 0x6, 0x9, 0x7fffffff, 0x0, 0x6, 0x0, 0xa4, 0xffffffff, 0x8bcc, 0x8, 0xffff, 0x8, 0x7fff, 0xf897, 0x2, 0x81, 0x7, 0x7fffffff, 0x1, 0xc52, 0xfffffff2, 0x5, 0x4d, 0x3, 0x8, 0x0, 0xb, 0xffffffff, 0x2, 0x6, 0x4, 0x7, 0x8000, 0x1, 0xffff7df0, 0x4, 0x10000, 0x4, 0x8, 0xc]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xb}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}]]}, {0x3a, 0x6, "41c16f40f7e1e9bd35503a44afb89f76b99a6dafc5b57575bfae1fcb4fbcfb4f152b351cbc8ed55eb2d1a68065b75e2b2a4862e72301"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_vlan={0xc0, 0x2, 0x0, 0x0, {{0x9}, {0x48, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x7ff, 0x10, 0x6, 0x3, 0x100}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x3f2}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x50, 0x6, "0d8f43602472d59864ad4eb198c38eddfad3275a057c91486203b6d4f08431bff34d58c100f93bf521f62f73f6455f3eb2163870e56698012d9eda30a7b78078e909ddadea28406256104d2c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_sample={0xac, 0x7, 0x0, 0x0, {{0xb}, {0x4}, {0x7e, 0x6, "2cc259ccf4610087688014f9b99d768e1d799f4b658bb3afa9e62e6fadb5d85eb33a5a477c42587d197ac4e3a73e345b0399328e90f54a6d07b3ed26a29073045a083d2a925bf693ea34b96a26fe8000c97cd9abfd15b7bd3ef4d076b7dd271a87111d34020f718667f3ee941ddc65440e892064d90784bb583a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_MATCHALL_ACT={0x15c, 0x2, [@m_tunnel_key={0x158, 0x20, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x9, 0x200, 0x2, 0x736e, 0x4}, 0x2}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}]}, {0xfc, 0x6, "2310c9b8919f69c6426e63fd74521cb9e8d1a740b928b4d75680ef56461c5713475897df086c1712a38c53a064b06f2519559524187ccd7d9c2dd1193a9c42ace421b80ea84e3f1416bdc3af3d3bcdc590c1e8dd9bdd630176f8a193e5946e606723cb23b84ba03545571f6195e98ecc654658d8c14a1b65c349b10425567b6a01c1268358457b4bd92d61d10d12095c2a17645a73197309e1723ffc165de077409c9f0a5206b66b82ba14c2e2d68a17d61cc15d25c020f6889b4fce70f918482117a4b3603f82633a4266f38cbdab0c84a31d3269043b327de2c8c2d7463045cc0194979d25b1d9f1bb45c0e1f66d522c39f232c3fb812e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffe0, 0x3}}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}]}, 0xc08}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x40840) socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0xfffe, 0x7fffffff, @local, 0x9}, 0x1c) sendmsg(0xffffffffffffffff, 0x0, 0xd) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) 2.410209461s ago: executing program 3 (id=1460): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2800000070000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="1000018004000480080001"], 0x28}}, 0x0) r4 = openat$sequencer(0xffffff9c, &(0x7f0000000880), 0x20042, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r4, 0x8004510b, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000007040)={0x0, 0x0, 0x0}, 0x0) 2.327558545s ago: executing program 3 (id=1461): capset(0x0, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x236, &(0x7f0000000400)={0x0, 0x400f691, 0x10100, 0x1, 0x2b4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000015c0)={0x2d8, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x3d}}}}, [@NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x6}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0xb}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x2}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x8}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x40}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xfffffffffffffff2}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x3}]}, @NL80211_ATTR_TX_RATES={0x274, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x36, 0x3, 0xc, 0x18, 0x7, 0x24, 0x1b, 0xc, 0x48, 0x6, 0x5, 0x1, 0xb, 0x48, 0x3, 0x2]}]}, @NL80211_BAND_2GHZ={0xa0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x5635, 0x7f, 0x5, 0x7, 0xc89d, 0x101]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x1, 0x1, 0x2, 0x200, 0x6, 0x6, 0x98b9]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xffff, 0x6, 0x4, 0x8, 0x9, 0xf, 0xb]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x6, 0x5}, {0x7, 0x8}, {0x1, 0x5}, {0x3, 0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x6}, {0x6, 0x7}, {0x5, 0x1}, {0x2}, {0x0, 0x2}, {0x5, 0x1}, {0x0, 0x8}, {0x7, 0x6}, {0x0, 0x9}, {0x4, 0x7}, {0x2, 0x4}, {0x0, 0x3}, {0x1, 0x5}, {0x2}, {0x3, 0x8}, {0x6, 0x2}, {0x0, 0x1}, {0x4, 0x6}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x7, 0x6}, {0x7, 0x9}, {0x7, 0x5}, {0x0, 0xa}, {0x6, 0x2}, {0x4, 0x2}, {0x7, 0x4}, {0x4, 0x5}, {0x0, 0x5}, {0x7, 0xa}, {0x2, 0x9}, {0x6, 0x5}, {0x2, 0x3}, {0x6, 0x2}, {0x2, 0x3}, {0x6, 0x2}, {0x2, 0x4}, {0x3, 0x12}, {0x2, 0x4}, {0x2, 0x6}, {0x2, 0x6}, {0x4, 0x8}, {0x3, 0x3}, {0x5, 0x8}, {0x5, 0x9}, {0x4}, {0x5, 0xa}, {0x4}, {0x7, 0x5}, {0x6}, {0x0, 0xa}, {0x7}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x4}, {0x3, 0x4}, {0x2, 0x3}, {0x0, 0x4}, {0x4, 0x2}, {}, {0x3, 0x1}, {0x0, 0x3}, {0x3, 0xa}, {0x3, 0x1}]}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x0, 0x7fff, 0x53, 0x0, 0x7ff, 0x80, 0x4]}}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x0, 0x5}, {0x5, 0x6}, {0x1, 0x1}, {0x2, 0xa}, {0x7, 0x7}, {0x1, 0x8}, {0x3, 0x7}, {0x3, 0x9}, {0x0, 0xa}, {0x2, 0x1}, {0x2, 0x4}, {0x3, 0x5}, {0x2, 0x9}, {0x3, 0x9}, {0x3, 0x5}, {0x3, 0x6}, {0x5, 0x9}, {0x3, 0x4}, {0x4, 0x9}, {0x7}, {0x1, 0x2}, {0x4, 0x9}, {0x5, 0x1}, {0x6, 0x1}, {0x5, 0x9}, {0x6}, {0x1, 0x2}, {0x0, 0x7}, {0x7}, {0x5, 0x3}, {0x6, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x3, 0x1, 0x9, 0x8, 0x9, 0xf, 0x101]}}]}, @NL80211_BAND_60GHZ={0xac, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x35, 0x2, [{0x4}, {0x6, 0x5}, {0x6, 0x2}, {0x7, 0x2}, {0x5, 0x8}, {0x2}, {0x5, 0x3}, {0x3, 0x8}, {0x1, 0x3}, {0x1}, {0x0, 0x2}, {0x5, 0x5}, {0x3, 0x1}, {0x7, 0x5}, {0x2, 0x3}, {0x4, 0x9}, {0x7, 0x3}, {0x7, 0x4}, {0x2, 0x1}, {0x1, 0x7}, {0x2, 0xa}, {0x5, 0x7}, {0x5, 0xa}, {0x6, 0x8}, {0x3, 0x6}, {0x0, 0x3}, {0x7, 0x9}, {0x3, 0x6}, {0x3, 0x5}, {0x3, 0x8}, {0x4, 0x3}, {0x7, 0x9}, {0x5, 0x4}, {0x1, 0x5}, {0x5, 0x9}, {0x1, 0x5}, {0x4, 0x3}, {0x0, 0x8}, {0x3, 0x4}, {0x0, 0x7}, {0x1, 0x3}, {}, {0x0, 0x3}, {0x6, 0x3}, {0x7, 0x3}, {0x6, 0x9}, {0x7, 0x3}, {0x3, 0x6}, {0x2, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfc7b, 0x1, 0x4, 0x4, 0x0, 0x5, 0x8, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x5, 0x48, 0x2, 0x2, 0x24]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0xb, 0x30, 0x16, 0x12, 0x4, 0x16, 0x24, 0x1, 0x4, 0x36, 0x48, 0x6, 0x6c, 0xc, 0xb, 0x1b, 0x24, 0x1, 0x21, 0x4, 0x12, 0x1b, 0xb, 0x48, 0x9, 0x9, 0x11, 0xc, 0x16]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x8, 0x1, 0x5, 0x8, 0xb2, 0xbdd]}}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x51, 0x5, 0x8, 0x7, 0x7, 0x6, 0x7, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xfff9, 0x9, 0x6, 0x0, 0x6, 0x343e, 0x7fff]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xb6, 0x81, 0x4, 0x8b, 0xe8, 0x4, 0x7fff]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0x1, 0x23, 0x4239, 0x4, 0x2, 0x200, 0x3800]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x7e0, 0x9, 0x2, 0x7, 0x0, 0x8001, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffe, 0x3, 0x91, 0x4, 0xc, 0x2, 0x4, 0x10]}}, @NL80211_TXRATE_HE_GI={0x5}]}]}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) recvmsg$unix(r5, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}, 0x10020) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r6 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r6, &(0x7f0000000240)=""/112, 0x349b7f55) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r8, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r9 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c8, &(0x7f0000000480)={r8, r8, 0x8, 0x0, 0x0, 0x86, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) 2.249600502s ago: executing program 3 (id=1462): capset(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x236, &(0x7f0000000400)={0x0, 0x400f691, 0x10100, 0x1, 0x2b4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000015c0)={0x2e0, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x3d}}}}, [@NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x6}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0xb}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x2}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x8}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x40}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xfffffffffffffff2}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x3}]}, @NL80211_ATTR_TX_RATES={0x27c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x36, 0x3, 0xc, 0x18, 0x7, 0x24, 0x1b, 0xc, 0x48, 0x6, 0x5, 0x1, 0xb, 0x48, 0x3, 0x2]}]}, @NL80211_BAND_2GHZ={0xa0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x5635, 0x7f, 0x5, 0x7, 0xc89d, 0x101]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x1, 0x1, 0x2, 0x200, 0x6, 0x6, 0x98b9]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xffff, 0x6, 0x4, 0x8, 0x9, 0xf, 0xb]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x6, 0x5}, {0x7, 0x8}, {0x1, 0x5}, {0x3, 0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x6}, {0x6, 0x7}, {0x5, 0x1}, {0x2}, {0x0, 0x2}, {0x5, 0x1}, {0x0, 0x8}, {0x7, 0x6}, {0x0, 0x9}, {0x4, 0x7}, {0x2, 0x4}, {0x0, 0x3}, {0x1, 0x5}, {0x2}, {0x3, 0x8}, {0x6, 0x2}, {0x0, 0x1}, {0x4, 0x6}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x7, 0x6}, {0x7, 0x9}, {0x7, 0x5}, {0x0, 0xa}, {0x6, 0x2}, {0x4, 0x2}, {0x7, 0x4}, {0x4, 0x5}, {0x0, 0x5}, {0x7, 0xa}, {0x2, 0x9}, {0x6, 0x5}, {0x2, 0x3}, {0x6, 0x2}, {0x2, 0x3}, {0x6, 0x2}, {0x2, 0x4}, {0x3, 0x12}, {0x2, 0x4}, {0x2, 0x6}, {0x2, 0x6}, {0x4, 0x8}, {0x3, 0x3}, {0x5, 0x8}, {0x5, 0x9}, {0x4}, {0x5, 0xa}, {0x4}, {0x7, 0x5}, {0x6}, {0x0, 0xa}, {0x7}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x4}, {0x3, 0x4}, {0x2, 0x3}, {0x0, 0x4}, {0x4, 0x2}, {}, {0x3, 0x1}, {0x0, 0x3}, {0x3, 0xa}, {0x3, 0x1}]}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x0, 0x7fff, 0x53, 0x0, 0x7ff, 0x80, 0x4]}}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x0, 0x5}, {0x5, 0x6}, {0x1, 0x1}, {0x2, 0xa}, {0x7, 0x7}, {0x1, 0x8}, {0x3, 0x7}, {0x7, 0x9}, {0x3, 0x9}, {0x0, 0xa}, {0x2, 0x1}, {0x2, 0x4}, {0x3, 0x5}, {0x2, 0x9}, {0x3, 0x9}, {0x3, 0x5}, {0x3, 0x6}, {0x5, 0x9}, {0x3, 0x4}, {0x4, 0x9}, {0x7}, {0x1, 0x2}, {0x4, 0x9}, {0x5, 0x1}, {0x6, 0x1}, {0x5, 0x9}, {0x6}, {0x1, 0x2}, {0x0, 0x7}, {0x7}, {0x5, 0x3}, {0x6, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x3, 0x1, 0x9, 0x8, 0x9, 0xf, 0x101]}}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x34, 0x2, [{0x4}, {0x6, 0x5}, {0x6, 0x2}, {0x7, 0x2}, {0x5, 0x8}, {0x2}, {0x5, 0x3}, {0x3, 0x8}, {0x1, 0x3}, {0x1}, {0x0, 0x2}, {0x5, 0x5}, {0x3, 0x1}, {0x7, 0x5}, {0x2, 0x3}, {0x4, 0x9}, {0x7, 0x3}, {0x7, 0x4}, {0x2, 0x1}, {0x1, 0x7}, {0x2, 0xa}, {0x5, 0x7}, {0x5, 0xa}, {0x3, 0x6}, {0x0, 0x3}, {0x7, 0x9}, {0x3, 0x6}, {0x3, 0x5}, {0x3, 0x8}, {0x4, 0x3}, {0x7, 0x9}, {0x5, 0x4}, {0x1, 0x5}, {0x5, 0x9}, {0x1, 0x5}, {0x4, 0x3}, {0x0, 0x8}, {0x3, 0x4}, {0x0, 0x7}, {0x1, 0x3}, {}, {0x0, 0x3}, {0x6, 0x3}, {0x7, 0x3}, {0x6, 0x9}, {0x7, 0x3}, {0x3, 0x6}, {0x2, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfc7b, 0x1, 0x4, 0x4, 0x0, 0x5, 0x8, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x5, 0x48, 0x2, 0x2, 0x24]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0xb, 0x30, 0x16, 0x12, 0x4, 0x16, 0x24, 0x1, 0x4, 0x36, 0x48, 0x6, 0x6c, 0xc, 0xb, 0x1b, 0x24, 0x1, 0x21, 0x4, 0x12, 0x1b, 0xb, 0x48, 0x9, 0x9, 0x11, 0xc, 0x16]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x8, 0x1, 0x5, 0x8, 0xb2, 0xbdd]}}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x51, 0x5, 0x8, 0x7, 0x7, 0x6, 0x7, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xfff9, 0x9, 0x6, 0x0, 0x6, 0x343e, 0x7fff]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xb6, 0x81, 0x4, 0x8b, 0xe8, 0x4, 0x7fff]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0x1, 0x23, 0x4239, 0x4, 0x2, 0x200, 0x3800]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x7e0, 0x9, 0x2, 0x7, 0x0, 0x8001, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffe, 0x3, 0x91, 0x4, 0xc, 0x2, 0x4, 0x10]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x2, 0x1}]}]}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) recvmsg$unix(r6, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}, 0x10020) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r7 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r7, &(0x7f0000000240)=""/112, 0x349b7f55) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xe) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r8, 0x40047438, &(0x7f0000000180)=""/246) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r9, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r10 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r10, 0x400448c8, &(0x7f0000000480)={r9, r9, 0x8, 0x0, 0x0, 0x86, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r10, 0x400448c9, &(0x7f0000000280)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 2.039859102s ago: executing program 3 (id=1463): r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000140)={0x0, 'team_slave_1\x00', {0x300}, 0x4}) 2.039539249s ago: executing program 3 (id=1464): sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001b00)=""/102392, 0x18ff8) openat$procfs(0xffffff9c, &(0x7f0000000180)='/proc/asound/timers\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, 0x0, 0x400c000) syz_open_dev$tty20(0xc, 0x4, 0x1) socket(0x400000000010, 0x3, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x80400, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0x1, 0x8}, 0x0, &(0x7f0000000680)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0xc3ad}, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00007fd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) madvise(&(0x7f00003c1000/0x1000)=nil, 0xdfc3efff, 0x15) 1.880100153s ago: executing program 1 (id=1465): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x4, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, 0x0) read$dsp(r3, &(0x7f0000000300)=""/79, 0x4f) 1.520080889s ago: executing program 0 (id=1466): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x4) read(r0, &(0x7f0000000040)=""/148, 0xffffff96) openat$ptmx(0xffffff9c, &(0x7f0000000140), 0x200, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x8014}, 0x44000) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x0, 0x0, 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r3, 0x7) accept4$x25(r3, 0x0, 0x0, 0x80800) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x18) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000000)={0x7fffffff, r0, 0x8, {0x7, 0x6}}, 0x1) 949.991082ms ago: executing program 1 (id=1467): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0xc000) recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001740)=""/4082, 0xff2}], 0x1}, 0xd}], 0x1, 0x2000, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0xd436}, 0x1c) write$6lowpan_enable(r2, &(0x7f0000000240)='0', 0xffffffffffffffd4) socket(0x10, 0x5, 0xff) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r4, 0x3312, 0x0) r5 = syz_io_uring_setup(0x236, &(0x7f0000000400)={0x0, 0xf691, 0x10100, 0x0, 0x2b5}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x800, 0x1, 0x103, 0x1, 0x8}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0a0000000500000002000000"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1e00000009000000020000000040000010c80000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000004000000020000000f00000000000000", @ANYRES32=r2, @ANYBLOB='@\x00\x00\x00'], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r10}, 0x10) r11 = gettid() rt_sigqueueinfo(r11, 0x21, &(0x7f0000002d00)={0x800000, 0x5, 0x7}) sendmsg$inet6(r8, &(0x7f0000000140)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x15}, 0x3}, 0x1c, 0x0}, 0x0) io_uring_enter(r5, 0x708, 0x41e3, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) waitid(0x0, 0x0, 0x0, 0x4, 0x0) 648.626253ms ago: executing program 1 (id=1468): ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) mmap$KVM_VCPU(&(0x7f000044b000/0x3000)=nil, 0x0, 0x300000b, 0x12, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x20301, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x4004510d, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000000)={0x2, 0x2, 0x73, 0xffffffff}) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x103301) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000080)={0x2, 0x6, 0x101, 0x0, 0x4000, 0x2, 0x0}) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdir(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x3b0, 0x0, 0x11, 0x148, 0x14c, 0x10, 0x374, 0x2a8, 0x2a8, 0x374, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0xac, 0xf4, 0x1c, {}, [@common=@unspec=@limit={{0x3c}, {0x6, 0x8, 0x2, 0x12, 0x0, 0x7, 0x3}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x1ff, 0x0, 0x2, 'snmp\x00', {0xff}}}}, {{@ip={@multicast1, @rand_addr=0x64010102, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x1c8, 0x228, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_0\x00', {0x459, 0x0, 0x48, 0x0, 0x0, 0x3, 0x2, 0x80, 0x0, 0x18}, {0x91}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x1, 0x3, 0x2, 0x0, 0x2, 0x1]}, {0x1, [0x3, 0x2, 0x1, 0x0, 0x3, 0x5], 0x4}}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x40c) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$inet(0x2, 0x2, 0x0) 647.877961ms ago: executing program 0 (id=1469): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d20bddda7d1db9342de76eec7967fe97751f13a23aeaacb0565c1c2251560ed1"}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x200008, @loopback, 0x39}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000200), 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYRES16=r6], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9812c106f565491fdafce44d0000000200000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x8094}, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) r8 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x8000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000140)={0x36, 0x2, 0x0, "d569e8000000fa44966262631e8ac11e00"}) sendto$inet6(r4, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) 477.046675ms ago: executing program 1 (id=1470): bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_open_dev$radio(&(0x7f0000000100), 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd74) r2 = syz_io_uring_setup(0x917, &(0x7f0000000300)={0x0, 0x400, 0x1, 0x1000001, 0xf7fffffc, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffbfd, 0x0, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000980)=ANY=[@ANYRES64=r4, @ANYRES32=r1, @ANYBLOB="03000000eeffffff"], &(0x7f0000000500)='syzkaller\x00', 0x40a, 0x1000, &(0x7f0000001000)=""/4096, 0x41100, 0x1a, '\x00', 0x0, 0x17, r1, 0x8, &(0x7f0000000540)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000a40)={0x3, 0xf, 0x80000000, 0x8}, 0x10, 0x151f5, 0xffffffffffffffff, 0x7, &(0x7f0000000d00)=[r1, r1, r1, r1, r1, r1], &(0x7f0000000d40)=[{0x4, 0x3, 0xe, 0x5}, {0x4, 0x5, 0x10, 0xc}, {0x3, 0x2, 0x5, 0x6}, {0x0, 0x1, 0xc, 0x4}, {0x3, 0x4, 0x0, 0x4}, {0x5, 0x1, 0xb, 0x4}, {0x4, 0x3, 0x3, 0xc}], 0x10, 0xe, @void, @value}, 0x94) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r1, 0x0, &(0x7f0000000a80)={&(0x7f0000000240)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/197, 0xc5}, {&(0x7f0000000c00)=""/245, 0xf5}, {&(0x7f0000000580)=""/162, 0xa2}, {&(0x7f00000001c0)=""/37, 0x25}, {&(0x7f0000000640)=""/120, 0x78}, {&(0x7f00000006c0)=""/213, 0xd5}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f00000002c0)=""/27, 0x1b}, {&(0x7f0000000840)=""/155, 0x9b}, {&(0x7f0000000900)=""/124, 0x7c}], 0xa, &(0x7f0000000ac0)=""/16, 0x10}, 0x0, 0x140, 0x0, {0x0, r5}}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) r6 = io_uring_setup(0x54a0, &(0x7f0000000000)={0x0, 0x72e3, 0x8, 0x2, 0xf2, 0x0, r1}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r6, 0x13, &(0x7f0000000080)=[0x5, 0xa22], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000140)='br_fdb_update\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x400448cb, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000049c0)={0x3, 0x2e, &(0x7f0000000e80)=ANY=[@ANYBLOB="180000000000008000000000f8ffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000ec2464f1027dd5ff00008500000083000000bf09000000000000550901000000000095000000000000008520000005000000183b000003000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000810000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000182b0000", @ANYRES32=r1, @ANYBLOB="00000000fcffffff1801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000000600000006580600000800001800000099000000000000000300000018340000040000000000000000000000182a0000", @ANYRES32=r1, @ANYBLOB="000000000b00000018400000020000000000000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x45057bf4ccb05c67, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$dsp(r9, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r9, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r9, 0x40045010, &(0x7f0000000300)=0x3) ioctl$SNDCTL_DSP_RESET(r9, 0x5000, 0x0) bind$bt_hci(r8, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r8, &(0x7f0000000040)="05000000010000", 0x7) socket$nl_sock_diag(0x10, 0x3, 0x4) 136.3585ms ago: executing program 2 (id=1471): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000480)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000", @ANYRES16=r2, @ANYBLOB="01002bbd7000fbdbdf256d00000008000300", @ANYRES32=0x0, @ANYBLOB="cfdba3a903adbb301ff0c75e104bce7769caa46c10ecc35db5c51b37a5da42089e8989f40467455f68302bc1b1754f0fa2c54f53eca965094354ca3b23e1307b72606ee10ae38e5bb04ca116756d0c1907d132646370f4c2aa9ec9f6d5850000000000000000d927a0ccb7a43a724b243dc342f9533ca9ceb98b7fdb081e537d8ac56a77c1b5daebed48aa1a0e89a92624b134776414d6f5169464311b0490ae840aeb8718fb2416d57d13d01a555b3837576637eb3cd921ff255b9ec8aa95f424d63895943ae1622772b3290a07a0c2a2afa55d2a77460b453a1453f7caf71e7d50b535a24ebb2752c73cefa9ce3bc8cbcd34a7892ada12674b47e9ff054c604087597bdd2b9d9cda393971a498e04f"], 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x20000000) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x5) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, 0x7, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x84) close(0x3) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe4, 0x1, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000200000000000000000000008500000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fcffffff850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r9, 0x501, 0x70bd2b, 0x25dfdbfc, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000014) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r6}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYBLOB="84a896df6a5cbb6e2652dd050e6df5c9f27fb9d6cad94c3bc6851c6d3a8ca2a6e828a59c21582fd0b312a6f5597b548cb52d", @ANYBLOB="0000000067e3f5b1713d00"/26, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) pipe2$watch_queue(&(0x7f0000000400), 0x80) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110001", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000a80)={r11, 0x0, 0x0}, 0x10) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) r12 = socket(0x2a, 0x2, 0xfffffffe) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r12) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) 0s ago: executing program 2 (id=1472): timer_create(0xb, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000780)=ANY=[], 0x8c}, 0x1, 0x0, 0x0, 0xc000}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0x2e6}, 0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) r1 = socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000140)=0x20, 0x4) bind$xdp(r1, &(0x7f00000002c0), 0x10) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) read$msr(r0, &(0x7f0000000600)=""/215, 0xd7) dup(0xffffffffffffffff) r2 = syz_io_uring_setup(0x121d, &(0x7f0000000480)={0x0, 0xfffffffd, 0x80, 0x3, 0x34e}, &(0x7f0000000980)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0xfffffffffffffd6c, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) r5 = socket(0x2a, 0x2, 0xfffffffe) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x5c, 0x0, 0x0, 0x0, 0x23457}) io_uring_enter(r2, 0x47bc, 0xa8be, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 0s ago: executing program 0 (id=1473): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[], 0x40}}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005733b26b703000000000000850000007300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, './bus\x00'}, 0x6e) mount(&(0x7f0000000580)=@nullb, &(0x7f0000000600)='./bus\x00', &(0x7f0000000900)='aufs\x00', 0x331810, &(0x7f0000000840)='trans=rdma,\xbb\xd1.\x03Y\xf1p\xe5\x7f\xbf\xaf\xaal\xf9wH\xde\x0e,\x1e\xbd\xcd\xb2\x81\x11\x88b\x1a?\x97\xb2\x83jP\x1b)\x98\x1b\xf5\xd1\xe3,\xd2\x81\x89]R\x84\xbfp\xc7\xfd2#\xc1\xdb\x8a-,\xebB=\xe9\x9d!/K\xdd\x03\xf6\xbax\xadYa\xc1\xaa\xfazk\xaeTnq\xa7\xf9\xd3\xed\xe9\xa6\xa1\xe5\xffu\xa6\x039\n0\xd3\xb6^T\x98\xe7\xc5\xf1\x0f|$K\xc39\xb2nT\x90{\xb5n\xb2]G\x9d\xb9=k\xe1:\xbbF\xc7c\xaa\x92\xab0\x7f\xda\x82)\xe6\x89\xf7\x1e)Z<\xfd\x01\xae\x8f\x90F\x0e\xc0\xaa_\xfb') socket$inet(0x2, 0x2, 0x3) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x17) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_open_dev$radio(&(0x7f0000000100), 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) r5 = syz_io_uring_setup(0x917, &(0x7f0000000300)={0x0, 0xd2a0, 0x1, 0x1000001, 0xb9}, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffbfd, 0x0, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="c50a0000000000006113b800000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000a80)={&(0x7f0000000240)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/197, 0xc5}, {&(0x7f00000006c0)=""/231, 0xe7}, {&(0x7f00000001c0)=""/56, 0x38}, {&(0x7f0000000640)=""/120, 0x78}, {&(0x7f0000000c00)=""/227, 0xe3}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f00000002c0)=""/27, 0x1b}, {0x0}], 0x8, &(0x7f0000000ac0)=""/16, 0x10}, 0x0, 0x140, 0x0, {0x1, r8}}) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) r9 = io_uring_setup(0x54a0, &(0x7f0000000000)={0x0, 0x70e5, 0x2, 0x2, 0xf2}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r9, 0x13, &(0x7f0000000080)=[0x5, 0xa22], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r10, 0x400448cb, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) kernel console output (not intermixed with test programs): ink: 24 bytes leftover after parsing attributes in process `syz.3.526'. [ 202.744564][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 202.893827][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 202.902857][ T9] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 202.905737][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 202.909048][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 202.912618][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 202.916968][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 202.921085][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 202.924354][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.003670][ T5983] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 203.003675][ T6005] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 203.141567][ T9] usb 6-1: GET_CAPABILITIES returned 0 [ 203.143425][ T9] usbtmc 6-1:16.0: can't read capabilities [ 203.153657][ T5983] usb 7-1: Using ep0 maxpacket: 8 [ 203.163627][ T5983] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 203.163679][ T6005] usb 5-1: Using ep0 maxpacket: 8 [ 203.166360][ T5983] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 203.171168][ T5983] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 203.178227][ T5983] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 203.180418][ T6005] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 203.181463][ T5983] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 203.181488][ T5983] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 203.184711][ T6005] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 203.188547][ T5983] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.191352][ T6005] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 203.200541][ T6005] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 203.204504][ T6005] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 203.208697][ T6005] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 203.211655][ T6005] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.609635][ T5983] usb 7-1: GET_CAPABILITIES returned 0 [ 203.611472][ T5983] usbtmc 7-1:16.0: can't read capabilities [ 203.624926][ T6005] usb 5-1: GET_CAPABILITIES returned 0 [ 203.627109][ T6005] usbtmc 5-1:16.0: can't read capabilities [ 204.184557][ T8443] netlink: 4 bytes leftover after parsing attributes in process `syz.3.532'. [ 204.365612][ T8446] random: crng reseeded on system resumption [ 204.370758][ T5982] usb 7-1: USB disconnect, device number 10 [ 204.445980][ T65] usb 6-1: USB disconnect, device number 9 [ 204.495563][ T6002] usb 5-1: USB disconnect, device number 11 [ 204.577730][ T8448] trusted_key: encrypted_key: key user:syz not found [ 204.906515][ T8456] random: crng reseeded on system resumption [ 205.313426][ T8469] trusted_key: encrypted_key: key user:syz not found [ 205.442984][ T8472] trusted_key: encrypted_key: key user:syz not found [ 205.456827][ T8472] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input17 [ 205.706374][ T8483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.544'. [ 205.710349][ T8482] trusted_key: encrypted_key: key user:syz not found [ 205.718858][ T8482] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input18 [ 206.746024][ T6002] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 206.913610][ T6002] usb 6-1: Using ep0 maxpacket: 8 [ 206.916498][ T6002] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 206.919169][ T6002] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 206.922817][ T6002] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 206.927516][ T6002] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 206.930709][ T6002] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 206.935092][ T6002] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 206.938187][ T6002] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.158686][ T8508] netlink: 3016 bytes leftover after parsing attributes in process `syz.0.549'. [ 207.185581][ T6002] usb 6-1: GET_CAPABILITIES returned 0 [ 207.187526][ T6002] usbtmc 6-1:16.0: can't read capabilities [ 207.775224][ T6002] usb 6-1: USB disconnect, device number 10 [ 208.050165][ T6005] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 208.253615][ T6005] usb 5-1: Using ep0 maxpacket: 8 [ 208.263228][ T6005] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 208.266802][ T6005] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 208.270840][ T6005] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 208.274985][ T6005] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 208.279067][ T6005] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 208.290068][ T6005] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 208.294154][ T6005] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.405808][ T8526] trusted_key: encrypted_key: key user:syz not found [ 208.516989][ T6005] usb 5-1: GET_CAPABILITIES returned 0 [ 208.521028][ T6005] usbtmc 5-1:16.0: can't read capabilities [ 208.725658][ T8531] random: crng reseeded on system resumption [ 208.830417][ T8536] trusted_key: encrypted_key: key user:syz not found [ 208.833407][ T8536] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input19 [ 209.285564][ T57] usb 5-1: USB disconnect, device number 12 [ 209.485639][ T8545] netlink: 4 bytes leftover after parsing attributes in process `syz.1.556'. [ 210.834187][ T6005] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 211.143603][ T6005] usb 6-1: Using ep0 maxpacket: 8 [ 211.150177][ T6005] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 211.153965][ T6005] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 211.157583][ T6005] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 211.365387][ T65] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 211.387031][ T6005] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 211.390236][ T6005] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 211.398286][ T6005] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 211.401446][ T6005] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.618828][ T8581] trusted_key: encrypted_key: key user:syz not found [ 211.755003][ T6005] usb 6-1: GET_CAPABILITIES returned 0 [ 211.759171][ T6005] usbtmc 6-1:16.0: can't read capabilities [ 212.118771][ T8601] netlink: 3048 bytes leftover after parsing attributes in process `syz.3.564'. [ 212.496388][ T6005] usb 6-1: USB disconnect, device number 11 [ 212.654676][ T8609] mkiss: ax0: crc mode is auto. [ 212.754351][ T8615] netlink: 4 bytes leftover after parsing attributes in process `syz.3.570'. [ 217.779448][ T8646] trusted_key: encrypted_key: key user:syz not found [ 217.795375][ T8646] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input20 [ 217.934893][ T8650] binder: BINDER_SET_CONTEXT_MGR already set [ 217.938291][ T8650] binder: 8637:8650 ioctl 4018620d 80000040 returned -16 [ 217.995089][ T8650] netlink: 'syz.0.571': attribute type 4 has an invalid length. [ 218.031619][ T8650] netlink: 152 bytes leftover after parsing attributes in process `syz.0.571'. [ 218.123669][ T6005] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 218.213333][ T8651] binder: BINDER_SET_CONTEXT_MGR already set [ 218.216671][ T8651] binder: 8640:8651 ioctl 4018620d 80000040 returned -16 [ 218.250244][ T8651] netlink: 'syz.3.574': attribute type 4 has an invalid length. [ 218.252817][ T8651] netlink: 152 bytes leftover after parsing attributes in process `syz.3.574'. [ 218.283551][ T6005] usb 6-1: Using ep0 maxpacket: 8 [ 218.292180][ T6005] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 218.295290][ T6005] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 218.298442][ T6005] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 218.301569][ T6005] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 218.304812][ T6005] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 218.312066][ T6005] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 218.315397][ T6005] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.569483][ T6005] usb 6-1: GET_CAPABILITIES returned 0 [ 218.571341][ T6005] usbtmc 6-1:16.0: can't read capabilities [ 218.826003][ T8664] trusted_key: encrypted_key: key user:syz not found [ 218.835840][ T8664] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input21 [ 219.104037][ T65] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 219.256949][ T8676] trusted_key: encrypted_key: key user:syz not found [ 219.271036][ T8676] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input22 [ 219.695926][ T8692] netlink: 3048 bytes leftover after parsing attributes in process `syz.3.579'. [ 219.878058][ T5945] usb 6-1: USB disconnect, device number 12 [ 219.999223][ T8698] trusted_key: encrypted_key: key user:syz not found [ 220.554527][ T8712] netlink: 24 bytes leftover after parsing attributes in process `syz.0.586'. [ 221.038189][ T8716] binder: BINDER_SET_CONTEXT_MGR already set [ 221.040471][ T8716] binder: 8713:8716 ioctl 4018620d 80000040 returned -16 [ 221.060413][ T8716] netlink: 'syz.1.587': attribute type 4 has an invalid length. [ 221.063054][ T8716] netlink: 152 bytes leftover after parsing attributes in process `syz.1.587'. [ 221.309896][ T8718] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 221.312774][ T8718] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 221.317487][ T8718] vhci_hcd vhci_hcd.0: Device attached [ 221.513746][ T24] vhci_hcd: vhci_device speed not set [ 221.573721][ T24] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 221.577713][ T8719] vhci_hcd: connection closed [ 221.577833][ T12] vhci_hcd: stop threads [ 221.583659][ T12] vhci_hcd: release socket [ 221.586769][ T12] vhci_hcd: disconnect device [ 222.058636][ T5983] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 222.142674][ T8737] trusted_key: encrypted_key: key user:syz not found [ 222.146044][ T8737] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input23 [ 222.299515][ T8747] trusted_key: encrypted_key: key user:syz not found [ 222.432113][ T8755] trusted_key: encrypted_key: key user:syz not found [ 222.445424][ T8755] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input24 [ 222.903222][ T8764] netlink: 4 bytes leftover after parsing attributes in process `syz.1.597'. [ 223.035046][ T8770] netlink: 4 bytes leftover after parsing attributes in process `syz.0.596'. [ 226.703735][ T24] vhci_hcd: vhci_device speed not set [ 229.789273][ T8797] trusted_key: encrypted_key: key user:syz not found [ 229.800214][ T8795] trusted_key: encrypted_key: key user:syz not found [ 229.802012][ T8797] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input25 [ 229.809224][ T8794] trusted_key: encrypted_key: key user:syz not found [ 229.891024][ T8794] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input26 [ 230.884049][ T5983] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 231.080192][ T8831] trusted_key: encrypted_key: key user:syz not found [ 231.151518][ T8831] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input27 [ 231.257951][ T8843] trusted_key: encrypted_key: key user:syz not found [ 231.274526][ T8843] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input28 [ 231.533149][ T8853] trusted_key: encrypted_key: key user:syz not found [ 231.847396][ T8860] netlink: 4 bytes leftover after parsing attributes in process `syz.0.611'. [ 232.332970][ T8864] netlink: 24 bytes leftover after parsing attributes in process `syz.2.612'. [ 233.254595][ T8874] binder: BINDER_SET_CONTEXT_MGR already set [ 233.256876][ T8874] binder: 8871:8874 ioctl 4018620d 80000040 returned -16 [ 233.270302][ T8874] netlink: 'syz.2.614': attribute type 4 has an invalid length. [ 233.273024][ T8874] netlink: 152 bytes leftover after parsing attributes in process `syz.2.614'. [ 238.549661][ T8903] binder: BINDER_SET_CONTEXT_MGR already set [ 238.551865][ T8903] binder: 8888:8903 ioctl 4018620d 80000040 returned -16 [ 238.594921][ T8903] netlink: 'syz.2.617': attribute type 4 has an invalid length. [ 238.597478][ T8903] netlink: 152 bytes leftover after parsing attributes in process `syz.2.617'. [ 238.613779][ T5983] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 238.773612][ T5983] usb 5-1: Using ep0 maxpacket: 8 [ 238.777001][ T5983] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 238.779567][ T5983] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 238.783004][ T5983] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 238.786322][ T5983] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 238.789494][ T5983] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 238.793858][ T5983] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 238.796876][ T5983] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.065163][ T5983] usb 5-1: GET_CAPABILITIES returned 0 [ 239.067112][ T5983] usbtmc 5-1:16.0: can't read capabilities [ 239.724014][ T24] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 239.909402][ T8919] trusted_key: encrypted_key: key user:syz not found [ 239.914027][ T8919] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input29 [ 240.021416][ T6005] usb 5-1: USB disconnect, device number 13 [ 240.160989][ T8924] trusted_key: encrypted_key: key user:syz not found [ 240.167248][ T8924] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input30 [ 240.291364][ T8929] trusted_key: encrypted_key: key user:syz not found [ 240.647291][ T8941] netlink: 24 bytes leftover after parsing attributes in process `syz.1.624'. [ 240.761214][ T8943] netlink: 4 bytes leftover after parsing attributes in process `syz.0.626'. [ 241.259325][ T8952] mkiss: ax0: crc mode is auto. [ 241.434236][ T8958] random: crng reseeded on system resumption [ 241.604595][ T8968] binder: BINDER_SET_CONTEXT_MGR already set [ 241.606998][ T8968] binder: 8953:8968 ioctl 4018620d 80000040 returned -16 [ 241.635378][ T8968] netlink: 'syz.1.628': attribute type 4 has an invalid length. [ 241.641219][ T8968] netlink: 152 bytes leftover after parsing attributes in process `syz.1.628'. [ 241.783659][ T6005] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 241.943570][ T6005] usb 5-1: Using ep0 maxpacket: 8 [ 241.949263][ T6005] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 241.952580][ T6005] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 241.964224][ T6005] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 241.970589][ T6005] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 241.976863][ T6005] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 241.987489][ T6005] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 241.995336][ T6005] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.041890][ T8975] trusted_key: encrypted_key: key user:syz not found [ 242.047350][ T8975] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input31 [ 242.267905][ T6005] usb 5-1: GET_CAPABILITIES returned 0 [ 242.270458][ T6005] usbtmc 5-1:16.0: can't read capabilities [ 242.691637][ T8986] trusted_key: encrypted_key: key user:syz not found [ 242.697793][ T8986] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input32 [ 242.816360][ T8991] trusted_key: encrypted_key: key user:syz not found [ 242.874177][ T24] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 243.194027][ T24] usb 5-1: USB disconnect, device number 14 [ 243.212008][ T9002] binder: BINDER_SET_CONTEXT_MGR already set [ 243.214405][ T9002] binder: 8994:9002 ioctl 4018620d 80000040 returned -16 [ 243.222616][ T9002] netlink: 'syz.1.635': attribute type 4 has an invalid length. [ 243.225512][ T9002] netlink: 152 bytes leftover after parsing attributes in process `syz.1.635'. [ 243.632855][ T9010] netlink: 24 bytes leftover after parsing attributes in process `syz.3.636'. [ 243.833595][ T5982] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 244.035555][ T9024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.638'. [ 244.225514][ T5982] usb 7-1: Using ep0 maxpacket: 8 [ 244.228903][ T5982] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 244.231546][ T5982] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 244.235213][ T5982] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 244.238231][ T5982] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 244.241272][ T5982] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 244.245441][ T5982] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 244.248430][ T5982] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.402624][ T9032] trusted_key: encrypted_key: key user:syz not found [ 244.409304][ T9032] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input33 [ 244.750093][ T9043] mkiss: ax0: crc mode is auto. [ 244.890210][ T9046] trusted_key: encrypted_key: key user:syz not found [ 244.893306][ T9046] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input34 [ 245.055602][ T9053] trusted_key: encrypted_key: key user:syz not found [ 245.271482][ T9057] mkiss: ax0: crc mode is auto. [ 245.694047][ T65] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 245.756733][ T5982] usb 7-1: usb_control_msg returned -71 [ 245.766664][ T5982] usbtmc 7-1:16.0: can't read capabilities [ 245.783789][ T5982] usb 7-1: USB disconnect, device number 11 [ 245.907951][ T9073] binder: BINDER_SET_CONTEXT_MGR already set [ 245.910038][ T9073] binder: 9061:9073 ioctl 4018620d 80000040 returned -16 [ 245.916029][ T9073] netlink: 'syz.1.647': attribute type 4 has an invalid length. [ 245.918656][ T9073] netlink: 152 bytes leftover after parsing attributes in process `syz.1.647'. [ 246.119351][ T9078] netlink: 24 bytes leftover after parsing attributes in process `syz.3.648'. [ 246.581733][ T9088] netlink: 24 bytes leftover after parsing attributes in process `syz.1.650'. [ 246.828416][ T9093] trusted_key: encrypted_key: key user:syz not found [ 246.831219][ T9093] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input35 [ 246.951353][ T9102] trusted_key: encrypted_key: key user:syz not found [ 246.964808][ T9103] netlink: 12 bytes leftover after parsing attributes in process `syz.2.652'. [ 247.226759][ T9112] trusted_key: encrypted_key: key user:syz not found [ 247.229792][ T9112] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input36 [ 247.582012][ T9124] binder: BINDER_SET_CONTEXT_MGR already set [ 247.629323][ T9124] binder: 9117:9124 ioctl 4018620d 80000040 returned -16 [ 247.644236][ T9124] netlink: 'syz.1.656': attribute type 4 has an invalid length. [ 247.646808][ T9124] netlink: 152 bytes leftover after parsing attributes in process `syz.1.656'. [ 248.297040][ T9132] random: crng reseeded on system resumption [ 248.617372][ T24] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 248.726807][ T9151] netlink: 24 bytes leftover after parsing attributes in process `syz.1.660'. [ 249.098393][ T9161] binder: BINDER_SET_CONTEXT_MGR already set [ 249.100438][ T9161] binder: 9146:9161 ioctl 4018620d 80000040 returned -16 [ 249.117713][ T9161] netlink: 'syz.0.661': attribute type 4 has an invalid length. [ 249.120232][ T9161] netlink: 152 bytes leftover after parsing attributes in process `syz.0.661'. [ 249.496223][ T9169] trusted_key: encrypted_key: key user:syz not found [ 249.510919][ T9169] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input37 [ 249.780052][ T9178] trusted_key: encrypted_key: key user:syz not found [ 249.786650][ T9178] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input38 [ 255.010921][ T9216] netlink: 4 bytes leftover after parsing attributes in process `syz.1.669'. [ 255.160657][ T24] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 255.195641][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.198061][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.645198][ T9240] netlink: 24 bytes leftover after parsing attributes in process `syz.0.672'. [ 255.764755][ T9243] trusted_key: encrypted_key: key user:syz not found [ 255.785530][ T9243] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input39 [ 255.934631][ T9252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.675'. [ 256.079620][ T9257] trusted_key: encrypted_key: key user:syz not found [ 256.096385][ T9257] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input40 [ 256.107638][ T9254] binder: BINDER_SET_CONTEXT_MGR already set [ 256.110166][ T9254] binder: 9238:9254 ioctl 4018620d 80000040 returned -16 [ 256.114760][ T9254] netlink: 'syz.3.673': attribute type 4 has an invalid length. [ 256.117919][ T9254] netlink: 152 bytes leftover after parsing attributes in process `syz.3.673'. [ 262.241762][ T9294] random: crng reseeded on system resumption [ 263.403859][ T9319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.686'. [ 263.625448][ T9320] netlink: 12 bytes leftover after parsing attributes in process `syz.1.687'. [ 263.629284][ T9320] bridge_slave_1: left allmulticast mode [ 263.631473][ T9320] bridge_slave_1: left promiscuous mode [ 263.633731][ T9320] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.641069][ T9320] bridge_slave_0: left allmulticast mode [ 263.642984][ T9320] bridge_slave_0: left promiscuous mode [ 263.646536][ T9320] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.397998][ T9332] netlink: 12 bytes leftover after parsing attributes in process `syz.0.690'. [ 264.627304][ T9336] random: crng reseeded on system resumption [ 265.857938][ T9348] random: crng reseeded on system resumption [ 266.019720][ T9352] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 266.021899][ T9352] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 266.025503][ T9352] vhci_hcd vhci_hcd.0: Device attached [ 266.283591][ T34] vhci_hcd: vhci_device speed not set [ 266.343690][ T34] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 266.350804][ T9353] vhci_hcd: connection closed [ 266.354556][ T13] vhci_hcd: stop threads [ 266.357861][ T13] vhci_hcd: release socket [ 266.360792][ T13] vhci_hcd: disconnect device [ 266.626434][ T9364] binder: BINDER_SET_CONTEXT_MGR already set [ 266.628867][ T9364] binder: 9361:9364 ioctl 4018620d 80000040 returned -16 [ 266.635564][ T9364] netlink: 'syz.1.697': attribute type 4 has an invalid length. [ 266.638276][ T9364] netlink: 152 bytes leftover after parsing attributes in process `syz.1.697'. [ 266.900031][ T9366] mkiss: ax0: crc mode is auto. [ 267.431941][ T9378] trusted_key: encrypted_key: key user:syz not found [ 267.438617][ T9378] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input41 [ 267.733575][ T9387] netlink: 24 bytes leftover after parsing attributes in process `syz.2.704'. [ 269.186154][ T9396] mkiss: ax0: crc mode is auto. [ 270.165922][ T9409] random: crng reseeded on system resumption [ 270.222987][ T9413] trusted_key: encrypted_key: key user:syz not found [ 270.572437][ T9424] binder: BINDER_SET_CONTEXT_MGR already set [ 270.574541][ T9424] binder: 9414:9424 ioctl 4018620d 80000040 returned -16 [ 270.580123][ T9424] netlink: 'syz.0.713': attribute type 4 has an invalid length. [ 270.582577][ T9424] netlink: 152 bytes leftover after parsing attributes in process `syz.0.713'. [ 270.645093][ T9425] netlink: 24 bytes leftover after parsing attributes in process `syz.1.714'. [ 270.742685][ T9427] mkiss: ax0: crc mode is auto. [ 271.433640][ T34] vhci_hcd: vhci_device speed not set [ 271.553596][ T24] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 271.703789][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 271.714179][ T24] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 271.719477][ T24] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 271.723547][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 271.725535][ T9441] trusted_key: encrypted_key: key user:syz not found [ 271.727466][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 271.727489][ T24] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 271.727527][ T24] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 271.743157][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.923318][ T9447] random: crng reseeded on system resumption [ 271.957810][ T24] usb 5-1: GET_CAPABILITIES returned 0 [ 271.961112][ T24] usbtmc 5-1:16.0: can't read capabilities [ 272.379390][ T9455] mkiss: ax0: crc mode is auto. [ 272.743672][ T34] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 272.794753][ T5982] usb 5-1: USB disconnect, device number 15 [ 272.796463][ T9463] binder: BINDER_SET_CONTEXT_MGR already set [ 272.800853][ T9463] binder: 9459:9463 ioctl 4018620d 80000040 returned -16 [ 272.888796][ T9462] netlink: 'syz.1.727': attribute type 4 has an invalid length. [ 272.891561][ T9462] netlink: 152 bytes leftover after parsing attributes in process `syz.1.727'. [ 272.933561][ T34] usb 7-1: Using ep0 maxpacket: 8 [ 272.936584][ T34] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 272.939159][ T34] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 272.942243][ T34] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 272.946589][ T34] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 272.949700][ T34] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 272.954752][ T34] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 272.957911][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.166722][ T34] usb 7-1: GET_CAPABILITIES returned 0 [ 273.168537][ T34] usbtmc 7-1:16.0: can't read capabilities [ 273.549809][ T9474] netlink: 24 bytes leftover after parsing attributes in process `syz.0.728'. [ 273.835574][ T9] usb 7-1: USB disconnect, device number 12 [ 274.280529][ T9476] trusted_key: encrypted_key: key user:syz not found [ 274.663258][ T5956] Bluetooth: hci1: ACL packet for unknown connection handle 1 [ 274.824794][ T9493] mkiss: ax0: crc mode is auto. [ 275.554367][ T24] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 275.769590][ T9508] binder: BINDER_SET_CONTEXT_MGR already set [ 275.771742][ T9508] binder: 9500:9508 ioctl 4018620d 80000040 returned -16 [ 275.778242][ T9508] netlink: 'syz.1.737': attribute type 4 has an invalid length. [ 275.781065][ T9508] netlink: 152 bytes leftover after parsing attributes in process `syz.1.737'. [ 275.976057][ T9521] netlink: 3048 bytes leftover after parsing attributes in process `syz.2.739'. [ 276.125507][ T9531] trusted_key: encrypted_key: key user:syz not found [ 276.134404][ T9531] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input42 [ 276.862619][ T9544] mkiss: ax0: crc mode is auto. [ 277.175113][ T9551] netlink: 4 bytes leftover after parsing attributes in process `syz.2.746'. [ 283.247373][ T9571] mkiss: ax0: crc mode is auto. [ 283.333357][ T9581] random: crng reseeded on system resumption [ 283.367697][ T9583] trusted_key: encrypted_key: key user:syz not found [ 283.492848][ T9589] netlink: 24 bytes leftover after parsing attributes in process `syz.1.748'. [ 283.721248][ T9591] trusted_key: encrypted_key: key user:syz not found [ 283.728478][ T9591] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input43 [ 284.118520][ T9596] trusted_key: encrypted_key: key user:syz not found [ 284.123331][ T9596] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input44 [ 284.455841][ T9608] trusted_key: encrypted_key: key user:syz not found [ 284.478773][ T9608] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input45 [ 284.615041][ T9609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.753'. [ 284.700913][ T65] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 284.900799][ T9620] trusted_key: encrypted_key: key user:syz not found [ 284.908462][ T9620] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input46 [ 285.368935][ T9651] netlink: 3048 bytes leftover after parsing attributes in process `syz.3.757'. [ 285.699005][ T9657] binder: BINDER_SET_CONTEXT_MGR already set [ 285.701859][ T9657] binder: 9636:9657 ioctl 4018620d 80000040 returned -16 [ 285.738408][ T9657] netlink: 'syz.2.759': attribute type 4 has an invalid length. [ 285.741154][ T9657] netlink: 152 bytes leftover after parsing attributes in process `syz.2.759'. [ 291.410537][ T9693] netlink: 12 bytes leftover after parsing attributes in process `syz.3.767'. [ 291.583585][ T34] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 291.743603][ T34] usb 6-1: Using ep0 maxpacket: 8 [ 291.748082][ T34] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 291.752112][ T34] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 291.756241][ T34] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 291.759556][ T34] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 291.762850][ T34] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 291.768722][ T34] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 291.771865][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.146159][ T9702] trusted_key: encrypted_key: key user:syz not found [ 292.683664][ T5984] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 292.744580][ T9712] netlink: 24 bytes leftover after parsing attributes in process `syz.0.770'. [ 292.833604][ T5984] usb 7-1: Using ep0 maxpacket: 8 [ 292.851804][ T5984] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 292.858451][ T5984] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 292.861870][ T5984] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 292.865150][ T5984] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 292.868985][ T5984] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 292.875351][ T5984] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 292.878354][ T5984] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.081583][ T34] usb 6-1: usb_control_msg returned -71 [ 293.085243][ T34] usbtmc 6-1:16.0: can't read capabilities [ 293.089295][ T34] usb 6-1: USB disconnect, device number 13 [ 293.398535][ T9718] dvmrp9: entered allmulticast mode [ 293.501598][ T5984] usb 7-1: usb_control_msg returned -71 [ 293.503546][ T5984] usbtmc 7-1:16.0: can't read capabilities [ 293.512737][ T5984] usb 7-1: USB disconnect, device number 13 [ 293.638113][ T9720] netlink: 156 bytes leftover after parsing attributes in process `syz.0.771'. [ 293.642183][ T9720] netlink: 156 bytes leftover after parsing attributes in process `syz.0.771'. [ 294.758318][ T9740] mkiss: ax0: crc mode is auto. [ 295.108132][ T9747] random: crng reseeded on system resumption [ 295.556035][ T9756] netlink: 4 bytes leftover after parsing attributes in process `syz.3.780'. [ 295.925938][ T9770] random: crng reseeded on system resumption [ 296.213568][ T5984] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 296.363779][ T5984] usb 6-1: Using ep0 maxpacket: 8 [ 296.379676][ T5984] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 296.383420][ T5984] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 296.387760][ T5984] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 296.391165][ T5984] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 296.397347][ T5984] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 296.403698][ T5984] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 296.406912][ T5984] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.609212][ T5956] Bluetooth: hci3: ACL packet for unknown connection handle 1 [ 296.733465][ T9788] mkiss: ax0: crc mode is auto. [ 297.016407][ T5984] usb 6-1: usb_control_msg returned -71 [ 297.018306][ T5984] usbtmc 6-1:16.0: can't read capabilities [ 297.042892][ T5984] usb 6-1: USB disconnect, device number 14 [ 297.178302][ T9795] binder: BINDER_SET_CONTEXT_MGR already set [ 297.180342][ T9795] binder: 9792:9795 ioctl 4018620d 80000040 returned -16 [ 297.187828][ T9795] netlink: 'syz.2.786': attribute type 4 has an invalid length. [ 297.190451][ T9795] netlink: 152 bytes leftover after parsing attributes in process `syz.2.786'. [ 297.630384][ T9804] trusted_key: encrypted_key: key user:syz not found [ 297.640368][ T9804] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input47 [ 297.656336][ T9802] netlink: 4 bytes leftover after parsing attributes in process `syz.0.789'. [ 297.806463][ T9811] random: crng reseeded on system resumption [ 298.413454][ T9823] mkiss: ax0: crc mode is auto. [ 298.933991][ T9837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.798'. [ 299.175069][ T9835] trusted_key: encrypted_key: key user:syz not found [ 299.178579][ T9835] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input48 [ 299.277617][ T9841] netlink: 4 bytes leftover after parsing attributes in process `syz.1.800'. [ 299.553382][ T9850] dvmrp9: entered allmulticast mode [ 299.781252][ T9858] netlink: 156 bytes leftover after parsing attributes in process `syz.2.810'. [ 299.784402][ T9858] netlink: 156 bytes leftover after parsing attributes in process `syz.2.810'. [ 300.317091][ T9864] random: crng reseeded on system resumption [ 300.475230][ T9868] mkiss: ax0: crc mode is auto. [ 300.599652][ T9874] random: crng reseeded on system resumption [ 300.684386][ T9881] netlink: 4 bytes leftover after parsing attributes in process `syz.2.809'. [ 300.853042][ T9887] trusted_key: encrypted_key: key user:syz not found [ 300.865415][ T9887] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input49 [ 301.572235][ T9895] trusted_key: encrypted_key: key user:syz not found [ 301.577775][ T9895] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input50 [ 301.679731][ T9898] dvmrp9: entered allmulticast mode [ 301.966152][ T9907] netlink: 156 bytes leftover after parsing attributes in process `syz.1.815'. [ 301.969589][ T9907] netlink: 156 bytes leftover after parsing attributes in process `syz.1.815'. [ 302.245252][ T9909] netlink: 4 bytes leftover after parsing attributes in process `syz.2.813'. [ 302.319578][ T9912] random: crng reseeded on system resumption [ 302.797623][ T9926] random: crng reseeded on system resumption [ 302.993610][ T6005] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 303.163574][ T6005] usb 5-1: Using ep0 maxpacket: 8 [ 303.170224][ T6005] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 303.173176][ T6005] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 303.176834][ T6005] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 303.180157][ T6005] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 303.183467][ T6005] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 303.188421][ T6005] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 303.191838][ T6005] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.152218][ T6005] usb 5-1: usb_control_msg returned -71 [ 304.154227][ T6005] usbtmc 5-1:16.0: can't read capabilities [ 304.162871][ T6005] usb 5-1: USB disconnect, device number 16 [ 304.729957][ T9957] trusted_key: encrypted_key: key user:syz not found [ 304.733947][ T9958] netlink: 24 bytes leftover after parsing attributes in process `syz.2.825'. [ 304.812293][ T9957] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input51 [ 305.221249][ T9965] random: crng reseeded on system resumption [ 305.926381][ T9973] netlink: 'syz.2.830': attribute type 29 has an invalid length. [ 305.930370][ T9973] netlink: 'syz.2.830': attribute type 29 has an invalid length. [ 306.681702][ T9984] netlink: 4 bytes leftover after parsing attributes in process `syz.1.831'. [ 306.852781][ T9985] random: crng reseeded on system resumption [ 307.043693][ T9990] netlink: 'syz.2.834': attribute type 29 has an invalid length. [ 307.047569][ T9990] netlink: 'syz.2.834': attribute type 29 has an invalid length. [ 307.192039][ T9988] netlink: 3020 bytes leftover after parsing attributes in process `syz.3.832'. [ 307.578318][T10000] random: crng reseeded on system resumption [ 307.828503][T10012] trusted_key: encrypted_key: key user:syz not found [ 307.858737][T10012] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input52 [ 307.994101][T10018] trusted_key: encrypted_key: key user:syz not found [ 308.003913][T10018] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input53 [ 308.098430][T10020] netlink: 24 bytes leftover after parsing attributes in process `syz.0.838'. [ 308.803692][ T6002] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 308.963574][ T6002] usb 7-1: Using ep0 maxpacket: 8 [ 308.966666][ T6002] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 308.969474][ T6002] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 308.972763][ T6002] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 308.975992][ T6002] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 308.979608][ T6002] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 308.989776][ T6002] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 308.992760][ T6002] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.258792][ T6002] usb 7-1: GET_CAPABILITIES returned 0 [ 309.260640][ T6002] usbtmc 7-1:16.0: can't read capabilities [ 309.454405][T10038] random: crng reseeded on system resumption [ 309.700243][T10049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.845'. [ 310.446973][T10056] random: crng reseeded on system resumption [ 310.603114][ T29] usb 7-1: USB disconnect, device number 14 [ 310.812784][T10061] netlink: 4 bytes leftover after parsing attributes in process `syz.1.850'. [ 310.926943][T10066] random: crng reseeded on system resumption [ 311.167639][T10069] trusted_key: encrypted_key: key user:syz not found [ 311.181733][T10069] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input54 [ 311.269959][T10075] trusted_key: encrypted_key: key user:syz not found [ 311.275973][T10075] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input55 [ 311.443414][T10081] random: crng reseeded on system resumption [ 312.145868][T10089] trusted_key: encrypted_key: key user:syz not found [ 312.153008][T10089] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input56 [ 312.185514][T10090] random: crng reseeded on system resumption [ 312.403653][T10096] mkiss: ax0: crc mode is auto. [ 312.606318][T10103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.859'. [ 312.770193][T10105] random: crng reseeded on system resumption [ 313.300545][T10117] random: crng reseeded on system resumption [ 313.396599][T10119] netlink: 4 bytes leftover after parsing attributes in process `syz.0.867'. [ 313.443570][ T10] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 313.593639][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 313.612181][ T10] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 313.615504][ T10] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 313.618693][ T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 313.622138][ T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 313.625539][ T10] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 313.629872][ T10] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 313.632883][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.868930][T10131] trusted_key: encrypted_key: key user:syz not found [ 313.872625][T10131] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input57 [ 313.919007][ T10] usb 7-1: GET_CAPABILITIES returned 0 [ 313.920805][ T10] usbtmc 7-1:16.0: can't read capabilities [ 314.393648][ T6002] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 314.543640][ T6002] usb 6-1: Using ep0 maxpacket: 8 [ 314.547344][ T6002] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 314.550649][ T6002] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 314.554621][ T6002] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 314.558521][ T6002] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 314.562429][ T6002] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 314.567973][ T6002] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 314.571605][ T6002] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.678824][ T10] usb 7-1: USB disconnect, device number 15 [ 315.047909][ T6002] usb 6-1: usb_control_msg returned -71 [ 315.050253][ T6002] usbtmc 6-1:16.0: can't read capabilities [ 315.059671][ T6002] usb 6-1: USB disconnect, device number 15 [ 315.334935][T10150] random: crng reseeded on system resumption [ 315.647958][T10157] random: crng reseeded on system resumption [ 315.664693][T10158] trusted_key: encrypted_key: key user:syz not found [ 315.673661][T10158] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input58 [ 315.914535][T10168] random: crng reseeded on system resumption [ 315.925792][T10165] netlink: 4 bytes leftover after parsing attributes in process `syz.1.876'. [ 316.261186][T10177] trusted_key: encrypted_key: key user:syz not found [ 316.375010][T10177] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input59 [ 316.623920][T10185] mkiss: ax0: crc mode is auto. [ 316.645964][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.648028][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.767439][T10188] netlink: 24 bytes leftover after parsing attributes in process `syz.3.880'. [ 317.028387][T10195] random: crng reseeded on system resumption [ 317.163601][ T5982] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 317.323561][ T5982] usb 7-1: Using ep0 maxpacket: 8 [ 317.326542][ T5982] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 317.329370][ T5982] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 317.332473][ T5982] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 317.333586][ T57] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 317.335743][ T5982] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 317.341158][ T5982] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 317.346226][ T5982] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 317.349259][ T5982] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.484804][ T57] usb 5-1: Using ep0 maxpacket: 8 [ 317.489035][ T57] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 317.491684][ T57] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 317.495016][ T57] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 317.498076][ T57] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 317.501165][ T57] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 317.505260][ T57] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 317.508083][ T57] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.640193][T10209] netlink: 12 bytes leftover after parsing attributes in process `syz.3.887'. [ 317.715071][ T57] usb 5-1: GET_CAPABILITIES returned 0 [ 317.717140][ T57] usbtmc 5-1:16.0: can't read capabilities [ 317.865479][ T5982] usb 7-1: usb_control_msg returned -71 [ 317.867859][ T5982] usbtmc 7-1:16.0: can't read capabilities [ 317.873997][ T5982] usb 7-1: USB disconnect, device number 16 [ 318.103315][ T10] usb 5-1: USB disconnect, device number 17 [ 318.812754][T10223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.889'. [ 319.409866][T10226] trusted_key: encrypted_key: key user:syz not found [ 319.416152][T10226] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input60 [ 319.577687][T10229] mkiss: ax0: crc mode is auto. [ 320.330155][T10241] random: crng reseeded on system resumption [ 320.722265][T10254] netlink: 24 bytes leftover after parsing attributes in process `syz.3.895'. [ 320.873587][ T57] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 320.993609][ T10] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 321.053619][ T57] usb 6-1: Using ep0 maxpacket: 8 [ 321.063470][ T57] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 321.069758][ T57] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 321.073680][ T57] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 321.087210][ T57] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 321.093836][ T57] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 321.106477][ T57] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 321.113944][ T57] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.143643][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 321.148673][ T10] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 321.151852][ T10] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 321.155741][ T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 321.158950][ T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 321.162563][ T10] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 321.167197][ T10] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 321.170168][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.331336][ T57] usb 6-1: GET_CAPABILITIES returned 0 [ 321.333222][ T57] usbtmc 6-1:16.0: can't read capabilities [ 321.783753][T10272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.900'. [ 321.886543][T10275] trusted_key: encrypted_key: key user:syz not found [ 321.892514][T10275] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input61 [ 322.065039][ T10] usb 7-1: usb_control_msg returned -71 [ 322.067297][ T10] usbtmc 7-1:16.0: can't read capabilities [ 322.077191][ T10] usb 7-1: USB disconnect, device number 17 [ 322.230794][ T6005] usb 6-1: USB disconnect, device number 16 [ 322.649369][T10284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.904'. [ 322.667639][T10287] netlink: 12 bytes leftover after parsing attributes in process `syz.0.903'. [ 322.837310][T10295] random: crng reseeded on system resumption [ 322.993612][ T6005] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 323.165204][ T6005] usb 7-1: Using ep0 maxpacket: 8 [ 323.170211][ T6005] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 323.173182][ T6005] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 323.176816][ T6005] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 323.180515][ T6005] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 323.184140][ T6005] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 323.188628][ T6005] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 323.191831][ T6005] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.813087][ T6005] usb 7-1: usb_control_msg returned -71 [ 323.815111][ T6005] usbtmc 7-1:16.0: can't read capabilities [ 323.819949][ T6005] usb 7-1: USB disconnect, device number 18 [ 324.571486][T10314] netlink: 24 bytes leftover after parsing attributes in process `syz.2.909'. [ 325.091601][T10317] trusted_key: encrypted_key: key user:syz not found [ 325.098575][T10317] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input62 [ 325.563628][ T5982] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 325.723571][ T5982] usb 7-1: Using ep0 maxpacket: 8 [ 325.727540][ T5982] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 325.730205][ T5982] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 325.733588][ T5982] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 325.736836][ T5982] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 325.740015][ T5982] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 325.744497][ T5982] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 325.747431][ T5982] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.863577][ T57] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 325.986697][T10336] random: crng reseeded on system resumption [ 326.023778][ T57] usb 5-1: Using ep0 maxpacket: 8 [ 326.027266][ T57] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 326.030196][ T57] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 326.033606][ T57] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 326.036907][ T57] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 326.040287][ T57] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 326.044800][ T57] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 326.047957][ T57] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.296395][ T57] usb 5-1: GET_CAPABILITIES returned 0 [ 326.298449][ T57] usbtmc 5-1:16.0: can't read capabilities [ 326.642354][ T5982] usb 7-1: usb_control_msg returned -71 [ 326.649757][ T5982] usbtmc 7-1:16.0: can't read capabilities [ 326.667620][ T5982] usb 7-1: USB disconnect, device number 19 [ 326.849789][T10352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.917'. [ 326.977063][ T57] usb 5-1: USB disconnect, device number 18 [ 327.527007][T10360] random: crng reseeded on system resumption [ 327.719680][T10367] trusted_key: encrypted_key: key user:syz not found [ 327.746814][T10367] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input63 [ 327.795790][T10371] netlink: 12 bytes leftover after parsing attributes in process `syz.1.922'. [ 328.595328][T10382] netlink: 24 bytes leftover after parsing attributes in process `syz.0.924'. [ 329.181048][T10385] random: crng reseeded on system resumption [ 329.743574][ T5983] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 329.903618][ T5983] usb 7-1: Using ep0 maxpacket: 8 [ 329.907112][ T5983] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 329.909826][ T5983] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 329.913196][ T5983] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 329.916478][ T5983] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 329.919719][ T5983] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 329.924048][ T5983] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 329.926985][ T5983] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.389797][T10404] netlink: 3048 bytes leftover after parsing attributes in process `syz.3.928'. [ 330.583648][ T6002] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 330.682539][ T5983] usb 7-1: usb_control_msg returned -71 [ 330.684495][ T5983] usbtmc 7-1:16.0: can't read capabilities [ 330.694011][ T5983] usb 7-1: USB disconnect, device number 20 [ 330.733433][T10412] random: crng reseeded on system resumption [ 330.743627][ T6002] usb 5-1: Using ep0 maxpacket: 8 [ 330.747554][ T6002] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 330.751135][ T6002] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 330.755792][ T6002] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 330.759715][ T6002] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 330.764097][ T6002] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 330.769639][ T6002] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 330.773479][ T6002] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.981911][ T6002] usb 5-1: GET_CAPABILITIES returned 0 [ 330.983839][ T6002] usbtmc 5-1:16.0: can't read capabilities [ 331.378268][T10429] trusted_key: encrypted_key: key user:syz not found [ 331.385303][T10429] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input64 [ 331.705930][T10435] binder: BINDER_SET_CONTEXT_MGR already set [ 331.707970][T10435] binder: 10427:10435 ioctl 4018620d 80000040 returned -16 [ 331.722089][T10435] netlink: 'syz.1.933': attribute type 4 has an invalid length. [ 331.724745][T10435] netlink: 152 bytes leftover after parsing attributes in process `syz.1.933'. [ 331.837558][T10436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.934'. [ 332.011811][ T6002] usb 5-1: USB disconnect, device number 19 [ 332.298316][T10441] trusted_key: encrypted_key: key user:syz not found [ 332.310787][T10441] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input65 [ 332.716038][T10442] netlink: 4 bytes leftover after parsing attributes in process `syz.1.935'. [ 332.795176][T10450] netlink: 'syz.2.937': attribute type 29 has an invalid length. [ 332.818347][T10450] netlink: 'syz.2.937': attribute type 29 has an invalid length. [ 332.841124][T10453] trusted_key: encrypted_key: key user:syz not found [ 332.845224][T10453] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input66 [ 333.263158][T10464] netlink: 3048 bytes leftover after parsing attributes in process `syz.3.939'. [ 333.556095][T10471] netlink: 12 bytes leftover after parsing attributes in process `syz.1.940'. [ 333.782217][T10478] trusted_key: encrypted_key: key user:syz not found [ 333.788226][T10478] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input67 [ 334.003225][T10483] random: crng reseeded on system resumption [ 334.424709][T10496] netlink: 24 bytes leftover after parsing attributes in process `syz.3.945'. [ 334.703751][ T10] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 334.873788][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 334.880956][ T10] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 334.883835][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 334.887158][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 334.890476][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 334.893905][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 334.898209][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 334.901302][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.303581][ T5982] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 335.473655][ T5982] usb 7-1: Using ep0 maxpacket: 8 [ 335.477398][ T5982] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 335.480265][ T5982] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 335.483891][ T5982] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 335.487316][ T5982] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 335.490491][ T5982] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 335.494755][ T5982] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 335.497711][ T5982] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.704671][ T5982] usb 7-1: GET_CAPABILITIES returned 0 [ 335.706563][ T5982] usbtmc 7-1:16.0: can't read capabilities [ 336.212444][ T6005] usb 7-1: USB disconnect, device number 21 [ 336.237871][ T10] usb 5-1: usb_control_msg returned -71 [ 336.240348][ T10] usbtmc 5-1:16.0: can't read capabilities [ 336.249703][ T10] usb 5-1: USB disconnect, device number 20 [ 337.004508][T10530] netlink: 12 bytes leftover after parsing attributes in process `syz.1.958'. [ 337.158276][T10540] netlink: 3048 bytes leftover after parsing attributes in process `syz.0.951'. [ 337.162958][T10539] trusted_key: encrypted_key: key user:syz not found [ 337.172821][T10539] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input68 [ 337.202739][ T6005] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 337.373808][ T6005] usb 7-1: Using ep0 maxpacket: 8 [ 337.380770][ T6005] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 337.385363][ T6005] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 337.393284][ T6005] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 337.401371][ T6005] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 337.405037][ T6005] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 337.411740][ T6005] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 337.415552][ T6005] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.702214][ T6005] usb 7-1: GET_CAPABILITIES returned 0 [ 337.713660][ T6005] usbtmc 7-1:16.0: can't read capabilities [ 337.946550][T10550] trusted_key: encrypted_key: key user:syz not found [ 337.948963][T10551] random: crng reseeded on system resumption [ 337.952360][T10550] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input69 [ 338.366301][T10561] random: crng reseeded on system resumption [ 338.686120][ T65] usb 7-1: USB disconnect, device number 22 [ 338.719336][T10565] netlink: 3016 bytes leftover after parsing attributes in process `syz.3.954'. [ 339.492283][T10581] netlink: 24 bytes leftover after parsing attributes in process `syz.2.967'. [ 340.383630][ T5983] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 340.451469][T10602] random: crng reseeded on system resumption [ 340.524597][T10599] netlink: 3048 bytes leftover after parsing attributes in process `syz.1.963'. [ 340.543559][ T5983] usb 5-1: Using ep0 maxpacket: 8 [ 340.550750][ T5983] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 340.553734][ T5983] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 340.557003][ T5983] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 340.560408][ T5983] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 340.563671][ T5983] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 340.570560][ T5983] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 340.573589][ T5983] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.791293][ T5983] usb 5-1: GET_CAPABILITIES returned 0 [ 340.793105][ T5983] usbtmc 5-1:16.0: can't read capabilities [ 341.522701][ T57] usb 5-1: USB disconnect, device number 21 [ 341.813342][T10628] binder: BINDER_SET_CONTEXT_MGR already set [ 341.816234][T10628] binder: 10617:10628 ioctl 4018620d 80000040 returned -16 [ 341.847408][T10628] netlink: 'syz.3.970': attribute type 4 has an invalid length. [ 341.849986][T10628] netlink: 152 bytes leftover after parsing attributes in process `syz.3.970'. [ 341.893478][T10627] netlink: 4 bytes leftover after parsing attributes in process `syz.2.969'. [ 342.067872][T10626] netlink: 3048 bytes leftover after parsing attributes in process `syz.1.977'. [ 342.499371][T10638] netlink: 12 bytes leftover after parsing attributes in process `syz.0.971'. [ 342.786834][T10654] netlink: 24 bytes leftover after parsing attributes in process `syz.1.975'. [ 342.792780][T10656] random: crng reseeded on system resumption [ 343.776742][T10669] netlink: 3048 bytes leftover after parsing attributes in process `syz.1.981'. [ 344.087188][T10676] trusted_key: encrypted_key: key user:syz not found [ 344.095807][T10676] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input70 [ 344.623628][ T10] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 344.793828][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 344.801666][ T10] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 344.808501][ T10] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 344.816048][ T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 344.823357][ T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 344.831172][ T10] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 344.836047][ T10] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 344.839253][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.076160][ T10] usb 7-1: GET_CAPABILITIES returned 0 [ 345.082241][ T10] usbtmc 7-1:16.0: can't read capabilities [ 345.213033][T10693] random: crng reseeded on system resumption [ 345.538160][T10703] netlink: 24 bytes leftover after parsing attributes in process `syz.0.989'. [ 345.688906][ T10] usb 7-1: USB disconnect, device number 23 [ 346.492789][T10718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.991'. [ 347.353178][T10714] netlink: 3048 bytes leftover after parsing attributes in process `syz.3.992'. [ 347.417854][T10726] binder: BINDER_SET_CONTEXT_MGR already set [ 347.420579][T10726] binder: 10721:10726 ioctl 4018620d 80000040 returned -16 [ 347.439085][T10736] random: crng reseeded on system resumption [ 347.513006][T10726] netlink: 'syz.0.1002': attribute type 4 has an invalid length. [ 347.520480][T10726] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1002'. [ 348.353620][T10747] trusted_key: encrypted_key: key user:syz not found [ 348.365797][T10747] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input71 [ 348.490856][T10752] binder: BINDER_SET_CONTEXT_MGR already set [ 348.493038][T10752] binder: 10739:10752 ioctl 4018620d 80000040 returned -16 [ 348.559480][T10752] netlink: 'syz.3.997': attribute type 4 has an invalid length. [ 348.562035][T10752] netlink: 152 bytes leftover after parsing attributes in process `syz.3.997'. [ 348.603619][ T5982] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 348.773587][ T5982] usb 7-1: Using ep0 maxpacket: 8 [ 348.777876][ T5982] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 348.781333][ T5982] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 348.784683][ T5982] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 348.788765][ T5982] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 348.793099][ T5982] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 348.799048][ T5982] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 348.802876][ T5982] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.036276][ T5982] usb 7-1: GET_CAPABILITIES returned 0 [ 349.079089][ T5982] usbtmc 7-1:16.0: can't read capabilities [ 349.158061][T10765] random: crng reseeded on system resumption [ 349.580127][T10779] trusted_key: encrypted_key: key user:syz not found [ 349.587344][T10779] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input72 [ 349.607374][ T6005] usb 7-1: USB disconnect, device number 24 [ 350.063584][ T65] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 350.223655][ T65] usb 6-1: Using ep0 maxpacket: 8 [ 350.227766][ T65] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 350.231244][ T65] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 350.235869][ T65] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 350.239899][ T65] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 350.246228][ T65] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 350.253393][ T65] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 350.257146][ T65] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.359454][T10794] mkiss: ax0: crc mode is auto. [ 350.492153][ T65] usb 6-1: GET_CAPABILITIES returned 0 [ 350.495073][ T65] usbtmc 6-1:16.0: can't read capabilities [ 350.886873][T10806] trusted_key: encrypted_key: key user:syz not found [ 350.900599][T10806] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input73 [ 351.169115][ T6005] usb 6-1: USB disconnect, device number 17 [ 352.043049][T10824] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1013'. [ 352.776131][T10835] trusted_key: encrypted_key: key user:syz not found [ 352.797906][T10835] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input74 [ 353.660197][T10854] netlink: 3048 bytes leftover after parsing attributes in process `syz.1.1020'. [ 354.058137][T10862] random: crng reseeded on system resumption [ 354.681579][T10870] mkiss: ax0: crc mode is auto. [ 354.925768][T10874] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1025'. [ 355.344163][T10884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1027'. [ 355.347447][T10884] netlink: 'syz.1.1027': attribute type 5 has an invalid length. [ 355.350133][T10884] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1027'. [ 355.370060][T10884] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 355.373625][T10884] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 355.376597][T10884] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 355.380253][T10884] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 355.383467][T10884] geneve2: entered promiscuous mode [ 355.385715][T10884] geneve2: entered allmulticast mode [ 356.056659][T10901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1029'. [ 356.516417][T10908] netlink: 3048 bytes leftover after parsing attributes in process `syz.3.1031'. [ 356.533125][T10913] random: crng reseeded on system resumption [ 356.634525][T10917] mkiss: ax0: crc mode is auto. [ 357.373274][T10931] trusted_key: encrypted_key: key user:syz not found [ 357.382719][T10931] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input75 [ 357.645454][ T40] audit: type=1326 audit(1747555753.141:3966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10935 comm="syz.0.1039" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 357.659620][ T40] audit: type=1326 audit(1747555753.141:3967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10935 comm="syz.0.1039" exe="/syz-executor" sig=0 arch=40000003 syscall=347 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 357.685131][ T40] audit: type=1326 audit(1747555753.141:3968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10935 comm="syz.0.1039" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 357.692426][ T40] audit: type=1326 audit(1747555753.141:3969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10935 comm="syz.0.1039" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 357.699652][ T40] audit: type=1326 audit(1747555753.151:3970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10935 comm="syz.0.1039" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 357.706710][ T40] audit: type=1326 audit(1747555753.151:3971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10935 comm="syz.0.1039" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 357.714132][ T40] audit: type=1326 audit(1747555753.151:3972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10935 comm="syz.0.1039" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 357.721258][ T40] audit: type=1326 audit(1747555753.151:3973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10935 comm="syz.0.1039" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 357.728435][ T40] audit: type=1326 audit(1747555753.151:3974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10935 comm="syz.0.1039" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 357.736662][ T40] audit: type=1326 audit(1747555753.151:3975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10935 comm="syz.0.1039" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 357.750314][T10939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1040'. [ 358.116092][T10947] random: crng reseeded on system resumption [ 358.515685][T10954] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1042'. [ 358.684013][T10956] mkiss: ax0: crc mode is auto. [ 359.018771][T10969] trusted_key: encrypted_key: key user:syz not found [ 359.028816][T10969] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input76 [ 359.365328][T10983] trusted_key: encrypted_key: key user:syz not found [ 359.367289][T10983] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input77 [ 359.374509][T10971] netlink: 3048 bytes leftover after parsing attributes in process `syz.3.1045'. [ 359.558195][T10989] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1047'. [ 359.900565][T10990] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1050'. [ 360.321258][T10998] mkiss: ax0: crc mode is auto. [ 360.462096][T11006] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 360.464325][T11006] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 360.467068][T11006] vhci_hcd vhci_hcd.0: Device attached [ 360.663642][ T10] vhci_hcd: vhci_device speed not set [ 360.723669][ T10] usb 41-1: new full-speed USB device number 3 using vhci_hcd [ 360.729550][T11007] vhci_hcd: connection closed [ 360.729725][ T63] vhci_hcd: stop threads [ 360.732749][ T63] vhci_hcd: release socket [ 360.734361][ T63] vhci_hcd: disconnect device [ 361.261948][T11017] binder: BINDER_SET_CONTEXT_MGR already set [ 361.264291][T11017] binder: 11012:11017 ioctl 4018620d 80000040 returned -16 [ 361.278135][T11017] netlink: 'syz.3.1055': attribute type 4 has an invalid length. [ 361.280698][T11017] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1055'. [ 361.285531][T11021] trusted_key: encrypted_key: key user:syz not found [ 361.307902][T11022] random: crng reseeded on system resumption [ 361.319899][T11023] trusted_key: encrypted_key: key user:syz not found [ 361.657107][T11032] netlink: 3048 bytes leftover after parsing attributes in process `syz.0.1059'. [ 362.360623][T11044] mkiss: ax0: crc mode is auto. [ 362.642128][T11055] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1064'. [ 362.950883][T11054] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1065'. [ 363.183662][ T5982] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 363.343603][ T5982] usb 5-1: Using ep0 maxpacket: 8 [ 363.346516][ T5982] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 363.349796][ T5982] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 363.353414][ T5982] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 363.357001][ T5982] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 363.360319][ T5982] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 363.364901][ T5982] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 363.367992][ T5982] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.423569][ T65] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 363.573612][ T65] usb 6-1: Using ep0 maxpacket: 8 [ 363.576813][ T65] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 363.584417][ T65] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 363.584546][ T5982] usb 5-1: GET_CAPABILITIES returned 0 [ 363.587637][ T65] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 363.587654][ T65] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 363.587666][ T65] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 363.589501][ T5982] usbtmc 5-1:16.0: can't read capabilities [ 363.593112][ T65] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 363.608451][ T65] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.832629][ T65] usb 6-1: GET_CAPABILITIES returned 0 [ 363.834618][ T65] usbtmc 6-1:16.0: can't read capabilities [ 364.438611][T11078] trusted_key: encrypted_key: key user:syz not found [ 364.480640][T11078] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input78 [ 364.483419][ T5983] usb 5-1: USB disconnect, device number 22 [ 364.803530][ T34] usb 6-1: USB disconnect, device number 18 [ 364.951813][T11082] random: crng reseeded on system resumption [ 365.357138][T11092] mkiss: ax0: crc mode is auto. [ 365.473586][ T5982] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 365.562233][T11093] netlink: 3028 bytes leftover after parsing attributes in process `syz.0.1072'. [ 365.595270][T11103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1075'. [ 365.623598][ T5982] usb 7-1: Using ep0 maxpacket: 8 [ 365.627300][ T5982] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 365.629968][ T5982] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 365.633083][ T5982] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 365.638287][ T5982] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 365.641484][ T5982] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 365.653645][ T5982] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 365.663876][ T5982] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.755556][ T40] kauditd_printk_skb: 31 callbacks suppressed [ 365.755611][ T40] audit: type=1326 audit(1747555761.251:4007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11105 comm="syz.1.1076" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04579 code=0x7ffc0000 [ 365.765881][ T40] audit: type=1326 audit(1747555761.251:4008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11105 comm="syz.1.1076" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04579 code=0x7ffc0000 [ 365.772857][ T40] audit: type=1326 audit(1747555761.251:4009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11105 comm="syz.1.1076" exe="/syz-executor" sig=0 arch=40000003 syscall=347 compat=1 ip=0xf7f04579 code=0x7ffc0000 [ 365.781645][ T40] audit: type=1326 audit(1747555761.251:4010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11105 comm="syz.1.1076" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04579 code=0x7ffc0000 [ 365.789122][ T40] audit: type=1326 audit(1747555761.251:4011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11105 comm="syz.1.1076" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04579 code=0x7ffc0000 [ 365.798005][ T40] audit: type=1326 audit(1747555761.251:4012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11105 comm="syz.1.1076" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f04579 code=0x7ffc0000 [ 365.806579][ T40] audit: type=1326 audit(1747555761.251:4013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11105 comm="syz.1.1076" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04579 code=0x7ffc0000 [ 365.812842][ T40] audit: type=1326 audit(1747555761.251:4014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11105 comm="syz.1.1076" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04579 code=0x7ffc0000 [ 365.819359][ T40] audit: type=1326 audit(1747555761.251:4015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11105 comm="syz.1.1076" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f04579 code=0x7ffc0000 [ 365.827033][ T40] audit: type=1326 audit(1747555761.251:4016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11105 comm="syz.1.1076" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04579 code=0x7ffc0000 [ 365.843627][ T10] vhci_hcd: vhci_device speed not set [ 365.916782][ T5982] usb 7-1: GET_CAPABILITIES returned 0 [ 365.918651][ T5982] usbtmc 7-1:16.0: can't read capabilities [ 366.262175][T11116] random: crng reseeded on system resumption [ 366.727051][T11127] trusted_key: encrypted_key: key user:syz not found [ 366.731641][T11127] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input79 [ 366.735329][ T5983] usb 7-1: USB disconnect, device number 25 [ 367.430225][ T5983] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 367.643828][T11150] random: crng reseeded on system resumption [ 368.057900][T11167] trusted_key: encrypted_key: key user:syz not found [ 368.072371][T11167] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input80 [ 368.270419][T11173] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1088'. [ 368.375724][T11177] trusted_key: encrypted_key: key user:syz not found [ 368.628548][T11178] netlink: 3028 bytes leftover after parsing attributes in process `syz.3.1086'. [ 377.899655][T11205] trusted_key: encrypted_key: key user:syz not found [ 377.913350][T11205] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input81 [ 378.052361][T11213] trusted_key: encrypted_key: key user:syz not found [ 378.055943][T11213] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input82 [ 378.076221][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.078932][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.587643][T11221] random: crng reseeded on system resumption [ 378.615911][ T5983] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 378.896746][T11231] trusted_key: encrypted_key: key user:syz not found [ 378.900287][T11231] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input83 [ 379.025968][T11242] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1096'. [ 379.300278][T11249] trusted_key: encrypted_key: key user:syz not found [ 379.484394][T11256] random: crng reseeded on system resumption [ 379.595250][T11254] netlink: 3028 bytes leftover after parsing attributes in process `syz.1.1098'. [ 379.818154][T11267] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1102'. [ 386.629211][T11297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1105'. [ 386.819790][T11293] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1106'. [ 386.997689][T11299] binder: BINDER_SET_CONTEXT_MGR already set [ 386.999937][T11299] binder: 11282:11299 ioctl 4018620d 80000040 returned -16 [ 387.010189][T11299] netlink: 'syz.0.1103': attribute type 4 has an invalid length. [ 387.013148][T11299] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1103'. [ 387.427212][T11305] trusted_key: encrypted_key: key user:syz not found [ 387.430254][T11305] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input84 [ 387.536339][T11310] trusted_key: encrypted_key: key user:syz not found [ 387.539363][T11310] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input85 [ 387.919778][T11316] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1110'. [ 388.393272][T11327] binder: BINDER_SET_CONTEXT_MGR already set [ 388.398761][T11327] binder: 11319:11327 ioctl 4018620d 80000040 returned -16 [ 388.438040][T11327] netlink: 'syz.0.1112': attribute type 4 has an invalid length. [ 388.441049][T11327] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1112'. [ 389.275955][T11337] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1115'. [ 389.539749][T11344] trusted_key: encrypted_key: key user:syz not found [ 389.547689][T11344] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input86 [ 389.989530][T11354] netlink: 3028 bytes leftover after parsing attributes in process `syz.2.1118'. [ 390.614193][T11363] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1121'. [ 390.756421][T11371] trusted_key: encrypted_key: key user:syz not found [ 390.990136][T11375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1131'. [ 391.174402][T11379] binder: BINDER_SET_CONTEXT_MGR already set [ 391.183658][T11379] binder: 11372:11379 ioctl 4018620d 80000040 returned -16 [ 391.200527][T11379] netlink: 'syz.3.1123': attribute type 4 has an invalid length. [ 391.203649][T11379] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1123'. [ 392.489567][T11405] __nla_validate_parse: 1 callbacks suppressed [ 392.489579][T11405] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1139'. [ 392.668347][T11409] netlink: 3028 bytes leftover after parsing attributes in process `syz.1.1129'. [ 392.854420][T11417] random: crng reseeded on system resumption [ 393.115772][T11420] random: crng reseeded on system resumption [ 393.638838][T11431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1135'. [ 393.994891][T11433] binder: BINDER_SET_CONTEXT_MGR already set [ 393.997434][T11433] binder: 11425:11433 ioctl 4018620d 80000040 returned -16 [ 394.014138][T11433] netlink: 'syz.3.1136': attribute type 4 has an invalid length. [ 394.017817][T11433] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1136'. [ 394.396742][T11438] trusted_key: encrypted_key: key user:syz not found [ 394.405092][T11438] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input87 [ 395.141537][T11452] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.1140'. [ 396.231383][T11473] random: crng reseeded on system resumption [ 396.933819][ T65] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 397.083621][ T65] usb 7-1: Using ep0 maxpacket: 8 [ 397.088003][ T65] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 397.091584][ T65] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 397.095873][ T65] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 397.100076][ T65] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 397.114187][ T65] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 397.121959][ T65] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 397.125178][ T65] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.940025][T11503] trusted_key: encrypted_key: key user:syz not found [ 397.950067][T11503] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input88 [ 398.449269][ T65] usb 7-1: usb_control_msg returned -71 [ 398.453283][ T65] usbtmc 7-1:16.0: can't read capabilities [ 398.462139][ T65] usb 7-1: USB disconnect, device number 26 [ 398.505838][T11508] random: crng reseeded on system resumption [ 399.214140][T11517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1154'. [ 399.225825][T11517] mkiss: ax0: crc mode is auto. [ 400.125741][T11531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1159'. [ 400.276251][T11539] trusted_key: encrypted_key: key user:syz not found [ 400.286204][T11539] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input89 [ 400.489437][T11544] random: crng reseeded on system resumption [ 400.776390][T11551] trusted_key: encrypted_key: key user:syz not found [ 400.781633][T11551] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input90 [ 400.937168][T11555] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1163'. [ 401.648267][T11565] mkiss: ax0: crc mode is auto. [ 401.954364][T11570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1168'. [ 402.362079][T11577] trusted_key: encrypted_key: key user:syz not found [ 402.376254][T11577] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input91 [ 402.738138][T11584] random: crng reseeded on system resumption [ 403.260426][T11594] trusted_key: encrypted_key: key user:syz not found [ 403.270495][T11594] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input92 [ 403.392231][T11598] trusted_key: encrypted_key: key user:syz not found [ 403.572031][T11603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1178'. [ 403.582853][T11603] mkiss: ax0: crc mode is auto. [ 404.109320][T11617] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1180'. [ 404.189174][T11616] random: crng reseeded on system resumption [ 404.502611][T11625] trusted_key: encrypted_key: key user:syz not found [ 404.515027][T11625] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input93 [ 404.638210][T11629] trusted_key: encrypted_key: key user:syz not found [ 404.641706][T11629] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input94 [ 404.796899][T11636] trusted_key: encrypted_key: key user:syz not found [ 404.864176][T11639] trusted_key: encrypted_key: key user:syz not found [ 404.870709][T11639] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input95 [ 405.140586][T11642] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1188'. [ 405.656877][T11652] random: crng reseeded on system resumption [ 406.226285][T11659] trusted_key: encrypted_key: key user:syz not found [ 406.231795][T11659] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input96 [ 406.364044][T11663] trusted_key: encrypted_key: key user:syz not found [ 406.769850][T11669] trusted_key: encrypted_key: key user:syz not found [ 406.779346][T11669] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input97 [ 406.864578][T11672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1195'. [ 407.138765][T11675] trusted_key: encrypted_key: key user:syz not found [ 407.145130][T11675] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input98 [ 407.348331][T11678] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1198'. [ 407.549265][T11683] trusted_key: encrypted_key: key user:syz not found [ 407.552146][T11683] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input99 [ 408.341325][T11700] trusted_key: encrypted_key: key user:syz not found [ 408.680595][T11705] trusted_key: encrypted_key: key user:syz not found [ 408.690260][T11705] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input100 [ 409.277823][T11713] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1208'. [ 410.180841][T11724] trusted_key: encrypted_key: key user:syz not found [ 410.184049][T11724] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input101 [ 411.336617][T11743] trusted_key: encrypted_key: key user:syz not found [ 411.452915][T11744] trusted_key: encrypted_key: key user:syz not found [ 411.489344][T11744] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input102 [ 412.663305][T11762] binder: BINDER_SET_CONTEXT_MGR already set [ 412.665858][T11762] binder: 11759:11762 ioctl 4018620d 80000040 returned -16 [ 412.674678][T11762] netlink: 'syz.2.1219': attribute type 4 has an invalid length. [ 412.677713][T11762] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1219'. [ 412.829585][T11767] random: crng reseeded on system resumption [ 413.644243][T11780] trusted_key: encrypted_key: key user:syz not found [ 413.660571][T11780] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input103 [ 413.706965][T11782] trusted_key: encrypted_key: key user:syz not found [ 413.755198][T11782] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input104 [ 413.886732][T11791] trusted_key: encrypted_key: key user:syz not found [ 414.334986][T11797] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1228'. [ 414.346221][T11800] trusted_key: encrypted_key: key user:syz not found [ 414.350048][T11800] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input105 [ 415.323686][ T9] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 415.493610][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 415.560916][ T9] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 415.563851][ T9] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 415.566923][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 415.570020][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 415.573141][ T9] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 415.577303][ T9] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 415.580219][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.524734][ T9] usb 7-1: usb_control_msg returned -71 [ 416.526687][ T9] usbtmc 7-1:16.0: can't read capabilities [ 416.536301][ T9] usb 7-1: USB disconnect, device number 27 [ 416.830000][T11827] random: crng reseeded on system resumption [ 417.106039][T11836] trusted_key: encrypted_key: key user:syz not found [ 417.106777][T11833] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1238'. [ 417.122534][T11836] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input106 [ 417.296089][T11844] trusted_key: encrypted_key: key user:syz not found [ 417.306426][T11844] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input107 [ 418.392444][T11860] trusted_key: encrypted_key: key user:syz not found [ 418.402251][T11860] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input108 [ 418.439320][T11864] random: crng reseeded on system resumption [ 418.715011][T11870] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1247'. [ 418.899244][T11877] trusted_key: encrypted_key: key user:syz not found [ 418.910669][T11877] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input109 [ 419.770013][T11886] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1250'. [ 420.703772][T11893] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1252'. [ 420.992438][T11898] random: crng reseeded on system resumption [ 421.461495][T11905] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1256'. [ 421.480638][T11909] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1255'. [ 422.450011][T11925] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1260'. [ 422.785592][T11930] trusted_key: encrypted_key: key user:syz not found [ 422.799211][T11930] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input110 [ 423.031583][T11936] random: crng reseeded on system resumption [ 423.353318][T11942] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1264'. [ 423.596199][T11944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1265'. [ 423.869674][T11953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1267'. [ 424.243570][ T5982] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 424.393558][ T5982] usb 5-1: Using ep0 maxpacket: 8 [ 424.396695][ T5982] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 424.399435][ T5982] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 424.402674][ T5982] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 424.405917][ T5982] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 424.409128][ T5982] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 424.413407][ T5982] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 424.416446][ T5982] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.797745][T11965] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1270'. [ 424.871924][ T5982] usb 5-1: usb_control_msg returned -71 [ 424.876176][ T5982] usbtmc 5-1:16.0: can't read capabilities [ 424.891078][ T5982] usb 5-1: USB disconnect, device number 23 [ 425.253399][T11968] trusted_key: encrypted_key: key user:syz not found [ 425.265877][T11968] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input111 [ 425.570089][T11975] random: crng reseeded on system resumption [ 426.562624][T11992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1275'. [ 426.565860][T11992] netlink: 'syz.0.1275': attribute type 5 has an invalid length. [ 426.630507][T11992] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1275'. [ 426.720052][T11993] netlink: 3028 bytes leftover after parsing attributes in process `syz.1.1276'. [ 426.766115][T11992] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 426.773722][T11992] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 426.783709][T11992] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 426.846352][T11992] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 426.974616][T11992] geneve2: entered promiscuous mode [ 426.992480][T11992] geneve2: entered allmulticast mode [ 427.267490][T12009] trusted_key: encrypted_key: key user:syz not found [ 427.273066][T12009] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input112 [ 427.648641][T12013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1279'. [ 427.664676][T12019] trusted_key: encrypted_key: key user:syz not found [ 427.670311][T12019] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input113 [ 427.781434][T12021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1280'. [ 427.784897][T12021] netlink: 'syz.1.1280': attribute type 5 has an invalid length. [ 427.787822][T12021] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1280'. [ 428.101909][T12029] random: crng reseeded on system resumption [ 428.316958][T12033] mkiss: ax0: crc mode is auto. [ 428.616274][T12044] trusted_key: encrypted_key: key user:syz not found [ 428.630174][T12044] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input114 [ 428.840690][T12050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1287'. [ 428.843958][T12050] netlink: 'syz.1.1287': attribute type 5 has an invalid length. [ 428.846666][T12050] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1287'. [ 429.170485][T12056] netlink: 3028 bytes leftover after parsing attributes in process `syz.3.1288'. [ 429.543669][T12064] trusted_key: encrypted_key: key user:syz not found [ 429.550208][T12064] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input115 [ 429.908673][T12072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1291'. [ 429.912601][T12072] netlink: 'syz.3.1291': attribute type 5 has an invalid length. [ 429.917316][T12072] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1291'. [ 429.934850][T12072] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 429.938566][T12072] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 429.942080][T12072] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 429.945340][T12072] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 429.948551][T12072] geneve2: entered promiscuous mode [ 429.950584][T12072] geneve2: entered allmulticast mode [ 430.259284][T12078] random: crng reseeded on system resumption [ 430.503050][T12082] mkiss: ax0: crc mode is auto. [ 430.654808][T12086] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1296'. [ 430.659159][T12086] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1296'. [ 430.966819][T12098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1295'. [ 430.969977][T12098] netlink: 'syz.3.1295': attribute type 5 has an invalid length. [ 430.972551][T12098] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1295'. [ 431.047087][T12100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1298'. [ 431.050116][T12100] netlink: 'syz.1.1298': attribute type 5 has an invalid length. [ 431.052903][T12100] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1298'. [ 431.697917][T12110] trusted_key: encrypted_key: key user:syz not found [ 431.699946][T12110] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input116 [ 431.759353][T12116] netlink: 3028 bytes leftover after parsing attributes in process `syz.2.1299'. [ 431.874091][T12119] trusted_key: encrypted_key: key user:syz not found [ 431.914184][T12119] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input117 [ 432.105110][T12124] random: crng reseeded on system resumption [ 432.746652][T12135] mkiss: ax0: crc mode is auto. [ 432.924970][T12146] trusted_key: encrypted_key: key user:syz not found [ 432.936969][T12146] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input118 [ 433.234313][T12151] netlink: 'syz.3.1307': attribute type 5 has an invalid length. [ 433.550597][T12158] trusted_key: encrypted_key: key user:syz not found [ 433.553846][T12158] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input119 [ 433.818865][T12163] netlink: 'syz.2.1310': attribute type 5 has an invalid length. [ 433.850520][T12163] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 433.853533][T12163] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 433.856636][T12163] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 433.860504][T12163] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 433.868710][T12163] geneve2: entered promiscuous mode [ 433.871213][T12163] geneve2: entered allmulticast mode [ 434.109038][T12171] trusted_key: encrypted_key: key user:syz not found [ 434.142854][T12171] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input120 [ 434.647887][T12181] __nla_validate_parse: 7 callbacks suppressed [ 434.647900][T12181] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1316'. [ 434.655991][T12181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1316'. [ 434.773749][T12188] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1315'. [ 435.142937][T12193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1318'. [ 435.146234][T12193] netlink: 'syz.1.1318': attribute type 5 has an invalid length. [ 435.149098][T12193] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1318'. [ 435.760886][T12206] trusted_key: encrypted_key: key user:syz not found [ 435.764536][T12206] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input121 [ 435.916350][T12210] trusted_key: encrypted_key: key user:syz not found [ 435.918850][T12210] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input122 [ 436.034585][T12214] random: crng reseeded on system resumption [ 436.087904][T12218] mkiss: ax0: crc mode is auto. [ 436.524803][T12229] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1328'. [ 437.704577][T12241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1331'. [ 437.710463][T12241] netlink: 'syz.0.1331': attribute type 5 has an invalid length. [ 437.714512][T12241] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1331'. [ 437.998369][T12245] trusted_key: encrypted_key: key user:syz not found [ 438.090934][T12249] mkiss: ax0: crc mode is auto. [ 438.253910][T12258] random: crng reseeded on system resumption [ 438.266131][ T5945] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 438.473615][ T5945] usb 6-1: Using ep0 maxpacket: 8 [ 438.477561][ T5945] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 438.480691][ T5945] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 438.484321][ T5945] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 438.489022][ T5945] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 438.493118][ T5945] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 438.499081][ T5945] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 438.503117][ T5945] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.014189][ T5945] usb 6-1: usb_control_msg returned -71 [ 439.017139][ T5945] usbtmc 6-1:16.0: can't read capabilities [ 439.025602][ T5945] usb 6-1: USB disconnect, device number 19 [ 439.433739][T12284] trusted_key: encrypted_key: key user:syz not found [ 439.525881][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.534900][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.581325][T12288] trusted_key: encrypted_key: key user:syz not found [ 439.892003][T12292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1344'. [ 439.898405][T12292] netlink: 'syz.1.1344': attribute type 5 has an invalid length. [ 439.901066][T12292] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1344'. [ 440.205550][T12296] trusted_key: encrypted_key: key user:syz not found [ 440.239304][T12296] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input123 [ 440.758924][T12307] xt_CONNSECMARK: invalid mode: 0 [ 440.953666][T12315] netlink: 3048 bytes leftover after parsing attributes in process `syz.2.1348'. [ 441.519717][T12324] trusted_key: encrypted_key: key user:syz not found [ 441.523200][T12324] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input124 [ 441.634162][T12330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1353'. [ 441.671856][T12332] fuseblk: Unknown parameter '0x00000000000000000x0000000000000007f' [ 441.800351][T12334] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1355'. [ 441.804047][T12334] netlink: 'syz.1.1355': attribute type 1 has an invalid length. [ 441.811222][T12334] warning: `syz.1.1355' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 441.813717][ T57] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 441.983616][ T57] usb 7-1: Using ep0 maxpacket: 8 [ 441.986991][ T57] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 441.990577][ T57] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 441.994824][ T57] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 441.998425][ T57] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 442.001602][ T57] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 442.006645][ T57] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 442.010671][ T57] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.103978][T12340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1357'. [ 442.107437][T12340] netlink: 'syz.1.1357': attribute type 5 has an invalid length. [ 442.110221][T12340] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1357'. [ 442.432596][T12347] trusted_key: encrypted_key: key user:syz not found [ 442.461689][ T57] usb 7-1: usb_control_msg returned -71 [ 442.466535][ T57] usbtmc 7-1:16.0: can't read capabilities [ 442.475390][ T57] usb 7-1: USB disconnect, device number 28 [ 442.811832][T12352] trusted_key: encrypted_key: key user:syz not found [ 442.819042][T12352] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input125 [ 442.972022][T12358] netlink: 3048 bytes leftover after parsing attributes in process `syz.0.1359'. [ 443.226535][T12364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1362'. [ 443.531932][T12373] x_tables: duplicate underflow at hook 1 [ 443.534732][ T40] kauditd_printk_skb: 32 callbacks suppressed [ 443.534747][ T40] audit: type=1326 audit(1747555839.031:4049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12372 comm="syz.0.1364" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 443.546538][ T40] audit: type=1326 audit(1747555839.031:4050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12372 comm="syz.0.1364" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 443.556382][ T40] audit: type=1326 audit(1747555839.031:4051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12372 comm="syz.0.1364" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 443.564697][ T40] audit: type=1326 audit(1747555839.031:4052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12372 comm="syz.0.1364" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 443.564736][ T40] audit: type=1326 audit(1747555839.031:4053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12372 comm="syz.0.1364" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 443.580772][ T40] audit: type=1326 audit(1747555839.031:4054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12372 comm="syz.0.1364" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 443.587816][ T40] audit: type=1326 audit(1747555839.031:4055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12372 comm="syz.0.1364" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 443.596050][ T40] audit: type=1326 audit(1747555839.031:4056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12372 comm="syz.0.1364" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 443.603575][ T40] audit: type=1326 audit(1747555839.031:4057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12372 comm="syz.0.1364" exe="/syz-executor" sig=0 arch=40000003 syscall=356 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 443.610672][ T40] audit: type=1326 audit(1747555839.031:4058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12372 comm="syz.0.1364" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 443.850610][T12383] trusted_key: encrypted_key: key user:syz not found [ 444.170070][T12388] trusted_key: encrypted_key: key user:syz not found [ 444.181212][T12389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1368'. [ 444.186964][T12389] netlink: 'syz.0.1368': attribute type 5 has an invalid length. [ 444.222947][T12388] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input126 [ 444.573572][ T5945] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 444.733758][ T5945] usb 6-1: Using ep0 maxpacket: 8 [ 444.750308][ T5945] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 444.753909][ T5945] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 444.757358][ T5945] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 444.760850][ T5945] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 444.764921][ T5945] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 444.769512][ T5945] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 444.773847][ T5945] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.515464][ T5945] usb 6-1: usb_control_msg returned -71 [ 445.517708][ T5945] usbtmc 6-1:16.0: can't read capabilities [ 445.524967][ T5945] usb 6-1: USB disconnect, device number 20 [ 445.633206][T12425] trusted_key: encrypted_key: key user:syz not found [ 445.836423][T12427] trusted_key: encrypted_key: key user:syz not found [ 445.842742][T12427] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input127 [ 445.872457][T12429] __nla_validate_parse: 3 callbacks suppressed [ 445.872468][T12429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1380'. [ 446.287728][T12444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1383'. [ 446.290757][T12444] netlink: 'syz.0.1383': attribute type 5 has an invalid length. [ 446.297419][T12444] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1383'. [ 446.378605][T12445] netlink: 3052 bytes leftover after parsing attributes in process `syz.1.1384'. [ 446.983399][T12458] trusted_key: encrypted_key: key user:syz not found [ 447.076602][T12463] trusted_key: encrypted_key: key user:syz not found [ 447.181057][T12463] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input128 [ 447.198749][T12467] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1391'. [ 447.573591][ T6005] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 447.792032][ T6005] usb 5-1: Using ep0 maxpacket: 8 [ 447.802770][ T6005] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 447.806517][ T6005] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 447.809749][ T6005] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 447.812938][ T6005] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 447.816691][ T6005] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 447.821225][ T6005] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 447.824352][ T6005] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.958502][T12497] netlink: 3052 bytes leftover after parsing attributes in process `syz.2.1396'. [ 449.407914][T12515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1400'. [ 449.415861][T12513] trusted_key: encrypted_key: key user:syz not found [ 449.445718][ T6005] usb 5-1: usb_control_msg returned -71 [ 449.450555][ T6005] usbtmc 5-1:16.0: can't read capabilities [ 449.470264][ T6005] usb 5-1: USB disconnect, device number 24 [ 449.615202][T12519] netlink: 'syz.1.1401': attribute type 13 has an invalid length. [ 449.620982][ T65] lo speed is unknown, defaulting to 1000 [ 449.623352][ T65] lo speed is unknown, defaulting to 1000 [ 449.626948][ T65] lo speed is unknown, defaulting to 1000 [ 449.658667][T12521] trusted_key: encrypted_key: key user:syz not found [ 449.661575][T12521] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input129 [ 451.069822][T12542] netlink: 3052 bytes leftover after parsing attributes in process `syz.2.1407'. [ 451.259372][T12559] trusted_key: encrypted_key: key user:syz not found [ 451.547258][T12564] trusted_key: encrypted_key: key user:syz not found [ 451.554284][T12564] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input130 [ 451.570904][T12565] IPVS: sync thread started: state = BACKUP, mcast_ifn = caif0, syncid = 2, id = 0 [ 451.974923][ T6005] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 452.143658][ T6005] usb 5-1: Using ep0 maxpacket: 8 [ 452.149342][ T6005] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 452.152348][ T6005] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 452.156596][ T6005] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 452.160001][ T6005] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 452.164201][ T6005] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 452.168613][ T6005] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 452.171694][ T6005] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.703660][ T6005] usb 5-1: usb_control_msg returned -71 [ 452.705797][ T6005] usbtmc 5-1:16.0: can't read capabilities [ 452.716225][ T6005] usb 5-1: USB disconnect, device number 25 [ 453.273185][T12598] trusted_key: encrypted_key: key user:syz not found [ 453.369161][T12600] trusted_key: encrypted_key: key user:syz not found [ 453.377747][T12600] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input131 [ 453.505938][T12603] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 8933, magic 89 != 6b] [ 453.911839][T12611] netlink: 3056 bytes leftover after parsing attributes in process `syz.0.1424'. [ 454.173388][T12622] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1427'. [ 454.176599][T12622] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1427'. [ 454.179772][T12622] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1427'. [ 454.893919][ T6005] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 455.044496][ T6005] usb 6-1: Using ep0 maxpacket: 8 [ 455.052078][ T6005] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 455.055666][ T6005] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 455.059475][ T6005] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 455.062917][ T6005] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 455.066585][ T6005] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 455.071438][ T6005] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 455.074953][ T6005] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.383378][T12640] trusted_key: encrypted_key: key user:syz not found [ 455.693676][T12647] trusted_key: encrypted_key: key user:syz not found [ 455.909484][ T6005] usb 6-1: usb_control_msg returned -71 [ 455.927644][ T6005] usbtmc 6-1:16.0: can't read capabilities [ 455.934907][ T6005] usb 6-1: USB disconnect, device number 21 [ 456.839916][T12666] netlink: 3056 bytes leftover after parsing attributes in process `syz.1.1436'. [ 457.032435][T12670] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1438'. [ 457.867973][T12670] ceph: No mds server is up or the cluster is laggy [ 457.930602][T12686] trusted_key: encrypted_key: key user:syz not found [ 457.931473][T12688] trusted_key: encrypted_key: key user:syz not found [ 457.937632][T12686] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input132 [ 457.977391][T12688] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input133 [ 458.343632][ T6005] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 458.524744][ T6005] usb 7-1: Using ep0 maxpacket: 8 [ 458.531398][ T6005] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 458.535774][ T6005] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 458.540902][ T6005] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 458.544410][ T6005] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 458.547611][ T6005] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 458.554803][ T6005] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 458.557855][ T6005] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.927568][T12709] netlink: 3056 bytes leftover after parsing attributes in process `syz.1.1449'. [ 459.690933][T12727] trusted_key: encrypted_key: key user:syz not found [ 459.778136][T12730] trusted_key: encrypted_key: key user:syz not found [ 459.812184][ T6005] usb 7-1: usb_control_msg returned -71 [ 459.817084][ T6005] usbtmc 7-1:16.0: can't read capabilities [ 459.825840][ T6005] usb 7-1: USB disconnect, device number 29 [ 460.518731][T12740] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 461.430856][T12754] netlink: 3048 bytes leftover after parsing attributes in process `syz.0.1459'. [ 461.600172][T12765] trusted_key: encrypted_key: key user:syz not found [ 461.607119][T12765] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input134 [ 461.729621][T12769] trusted_key: encrypted_key: key user:syz not found [ 463.043033][T12784] random: crng reseeded on system resumption [ 463.511414][T12796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1469'. [ 463.813691][T12795] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 463.825280][T12802] mkiss: ax0: crc mode is auto. Connection to localhost closed by remote host. [ 465.332556][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.336364][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 465.408574][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.412294][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 465.483960][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.487203][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 465.573267][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.577662][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 465.833643][ T5956] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 465.846017][T12809] ================================================================== [ 465.849423][T12809] BUG: KASAN: slab-use-after-free in skb_queue_purge_reason+0x381/0x420 [ 465.852889][T12809] Read of size 8 at addr ffff8880404e7858 by task syz.0.1473/12809 [ 465.858061][T12809] [ 465.859125][T12809] CPU: 3 UID: 0 PID: 12809 Comm: syz.0.1473 Not tainted 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(full) [ 465.859150][T12809] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 465.859162][T12809] Call Trace: [ 465.859170][T12809] [ 465.859177][T12809] dump_stack_lvl+0x116/0x1f0 [ 465.859208][T12809] print_report+0xc3/0x670 [ 465.859232][T12809] ? __virt_addr_valid+0x5e/0x590 [ 465.859256][T12809] ? __phys_addr+0xc6/0x150 [ 465.859280][T12809] ? skb_queue_purge_reason+0x381/0x420 [ 465.859305][T12809] kasan_report+0xe0/0x110 [ 465.859328][T12809] ? skb_queue_purge_reason+0x381/0x420 [ 465.859356][T12809] skb_queue_purge_reason+0x381/0x420 [ 465.859382][T12809] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 465.859410][T12809] ? lockdep_hardirqs_on+0x7c/0x110 [ 465.859436][T12809] ? drain_workqueue+0x313/0x3d0 [ 465.859466][T12809] ? __pfx_vhci_flush+0x10/0x10 [ 465.859490][T12809] vhci_flush+0x40/0x50 [ 465.859513][T12809] hci_dev_reset+0x231/0x530 [ 465.859535][T12809] hci_sock_ioctl+0x493/0x7d0 [ 465.859553][T12809] ? __pfx_hci_sock_ioctl+0x10/0x10 [ 465.859574][T12809] hci_sock_compat_ioctl+0x43/0x80 [ 465.859591][T12809] ? __pfx_hci_sock_compat_ioctl+0x10/0x10 [ 465.859609][T12809] compat_sock_ioctl+0x173/0x730 [ 465.859638][T12809] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 465.859669][T12809] ? __fget_files+0x20e/0x3c0 [ 465.859688][T12809] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 465.859715][T12809] __ia32_compat_sys_ioctl+0x24f/0x360 [ 465.859742][T12809] __do_fast_syscall_32+0x73/0x120 [ 465.859770][T12809] do_fast_syscall_32+0x32/0x80 [ 465.859798][T12809] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 465.859820][T12809] RIP: 0023:0xf7f36579 [ 465.859835][T12809] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 465.859853][T12809] RSP: 002b:00000000f505655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 465.859871][T12809] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 00000000400448cb [ 465.859883][T12809] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 465.859893][T12809] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 465.859904][T12809] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 465.859914][T12809] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 465.859932][T12809] [ 465.859939][T12809] [ 465.960818][T12809] Allocated by task 5939: [ 465.962739][T12809] kasan_save_stack+0x33/0x60 [ 465.964845][T12809] kasan_save_track+0x14/0x30 [ 465.966843][T12809] __kasan_kmalloc+0xaa/0xb0 [ 465.968804][T12809] vhci_open+0x4c/0x430 [ 465.970611][T12809] misc_open+0x35d/0x420 [ 465.972404][T12809] chrdev_open+0x234/0x6a0 [ 465.974263][T12809] do_dentry_open+0x744/0x1c10 [ 465.975781][T12809] vfs_open+0x82/0x3f0 [ 465.977084][T12809] path_openat+0x1e5e/0x2d40 [ 465.978628][T12809] do_filp_open+0x20b/0x470 [ 465.980129][T12809] do_sys_openat2+0x11b/0x1d0 [ 465.981674][T12809] __ia32_compat_sys_openat+0x16d/0x210 [ 465.983509][T12809] __do_fast_syscall_32+0x73/0x120 [ 465.985157][T12809] do_fast_syscall_32+0x32/0x80 [ 465.986703][T12809] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 465.988668][T12809] [ 465.989453][T12809] Freed by task 5939: [ 465.990735][T12809] kasan_save_stack+0x33/0x60 [ 465.992248][T12809] kasan_save_track+0x14/0x30 [ 465.993740][T12809] kasan_save_free_info+0x3b/0x60 [ 465.995367][T12809] __kasan_slab_free+0x51/0x70 [ 465.996864][T12809] kfree+0x2b6/0x4d0 [ 465.998117][T12809] vhci_release+0xbb/0xf0 [ 465.999501][T12809] __fput+0x402/0xb70 [ 466.000820][T12809] task_work_run+0x150/0x240 [ 466.002298][T12809] do_exit+0xafb/0x2c30 [ 466.003631][T12809] do_group_exit+0xd3/0x2a0 [ 466.005057][T12809] __ia32_sys_exit_group+0x3e/0x50 [ 466.006715][T12809] ia32_sys_call+0xd56/0x1c40 [ 466.008204][T12809] __do_fast_syscall_32+0x73/0x120 [ 466.009889][T12809] do_fast_syscall_32+0x32/0x80 [ 466.011469][T12809] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 466.013457][T12809] [ 466.014257][T12809] The buggy address belongs to the object at ffff8880404e7800 [ 466.014257][T12809] which belongs to the cache kmalloc-1k of size 1024 [ 466.018514][T12809] The buggy address is located 88 bytes inside of [ 466.018514][T12809] freed 1024-byte region [ffff8880404e7800, ffff8880404e7c00) [ 466.022824][T12809] [ 466.023646][T12809] The buggy address belongs to the physical page: [ 466.025737][T12809] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x404e0 [ 466.028472][T12809] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 466.031053][T12809] ksm flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 466.033556][T12809] page_type: f5(slab) [ 466.034857][T12809] raw: 04fff00000000040 ffff88801b442dc0 ffffea00004dca00 dead000000000003 [ 466.037566][T12809] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 466.040345][T12809] head: 04fff00000000040 ffff88801b442dc0 ffffea00004dca00 dead000000000003 [ 466.043093][T12809] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 466.045739][T12809] head: 04fff00000000003 ffffea0001013801 00000000ffffffff 00000000ffffffff [ 466.048505][T12809] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 466.051277][T12809] page dumped because: kasan: bad access detected [ 466.053289][T12809] page_owner tracks the page as allocated [ 466.055107][T12809] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52000(__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 0, tgid 0 (swapper/0), ts 1703435769, free_ts 0 [ 466.060172][T12809] post_alloc_hook+0x181/0x1b0 [ 466.061718][T12809] get_page_from_freelist+0x135c/0x3920 [ 466.063539][T12809] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 466.065470][T12809] alloc_pages_mpol+0x1fb/0x550 [ 466.067033][T12809] new_slab+0x244/0x340 [ 466.068361][T12809] ___slab_alloc+0xd9c/0x1940 [ 466.069881][T12809] __slab_alloc.constprop.0+0x56/0xb0 [ 466.071630][T12809] __kmalloc_cache_noprof+0xfb/0x3e0 [ 466.073335][T12809] __rtnl_register_many+0x59b/0x870 [ 466.075016][T12809] net_ns_init+0x19f/0x230 [ 466.076463][T12809] start_kernel+0x3a3/0x4d0 [ 466.077975][T12809] x86_64_start_reservations+0x18/0x30 [ 466.079727][T12809] x86_64_start_kernel+0xb0/0xc0 [ 466.081288][T12809] common_startup_64+0x13e/0x148 [ 466.082858][T12809] page_owner free stack trace missing [ 466.084596][T12809] [ 466.085401][T12809] Memory state around the buggy address: [ 466.087201][T12809] ffff8880404e7700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 466.089646][T12809] ffff8880404e7780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 466.092261][T12809] >ffff8880404e7800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 466.094819][T12809] ^ [ 466.096983][T12809] ffff8880404e7880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 466.099573][T12809] ffff8880404e7900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 466.102129][T12809] ================================================================== [ 466.105264][T12809] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 466.107597][T12809] CPU: 3 UID: 0 PID: 12809 Comm: syz.0.1473 Not tainted 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(full) [ 466.111347][T12809] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 466.114798][T12809] Call Trace: [ 466.115861][T12809] [ 466.116824][T12809] dump_stack_lvl+0x3d/0x1f0 [ 466.118374][T12809] panic+0x71c/0x800 [ 466.119677][T12809] ? __pfx_panic+0x10/0x10 [ 466.121135][T12809] ? mark_held_locks+0x49/0x80 [ 466.122678][T12809] ? preempt_schedule_thunk+0x16/0x30 [ 466.124376][T12809] ? skb_queue_purge_reason+0x381/0x420 [ 466.126190][T12809] ? preempt_schedule_common+0x44/0xc0 [ 466.127959][T12809] ? skb_queue_purge_reason+0x381/0x420 [ 466.129721][T12809] check_panic_on_warn+0xab/0xb0 [ 466.131348][T12809] end_report+0x107/0x170 [ 466.132741][T12809] kasan_report+0xee/0x110 [ 466.134229][T12809] ? skb_queue_purge_reason+0x381/0x420 [ 466.136045][T12809] skb_queue_purge_reason+0x381/0x420 [ 466.137779][T12809] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 466.139689][T12809] ? lockdep_hardirqs_on+0x7c/0x110 [ 466.141360][T12809] ? drain_workqueue+0x313/0x3d0 [ 466.143016][T12809] ? __pfx_vhci_flush+0x10/0x10 [ 466.144639][T12809] vhci_flush+0x40/0x50 [ 466.145989][T12809] hci_dev_reset+0x231/0x530 [ 466.147452][T12809] hci_sock_ioctl+0x493/0x7d0 [ 466.148958][T12809] ? __pfx_hci_sock_ioctl+0x10/0x10 [ 466.150602][T12809] hci_sock_compat_ioctl+0x43/0x80 [ 466.152236][T12809] ? __pfx_hci_sock_compat_ioctl+0x10/0x10 [ 466.154151][T12809] compat_sock_ioctl+0x173/0x730 [ 466.155763][T12809] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 466.157497][T12809] ? __fget_files+0x20e/0x3c0 [ 466.159007][T12809] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 466.160761][T12809] __ia32_compat_sys_ioctl+0x24f/0x360 [ 466.162541][T12809] __do_fast_syscall_32+0x73/0x120 [ 466.164158][T12809] do_fast_syscall_32+0x32/0x80 [ 466.165656][T12809] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 466.167630][T12809] RIP: 0023:0xf7f36579 [ 466.168934][T12809] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 466.174952][T12809] RSP: 002b:00000000f505655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 466.177573][T12809] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 00000000400448cb [ 466.180171][T12809] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 466.182717][T12809] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 466.185161][T12809] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 466.187621][T12809] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 466.190134][T12809] [ 466.191674][T12809] Kernel Offset: disabled [ 466.193008][T12809] Rebooting in 86400 seconds.. VM DIAGNOSIS: 08:11:01 Registers: info registers vcpu 0 CPU#0 RAX=0000000000b68e61 RBX=0000000000000000 RCX=ffffffff8b69a3e9 RDX=0000000000000000 RSI=ffffffff8dbde65f RDI=ffffffff8bf48c60 RBP=fffffbfff1c12ee8 RSP=ffffffff8e007e10 R8 =0000000000000001 R9 =ffffed10056465bd R10=ffff88802b232deb R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e097740 R14=ffffffff90854c10 R15=0000000000000000 RIP=ffffffff8b698c7f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977e7000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f729ecf8 CR3=00000000269a9000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=0000000000000000 Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055cc638ccc50 000055cc638ccc50 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffff4823f70 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d3d3d3d3d3d3d3d 3d3d3d3d3d3d3d3d 3d3d3d3d3d3d3d3d 3d3d3d3d3d3d3d3d ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 33203a65756c6176 207327726f747069 7263736564206563 61667265746e6920 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656874206d6f7266 20746e6572656666 6964202c73726f74 7069726373656420 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 746e696f70646e65 2032207361682030 20676e6974746573 746c612030206563 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 61667265746e6920 3631206769666e6f 63203a312d372062 7375205d35303036 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffff88802b541480 RCX=ffffffff81aea149 RDX=ffff88801f3c4880 RSI=ffffffff81aea123 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc9000082f938 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffed10056a8291 R13=0000000000000001 R14=dffffc0000000000 R15=ffff88802b33b180 RIP=ffffffff81aea125 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880978e7000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f730ecf8 CR3=000000000e180000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000faeacaf0 Opmask01=0000000000000000 Opmask02=000000007301007f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000341a9f82 0000000000000005 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f50ec38eb20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6b20657479622d32 3320646e61707865 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e69622f3a6e6962 732f7273752f3a6e 69622f7273752f00 0a732520202d2000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4b4c470a1f4b4c47 560a5756500a1f4b 4c470a5756500a00 0a56000505080500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3701013563538263 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bc2f010001005b00 0000ff133ddc0302 39773b3a3633211c 1a0f0c060379010e ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff 0101910101740050 026395df9f9edf50 bc2f010001005b00 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000ff133ddc0302 39773b3a3633211c 1a0f0c060379010e 3701013563538263 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbff52532232d20 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000657979 RBX=0000000000000002 RCX=ffffffff8b69a3e9 RDX=0000000000000000 RSI=ffffffff8dbde65f RDI=ffffffff8bf48c60 RBP=ffffed1003b51910 RSP=ffffc9000047fdf8 R8 =0000000000000001 R9 =ffffed10056865bd R10=ffff88802b432deb R11=0000000000000000 R12=0000000000000002 R13=ffff88801da8c880 R14=ffffffff90854c10 R15=0000000000000000 RIP=ffffffff8b698c7f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880979e7000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002eb20220 CR3=000000000e180000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=0000000000000000 Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ef257e14866bfaf4 2b85a239a2ed428c ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5e9aa329d5f34500 a6e4f028e37ada7d ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 85c24e6a1370d740 0b7a9a5afc1a13e0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e06f1d2036adebc1 d054420438f0641d ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 0000000000000060 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000020 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a8d8214fb70dd386 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 97037f5000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a3e4a62c57c0b4c 81a3ca6321b7566a ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000dc503619 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f861d0d5bbb5594 9feb2fdbce7cdab4 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f4d3cc176ff7cff 4f1b9e3b3106f02b ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c315b207465736e 75203a29676e6972 657473696765726e 752820306d697376 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 33203a65756c6176 207327726f747069 7263736564206563 61667265746e6920 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656874206d6f7266 20746e6572656666 6964202c73726f74 7069726373656420 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 746e696f70646e65 2032207361682030 20676e6974746573 746c612030206563 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 61667265746e6920 3631206769666e6f 63203a312d372062 7375205d35303036 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000035 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854c5bf5 RDI=ffffffff9ade4c80 RBP=ffffffff9ade4c40 RSP=ffffc90004f37600 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3430383838666666 R12=0000000000000000 R13=0000000000000035 R14=ffffffff9ade4c40 R15=ffffffff854c5b90 RIP=ffffffff854c5c1f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097ae7000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f722ecf8 CR3=000000001bf77000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ef257e14866bfaf4 2b85a239a2ed428c ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5e9aa329d5f34500 a6e4f028e37ada7d ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 85c24e6a1370d740 0b7a9a5afc1a13e0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e06f1d2036adebc1 d054420438f0641d ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 0000000000000060 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000020 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a8d8214fb70dd386 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 97037f5000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a3e4a62c57c0b4c 81a3ca6321b7566a ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000dc503619 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f861d0d5bbb5594 9feb2fdbce7cdab4 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f4d3cc176ff7cff 4f1b9e3b3106f02b ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000