last executing test programs: 18m33.328313042s ago: executing program 3 (id=2136): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@bridge_delneigh={0x24, 0x1c, 0xcafe28741a3524c9, 0x70bd2b, 0x25dfdbfb, {0x7, 0x0, 0x0, r0, 0x80, 0x1e, 0xa}, [@NDA_FLAGS_EXT={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0041}, 0x0) 18m33.252616361s ago: executing program 3 (id=2137): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) set_robust_list(0x0, 0x0) 18m28.175987223s ago: executing program 3 (id=2148): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f0000000140)="84", 0x1}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r0, 0x0, 0x0, 0x3b00, 0x0, 0x0) 18m26.42849521s ago: executing program 3 (id=2152): socket$key(0xf, 0x3, 0x2) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b705000008"], &(0x7f0000000640)='GPL\x00', 0x2, 0x8d, &(0x7f0000000680)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, &(0x7f0000000700)="01", 0x0}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000000600000083000000bf0000000000000055090100000000009500000000000000b7080000000000007b8af8ff000080fbb70800000b000010000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYBLOB="0000000000000101851000000700", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70200000000000085000000860000001840000006"], 0x0, 0xe, 0x3b, &(0x7f0000000080)=""/59, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x169a0, 0xffffffffffffffff, 0x1, &(0x7f0000000300)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000340)=[{0x0, 0x4, 0x4, 0x6}], 0x10, 0x1, @void, @value}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000540)={r1, 0x0, 0x0}, 0x20) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 18m24.9812067s ago: executing program 3 (id=2154): r0 = syz_open_procfs(0x0, 0x0) read$FUSE(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f0000000100)=0x1, 0x4) recvfrom$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) 18m23.780089419s ago: executing program 3 (id=2156): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x2, 0x5c8, {0x0, 0x0, 0x0, 0x0, 0x0, 0x41480}, [@IFLA_MTU={0x8, 0x4, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x81, @mcast2, 0x5}, 0x1c) socket$pppl2tp(0x18, 0x1, 0x1) 18m8.626068973s ago: executing program 32 (id=2156): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x2, 0x5c8, {0x0, 0x0, 0x0, 0x0, 0x0, 0x41480}, [@IFLA_MTU={0x8, 0x4, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x81, @mcast2, 0x5}, 0x1c) socket$pppl2tp(0x18, 0x1, 0x1) 17m23.484022962s ago: executing program 0 (id=2257): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) creat(0x0, 0x4) r6 = socket(0x1e, 0x805, 0x0) connect$tipc(r6, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) close(r6) 17m22.315172073s ago: executing program 0 (id=2258): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062c30bc068829afff36b31fa7e358e95cfa"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000180)={r0, 0x2000000, 0x21, 0x0, &(0x7f00000000c0)="13435cb8b9f6ff004954ea5207e3137c3c9e9fbe2134504b468883902643b332fa", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 17m22.059199435s ago: executing program 0 (id=2259): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet6(r0, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="4435c61bc9a1f1ed51c7b06188c682bd59fde0261c9bc2b1f66724ea0287fb6effd2c318abfa442135afa8ca2b68dacbb4a1aa65f9c177dc50967e99edcce6e8900d450fcd9980371cd431b9c1ad0766a9cb142c1ac79715905c85", 0x5b, 0x850, 0x0, 0x0) 17m21.83428043s ago: executing program 0 (id=2260): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000080)=0x9, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 17m21.161193625s ago: executing program 0 (id=2261): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_dccp(0xa, 0x6, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4623, 0xfffffffd, @local, 0x6}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) 17m21.020569736s ago: executing program 0 (id=2262): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000200)={@remote}, 0x14) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000001440)=""/4091, 0xffb}], 0x1, 0x14, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) unshare(0x22020600) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000f00000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x10) r7 = timerfd_create(0x7, 0x0) timerfd_settime(r7, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) readv(r7, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/52, 0x34}], 0x1) timerfd_gettime(r7, &(0x7f0000001200)) 17m4.15504704s ago: executing program 33 (id=2262): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000200)={@remote}, 0x14) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000001440)=""/4091, 0xffb}], 0x1, 0x14, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) unshare(0x22020600) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000f00000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x10) r7 = timerfd_create(0x7, 0x0) timerfd_settime(r7, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) readv(r7, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/52, 0x34}], 0x1) timerfd_gettime(r7, &(0x7f0000001200)) 29.906148782s ago: executing program 1 (id=4209): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r5 = fsopen(&(0x7f0000000200)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000080)='source', &(0x7f0000000240)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r3, 0x4068aea3, &(0x7f0000000180)={0x74, 0x0, 0x2d}) socket$inet6_sctp(0xa, 0x1, 0x84) eventfd2(0x58, 0x80000) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, 0x0, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) io_uring_enter(0xffffffffffffffff, 0x3516, 0x3e44, 0x8, 0x0, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r4, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2, 0xc990, 0x3, 0x0, 0x0, 0xc07}}, 0x11c) readv(r4, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}], 0x1) write$UHID_DESTROY(r4, &(0x7f0000000200), 0x4) 25.907417028s ago: executing program 1 (id=4218): socket$key(0xf, 0x3, 0x2) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00", @ANYRES32=r0, @ANYBLOB="0000000000000000b705"], &(0x7f0000000640)='GPL\x00', 0x2, 0x8d, &(0x7f0000000680)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0), 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x4, 0x0, 0x1, 0x0, &(0x7f0000000700)="01", 0x0}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000000600000083000000bf0000000000000055090100000000009500000000000000b7080000000000007b8af8ff000080fbb70800000b000010000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYBLOB="0000000000000101851000000700", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70200000000000085000000860000001840000006"], 0x0, 0xe, 0x3b, &(0x7f0000000080)=""/59, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x169a0, 0xffffffffffffffff, 0x1, &(0x7f0000000300)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000340)=[{0x0, 0x4, 0x4, 0x6}], 0x10, 0x1, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000540)={r2, 0x0, 0x0}, 0x20) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 24.796702812s ago: executing program 1 (id=4221): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce070200"/65, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c0000009078"], 0x0) openat$vcsu(0xffffff9c, &(0x7f0000000180), 0x88080, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068109e733e1a68765a6c733a8eb6df2944f6c2ef07c022", 0x1f, 0xfffffffffffffffe) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050400"/18, @ANYRES32=r2, @ANYBLOB="ebffffffffffffff280012800b00010065727370616e0000180002800400120005"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r3, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 23.568038687s ago: executing program 1 (id=4224): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740), 0x0, 0x8b, &(0x7f0000000480), 0x0, 0x10, &(0x7f00000004c0), 0x0, 0x0, 0xea, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=@newtclass={0x70, 0x28, 0x2, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r0, {0xf, 0xffe0}, {0xffff, 0x2}, {0x8, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x4}}, @TCA_RATE={0x6, 0x5, {0x6, 0x69}}, @TCA_RATE={0x6, 0x5, {0x9, 0x4}}, @tclass_kind_options=@c_fq_codel={0xd}, @TCA_RATE={0x6, 0x5, {0xc}}, @TCA_RATE={0x6, 0x5, {0x0, 0x81}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}, @tclass_kind_options=@c_mqprio={0xb}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000014}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb058}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e2b, 0x7, @dev={0xfe, 0x80, '\x00', 0x37}, 0x6}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r4, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) 20.237010414s ago: executing program 1 (id=4227): read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa0, 0x30, 0x1, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xa0, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x18, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7f}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x5}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r3, 0x4068aea3, &(0x7f0000000180)={0x74, 0x0, 0x2d}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, 0x0, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) io_uring_enter(0xffffffffffffffff, 0x3516, 0x3e44, 0x8, 0x0, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r4, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2, 0xc990, 0x3, 0x0, 0x0, 0xc07}}, 0x11c) readv(r4, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}], 0x1) write$UHID_DESTROY(r4, &(0x7f0000000200), 0x4) 19.842701144s ago: executing program 4 (id=4229): bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000040), 0x10) sendmsg$can_bcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x20040000}, 0x440c0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 17.181907368s ago: executing program 4 (id=4236): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740), 0x0, 0x8b, &(0x7f0000000480), 0x0, 0x10, &(0x7f00000004c0), 0x0, 0x0, 0xea, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=@newtclass={0x70, 0x28, 0x2, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r0, {0xf, 0xffe0}, {0xffff, 0x2}, {0x8, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x4}}, @TCA_RATE={0x6, 0x5, {0x6, 0x69}}, @TCA_RATE={0x6, 0x5, {0x9, 0x4}}, @tclass_kind_options=@c_fq_codel={0xd}, @TCA_RATE={0x6, 0x5, {0xc}}, @TCA_RATE={0x6, 0x5, {0x0, 0x81}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}, @tclass_kind_options=@c_mqprio={0xb}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000014}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb058}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e2b, 0x7, @dev={0xfe, 0x80, '\x00', 0x37}, 0x6}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r4, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) 10.974935233s ago: executing program 4 (id=4244): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r5 = fsopen(&(0x7f0000000200)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000080)='source', &(0x7f0000000240)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x4, 0x0, 0x1, 0x0, &(0x7f0000000700)="01", 0x0}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 8.077105945s ago: executing program 4 (id=4247): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0xfe, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000019080)=ANY=[@ANYBLOB="54000000120001030000000000dcdf250040ff004e244e20000000", @ANYBLOB="01ff000000000000040000", @ANYRESDEC=r5], 0x54}, 0x1, 0x0, 0x0, 0x44800}, 0x0) 8.069477601s ago: executing program 6 (id=4248): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x0) preadv(r1, 0x0, 0x0, 0x10007, 0xd273) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) 8.007444907s ago: executing program 2 (id=4249): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) recvmsg$inet_nvme(r5, &(0x7f0000000280)={&(0x7f0000000480)=@in={0x2, 0x0, @private}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/144, 0x90}, {&(0x7f00000005c0)=""/189, 0xbd}, {&(0x7f00000000c0)=""/38, 0x26}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x4, &(0x7f0000001680)=""/251, 0xfb}, 0x40000100) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0xfe, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 6.214601944s ago: executing program 6 (id=4251): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 6.124603797s ago: executing program 6 (id=4252): socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, 0x0, &(0x7f0000000640)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x4, 0x0, 0x1, 0x0, &(0x7f0000000700)="01", 0x0}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYBLOB="0000000000000101851000000700", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70200000000000085000000860000001840000006"], 0x0, 0xe, 0x3b, &(0x7f0000000080)=""/59, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x169a0, 0xffffffffffffffff, 0x1, &(0x7f0000000300)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000340)=[{0x0, 0x4, 0x4, 0x6}], 0x10, 0x1, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000540)={r0, 0x0, 0x0}, 0x20) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 6.044027718s ago: executing program 5 (id=4253): r0 = syz_open_procfs(0x0, 0x0) read$FUSE(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000780)={{}, 0x0, 0x8, @inherit={0x60, 0x0}, @devid}) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f0000000300)=0x100000001, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 5.706106428s ago: executing program 4 (id=4254): r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r0, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600"], 0x84}}, 0x20000000) 5.025913246s ago: executing program 34 (id=4227): read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa0, 0x30, 0x1, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xa0, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x18, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7f}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x5}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r3, 0x4068aea3, &(0x7f0000000180)={0x74, 0x0, 0x2d}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, 0x0, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) io_uring_enter(0xffffffffffffffff, 0x3516, 0x3e44, 0x8, 0x0, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r4, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2, 0xc990, 0x3, 0x0, 0x0, 0xc07}}, 0x11c) readv(r4, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}], 0x1) write$UHID_DESTROY(r4, &(0x7f0000000200), 0x4) 5.014739474s ago: executing program 2 (id=4256): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce070200"/66, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c0000009078"], 0x0) openat$vcsu(0xffffff9c, &(0x7f0000000180), 0x88080, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068109e733e1a68765a6c733a8eb6df2944f6c2ef07c022", 0x1f, 0xfffffffffffffffe) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050400"/18, @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r3, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 4.067580144s ago: executing program 4 (id=4257): read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa0, 0x30, 0x1, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xa0, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x18, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7f}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x5}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) eventfd2(0x58, 0x80000) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, 0x0, 0x1) io_uring_enter(0xffffffffffffffff, 0x3516, 0x3e44, 0x8, 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2, 0xc990, 0x3, 0x0, 0x0, 0xc07}}, 0x11c) write$UHID_DESTROY(r2, &(0x7f0000000200), 0x4) 4.065197952s ago: executing program 5 (id=4258): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0xf, 0x0, &(0x7f0000000100)="5c71f91b05c413550230b4c817a628", 0x0, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0}, 0x50) 3.954246901s ago: executing program 6 (id=4259): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r5 = fsopen(&(0x7f0000000200)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000080)='source', &(0x7f0000000240)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x4, 0x0, 0x1, 0x0, &(0x7f0000000700)="01", 0x0}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.648561234s ago: executing program 6 (id=4261): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x0) socket(0x200000100000011, 0x3, 0x3) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) 2.562142975s ago: executing program 5 (id=4262): socket$key(0xf, 0x3, 0x2) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b705000008"], &(0x7f0000000640)='GPL\x00', 0x2, 0x8d, &(0x7f0000000680)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, &(0x7f0000000700)="01", 0x0}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000000600000083000000bf0000000000000055090100000000009500000000000000b7080000000000007b8af8ff000080fbb70800000b000010000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYBLOB="0000000000000101851000000700", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70200000000000085000000860000001840000006"], 0x0, 0xe, 0x3b, &(0x7f0000000080)=""/59, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x169a0, 0xffffffffffffffff, 0x1, &(0x7f0000000300)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000340)=[{0x0, 0x4, 0x4, 0x6}], 0x10, 0x1, @void, @value}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) r5 = accept4(r4, 0x0, 0x0, 0x800) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000540)={r1, 0x0, 0x0}, 0x20) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.318865009s ago: executing program 2 (id=4263): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$inet_int(r0, 0x0, 0x16, &(0x7f0000000000)=0x9, 0x4) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_io_uring_setup(0x5b8, &(0x7f00000001c0)={0x0, 0x7b5f, 0x800, 0x6, 0xd4}, 0x0, &(0x7f0000000b80)=0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @private0}, {0xa, 0x0, 0x7, @remote}}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000340)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), 0xffffffffffffffff, 0x0, 0x1, 0xfffffffffffffdf8}}, 0x20) syz_io_uring_submit(0x0, r6, &(0x7f00000000c0)=@IORING_OP_LINKAT={0x27, 0x40, 0x0, 0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', &(0x7f00000003c0)='./file0\x00', 0xffffffffffffffff, 0x1400}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0x40df07, 0x2, 0x2, 0x0, 0x0, r5}) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r8, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 1.438538882s ago: executing program 6 (id=4264): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000001a00)=ANY=[@ANYBLOB="13100000520091"], 0xfe33) recvmsg$kcm(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000580)=""/250, 0xfa}, {&(0x7f0000001a40)=""/4096, 0x1000}], 0x2}, 0x0) recvmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x50be}, 0x0) 1.149103529s ago: executing program 5 (id=4265): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe0}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000001340)="6dcb05f2e48e61674ebd89769f9b927046079a4c6ab892d9f86b4055e41f9354be76dac275a1f97b8ae4a5a32ef98168f544f231803f620017a7a9faa294c78047e4ca39d474942f867f63510b836739483f0abaca269f0e173855387e16996e23c2482f194dd78e17f67aeeda5d35a842c298f9972314014c439d57cd74cb190e527db50d4760e4a54c12735b8e98871b0c7bd10748e969ef864f65381d4db90528adcbdf460d31074d34b27770933de479090331e728e8434347c93c52f985105a3d57f766486ea16428a7e8054cff9dbec74e9c77fe4c483e306e1042874ae8e51db8", 0xe4}, {&(0x7f0000000640)="0590ab7c5379d4fc3e9f9cd7dbeebfa58219a6820d9af837dbcbb2e713865c85f980a1ef4eecbf07c2", 0x29}, {&(0x7f00000006c0)="7be02767d8579dea4ccb83a128b87f01f3ff83eceb", 0x15}], 0x4}}, {{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000d00)="eb5ab84f63a3517d3618292b4ac1c3f98bad4e232370016d1a77cbc3bcfdfaf47084debfb2cfe2d2910b600a46da20e4d9d162b95c37a2f7362be4aee1b96ec27c6014366cb3e06feb6fdf3128008590136f1d2781f0c4bae67dfc2e5e90db8affd0f9dfdff5c7d4543ba46409faf1ed3e7e6ce5281d59906fa8390b05377edd602eac7f2355b9cb81cf7525e72e1c3ae911f3f79c15ea7ac5f66cb39aa01ff256619823723957b6d4307be4c0f0960afbb98e8255b65d88b4c3a7d1aa2ac1b67bdee8c264d87b0299cf15a4d793d16f1915b8ef2df3c576da4846193b", 0xdd}, {&(0x7f0000000e00)="d584132c6710c94c4fbf0cbd772bc95ecb4f7c2c6dbf979b1583404a7778cb520be332e623ad5378e40d7d7cc801f1f1f39db7058ddcff7d98d6a4160eb55c0e323d0d979d31e829fdbbb8e07cb27bdf060d9f8909549ec8a05ecf2a3f7f56b35682f23b24d98841173ac3fb95c5bcf1ba0bb0d2cb44abf5a7cdc13b6b2f064e53ee5bd71668c9c977c16aa59d06d034ae7e53f77adeac09bd64ccf1a827dc5733c0cf95678d79c909af85e61929f7ee60ea27be4cc898f1fccaf2d2c160ad88fc0eb5594f89da17bff25539da950c29b99356688d97d9d188dc44a0a6671781873ee856a69a3ee9f1a5049cea8d61250c6d2b96275619", 0xf7}, {&(0x7f0000001440)="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", 0x1d0}], 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="30000000000000000000000007000000890d622b81b2bf68770eab6a9c9403a78907f2ffffffff07076fac14142401001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="e0000002e0000001000000001400000000000000000000000100000008000000000000001c"], 0x88}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 346.599505ms ago: executing program 2 (id=4266): r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r0, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600"], 0x84}}, 0x20000000) 46.842935ms ago: executing program 5 (id=4267): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000090024206d041cc340009100000109022400010000b00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\f\x00\x00'], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000d80)={0x0, 0x16, 0x4, "7d470003"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 0s ago: executing program 2 (id=4268): socket$key(0xf, 0x3, 0x2) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00", @ANYRES32=r0], &(0x7f0000000640)='GPL\x00', 0x2, 0x8d, &(0x7f0000000680)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, &(0x7f0000000700)="01", 0x0}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000000600000083000000bf0000000000000055090100000000009500000000000000b7080000000000007b8af8ff000080fbb70800000b000010000000bfa100000000000007010000f8ffffffbfa400", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYBLOB="0000000000000101851000000700", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70200000000000085000000860000001840"], 0x0, 0xe, 0x3b, &(0x7f0000000080)=""/59, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x169a0, 0xffffffffffffffff, 0x1, &(0x7f0000000300)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000340)=[{0x0, 0x4, 0x4, 0x6}], 0x10, 0x1, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) r4 = accept4(r3, 0x0, 0x0, 0x800) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0x0}, 0x20) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) kernel console output (not intermixed with test programs): h1_macvtap: entered promiscuous mode [ 1282.739699][T15942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1283.466206][T15942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1283.477433][T15942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1283.488263][T15942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1283.498512][T15942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1283.523532][T15942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1284.616396][T15942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1284.633256][T15942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1284.645206][T15942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1288.021456][T12753] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1288.245528][T12753] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1288.277754][T12753] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1288.290843][T12753] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1288.298754][T12753] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1291.435443][T12753] Bluetooth: hci4: command tx timeout [ 1293.609679][T15078] Bluetooth: hci4: command tx timeout [ 1295.750075][T15078] Bluetooth: hci4: command tx timeout [ 1297.769545][T12753] Bluetooth: hci4: command tx timeout [ 1298.431135][T16458] chnl_net:caif_netlink_parms(): no params data found [ 1301.675245][T16458] bridge0: port 1(bridge_slave_0) entered blocking state [ 1301.901854][T16458] bridge0: port 1(bridge_slave_0) entered disabled state [ 1301.910214][T16458] bridge_slave_0: entered allmulticast mode [ 1301.918074][T16458] bridge_slave_0: entered promiscuous mode [ 1301.942834][T16458] bridge0: port 2(bridge_slave_1) entered blocking state [ 1301.952222][T16458] bridge0: port 2(bridge_slave_1) entered disabled state [ 1301.962707][T16458] bridge_slave_1: entered allmulticast mode [ 1301.973291][T16458] bridge_slave_1: entered promiscuous mode [ 1302.054659][T16458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1302.107095][ T54] bridge_slave_1: left allmulticast mode [ 1302.115554][ T54] bridge_slave_1: left promiscuous mode [ 1302.136516][ T54] bridge0: port 2(bridge_slave_1) entered disabled state [ 1302.287070][ T54] bridge_slave_0: left allmulticast mode [ 1302.329775][ T54] bridge_slave_0: left promiscuous mode [ 1302.335628][ T54] bridge0: port 1(bridge_slave_0) entered disabled state [ 1302.522505][ C0] vcan0: j1939_tp_rxtimer: 0xffff888036ab4400: rx timeout, send abort [ 1302.539536][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888036ab4400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 1306.127711][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1306.135987][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1306.760349][ T54] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1306.773215][ T54] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1306.937949][ T54] bond0 (unregistering): Released all slaves [ 1308.433346][T16458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1308.754218][T16458] team0: Port device team_slave_0 added [ 1308.798180][ T54] hsr_slave_0: left promiscuous mode [ 1308.806675][ T54] hsr_slave_1: left promiscuous mode [ 1308.822346][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1308.834639][ T54] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1308.855118][ T54] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1308.914194][ T54] veth1_macvtap: left promiscuous mode [ 1308.920025][ T54] veth0_macvtap: left promiscuous mode [ 1308.925720][ T54] veth1_vlan: left promiscuous mode [ 1308.940104][ T54] veth0_vlan: left promiscuous mode [ 1313.845262][T16662] fuse: Bad value for 'fd' [ 1314.020771][T16664] fuse: Unknown parameter 'group_i00000000000000000000' [ 1315.767147][T16669] fuse: Bad value for 'fd' [ 1319.047068][ T54] team0 (unregistering): Port device team_slave_1 removed [ 1320.093198][ T54] team0 (unregistering): Port device team_slave_0 removed [ 1321.993118][ T30] audit: type=1326 audit(1745159146.807:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16711 comm="syz.2.2980" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4d86f8e169 code=0x0 [ 1322.286209][T16458] team0: Port device team_slave_1 added [ 1322.618862][T16458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1322.749926][T16458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1322.984990][T16458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1323.000442][T16458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1323.007831][T16458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1323.034009][T16458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1324.971195][T16458] hsr_slave_0: entered promiscuous mode [ 1325.087489][T16458] hsr_slave_1: entered promiscuous mode [ 1325.107049][T16458] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1325.129912][T16458] Cannot create hsr debugfs directory [ 1331.421436][T16458] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1331.489801][T16458] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1331.565638][T16458] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1331.777474][T16458] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1332.092262][T16458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1332.276617][T16458] 8021q: adding VLAN 0 to HW filter on device team0 [ 1332.303571][ T1318] bridge0: port 1(bridge_slave_0) entered blocking state [ 1332.310764][ T1318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1332.383587][ T1318] bridge0: port 2(bridge_slave_1) entered blocking state [ 1332.390763][ T1318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1333.086450][T16458] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1336.316823][T16458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1339.305721][T16458] veth0_vlan: entered promiscuous mode [ 1339.341771][T16458] veth1_vlan: entered promiscuous mode [ 1339.638713][T16458] veth0_macvtap: entered promiscuous mode [ 1339.654848][T16458] veth1_macvtap: entered promiscuous mode [ 1339.781598][T16458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1340.052537][T16458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1340.420191][T16458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1340.441938][T16458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1340.454335][T16458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1340.466479][T16458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1340.478674][T16458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1340.490992][T16458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1340.505117][T16458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1340.545999][T16458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1340.577050][T16458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1340.609522][T16458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1340.629502][T16458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1340.639667][T16458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1340.655774][T16458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1340.680431][T16458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1340.706879][T16458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1340.728747][T16458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1340.946077][T16458] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1340.974153][T16458] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1340.983346][T16458] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1340.992820][T16458] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1341.181453][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1341.221140][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1341.318582][T13001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1341.347109][T13001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1342.911052][T16941] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2288'. [ 1345.107916][T15078] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1345.132661][T15078] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1345.142665][T15078] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1345.151165][T15078] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1345.188320][T15078] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1345.294985][T16941] team0 (unregistering): Port device team_slave_0 removed [ 1345.334319][T16941] team0 (unregistering): Port device team_slave_1 removed [ 1347.139776][ T54] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1347.289586][T15078] Bluetooth: hci2: command tx timeout [ 1347.505812][ T54] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1347.888977][ T54] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1348.796316][ T54] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1349.442194][T15078] Bluetooth: hci2: command tx timeout [ 1350.700908][T16961] chnl_net:caif_netlink_parms(): no params data found [ 1350.973625][ T54] bridge_slave_1: left allmulticast mode [ 1350.982545][ T54] bridge_slave_1: left promiscuous mode [ 1351.124986][ T54] bridge0: port 2(bridge_slave_1) entered disabled state [ 1351.462472][T15078] Bluetooth: hci2: command tx timeout [ 1351.957982][ T54] bridge_slave_0: left allmulticast mode [ 1352.111954][ T54] bridge_slave_0: left promiscuous mode [ 1352.128778][ T54] bridge0: port 1(bridge_slave_0) entered disabled state [ 1353.934481][T12753] Bluetooth: hci2: command tx timeout [ 1357.197963][ T54] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1357.217741][ T54] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1357.228579][ T54] bond0 (unregistering): Released all slaves [ 1357.695515][T17036] pimreg3: entered allmulticast mode [ 1361.949738][T17113] netlink: 'syz.5.3048': attribute type 27 has an invalid length. [ 1362.607448][T17115] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1363.836086][T16961] bridge0: port 1(bridge_slave_0) entered blocking state [ 1364.102171][T16961] bridge0: port 1(bridge_slave_0) entered disabled state [ 1364.850577][T16961] bridge_slave_0: entered allmulticast mode [ 1365.294828][T16961] bridge_slave_0: entered promiscuous mode [ 1365.963395][T16961] bridge0: port 2(bridge_slave_1) entered blocking state [ 1365.989739][T16961] bridge0: port 2(bridge_slave_1) entered disabled state [ 1365.997024][T16961] bridge_slave_1: entered allmulticast mode [ 1366.010012][T16961] bridge_slave_1: entered promiscuous mode [ 1366.375885][ T54] hsr_slave_0: left promiscuous mode [ 1366.406506][ T54] hsr_slave_1: left promiscuous mode [ 1366.425525][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1366.449598][ T54] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1366.480646][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1366.505189][ T54] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1366.607449][ T54] veth1_macvtap: left promiscuous mode [ 1366.616445][ T54] veth0_macvtap: left promiscuous mode [ 1367.765246][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1367.772056][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1368.353547][ T54] pimreg39 (unregistering): left allmulticast mode [ 1371.070225][ T54] team0 (unregistering): Port device team_slave_1 removed [ 1372.128949][ T54] team0 (unregistering): Port device team_slave_0 removed [ 1376.800606][ T54] batadv0 (unregistering): left allmulticast mode [ 1379.054137][T16961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1379.080024][T17232] delete_channel: no stack [ 1379.154898][T16961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1380.880056][T16961] team0: Port device team_slave_0 added [ 1380.927733][T16961] team0: Port device team_slave_1 added [ 1381.257256][T16961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1381.314453][T16961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1381.387840][ T30] audit: type=1326 audit(1745159206.197:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17237 comm="syz.5.3075" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0dea58e169 code=0x0 [ 1381.469722][T16961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1381.540290][T16961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1381.547409][T16961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1381.720384][T16961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1382.702835][T16961] hsr_slave_0: entered promiscuous mode [ 1382.750747][T16961] hsr_slave_1: entered promiscuous mode [ 1382.943105][T17269] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3079'. [ 1382.952344][T17269] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3079'. [ 1383.001883][T16961] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1383.179238][T16961] Cannot create hsr debugfs directory [ 1388.728913][T16961] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1388.764018][T16961] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1388.804220][T16961] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1388.883817][T16961] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1389.043752][T17327] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3091'. [ 1389.053325][T17327] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3091'. [ 1390.204471][T16961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1390.270872][T16961] 8021q: adding VLAN 0 to HW filter on device team0 [ 1390.305670][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 1390.313022][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1390.608373][ T6106] bridge0: port 2(bridge_slave_1) entered blocking state [ 1390.615794][ T6106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1391.836763][T16961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1393.374720][T16961] veth0_vlan: entered promiscuous mode [ 1393.438278][T16961] veth1_vlan: entered promiscuous mode [ 1393.639593][T16961] veth0_macvtap: entered promiscuous mode [ 1393.651722][T16961] veth1_macvtap: entered promiscuous mode [ 1393.897507][T17399] affs: No valid root block on device nullb0 [ 1394.558173][T16961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1394.609265][T16961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1394.632597][T16961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1394.707841][T16961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1394.728907][T16961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1394.749435][T16961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1394.759308][T16961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1394.792668][T17405] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3104'. [ 1394.812388][T17405] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3104'. [ 1394.827684][T16961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1394.876524][T16961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1394.917003][T16961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1394.944876][T16961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1394.972744][T16961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1395.140546][T16961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1395.165177][T16961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1395.177387][T16961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1395.201088][T16961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1395.466071][T16961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1395.478935][T16961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1396.349253][T16961] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.372020][T16961] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.399597][T16961] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.421130][T16961] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1399.735578][ T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1399.772375][ T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1400.831067][ T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1400.838947][ T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1404.376202][T17473] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3116'. [ 1406.808654][T13001] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1408.264927][T13001] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1408.550229][T13001] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1408.655641][T17504] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1408.676406][T17504] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1408.691446][T17504] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1408.709250][T17504] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1408.721136][T17504] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1408.974950][T13001] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1410.859804][T17504] Bluetooth: hci1: command tx timeout [ 1411.397487][T13001] bridge_slave_1: left allmulticast mode [ 1411.413558][T13001] bridge_slave_1: left promiscuous mode [ 1411.456453][T13001] bridge0: port 2(bridge_slave_1) entered disabled state [ 1411.780035][T13001] bridge_slave_0: left allmulticast mode [ 1411.797237][T13001] bridge_slave_0: left promiscuous mode [ 1412.394228][T13001] bridge0: port 1(bridge_slave_0) entered disabled state [ 1412.911499][T17504] Bluetooth: hci1: command tx timeout [ 1414.969626][T15078] Bluetooth: hci1: command tx timeout [ 1415.058280][T15078] Bluetooth: hci4: command 0x0406 tx timeout [ 1417.050074][T17504] Bluetooth: hci1: command tx timeout [ 1422.418042][T13001] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1422.483270][T13001] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1422.509101][T13001] bond0 (unregistering): Released all slaves [ 1422.699802][T17503] chnl_net:caif_netlink_parms(): no params data found [ 1427.102754][T17503] bridge0: port 1(bridge_slave_0) entered blocking state [ 1427.126538][T17503] bridge0: port 1(bridge_slave_0) entered disabled state [ 1427.155314][T17503] bridge_slave_0: entered allmulticast mode [ 1427.193425][T17503] bridge_slave_0: entered promiscuous mode [ 1427.231904][T13001] hsr_slave_0: left promiscuous mode [ 1427.248666][T13001] hsr_slave_1: left promiscuous mode [ 1427.264611][T13001] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1427.401495][T13001] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1427.436065][T13001] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1427.469464][T13001] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1427.635871][T13001] veth1_macvtap: left promiscuous mode [ 1427.669556][T13001] veth0_macvtap: left promiscuous mode [ 1427.693530][T13001] veth1_vlan: left promiscuous mode [ 1427.698933][T13001] veth0_vlan: left promiscuous mode [ 1428.337565][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.344141][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1431.441602][T17689] overlayfs: failed to clone upperpath [ 1432.673907][T13001] pimreg3 (unregistering): left allmulticast mode [ 1432.693532][T17700] overlayfs: failed to clone upperpath [ 1434.644377][ T30] audit: type=1326 audit(1745159259.457:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17705 comm="syz.1.3160" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0caf58e169 code=0x0 [ 1435.002921][T13001] batadv0 (unregistering): left allmulticast mode [ 1435.138448][T17503] bridge0: port 2(bridge_slave_1) entered blocking state [ 1435.159627][T17503] bridge0: port 2(bridge_slave_1) entered disabled state [ 1435.167017][T17503] bridge_slave_1: entered allmulticast mode [ 1435.201446][T17503] bridge_slave_1: entered promiscuous mode [ 1435.330297][T17688] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3155'. [ 1435.805207][T17503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1435.818435][T17503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1436.624679][T17728] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1437.033897][T17503] team0: Port device team_slave_0 added [ 1437.070809][T17503] team0: Port device team_slave_1 added [ 1437.969483][ T30] audit: type=1326 audit(1745159262.767:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17734 comm="syz.5.3165" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0dea58e169 code=0x0 [ 1438.013079][T17503] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1438.039685][T17503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1438.160619][T17503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1438.386850][T17503] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1438.429439][T17503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1438.758917][T17503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1438.994161][T17503] hsr_slave_0: entered promiscuous mode [ 1439.027374][T17503] hsr_slave_1: entered promiscuous mode [ 1439.962679][T17774] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 1439.969290][T17774] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1440.085597][T17774] vhci_hcd vhci_hcd.0: Device attached [ 1440.694108][ T5881] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 1442.060048][T17786] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1443.448544][T17803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3175'. [ 1443.514570][T17803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3175'. [ 1445.303865][T17503] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1445.372069][T17503] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1445.410710][T17503] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1445.462705][T17503] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1446.004596][T17503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1446.403651][T17503] 8021q: adding VLAN 0 to HW filter on device team0 [ 1447.276357][T12912] bridge0: port 1(bridge_slave_0) entered blocking state [ 1447.283681][T12912] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1447.507027][ T6106] bridge0: port 2(bridge_slave_1) entered blocking state [ 1447.514475][ T6106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1447.581542][T17839] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1448.759101][T17503] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1448.900254][T15865] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1449.243353][T17503] veth0_vlan: entered promiscuous mode [ 1449.263072][T15865] usb 7-1: Using ep0 maxpacket: 32 [ 1449.271340][T15865] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 1449.292683][T17872] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3188'. [ 1449.306988][T15865] usb 7-1: config 0 has no interface number 0 [ 1449.324063][T15865] usb 7-1: config 0 interface 12 has no altsetting 0 [ 1449.339121][T17503] veth1_vlan: entered promiscuous mode [ 1449.406612][T17872] overlayfs: failed to clone upperpath [ 1449.432464][T15865] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1449.486718][T15865] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1449.488041][T17503] veth0_macvtap: entered promiscuous mode [ 1449.540458][T15865] usb 7-1: Product: syz [ 1449.544721][T15865] usb 7-1: Manufacturer: syz [ 1449.572444][T15865] usb 7-1: SerialNumber: syz [ 1449.598802][T15865] usb 7-1: config 0 descriptor?? [ 1449.629022][T17878] team_slave_0: entered promiscuous mode [ 1449.634998][T17878] team_slave_1: entered promiscuous mode [ 1449.688982][T17878] vlan2: entered promiscuous mode [ 1449.707472][T17878] team0: entered promiscuous mode [ 1449.833993][T17503] veth1_macvtap: entered promiscuous mode [ 1449.890971][T17503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1449.922844][T17503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1449.939457][T17503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1449.960898][T17503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1449.989299][T17503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1450.008488][T17503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1450.020129][T17503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1450.031220][T17503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1450.044876][T17503] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1450.090226][T17503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1450.119248][T17503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1450.142653][T17503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1450.193085][T17503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1450.213718][T17503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1450.234138][T17503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1450.260618][T17503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1450.315708][T17503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1450.358488][T17503] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1450.510291][T17503] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1450.520274][T17503] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1450.535834][T17503] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1450.545038][T17503] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1450.554042][ T5911] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1450.719490][ T5911] usb 5-1: Using ep0 maxpacket: 16 [ 1450.755734][ T5911] usb 5-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1450.794684][ T5911] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1450.827526][ T5911] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1450.849808][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1450.872982][T17135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1450.888767][ T5911] usb 5-1: Product: syz [ 1450.905524][ T5911] usb 5-1: Manufacturer: syz [ 1450.920666][ T5911] usb 5-1: SerialNumber: syz [ 1450.926414][T17135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1451.098131][T15865] f81534 7-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 1451.145726][ T6106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1451.158896][T15865] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71 [ 1451.168616][ T6106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1451.183249][T15865] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1451.208487][ T5911] usb 5-1: 0:2 : does not exist [ 1451.223759][T15865] f81534 7-1:0.12: probe with driver f81534 failed with error -71 [ 1451.246083][ T5911] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1451.282857][T15865] usb 7-1: USB disconnect, device number 2 [ 1451.359832][ T5911] usb 5-1: USB disconnect, device number 2 [ 1451.663971][T17714] udevd[17714]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1451.819092][ C1] vcan0: j1939_tp_rxtimer: 0xffff888020f3ac00: rx timeout, send abort [ 1451.827968][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888020f3ac00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 1457.545003][T17956] team_slave_0: entered promiscuous mode [ 1457.550880][T17956] team_slave_1: entered promiscuous mode [ 1457.565934][T17956] vlan2: entered promiscuous mode [ 1457.572822][T17956] team0: entered promiscuous mode [ 1457.824905][T15078] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1457.838879][T15078] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1457.850025][T15078] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1457.863281][T15078] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1457.866441][ T5818] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1457.875097][T15078] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1458.036136][T17962] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1458.669445][ T5818] usb 3-1: Using ep0 maxpacket: 16 [ 1458.684787][ T5818] usb 3-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1458.707410][ T5818] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1458.729386][ T5818] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1458.759911][ T5818] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1458.768077][ T5818] usb 3-1: Product: syz [ 1458.782625][ T5818] usb 3-1: Manufacturer: syz [ 1458.807753][ T5818] usb 3-1: SerialNumber: syz [ 1458.963838][T17973] vlan2: entered promiscuous mode [ 1459.080255][ T5818] usb 3-1: 0:2 : does not exist [ 1459.206021][T17977] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1459.212613][T17977] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1459.220528][T17977] vhci_hcd vhci_hcd.0: Device attached [ 1459.709751][T15865] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 1459.960427][ T5818] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1460.058115][T15078] Bluetooth: hci3: command tx timeout [ 1460.186412][T17978] vhci_hcd: connection reset by peer [ 1460.374720][T17135] vhci_hcd: stop threads [ 1460.418009][T17135] vhci_hcd: release socket [ 1460.556796][T17135] vhci_hcd: disconnect device [ 1460.684208][ T5818] usb 3-1: USB disconnect, device number 3 [ 1460.961532][T17959] chnl_net:caif_netlink_parms(): no params data found [ 1460.971544][T17914] udevd[17914]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1462.342576][T15078] Bluetooth: hci3: command tx timeout [ 1463.819009][T18002] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3217'. [ 1463.934646][T14979] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1463.954119][T18002] overlayfs: failed to clone upperpath [ 1464.386584][T17959] bridge0: port 1(bridge_slave_0) entered blocking state [ 1464.394680][T17959] bridge0: port 1(bridge_slave_0) entered disabled state [ 1464.402867][T17959] bridge_slave_0: entered allmulticast mode [ 1464.424985][T15078] Bluetooth: hci3: command tx timeout [ 1465.155684][T17959] bridge_slave_0: entered promiscuous mode [ 1465.169535][T15865] vhci_hcd: vhci_device speed not set [ 1465.176212][T18013] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3218'. [ 1465.404491][T17959] bridge0: port 2(bridge_slave_1) entered blocking state [ 1465.516251][T17959] bridge0: port 2(bridge_slave_1) entered disabled state [ 1465.630641][T17959] bridge_slave_1: entered allmulticast mode [ 1465.772829][T17959] bridge_slave_1: entered promiscuous mode [ 1466.042335][T14979] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1466.342841][T14979] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1466.382458][T18021] bond_slave_0: entered promiscuous mode [ 1466.388516][T18021] bond_slave_1: entered promiscuous mode [ 1466.400009][T18021] vlan2: entered promiscuous mode [ 1466.406110][T18021] bond0: entered promiscuous mode [ 1466.489630][T15078] Bluetooth: hci3: command tx timeout [ 1466.997665][T17959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1467.171596][T14979] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1467.208095][T17959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1467.602608][T17959] team0: Port device team_slave_0 added [ 1467.638388][T17959] team0: Port device team_slave_1 added [ 1467.881529][T18035] bond_slave_0: entered promiscuous mode [ 1467.887335][T18035] bond_slave_1: entered promiscuous mode [ 1467.912479][T18035] vlan2: entered promiscuous mode [ 1467.932290][T18035] bond0: entered promiscuous mode [ 1468.074953][T17959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1468.096264][T17959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1468.141145][T17959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1468.249133][T17959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1468.268499][T17959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1468.335478][T17959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1468.873793][T18054] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1468.880382][T18054] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1468.888851][T18054] vhci_hcd vhci_hcd.0: Device attached [ 1469.088569][T18059] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3230'. [ 1469.141645][ T5818] usb 41-1: new low-speed USB device number 3 using vhci_hcd [ 1470.218308][T17959] hsr_slave_0: entered promiscuous mode [ 1470.261348][T17959] hsr_slave_1: entered promiscuous mode [ 1470.296488][T17959] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1470.304986][T17959] Cannot create hsr debugfs directory [ 1470.311991][T14979] bridge_slave_1: left allmulticast mode [ 1470.320073][T14979] bridge_slave_1: left promiscuous mode [ 1470.327606][T14979] bridge0: port 2(bridge_slave_1) entered disabled state [ 1470.365069][T14979] bridge_slave_0: left allmulticast mode [ 1470.373530][T14979] bridge_slave_0: left promiscuous mode [ 1470.392238][T14979] bridge0: port 1(bridge_slave_0) entered disabled state [ 1471.596466][T17504] Bluetooth: hci2: command 0x0406 tx timeout [ 1471.917360][T14979] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1471.928701][T14979] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1471.941577][T14979] bond0 (unregistering): Released all slaves [ 1474.558655][T14979] hsr_slave_0: left promiscuous mode [ 1474.567378][T14979] hsr_slave_1: left promiscuous mode [ 1474.581099][T14979] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1474.599201][T14979] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1474.618559][T14979] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1474.639604][ T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1474.668112][T14979] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1474.795094][T14979] veth1_macvtap: left promiscuous mode [ 1474.811735][T14979] veth0_macvtap: left promiscuous mode [ 1474.820012][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 1474.838689][ T24] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1474.869904][T14979] veth1_vlan: left promiscuous mode [ 1474.875383][T14979] veth0_vlan: left promiscuous mode [ 1474.884697][ T24] usb 3-1: config 0 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1474.905351][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1474.946178][ T24] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.08 [ 1474.966516][T18135] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3246'. [ 1474.974016][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1475.014878][ T24] usb 3-1: Product: syz [ 1475.039049][ T24] usb 3-1: Manufacturer: syz [ 1475.051876][ T24] usb 3-1: SerialNumber: syz [ 1475.091759][ T24] usb 3-1: config 0 descriptor?? [ 1475.263819][T14979] pimreg39 (unregistering): left allmulticast mode [ 1475.562969][T13696] usb 3-1: USB disconnect, device number 4 [ 1476.563228][T18156] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1476.651285][ T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1476.766944][T14979] batadv0 (unregistering): left allmulticast mode [ 1477.064647][ T24] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1477.076322][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1477.910554][ T24] usb 3-1: config 0 descriptor?? [ 1478.114756][ T24] cp210x 3-1:0.0: cp210x converter detected [ 1478.529643][T18173] sp0: Synchronizing with TNC [ 1478.893336][ T30] audit: type=1326 audit(1745159303.267:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18166 comm="syz.6.3257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4158e169 code=0x7ffc0000 [ 1478.944653][ T24] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 1478.959940][ T30] audit: type=1326 audit(1745159303.267:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18166 comm="syz.6.3257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4158e169 code=0x7ffc0000 [ 1478.983364][ T30] audit: type=1326 audit(1745159303.267:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18166 comm="syz.6.3257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7f9e4158e169 code=0x7ffc0000 [ 1479.010540][ T24] cp210x 3-1:0.0: GPIO initialisation failed: -524 [ 1479.013842][ T30] audit: type=1326 audit(1745159303.267:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18166 comm="syz.6.3257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4158e169 code=0x7ffc0000 [ 1479.040391][ T30] audit: type=1326 audit(1745159303.267:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18166 comm="syz.6.3257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4158e169 code=0x7ffc0000 [ 1479.047134][ T24] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1479.065321][ T30] audit: type=1326 audit(1745159303.277:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18166 comm="syz.6.3257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9e4158e169 code=0x7ffc0000 [ 1479.194703][ T30] audit: type=1326 audit(1745159303.277:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18166 comm="syz.6.3257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4158e169 code=0x7ffc0000 [ 1481.950856][ T30] audit: type=1326 audit(1745159303.277:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18166 comm="syz.6.3257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4158e169 code=0x7ffc0000 [ 1481.974700][ T30] audit: type=1326 audit(1745159303.277:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18166 comm="syz.6.3257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f9e4158e169 code=0x7ffc0000 [ 1481.996975][ T30] audit: type=1326 audit(1745159303.277:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18166 comm="syz.6.3257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4158e169 code=0x7ffc0000 [ 1482.029422][T17894] usb 3-1: USB disconnect, device number 5 [ 1482.153842][T17894] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1482.171270][T17894] cp210x 3-1:0.0: device disconnected [ 1482.967473][T17959] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1483.188771][T17959] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1483.367657][T17959] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1483.464425][T18215] syz_tun: entered promiscuous mode [ 1483.481522][T18215] vlan2: entered promiscuous mode [ 1484.565925][T17959] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1484.699266][T18228] vhci_hcd vhci_hcd.0: port 0 already used [ 1487.059548][T18244] fuse: Bad value for 'group_id' [ 1487.064759][T18244] fuse: Bad value for 'group_id' [ 1488.985277][T17959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1489.013221][T17959] 8021q: adding VLAN 0 to HW filter on device team0 [ 1489.028866][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1489.036214][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1489.146217][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1489.153551][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1489.432223][T17959] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1489.448508][T17959] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1489.462630][ T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1489.659453][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 1489.679089][ T24] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 1489.700207][ T24] usb 5-1: config 0 has no interface number 0 [ 1489.717491][ T24] usb 5-1: config 0 interface 12 has no altsetting 0 [ 1489.737214][ T24] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1489.767896][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1489.788387][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1489.789453][ T24] usb 5-1: Product: syz [ 1489.797057][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1489.809787][ T24] usb 5-1: Manufacturer: syz [ 1489.820332][ T24] usb 5-1: SerialNumber: syz [ 1489.858472][ T24] usb 5-1: config 0 descriptor?? [ 1489.896734][T17959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1490.306531][T17959] veth0_vlan: entered promiscuous mode [ 1490.987956][T17959] veth1_vlan: entered promiscuous mode [ 1491.021177][T17959] veth0_macvtap: entered promiscuous mode [ 1491.032301][T17959] veth1_macvtap: entered promiscuous mode [ 1491.059077][T17959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1491.093345][T17959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1491.159666][T17959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1491.170382][T17959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1491.180418][T17959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1491.191047][T17959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1491.201096][T17959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1491.212660][T17959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1491.238294][T17959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1491.894360][ T24] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1491.947939][T17959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1491.976523][ T24] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 1491.996023][ T24] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1492.006210][T17959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1492.041543][T17959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1492.053456][T17959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1492.091308][ T24] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 1492.097224][T17959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1492.244028][T17959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1492.310085][ T24] usb 5-1: USB disconnect, device number 3 [ 1492.405715][T17959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1492.617614][T17959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1492.629497][T17959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1492.659250][T17959] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1492.740063][T17959] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1492.759533][T17959] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1492.772864][T17959] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1493.128214][ T6106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1493.163340][ T6106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1493.199804][ T9884] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1493.502067][ T9884] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1493.642087][ T9884] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1493.751731][ T9884] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1493.888508][ T9884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1494.540647][ T9884] usb 5-1: config 0 descriptor?? [ 1494.555633][T12912] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1494.564526][T12912] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1494.798069][T18310] Cannot find add_set index 0 as target [ 1496.365536][ T5911] usb 5-1: USB disconnect, device number 4 [ 1498.509557][ T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1499.960183][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 1499.977727][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1499.995335][ T24] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1500.005765][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1500.049473][ T24] usb 5-1: Product: syz [ 1500.069831][ T24] usb 5-1: Manufacturer: syz [ 1500.083784][ T24] usb 5-1: SerialNumber: syz [ 1500.099262][ T24] usb 5-1: config 0 descriptor?? [ 1500.145194][ T24] hub 5-1:0.0: bad descriptor, ignoring hub [ 1500.164484][ T24] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1500.188050][ T24] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input11 [ 1500.209681][T13696] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1500.399443][T13696] usb 2-1: Using ep0 maxpacket: 32 [ 1500.421866][T13696] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 1500.453082][T13696] usb 2-1: config 0 has no interface number 0 [ 1500.511155][T13696] usb 2-1: config 0 interface 12 has no altsetting 0 [ 1500.547268][T13696] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1500.577569][T13696] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1500.660592][T13696] usb 2-1: Product: syz [ 1500.665990][T13696] usb 2-1: Manufacturer: syz [ 1500.675660][T13696] usb 2-1: SerialNumber: syz [ 1500.759617][T18361] fuse: Bad value for 'fd' [ 1501.372008][T13696] usb 2-1: config 0 descriptor?? [ 1501.454949][ T6105] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 1503.338993][T13696] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1503.664768][T13696] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 1503.744344][T18368] bridge0: port 2(bridge_slave_1) entered disabled state [ 1503.752894][T18368] bridge0: port 1(bridge_slave_0) entered disabled state [ 1504.468870][T13696] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1504.511081][T13696] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 1504.931771][T13696] usb 2-1: USB disconnect, device number 6 [ 1505.147244][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1505.147266][ T30] audit: type=1326 audit(1745159329.547:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18379 comm="syz.6.3300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4158e169 code=0x7ffc0000 [ 1505.301722][ T30] audit: type=1326 audit(1745159329.547:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18379 comm="syz.6.3300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4158e169 code=0x7ffc0000 [ 1505.332183][ T30] audit: type=1326 audit(1745159329.547:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18379 comm="syz.6.3300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7f9e4158e169 code=0x7ffc0000 [ 1505.357619][ T30] audit: type=1326 audit(1745159329.547:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18379 comm="syz.6.3300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4158e169 code=0x7ffc0000 [ 1505.417639][ T30] audit: type=1326 audit(1745159329.547:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18379 comm="syz.6.3300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4158e169 code=0x7ffc0000 [ 1505.454542][ T30] audit: type=1326 audit(1745159329.547:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18379 comm="syz.6.3300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9e4158e169 code=0x7ffc0000 [ 1505.486435][ T30] audit: type=1326 audit(1745159329.547:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18379 comm="syz.6.3300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4158e169 code=0x7ffc0000 [ 1505.517829][ T30] audit: type=1326 audit(1745159329.557:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18379 comm="syz.6.3300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4158e169 code=0x7ffc0000 [ 1505.601750][T18368] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1505.617133][ T30] audit: type=1326 audit(1745159329.557:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18379 comm="syz.6.3300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f9e4158e169 code=0x7ffc0000 [ 1505.652930][T18368] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1505.690824][ T30] audit: type=1326 audit(1745159329.557:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18379 comm="syz.6.3300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4158e169 code=0x7ffc0000 [ 1505.809829][T13696] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1505.872020][T18368] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1505.896237][T18368] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1505.926306][T18368] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1505.943963][T18368] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1506.002997][T13696] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1506.019690][T13696] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1506.030474][T13696] usb 2-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 1506.049154][T13696] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1506.086912][T13696] usb 2-1: config 0 descriptor?? [ 1506.781564][ T24] usb 5-1: USB disconnect, device number 5 [ 1506.827389][T13696] elo 0003:04E7:0030.0007: item fetching failed at offset 5/7 [ 1506.853373][T13696] elo 0003:04E7:0030.0007: parse failed [ 1506.859188][T13696] elo 0003:04E7:0030.0007: probe with driver elo failed with error -22 [ 1506.934591][T18414] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3306'. [ 1507.049874][T17504] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 1507.058352][T15078] Bluetooth: hci0: command 0xfc11 tx timeout [ 1507.124868][T18387] sp0: Synchronizing with TNC [ 1508.991280][ T24] usb 2-1: USB disconnect, device number 7 [ 1514.903109][T18459] vlan2: entered promiscuous mode [ 1515.553933][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1515.553955][ T30] audit: type=1326 audit(1745159339.907:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18457 comm="syz.2.3313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f0d58e169 code=0x7ffc0000 [ 1515.641169][ T30] audit: type=1326 audit(1745159339.907:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18457 comm="syz.2.3313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f0d58e169 code=0x7ffc0000 [ 1515.784870][ T30] audit: type=1326 audit(1745159339.907:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18457 comm="syz.2.3313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7f3f0d58e169 code=0x7ffc0000 [ 1515.843950][ T30] audit: type=1326 audit(1745159339.907:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18457 comm="syz.2.3313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f0d58e169 code=0x7ffc0000 [ 1516.288769][ T30] audit: type=1326 audit(1745159339.907:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18457 comm="syz.2.3313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f0d58e169 code=0x7ffc0000 [ 1516.559424][ T30] audit: type=1326 audit(1745159339.917:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18457 comm="syz.2.3313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3f0d58e169 code=0x7ffc0000 [ 1516.836254][ T30] audit: type=1326 audit(1745159339.917:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18457 comm="syz.2.3313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f0d58e169 code=0x7ffc0000 [ 1517.140943][T18481] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1517.293867][T17504] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 1517.824655][T15078] Bluetooth: hci0: command 0xfc11 tx timeout [ 1517.869948][ T30] audit: type=1326 audit(1745159339.917:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18457 comm="syz.2.3313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f0d58e169 code=0x7ffc0000 [ 1518.316648][T18466] sp0: Synchronizing with TNC [ 1518.513523][ T30] audit: type=1326 audit(1745159339.917:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18457 comm="syz.2.3313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f3f0d58e169 code=0x7ffc0000 [ 1518.535050][ C1] vkms_vblank_simulate: vblank timer overrun [ 1518.644579][ T30] audit: type=1326 audit(1745159339.917:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18457 comm="syz.2.3313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f0d58e169 code=0x7ffc0000 [ 1518.800988][T18498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3322'. [ 1521.898670][T18518] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3326'. [ 1522.656828][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1522.656883][ T30] audit: type=1326 audit(1745159347.327:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18507 comm="syz.6.3324" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e4158e169 code=0x0 [ 1523.572725][T18527] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3328'. [ 1523.613939][T18526] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3329'. [ 1523.923426][T18533] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3330'. [ 1524.466521][T18526] overlayfs: failed to clone upperpath [ 1526.498623][T18541] fuse: Unknown parameter 'group_id00000000000000000000' [ 1527.351143][T14979] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 1530.089517][T18405] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1530.415969][T18405] usb 7-1: Using ep0 maxpacket: 16 [ 1530.462223][T18571] overlayfs: failed to clone upperpath [ 1530.709463][T18405] usb 7-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1530.741212][T18405] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1531.586619][T18405] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1531.596527][T18405] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1531.604643][T18405] usb 7-1: Product: syz [ 1531.631800][T18405] usb 7-1: Manufacturer: syz [ 1531.646768][T18405] usb 7-1: SerialNumber: syz [ 1531.736476][T18578] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1531.743070][T18578] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1531.751156][T18578] vhci_hcd vhci_hcd.0: Device attached [ 1531.925121][T18405] usb 7-1: 0:2 : does not exist [ 1532.063617][ T24] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 1532.820659][T15078] Bluetooth: hci1: command 0x0406 tx timeout [ 1532.860787][T18405] usb 7-1: USB disconnect, device number 3 [ 1533.409616][T18579] vhci_hcd: connection reset by peer [ 1533.492636][T17135] vhci_hcd: stop threads [ 1533.575224][T17135] vhci_hcd: release socket [ 1533.663813][T17135] vhci_hcd: disconnect device [ 1533.754528][T18564] udevd[18564]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1533.902407][T18598] No control pipe specified [ 1536.087532][T18624] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3354'. [ 1536.230478][T18626] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3355'. [ 1536.753019][T18626] overlayfs: failed to clone upperpath [ 1537.482197][ T24] vhci_hcd: vhci_device speed not set [ 1539.429353][ T30] audit: type=1326 audit(1745159363.787:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18630 comm="syz.2.3353" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3f0d58e169 code=0x0 [ 1539.533704][T18643] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3356'. [ 1541.035380][T18660] fuse: Unknown parameter 'group_i00000000000000000000' [ 1546.049873][T18700] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3371'. [ 1546.606809][T18711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3374'. [ 1546.617094][T18711] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3374'. [ 1546.799863][T18712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3374'. [ 1546.813867][T18712] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3374'. [ 1547.288402][T18721] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3375'. [ 1547.787889][T18721] vlan2: entered promiscuous mode [ 1548.165963][T18721] bond0: entered promiscuous mode [ 1548.315732][T18721] bond_slave_0: entered promiscuous mode [ 1548.407735][T18721] bond_slave_1: entered promiscuous mode [ 1549.056087][T18740] overlayfs: failed to clone upperpath [ 1550.046274][T18747] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3383'. [ 1550.812323][T18275] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1551.214915][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1551.221482][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1551.234959][T18757] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3384'. [ 1551.283628][T18760] Cannot find add_set index 0 as target [ 1551.632587][T18275] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1551.704329][T18275] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1551.730528][T18275] usb 5-1: config 0 descriptor?? [ 1551.746664][T18275] cp210x 5-1:0.0: cp210x converter detected [ 1552.122932][T18275] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 1552.131331][T18275] cp210x 5-1:0.0: querying part number failed [ 1552.152359][T18275] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1552.409215][ T5911] usb 5-1: USB disconnect, device number 6 [ 1552.428539][ T5911] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1552.450620][ T5911] cp210x 5-1:0.0: device disconnected [ 1553.952797][T18785] vhci_hcd vhci_hcd.0: port 0 already used [ 1554.570099][T18791] hugetlbfs: syz.4.3394 (18791): Using mlock ulimits for SHM_HUGETLB is obsolete [ 1556.311489][ T30] audit: type=1326 audit(1745159381.117:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18792 comm="syz.5.3395" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0dea58e169 code=0x0 [ 1558.022120][T18811] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3400'. [ 1558.032313][T18811] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3400'. [ 1558.298573][T18812] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3400'. [ 1558.323356][T18812] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3400'. [ 1558.676903][T18816] vhci_hcd vhci_hcd.0: port 0 already used [ 1560.023949][T18824] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3404'. [ 1560.076061][T18824] vlan2: entered promiscuous mode [ 1560.240696][ T5911] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1561.232048][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1561.254608][ T5911] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1561.887509][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1561.906311][ T5911] usb 2-1: Product: syz [ 1561.916694][ T5911] usb 2-1: Manufacturer: syz [ 1561.956721][ T5911] usb 2-1: SerialNumber: syz [ 1561.980585][ T5911] usb 2-1: config 0 descriptor?? [ 1563.762819][T18858] vhci_hcd vhci_hcd.0: port 0 already used [ 1565.120985][ T5911] usb 2-1: USB disconnect, device number 8 [ 1566.621118][T18827] udevd[18827]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1566.771707][T18881] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3418'. [ 1568.776264][T18890] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3419'. [ 1570.486329][T18886] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3420'. [ 1570.495464][T18886] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3420'. [ 1570.853687][T18893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3421'. [ 1570.865629][T18893] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3421'. [ 1571.253494][T18894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3421'. [ 1571.315687][T18894] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3421'. [ 1572.344576][T18908] fuse: Unknown parameter 'user_id00000000000000000000' [ 1575.787800][T18934] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3431'. [ 1575.936722][T18934] overlayfs: failed to clone upperpath [ 1576.683790][ T30] audit: type=1326 audit(1745159401.457:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18939 comm="syz.4.3433" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f963938e169 code=0x0 [ 1578.239837][T18943] overlayfs: failed to clone upperpath [ 1579.051485][T15865] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1579.701385][T15865] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1579.853086][T18966] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3440'. [ 1579.862229][T18966] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3440'. [ 1579.885700][T18966] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3440'. [ 1579.894936][T18966] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3440'. [ 1579.918280][T15865] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1580.013440][T15865] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1580.050271][T15865] usb 3-1: Product: syz [ 1580.060101][T15865] usb 3-1: Manufacturer: syz [ 1580.069327][T15865] usb 3-1: SerialNumber: syz [ 1580.092656][T15865] usb 3-1: config 0 descriptor?? [ 1580.150240][T15865] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1581.236736][T18955] udevd[18955]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1584.902240][T15078] Bluetooth: hci3: command 0x0406 tx timeout [ 1585.632397][T18405] usb 3-1: USB disconnect, device number 6 [ 1586.449783][ T30] audit: type=1326 audit(1745159410.977:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18995 comm="syz.6.3450" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e4158e169 code=0x0 [ 1586.470913][ C1] vkms_vblank_simulate: vblank timer overrun [ 1587.101087][T19009] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1587.107689][T19009] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1587.115711][T19009] vhci_hcd vhci_hcd.0: Device attached [ 1587.483713][T15865] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 1587.934892][T19018] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3452'. [ 1587.944038][T19018] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3452'. [ 1587.969229][T19018] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3452'. [ 1587.978648][T19018] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3452'. [ 1588.536918][T19033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3456'. [ 1588.551858][T19033] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3456'. [ 1589.633546][T19038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3456'. [ 1589.643693][T19038] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3456'. [ 1591.109751][T19048] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3460'. [ 1591.118974][T19048] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3460'. [ 1591.167036][T19052] program syz.6.3459 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1595.762942][T19108] vhci_hcd vhci_hcd.0: port 0 already used [ 1598.236457][T19132] netlink: 'syz.1.3476': attribute type 23 has an invalid length. [ 1598.807653][T19134] vhci_hcd vhci_hcd.0: port 0 already used [ 1605.294928][T19168] netlink: 'syz.5.3487': attribute type 23 has an invalid length. [ 1606.962978][T19181] __nla_validate_parse: 2 callbacks suppressed [ 1606.963003][T19181] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3489'. [ 1609.484895][T19207] program syz.1.3495 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1609.606274][T19210] program syz.4.3496 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1612.219555][T19222] netlink: 788 bytes leftover after parsing attributes in process `syz.4.3500'. [ 1612.364273][T19225] netlink: 768 bytes leftover after parsing attributes in process `syz.2.3499'. [ 1612.731425][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1612.743583][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1613.635809][T19240] netlink: 768 bytes leftover after parsing attributes in process `syz.6.3503'. [ 1614.286839][T18405] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1614.911867][T18405] usb 3-1: config 0 has no interfaces? [ 1615.118748][T18405] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1615.128259][T18405] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1615.136847][T18405] usb 3-1: Product: syz [ 1615.141583][T18405] usb 3-1: Manufacturer: syz [ 1615.146300][T18405] usb 3-1: SerialNumber: syz [ 1615.159173][T18405] usb 3-1: config 0 descriptor?? [ 1615.265878][T19254] netlink: 788 bytes leftover after parsing attributes in process `syz.5.3505'. [ 1616.128420][T19263] netlink: 788 bytes leftover after parsing attributes in process `syz.6.3506'. [ 1617.928478][T19277] netlink: 788 bytes leftover after parsing attributes in process `syz.4.3510'. [ 1618.669391][T18405] usb 3-1: USB disconnect, device number 7 [ 1619.016151][T19281] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3512'. [ 1619.106842][T19283] netlink: 788 bytes leftover after parsing attributes in process `syz.2.3511'. [ 1620.098939][T19289] netlink: 768 bytes leftover after parsing attributes in process `syz.6.3514'. [ 1622.569500][T19302] netlink: 788 bytes leftover after parsing attributes in process `syz.2.3515'. [ 1626.206952][T19316] netlink: 788 bytes leftover after parsing attributes in process `syz.1.3520'. [ 1626.777003][T19318] netlink: 788 bytes leftover after parsing attributes in process `syz.5.3521'. [ 1627.164844][T19322] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3518'. [ 1627.187751][T19322] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3518'. [ 1627.283429][T19323] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3518'. [ 1627.393561][T19323] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3518'. [ 1627.481897][T19325] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3523'. [ 1627.506404][T19325] overlayfs: failed to clone upperpath [ 1627.801251][T19329] netlink: 788 bytes leftover after parsing attributes in process `syz.1.3522'. [ 1628.818990][T19337] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3526'. [ 1630.116749][T19345] netlink: 788 bytes leftover after parsing attributes in process `syz.4.3527'. [ 1630.838838][T19337] overlayfs: failed to clone upperpath [ 1631.205089][T19350] program syz.4.3528 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1631.243903][T19356] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3532'. [ 1637.779212][T19393] netlink: 788 bytes leftover after parsing attributes in process `syz.4.3538'. [ 1639.191048][T19401] netlink: 788 bytes leftover after parsing attributes in process `syz.6.3542'. [ 1640.193994][T19415] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3546'. [ 1641.299641][ T5911] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1641.570657][ T5911] usb 2-1: Using ep0 maxpacket: 16 [ 1641.643228][ T5911] usb 2-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1641.736446][ T5911] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1641.918867][ T5911] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1642.003700][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1642.078770][ T5911] usb 2-1: Product: syz [ 1642.131182][ T5911] usb 2-1: Manufacturer: syz [ 1642.167243][ T5911] usb 2-1: SerialNumber: syz [ 1642.665049][T19425] netlink: 788 bytes leftover after parsing attributes in process `syz.5.3548'. [ 1643.240172][ T5911] usb 2-1: 0:2 : does not exist [ 1644.099859][ T5911] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1644.146942][ T5911] usb 2-1: USB disconnect, device number 9 [ 1644.479984][T19438] netlink: 768 bytes leftover after parsing attributes in process `syz.5.3550'. [ 1645.382396][T19418] udevd[19418]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1645.811778][ T24] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1646.363773][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1646.376362][ T24] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1646.388525][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1646.396733][ T24] usb 3-1: Product: syz [ 1646.401110][ T24] usb 3-1: Manufacturer: syz [ 1646.405967][ T24] usb 3-1: SerialNumber: syz [ 1646.536297][ T24] usb 3-1: config 0 descriptor?? [ 1647.345144][T19477] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3565'. [ 1647.365391][T19477] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1647.374368][T19477] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1648.465695][T19488] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3566'. [ 1648.511485][T19488] overlayfs: missing 'workdir' [ 1648.903819][T19504] netlink: 788 bytes leftover after parsing attributes in process `syz.1.3568'. [ 1650.179390][T18275] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1650.235057][ T24] usb 3-1: USB disconnect, device number 8 [ 1650.365971][T18275] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1650.396268][T18275] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1650.423466][T18275] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1650.444250][T18275] usb 7-1: Product: syz [ 1650.454834][T18275] usb 7-1: Manufacturer: syz [ 1650.466048][T18275] usb 7-1: SerialNumber: syz [ 1650.491228][T18275] usb 7-1: config 0 descriptor?? [ 1650.629449][T19432] udevd[19432]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1652.895856][T19543] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3584'. [ 1654.492702][T18275] usb 7-1: USB disconnect, device number 4 [ 1654.905049][T19518] udevd[19518]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1656.312113][T19582] netlink: 788 bytes leftover after parsing attributes in process `syz.6.3594'. [ 1657.317578][T19595] netlink: 768 bytes leftover after parsing attributes in process `syz.5.3596'. [ 1659.611650][T19617] netlink: 788 bytes leftover after parsing attributes in process `syz.1.3598'. [ 1659.740114][T17894] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1659.982181][T17894] usb 3-1: Using ep0 maxpacket: 16 [ 1660.004237][T17894] usb 3-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1660.029452][T17894] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1660.072410][T17894] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1660.089489][T17894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1660.118125][T17894] usb 3-1: Product: syz [ 1660.123927][T17894] usb 3-1: Manufacturer: syz [ 1660.136224][T17894] usb 3-1: SerialNumber: syz [ 1660.749640][T17894] usb 3-1: 0:2 : does not exist [ 1660.771451][T17894] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1660.793549][T17894] usb 3-1: USB disconnect, device number 9 [ 1661.018934][T19418] udevd[19418]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1661.782481][T19639] netlink: 788 bytes leftover after parsing attributes in process `syz.1.3607'. [ 1661.845018][T19640] netlink: 768 bytes leftover after parsing attributes in process `syz.5.3608'. [ 1663.480149][T19658] netlink: 788 bytes leftover after parsing attributes in process `syz.5.3611'. [ 1666.125746][T19688] netlink: 788 bytes leftover after parsing attributes in process `syz.4.3619'. [ 1667.102373][T19699] netlink: 768 bytes leftover after parsing attributes in process `syz.5.3621'. [ 1667.733239][T19701] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3622'. [ 1668.335947][T19710] netlink: 768 bytes leftover after parsing attributes in process `syz.5.3625'. [ 1668.796814][T19712] netlink: 768 bytes leftover after parsing attributes in process `syz.1.3627'. [ 1669.501511][T19720] netlink: 768 bytes leftover after parsing attributes in process `syz.5.3628'. [ 1670.016604][ T979] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1670.016682][T19724] netlink: 788 bytes leftover after parsing attributes in process `syz.1.3629'. [ 1670.379381][ T979] usb 3-1: Using ep0 maxpacket: 16 [ 1670.613210][ T979] usb 3-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1670.641687][ T979] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1670.701561][ T979] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1670.716216][T19736] netlink: 788 bytes leftover after parsing attributes in process `syz.1.3631'. [ 1671.387543][ T979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1671.407100][ T979] usb 3-1: Product: syz [ 1671.419353][ T979] usb 3-1: Manufacturer: syz [ 1671.424004][ T979] usb 3-1: SerialNumber: syz [ 1671.538765][ T979] usb 3-1: can't set config #1, error -71 [ 1671.582091][ T979] usb 3-1: USB disconnect, device number 10 [ 1672.352136][T19755] netlink: 788 bytes leftover after parsing attributes in process `syz.4.3637'. [ 1672.907443][ T979] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1673.730016][T19767] netlink: 768 bytes leftover after parsing attributes in process `syz.5.3640'. [ 1674.219259][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1674.225791][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1674.450476][ T979] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1675.366286][ T979] usb 3-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1675.534357][ T979] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1675.543635][ T979] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1676.542395][T19784] netlink: 788 bytes leftover after parsing attributes in process `syz.6.3644'. [ 1677.832608][T19792] netlink: 788 bytes leftover after parsing attributes in process `syz.6.3645'. [ 1679.186277][T19804] netlink: 768 bytes leftover after parsing attributes in process `syz.5.3648'. [ 1680.148300][T19803] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3647'. [ 1680.160636][T19803] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3647'. [ 1680.329865][T19806] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3647'. [ 1680.343104][T19806] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3647'. [ 1680.569663][ T979] usb 3-1: can't set config #27, error -110 [ 1680.812875][T19813] netlink: 788 bytes leftover after parsing attributes in process `syz.5.3649'. [ 1681.559774][ T9884] usb 3-1: USB disconnect, device number 11 [ 1683.085384][T19847] netlink: 788 bytes leftover after parsing attributes in process `syz.1.3659'. [ 1684.239436][T19853] netlink: 768 bytes leftover after parsing attributes in process `syz.5.3658'. [ 1685.502726][T19861] netlink: 768 bytes leftover after parsing attributes in process `syz.2.3662'. [ 1687.128888][T19873] netlink: 768 bytes leftover after parsing attributes in process `syz.1.3664'. [ 1689.957528][T19917] netlink: 768 bytes leftover after parsing attributes in process `syz.2.3676'. [ 1690.829410][ T5979] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1691.689456][T19932] netlink: 788 bytes leftover after parsing attributes in process `syz.5.3680'. [ 1692.399385][ T5979] usb 7-1: Using ep0 maxpacket: 16 [ 1692.773563][T19937] netlink: 788 bytes leftover after parsing attributes in process `syz.1.3681'. [ 1693.264983][ T5979] usb 7-1: device descriptor read/all, error -71 [ 1695.013191][ T979] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1695.373248][T19961] netlink: 768 bytes leftover after parsing attributes in process `syz.5.3688'. [ 1697.316552][T19978] netlink: 788 bytes leftover after parsing attributes in process `syz.5.3691'. [ 1697.589735][T19977] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3692'. [ 1700.149644][T19987] netlink: 788 bytes leftover after parsing attributes in process `syz.2.3694'. [ 1701.087496][T19991] netlink: 768 bytes leftover after parsing attributes in process `syz.1.3695'. [ 1701.929824][ T979] usb 5-1: device descriptor read/all, error -110 [ 1702.294705][T20004] netlink: 768 bytes leftover after parsing attributes in process `syz.5.3698'. [ 1702.617693][ T979] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1702.762046][T20007] netlink: 788 bytes leftover after parsing attributes in process `syz.6.3699'. [ 1703.269394][ T979] usb 5-1: device descriptor read/64, error -32 [ 1703.935401][T20017] netlink: 788 bytes leftover after parsing attributes in process `syz.5.3702'. [ 1704.244008][ T979] usb usb5-port1: attempt power cycle [ 1704.638234][ T979] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1704.690043][ T979] usb 5-1: device descriptor read/8, error -32 [ 1704.756106][T20024] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3701'. [ 1705.129386][ T979] raw-gadget.0 gadget.4: failed to queue resume event [ 1705.399347][ T979] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1705.419788][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 1705.432331][T20038] netlink: 788 bytes leftover after parsing attributes in process `syz.5.3706'. [ 1706.091583][ T979] usb 5-1: device descriptor read/8, error -32 [ 1706.199440][ T979] raw-gadget.0 gadget.4: failed to queue suspend event [ 1706.352808][ T979] usb usb5-port1: unable to enumerate USB device [ 1706.431523][T19944] raw-gadget.0 gadget.4: failed to queue disconnect event [ 1706.492050][T20045] netlink: 788 bytes leftover after parsing attributes in process `syz.5.3708'. [ 1709.715277][ T30] audit: type=1326 audit(1745159533.847:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20056 comm="syz.5.3713" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0dea58e169 code=0x0 [ 1711.270979][T20073] netlink: 788 bytes leftover after parsing attributes in process `syz.2.3716'. [ 1712.286781][T20083] netlink: 768 bytes leftover after parsing attributes in process `syz.1.3719'. [ 1712.911443][T20085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3718'. [ 1712.920957][T20085] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3718'. [ 1712.961810][T20085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3718'. [ 1713.113614][T20085] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3718'. [ 1713.913192][T20094] netlink: 768 bytes leftover after parsing attributes in process `syz.1.3721'. [ 1716.203084][T20136] netlink: 'syz.6.3740': attribute type 29 has an invalid length. [ 1716.243151][T20136] netlink: 'syz.6.3740': attribute type 29 has an invalid length. [ 1716.268538][T20136] netlink: 'syz.6.3740': attribute type 29 has an invalid length. [ 1716.612277][T20151] netlink: 'syz.2.3747': attribute type 10 has an invalid length. [ 1716.825402][T20151] team0: Device hsr_slave_0 failed to register rx_handler [ 1716.926653][T20163] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3752'. [ 1717.099662][T20170] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3755'. [ 1717.126833][T20169] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3755'. [ 1717.150835][T20170] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3755'. [ 1717.409841][T20187] netlink: 'syz.1.3762': attribute type 10 has an invalid length. [ 1717.435272][T20187] team0: Device hsr_slave_0 failed to register rx_handler [ 1717.755896][T20205] delete_channel: no stack [ 1719.879326][T20237] netlink: 788 bytes leftover after parsing attributes in process `syz.4.3776'. [ 1721.230167][T20245] netlink: 768 bytes leftover after parsing attributes in process `syz.2.3777'. [ 1722.172056][T20247] netlink: 788 bytes leftover after parsing attributes in process `syz.4.3778'. [ 1722.798513][T20266] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3785'. [ 1722.807876][T20266] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3785'. [ 1722.819682][T20266] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3785'. [ 1722.828741][T20266] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3785'. [ 1724.658482][T20281] netlink: 788 bytes leftover after parsing attributes in process `syz.2.3789'. [ 1725.174307][T20285] netlink: 768 bytes leftover after parsing attributes in process `syz.1.3790'. [ 1726.202158][T20294] netlink: 768 bytes leftover after parsing attributes in process `syz.6.3794'. [ 1726.269438][T20300] netlink: 788 bytes leftover after parsing attributes in process `syz.1.3793'. [ 1726.458224][T20302] netlink: 788 bytes leftover after parsing attributes in process `syz.2.3792'. [ 1727.603120][T20311] netlink: 768 bytes leftover after parsing attributes in process `syz.1.3796'. [ 1727.652118][T20312] netlink: 788 bytes leftover after parsing attributes in process `syz.6.3798'. [ 1728.047851][T20318] netlink: 788 bytes leftover after parsing attributes in process `syz.2.3797'. [ 1729.243188][T20335] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1730.284265][T20346] netlink: 768 bytes leftover after parsing attributes in process `syz.1.3805'. [ 1735.545855][T20398] netlink: 788 bytes leftover after parsing attributes in process `syz.1.3823'. [ 1736.200877][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1736.215240][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1739.025295][ T30] audit: type=1326 audit(1745159563.177:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20409 comm="syz.1.3828" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe01b18e169 code=0x0 [ 1739.109432][T17904] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1739.499936][T17904] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1739.510766][T17904] usb 3-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1739.519473][T18405] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1739.527362][T17904] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1739.541097][T17904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1740.319766][T18405] usb 2-1: Using ep0 maxpacket: 32 [ 1740.353549][T18405] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 1740.389454][T18405] usb 2-1: config 0 has no interface number 0 [ 1740.447806][T18405] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1740.471255][T18405] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1740.480619][T18405] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1740.491440][T18405] usb 2-1: Product: syz [ 1740.495812][T18405] usb 2-1: Manufacturer: syz [ 1740.508355][T18405] usb 2-1: SerialNumber: syz [ 1740.723377][T18405] usb 2-1: config 0 descriptor?? [ 1740.737866][T18405] smsc75xx v1.0.0 [ 1740.817198][T17904] usb 3-1: can't set config #27, error -71 [ 1740.844246][T17904] usb 3-1: USB disconnect, device number 12 [ 1742.097968][T18405] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1742.118767][T18405] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1742.788198][ T30] audit: type=1326 audit(1745159567.597:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20459 comm="syz.6.3844" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e4158e169 code=0x0 [ 1743.631860][T18405] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1743.649270][T18405] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write PMT_CTL: -71 [ 1743.659185][T18405] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1743.693878][T18405] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 1743.722174][T18405] usb 2-1: USB disconnect, device number 10 [ 1747.292759][ T24] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1747.532778][ T24] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1747.602780][ T24] usb 3-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1747.637673][ T24] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1747.657504][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1747.691202][ T24] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1747.783329][ T24] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1747.984093][T19418] udevd[19418]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1750.461323][ T24] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1750.688339][ T24] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1750.747192][ T24] usb 7-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1750.769362][ T5911] usb 3-1: USB disconnect, device number 13 [ 1750.879261][ T24] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1750.888472][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1750.966446][ T24] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1751.359618][ T9884] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1751.884258][ T24] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1752.023803][ T24] usb 7-1: USB disconnect, device number 7 [ 1752.199741][ T9884] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1752.228477][ T9884] usb 5-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1752.230472][T19418] udevd[19418]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1752.249123][ T9884] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1752.280005][ T9884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1752.513960][ T9884] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1752.832310][ T9884] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1753.017537][T19418] udevd[19418]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1754.083857][T20599] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3887'. [ 1754.333619][T20599] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3887'. [ 1757.059669][ T5911] usb 5-1: USB disconnect, device number 11 [ 1758.395686][T20633] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3898'. [ 1758.409464][T20633] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3898'. [ 1758.428550][T20633] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3898'. [ 1758.634131][T20633] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3898'. [ 1758.756166][ T30] audit: type=1326 audit(1745159583.567:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20634 comm="syz.1.3899" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe01b18e169 code=0x0 [ 1760.473885][T20651] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3904'. [ 1760.483051][T20651] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3904'. [ 1760.633029][T20656] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3904'. [ 1760.663238][T20656] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3904'. [ 1763.259614][ T9884] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1763.569582][ T9884] usb 2-1: Using ep0 maxpacket: 16 [ 1763.804460][ T9884] usb 2-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1763.821091][ T9884] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1763.835262][ T9884] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1763.844790][ T9884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1763.867316][ T9884] usb 2-1: Product: syz [ 1763.879590][ T9884] usb 2-1: Manufacturer: syz [ 1763.884248][ T9884] usb 2-1: SerialNumber: syz [ 1764.325168][ T9884] usb 2-1: 0:2 : does not exist [ 1764.718079][T20716] netlink: 788 bytes leftover after parsing attributes in process `syz.5.3922'. [ 1764.774420][ T9884] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1764.785092][T20717] netlink: 788 bytes leftover after parsing attributes in process `syz.4.3923'. [ 1764.898271][ T9884] usb 2-1: USB disconnect, device number 11 [ 1765.289151][T20724] udevd[20724]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1769.323349][T20786] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3943'. [ 1769.333612][T20786] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3943'. [ 1769.609139][T20786] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3943'. [ 1769.620914][T20786] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3943'. [ 1769.996928][T20791] program syz.2.3944 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1770.941711][T20798] netlink: 768 bytes leftover after parsing attributes in process `syz.5.3945'. [ 1773.197449][T20830] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3953'. [ 1773.380991][T20830] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3953'. [ 1773.422208][T20830] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3953'. [ 1773.437534][T20836] program syz.2.3958 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1773.451153][T20830] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3953'. [ 1773.482633][T20832] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3957'. [ 1773.509474][ T9884] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1773.799353][ T9884] usb 2-1: Using ep0 maxpacket: 16 [ 1774.772258][ T9884] usb 2-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1774.782966][ T9884] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1774.795430][ T9884] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1775.268170][ T9884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1775.276338][ T9884] usb 2-1: Product: syz [ 1775.309732][ T9884] usb 2-1: Manufacturer: syz [ 1775.314408][ T9884] usb 2-1: SerialNumber: syz [ 1775.590693][ T9884] usb 2-1: 0:2 : does not exist [ 1775.615560][ T9884] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1776.357340][ T9884] usb 2-1: USB disconnect, device number 12 [ 1777.101932][T20724] udevd[20724]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1777.149898][T20862] __nla_validate_parse: 4 callbacks suppressed [ 1777.149944][T20862] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3964'. [ 1777.505021][T20870] netlink: 788 bytes leftover after parsing attributes in process `syz.6.3966'. [ 1779.934937][T20862] team_slave_0: left promiscuous mode [ 1779.951777][T20862] team0 (unregistering): Port device team_slave_0 removed [ 1779.963068][T20862] team_slave_1: left promiscuous mode [ 1779.975883][T20862] team0 (unregistering): Port device team_slave_1 removed [ 1783.170074][T20918] delete_channel: no stack [ 1783.196991][T20919] program syz.4.3980 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1790.514313][T20989] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4001'. [ 1790.523465][T20989] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4001'. [ 1790.554317][T20989] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4001'. [ 1791.332716][T20989] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4001'. [ 1791.450338][T21000] program syz.1.4004 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1791.484679][T20999] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4003'. [ 1791.515747][T20999] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4003'. [ 1791.525205][T20999] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4003'. [ 1791.538413][T20999] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4003'. [ 1794.940675][T21036] program syz.4.4017 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1796.143657][T21054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4024'. [ 1796.158169][T21054] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4024'. [ 1796.399997][T21058] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4024'. [ 1796.426484][T21058] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4024'. [ 1797.012567][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1797.585530][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1806.550310][T17904] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1807.173871][T17904] usb 5-1: no configurations [ 1807.259311][T17904] usb 5-1: can't read configurations, error -22 [ 1807.619343][T17904] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1807.961144][T17904] usb 5-1: no configurations [ 1807.996542][T17904] usb 5-1: can't read configurations, error -22 [ 1808.092075][T17904] usb usb5-port1: attempt power cycle [ 1808.568866][T17904] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1808.633890][T17904] usb 5-1: no configurations [ 1808.638809][T17904] usb 5-1: can't read configurations, error -22 [ 1808.689296][ T9884] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1808.799394][T17904] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1808.846667][ T9884] usb 3-1: Using ep0 maxpacket: 32 [ 1808.855718][T17904] usb 5-1: no configurations [ 1808.871674][T17904] usb 5-1: can't read configurations, error -22 [ 1809.068058][ T9884] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 1809.087799][T17904] usb usb5-port1: unable to enumerate USB device [ 1809.095423][ T9884] usb 3-1: config 0 has no interface number 0 [ 1809.116492][ T9884] usb 3-1: config 0 interface 184 has no altsetting 0 [ 1809.148193][ T9884] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1809.178228][ T9884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1809.218335][ T9884] usb 3-1: Product: syz [ 1809.235391][ T9884] usb 3-1: Manufacturer: syz [ 1809.327353][ T9884] usb 3-1: SerialNumber: syz [ 1809.439514][ T9884] usb 3-1: config 0 descriptor?? [ 1809.489628][ T9884] smsc75xx v1.0.0 [ 1809.947677][T13696] hid-generic C990:0003:0000.0008: unknown main item tag 0x0 [ 1810.011923][T13696] hid-generic C990:0003:0000.0008: unknown main item tag 0x0 [ 1810.057600][T13696] hid-generic C990:0003:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1810.173652][ T9884] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1810.239270][ T9884] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1810.268393][T18405] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1810.440592][T18405] usb 2-1: Using ep0 maxpacket: 32 [ 1810.492564][T18405] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1810.508024][T18405] usb 2-1: config 5 has an invalid interface number: 61 but max is 0 [ 1810.551960][T18405] usb 2-1: config 5 has no interface number 0 [ 1810.610472][T18405] usb 2-1: config 5 interface 61 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 1810.853054][T18405] usb 2-1: config 5 interface 61 has no altsetting 0 [ 1810.910075][T18405] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice= 0.0a [ 1810.919420][T18405] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1810.927474][T18405] usb 2-1: Product: syz [ 1810.932352][T18405] usb 2-1: Manufacturer: syz [ 1810.937695][T18405] usb 2-1: SerialNumber: syz [ 1811.178315][ T9884] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 1811.199331][ T9884] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 1811.215806][ T9884] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1811.238707][ T9884] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 1811.244901][T18405] ath6kl: Failed to submit usb control message: -71 [ 1811.274431][ T9884] usb 3-1: USB disconnect, device number 14 [ 1811.319255][T18405] ath6kl: unable to send the bmi data to the device: -71 [ 1811.374314][T18405] ath6kl: Unable to send get target info: -71 [ 1811.413103][T18405] ath6kl: Failed to init ath6kl core: -71 [ 1811.469352][T18405] ath6kl_usb 2-1:5.61: probe with driver ath6kl_usb failed with error -71 [ 1811.518733][T18405] usb 2-1: USB disconnect, device number 13 [ 1815.299471][T18275] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1815.643328][T18275] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1815.667047][T18275] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1815.693192][T18275] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1815.715130][T18275] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1815.738689][T18275] usb 5-1: config 0 descriptor?? [ 1817.021319][ T979] usb 5-1: USB disconnect, device number 16 [ 1821.858704][T21351] program syz.1.4117 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1825.049606][T18405] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1825.239388][T18405] usb 3-1: Using ep0 maxpacket: 32 [ 1825.792511][T18405] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 1825.809224][T18405] usb 3-1: config 0 has no interface number 0 [ 1825.815456][T18405] usb 3-1: config 0 interface 184 has no altsetting 0 [ 1825.845478][T18405] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1825.945054][T18405] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1825.988107][T18275] hid-generic C990:0003:0000.0009: unknown main item tag 0x0 [ 1826.007293][T18405] usb 3-1: Product: syz [ 1826.017417][T18275] hid-generic C990:0003:0000.0009: unknown main item tag 0x0 [ 1826.025929][T18405] usb 3-1: Manufacturer: syz [ 1826.055835][T18405] usb 3-1: SerialNumber: syz [ 1826.096838][T18275] hid-generic C990:0003:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1826.161062][T18405] usb 3-1: config 0 descriptor?? [ 1826.187640][T18405] smsc75xx v1.0.0 [ 1826.798855][T18405] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1827.836990][T18405] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1827.936489][T18405] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1827.955339][T18405] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1827.970283][T18405] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1827.981400][T18405] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1827.992135][T18405] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 1828.005777][T18405] usb 3-1: USB disconnect, device number 15 [ 1828.210249][T21400] udevd[21400]: setting mode of /dev/bus/usb/003/015 to 020664 failed: No such file or directory [ 1828.934975][T21400] udevd[21400]: setting owner of /dev/bus/usb/003/015 to uid=0, gid=0 failed: No such file or directory [ 1830.883746][ T5979] hid-generic C990:0003:0000.000A: unknown main item tag 0x0 [ 1830.920027][ T5979] hid-generic C990:0003:0000.000A: unknown main item tag 0x0 [ 1831.005080][ T5979] hid-generic C990:0003:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1832.329287][ T979] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1833.537838][ T979] usb 3-1: Using ep0 maxpacket: 32 [ 1833.571588][ T979] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 1833.628213][ T979] usb 3-1: config 0 has no interface number 0 [ 1833.652755][ T979] usb 3-1: config 0 interface 184 has no altsetting 0 [ 1833.692492][ T979] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1833.712365][ T979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1833.729627][ T979] usb 3-1: Product: syz [ 1833.737804][ T979] usb 3-1: Manufacturer: syz [ 1833.746527][T21467] program syz.6.4153 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1833.760814][ T979] usb 3-1: SerialNumber: syz [ 1833.818094][ T979] usb 3-1: config 0 descriptor?? [ 1833.842209][ T979] smsc75xx v1.0.0 [ 1835.005530][ T979] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1835.019909][ T979] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1835.864686][ T979] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 1835.877996][ T979] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 1835.915307][ T979] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1835.975720][ T979] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 1836.019263][ T979] usb 3-1: USB disconnect, device number 16 [ 1840.220636][T18275] hid-generic C990:0003:0000.000B: unknown main item tag 0x0 [ 1840.260987][T18275] hid-generic C990:0003:0000.000B: unknown main item tag 0x0 [ 1840.322533][T18275] hid-generic C990:0003:0000.000B: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1842.500155][T18275] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1842.671672][T18275] usb 2-1: Using ep0 maxpacket: 32 [ 1842.697544][T18275] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 1842.859107][T18275] usb 2-1: config 0 has no interface number 0 [ 1842.870353][T18275] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1842.880450][T18275] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1842.920781][T18275] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1842.974789][T18275] usb 2-1: Product: syz [ 1842.979087][T18275] usb 2-1: Manufacturer: syz [ 1843.030853][T18275] usb 2-1: SerialNumber: syz [ 1843.087520][T18275] usb 2-1: config 0 descriptor?? [ 1843.184242][T18275] smsc75xx v1.0.0 [ 1843.782033][T18275] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1843.799738][T17904] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1843.971230][T18275] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1843.999264][T17904] usb 7-1: Using ep0 maxpacket: 16 [ 1844.040302][T17904] usb 7-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1844.054562][T17904] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1844.066887][T17904] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1844.076639][T17904] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1844.085070][T17904] usb 7-1: Product: syz [ 1844.090919][T17904] usb 7-1: Manufacturer: syz [ 1844.095684][T17904] usb 7-1: SerialNumber: syz [ 1844.278274][T18275] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 1844.370405][T21579] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1845.195656][T17904] usb 7-1: 0:2 : does not exist [ 1845.220536][T18275] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 1845.243366][T18275] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 1845.299386][T17904] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 1845.357510][T17904] usb 7-1: USB disconnect, device number 8 [ 1845.433561][T21536] udevd[21536]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1845.444762][T18275] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -32 [ 1846.006814][T21593] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1846.614393][T13696] usb 2-1: USB disconnect, device number 14 [ 1847.222377][T21607] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1851.009401][T17904] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1851.092278][T13696] hid-generic C990:0003:0000.000C: unknown main item tag 0x0 [ 1851.179647][T17904] usb 3-1: Using ep0 maxpacket: 32 [ 1851.197609][T17904] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 1851.207153][T13696] hid-generic C990:0003:0000.000C: unknown main item tag 0x0 [ 1851.219612][T17904] usb 3-1: config 0 has no interface number 0 [ 1851.229624][T13696] hid-generic C990:0003:0000.000C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1851.298701][T17904] usb 3-1: config 0 interface 184 has no altsetting 0 [ 1851.316201][T17904] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1851.325804][T17904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1851.343676][T17904] usb 3-1: Product: syz [ 1851.347972][T17904] usb 3-1: Manufacturer: syz [ 1851.357014][T17904] usb 3-1: SerialNumber: syz [ 1851.420789][T17904] usb 3-1: config 0 descriptor?? [ 1851.427997][T17904] smsc75xx v1.0.0 [ 1852.055199][T17904] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1852.093925][T17904] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1852.615203][T17904] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 1852.626578][T17904] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 1852.638372][T17904] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 1852.648803][T17904] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -32 [ 1853.214762][T21656] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4207'. [ 1854.160577][T21569] usb 3-1: USB disconnect, device number 17 [ 1854.707364][T21569] hid-generic C990:0003:0000.000D: unknown main item tag 0x0 [ 1854.716425][T21569] hid-generic C990:0003:0000.000D: unknown main item tag 0x0 [ 1854.742035][T21569] hid-generic C990:0003:0000.000D: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1854.756519][T21656] team_slave_0: left promiscuous mode [ 1854.792623][T21656] team0 (unregistering): Port device team_slave_0 removed [ 1854.807508][T21656] team_slave_1: left promiscuous mode [ 1854.831247][T21656] team0 (unregistering): Port device team_slave_1 removed [ 1855.426322][T21673] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1858.420367][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1858.440571][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1863.053566][T21569] hid-generic C990:0003:0000.000E: unknown main item tag 0x0 [ 1863.072512][T21569] hid-generic C990:0003:0000.000E: unknown main item tag 0x0 [ 1863.301269][T21569] hid-generic C990:0003:0000.000E: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1872.208868][T21783] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1876.511062][T21805] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1877.084578][T21814] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1882.730061][T20400] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1882.744279][T20400] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1882.754089][T20400] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1882.766744][T20400] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1882.781247][T20400] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1882.792020][T19012] vhci_hcd: connection reset by peer [ 1882.995145][ T12] vhci_hcd: stop threads [ 1883.006642][ T12] vhci_hcd: release socket [ 1883.034974][ T12] vhci_hcd: disconnect device [ 1883.109709][T15865] vhci_hcd: vhci_device speed not set [ 1884.969429][T20400] Bluetooth: hci0: command tx timeout [ 1884.997387][T21861] chnl_net:caif_netlink_parms(): no params data found [ 1885.779437][T17904] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1885.803268][T18275] hid-generic C990:0003:0000.000F: unknown main item tag 0x0 [ 1885.842484][T18275] hid-generic C990:0003:0000.000F: unknown main item tag 0x0 [ 1885.989239][T17904] usb 3-1: Using ep0 maxpacket: 16 [ 1885.998287][T17904] usb 3-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1886.000680][T18275] hid-generic C990:0003:0000.000F: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1886.011045][T17904] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1886.031611][T17904] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1886.040904][T17904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1886.048891][T17904] usb 3-1: Product: syz [ 1886.055513][T17904] usb 3-1: Manufacturer: syz [ 1886.063300][T17904] usb 3-1: SerialNumber: syz [ 1886.101654][T21861] bridge0: port 1(bridge_slave_0) entered blocking state [ 1886.108934][T21861] bridge0: port 1(bridge_slave_0) entered disabled state [ 1886.145204][T21861] bridge_slave_0: entered allmulticast mode [ 1886.157588][T21861] bridge_slave_0: entered promiscuous mode [ 1886.201697][T21861] bridge0: port 2(bridge_slave_1) entered blocking state [ 1886.217888][T21861] bridge0: port 2(bridge_slave_1) entered disabled state [ 1886.267748][T21861] bridge_slave_1: entered allmulticast mode [ 1886.277816][T21861] bridge_slave_1: entered promiscuous mode [ 1886.342921][T17904] usb 3-1: 0:2 : does not exist [ 1886.428866][T17904] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1886.552500][T17904] usb 3-1: USB disconnect, device number 18 [ 1886.800015][T21861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1886.811986][T21861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1886.884028][T21856] udevd[21856]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1886.959977][T21861] team0: Port device team_slave_0 added [ 1886.987691][T21861] team0: Port device team_slave_1 added [ 1887.053134][T20400] Bluetooth: hci0: command tx timeout [ 1887.075008][T21861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1887.090558][T21861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1887.158531][T21861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1887.182198][T21861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1887.191621][T21861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1887.262551][T21861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1887.439568][T21861] hsr_slave_0: entered promiscuous mode [ 1887.451358][T21861] hsr_slave_1: entered promiscuous mode [ 1887.460104][T21861] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1887.479241][T21861] Cannot create hsr debugfs directory [ 1887.712286][T21861] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1887.727839][T21861] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1887.741433][T21861] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1887.753014][T21861] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1887.854840][T21861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1887.874574][T21861] 8021q: adding VLAN 0 to HW filter on device team0 [ 1887.890808][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 1887.898138][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1887.914440][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 1887.921639][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1888.119017][T21861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1888.344785][T21861] veth0_vlan: entered promiscuous mode [ 1888.360449][T21861] veth1_vlan: entered promiscuous mode [ 1888.395638][T21861] veth0_macvtap: entered promiscuous mode [ 1888.405469][T21861] veth1_macvtap: entered promiscuous mode [ 1888.426085][T21861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1888.437821][T21861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1888.447873][T21861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1888.458974][T21861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1888.469765][T21861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1888.480362][T21861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1888.490936][T21861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1888.502636][T21861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1888.514522][T21861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1888.526126][T21861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1888.537194][T21861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1888.547230][T21861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1888.558672][T21861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1888.568940][T21861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1888.580936][T21861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1888.590943][T21861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1888.601583][T21861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1888.613503][T21861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1888.625470][T21861] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1888.635013][T21861] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1888.643874][T21861] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1888.653033][T21861] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1888.765514][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1888.776080][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1888.832882][T12912] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1888.841294][T12912] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1889.134442][T20400] Bluetooth: hci0: command tx timeout [ 1891.209599][T20400] Bluetooth: hci0: command tx timeout [ 1919.854086][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1919.861813][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1940.403359][T12912] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1940.493858][T12912] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1940.583368][T12912] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1940.648013][T12912] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1940.814658][T12912] bridge_slave_1: left allmulticast mode [ 1940.821825][T12912] bridge_slave_1: left promiscuous mode [ 1940.827755][T12912] bridge0: port 2(bridge_slave_1) entered disabled state [ 1940.841697][T12912] bridge_slave_0: left allmulticast mode [ 1940.847411][T12912] bridge_slave_0: left promiscuous mode [ 1940.853916][T12912] bridge0: port 1(bridge_slave_0) entered disabled state [ 1941.514231][T12912] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1941.525935][T12912] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1941.536976][T12912] bond0 (unregistering): Released all slaves [ 1943.483430][T12912] hsr_slave_0: left promiscuous mode [ 1943.489566][T12912] hsr_slave_1: left promiscuous mode [ 1943.495496][T12912] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1943.504607][T12912] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1943.513994][T12912] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1943.522604][T12912] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1943.546035][T12912] veth1_macvtap: left promiscuous mode [ 1943.551746][T12912] veth0_macvtap: left promiscuous mode [ 1943.557466][T12912] veth1_vlan: left promiscuous mode [ 1943.562929][T12912] veth0_vlan: left promiscuous mode [ 1944.070911][T12912] team0 (unregistering): Port device team_slave_1 removed [ 1944.115957][T12912] team0 (unregistering): Port device team_slave_0 removed [ 1981.298246][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1981.304739][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2008.969579][T20400] Bluetooth: hci0: command 0x0406 tx timeout [ 2036.969449][ T31] INFO: task kworker/1:3:5818 blocked for more than 143 seconds. [ 2036.977346][ T31] Not tainted 6.15.0-rc2-syzkaller-00471-g119009db2674 #0 [ 2036.986380][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2036.995369][ T31] task:kworker/1:3 state:D stack:19968 pid:5818 tgid:5818 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 2037.007707][ T31] Workqueue: usb_hub_wq hub_event [ 2037.012998][ T31] Call Trace: [ 2037.016364][ T31] [ 2037.024074][ T31] __schedule+0x1b33/0x51f0 [ 2037.028748][ T31] ? schedule+0x163/0x360 [ 2037.033337][ T31] ? __pfx___schedule+0x10/0x10 [ 2037.044685][ T31] ? schedule+0x90/0x360 [ 2037.054141][ T31] ? schedule+0x90/0x360 [ 2037.058532][ T31] schedule+0x163/0x360 [ 2037.062988][ T31] usb_kill_urb+0x1c5/0x2e0 [ 2037.067586][ T31] ? __pfx_usb_kill_urb+0x10/0x10 [ 2037.072779][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2037.078939][ T31] usb_start_wait_urb+0x1b2/0x530 [ 2037.084131][ T31] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 2037.091228][ T31] usb_control_msg+0x2b3/0x4c0 [ 2037.096090][ T31] ? __pfx_usb_control_msg+0x10/0x10 [ 2037.101598][ T31] ? __kasan_kmalloc+0x9d/0xb0 [ 2037.106436][ T31] hub_port_init+0xcbe/0x2730 [ 2037.111411][ T31] hub_event+0x281c/0x50f0 [ 2037.115944][ T31] ? __pfx_hub_event+0x10/0x10 [ 2037.120847][ T31] ? __lock_acquire+0xad5/0xd80 [ 2037.125789][ T31] ? process_scheduled_works+0x9cb/0x18e0 [ 2037.131796][ T31] process_scheduled_works+0xac3/0x18e0 [ 2037.137526][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 2037.144559][ T31] ? assign_work+0x367/0x3d0 [ 2037.149382][ T31] worker_thread+0x870/0xd50 [ 2037.154112][ T31] ? __kthread_parkme+0x1a8/0x200 [ 2037.159358][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2037.164557][ T31] kthread+0x7b7/0x940 [ 2037.168663][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2037.173943][ T31] ? __pfx_kthread+0x10/0x10 [ 2037.178602][ T31] ? __pfx_kthread+0x10/0x10 [ 2037.183344][ T31] ? __pfx_kthread+0x10/0x10 [ 2037.188020][ T31] ? __pfx_kthread+0x10/0x10 [ 2037.192774][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2037.198056][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 2037.203721][ T31] ? __pfx_kthread+0x10/0x10 [ 2037.208387][ T31] ret_from_fork+0x4b/0x80 [ 2037.213313][ T31] ? __pfx_kthread+0x10/0x10 [ 2037.217991][ T31] ret_from_fork_asm+0x1a/0x30 [ 2037.222948][ T31] [ 2037.226038][ T31] INFO: task kworker/0:4:5881 blocked for more than 143 seconds. [ 2037.233894][ T31] Not tainted 6.15.0-rc2-syzkaller-00471-g119009db2674 #0 [ 2037.242511][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2037.251386][ T31] task:kworker/0:4 state:D stack:20936 pid:5881 tgid:5881 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 2037.263590][ T31] Workqueue: usb_hub_wq hub_event [ 2037.268662][ T31] Call Trace: [ 2037.272022][ T31] [ 2037.275006][ T31] __schedule+0x1b33/0x51f0 [ 2037.279662][ T31] ? do_raw_spin_lock+0xc1/0x370 [ 2037.284701][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2037.290503][ T31] ? schedule+0x163/0x360 [ 2037.294940][ T31] ? __pfx___schedule+0x10/0x10 [ 2037.299962][ T31] ? schedule+0x90/0x360 [ 2037.304280][ T31] ? schedule+0x90/0x360 [ 2037.308567][ T31] schedule+0x163/0x360 [ 2037.313124][ T31] usb_kill_urb+0x1c5/0x2e0 [ 2037.317716][ T31] ? __pfx_usb_kill_urb+0x10/0x10 [ 2037.322921][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2037.329118][ T31] usb_start_wait_urb+0x1b2/0x530 [ 2037.334278][ T31] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 2037.339985][ T31] usb_control_msg+0x2b3/0x4c0 [ 2037.345738][ T31] ? __pfx_usb_control_msg+0x10/0x10 [ 2037.351187][ T31] ? hub_port_init+0x9a1/0x2730 [ 2037.356154][ T31] hub_port_init+0xcbe/0x2730 [ 2037.361033][ T31] hub_event+0x281c/0x50f0 [ 2037.365608][ T31] ? __pfx_hub_event+0x10/0x10 [ 2037.370530][ T31] ? irqentry_exit+0x63/0x90 [ 2037.375193][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 2037.380587][ T31] ? process_scheduled_works+0x9cb/0x18e0 [ 2037.386394][ T31] ? __pfx_hub_event+0x10/0x10 [ 2037.391340][ T31] ? process_scheduled_works+0xa5a/0x18e0 [ 2037.397156][ T31] ? process_scheduled_works+0x9cb/0x18e0 [ 2037.403050][ T31] process_scheduled_works+0xac3/0x18e0 [ 2037.408705][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 2037.414897][ T31] ? assign_work+0x367/0x3d0 [ 2037.419992][ T31] worker_thread+0x870/0xd50 [ 2037.424724][ T31] ? __kthread_parkme+0x1a8/0x200 [ 2037.430955][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2037.436187][ T31] kthread+0x7b7/0x940 [ 2037.440400][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2037.446566][ T31] ? __pfx_kthread+0x10/0x10 [ 2037.451688][ T31] ? __pfx_kthread+0x10/0x10 [ 2037.456356][ T31] ? __pfx_kthread+0x10/0x10 [ 2037.461069][ T31] ? __pfx_kthread+0x10/0x10 [ 2037.465725][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2037.471068][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 2037.476330][ T31] ? __pfx_kthread+0x10/0x10 [ 2037.481073][ T31] ret_from_fork+0x4b/0x80 [ 2037.485562][ T31] ? __pfx_kthread+0x10/0x10 [ 2037.490280][ T31] ret_from_fork_asm+0x1a/0x30 [ 2037.495134][ T31] [ 2037.498246][ T31] [ 2037.498246][ T31] Showing all locks held in the system: [ 2037.506117][ T31] 1 lock held by khungtaskd/31: [ 2037.511119][ T31] #0: ffffffff8ed3df20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x30/0x180 [ 2037.521194][ T31] 2 locks held by getty/5583: [ 2037.525938][ T31] #0: ffff888036be20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2037.536144][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x5bb/0x1700 [ 2037.546536][ T31] 5 locks held by kworker/1:3/5818: [ 2037.552845][ T31] #0: ffff888020efbd48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 2037.564392][ T31] #1: ffffc90003f8fc60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 2037.576419][ T31] #2: ffff88823bec0198 (&dev->mutex){....}-{4:4}, at: hub_event+0x200/0x50f0 [ 2037.585508][ T31] #3: ffff88814574b510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2494/0x50f0 [ 2037.595621][ T31] #4: ffff888029c90c68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x24cd/0x50f0 [ 2037.605515][ T31] 5 locks held by kworker/0:4/5881: [ 2037.611195][ T31] #0: ffff888020efbd48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 2037.622800][ T31] #1: ffffc900044bfc60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 2037.634837][ T31] #2: ffff88814176e198 (&dev->mutex){....}-{4:4}, at: hub_event+0x200/0x50f0 [ 2037.644083][ T31] #3: ffff88802a089510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2494/0x50f0 [ 2037.654984][ T31] #4: ffff888029ac9b68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x24cd/0x50f0 [ 2037.664931][ T31] 3 locks held by kworker/u8:10/6105: [ 2037.670423][ T31] 7 locks held by kworker/u8:1/12912: [ 2037.675908][ T31] [ 2037.678292][ T31] ============================================= [ 2037.678292][ T31] [ 2037.686926][ T31] NMI backtrace for cpu 1 [ 2037.686950][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc2-syzkaller-00471-g119009db2674 #0 PREEMPT(full) [ 2037.686976][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2037.686989][ T31] Call Trace: [ 2037.686997][ T31] [ 2037.687005][ T31] dump_stack_lvl+0x241/0x360 [ 2037.687042][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2037.687070][ T31] ? __pfx__printk+0x10/0x10 [ 2037.687111][ T31] nmi_cpu_backtrace+0x4ab/0x4e0 [ 2037.687148][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2037.687175][ T31] ? _printk+0xd5/0x120 [ 2037.687202][ T31] ? __wake_up_klogd+0xcc/0x110 [ 2037.687226][ T31] ? __pfx__printk+0x10/0x10 [ 2037.687256][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2037.687289][ T31] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 2037.687322][ T31] watchdog+0x1058/0x10a0 [ 2037.687351][ T31] ? watchdog+0x1ea/0x10a0 [ 2037.687382][ T31] ? __pfx_watchdog+0x10/0x10 [ 2037.687407][ T31] kthread+0x7b7/0x940 [ 2037.687432][ T31] ? __pfx_watchdog+0x10/0x10 [ 2037.687458][ T31] ? __pfx_kthread+0x10/0x10 [ 2037.687483][ T31] ? __pfx_kthread+0x10/0x10 [ 2037.687512][ T31] ? __pfx_kthread+0x10/0x10 [ 2037.687532][ T31] ? __pfx_kthread+0x10/0x10 [ 2037.687553][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2037.687581][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 2037.687601][ T31] ? __pfx_kthread+0x10/0x10 [ 2037.687623][ T31] ret_from_fork+0x4b/0x80 [ 2037.687640][ T31] ? __pfx_kthread+0x10/0x10 [ 2037.687661][ T31] ret_from_fork_asm+0x1a/0x30 [ 2037.687707][ T31] [ 2037.687738][ T31] Sending NMI from CPU 1 to CPUs 0: [ 2037.851346][ C0] NMI backtrace for cpu 0 [ 2037.851364][ C0] CPU: 0 UID: 0 PID: 17904 Comm: kworker/0:5 Not tainted 6.15.0-rc2-syzkaller-00471-g119009db2674 #0 PREEMPT(full) [ 2037.851385][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2037.851397][ C0] Workqueue: wg-crypt-wg0 wg_packet_encrypt_worker [ 2037.851428][ C0] RIP: 0010:wg_packet_encrypt_worker+0x1ec/0x1810 [ 2037.851454][ C0] Code: 24 a8 00 00 00 42 0f b6 04 20 84 c0 0f 85 57 14 00 00 48 8b 44 24 48 4c 63 30 4a 8d 1c f3 48 89 d8 48 c1 e8 03 42 80 3c 20 00 <74> 08 48 89 df e8 6a 3a 6d fb 48 8b 03 48 89 84 24 b0 00 00 00 48 [ 2037.851469][ C0] RSP: 0018:ffffc900046ef5c0 EFLAGS: 00000246 [ 2037.851486][ C0] RAX: 1ffff11007969296 RBX: ffff88803cb494b0 RCX: 1ffff1100b3229d9 [ 2037.851500][ C0] RDX: 1ffff1100b3229c8 RSI: 0000000000000400 RDI: 0000000000000000 [ 2037.851511][ C0] RBP: ffffc900046efb10 R08: ffffffff86bd2f82 R09: fffff520008ddea8 [ 2037.851524][ C0] R10: dffffc0000000000 R11: fffff520008ddea8 R12: dffffc0000000000 [ 2037.851543][ C0] R13: ffffc900046efaa0 R14: 0000000000000296 R15: 0000000000000400 [ 2037.851554][ C0] FS: 0000000000000000(0000) GS:ffff888124fcf000(0000) knlGS:0000000000000000 [ 2037.851568][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2037.851579][ C0] CR2: 00005593c38c1600 CR3: 000000000eb38000 CR4: 00000000003526f0 [ 2037.851595][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2037.851605][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2037.851615][ C0] Call Trace: [ 2037.851621][ C0] [ 2037.851633][ C0] ? __lock_acquire+0xad5/0xd80 [ 2037.851665][ C0] ? __pfx_wg_packet_encrypt_worker+0x10/0x10 [ 2037.851688][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 2037.851709][ C0] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 2037.851737][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2037.851763][ C0] ? do_raw_spin_lock+0x151/0x370 [ 2037.851786][ C0] ? __lock_acquire+0xad5/0xd80 [ 2037.851811][ C0] ? __lock_acquire+0xad5/0xd80 [ 2037.851833][ C0] ? do_raw_spin_lock+0x151/0x370 [ 2037.851856][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 2037.851876][ C0] ? look_up_lock_class+0x7b/0x170 [ 2037.851894][ C0] ? register_lock_class+0x54/0x330 [ 2037.851919][ C0] ? __lock_acquire+0xad5/0xd80 [ 2037.851941][ C0] ? lockdep_hardirqs_on+0x9d/0x150 [ 2037.851967][ C0] ? process_scheduled_works+0x9cb/0x18e0 [ 2037.851991][ C0] process_scheduled_works+0xac3/0x18e0 [ 2037.852031][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 2037.852060][ C0] ? assign_work+0x367/0x3d0 [ 2037.852086][ C0] worker_thread+0x870/0xd50 [ 2037.852119][ C0] ? __kthread_parkme+0x1a8/0x200 [ 2037.852147][ C0] ? __pfx_worker_thread+0x10/0x10 [ 2037.852171][ C0] kthread+0x7b7/0x940 [ 2037.852190][ C0] ? __pfx_worker_thread+0x10/0x10 [ 2037.852215][ C0] ? __pfx_kthread+0x10/0x10 [ 2037.852231][ C0] ? __pfx_kthread+0x10/0x10 [ 2037.852247][ C0] ? __pfx_kthread+0x10/0x10 [ 2037.852264][ C0] ? __pfx_kthread+0x10/0x10 [ 2037.852280][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 2037.852305][ C0] ? lockdep_hardirqs_on+0x9d/0x150 [ 2037.852321][ C0] ? __pfx_kthread+0x10/0x10 [ 2037.852338][ C0] ret_from_fork+0x4b/0x80 [ 2037.852353][ C0] ? __pfx_kthread+0x10/0x10 [ 2037.852369][ C0] ret_from_fork_asm+0x1a/0x30 [ 2037.852404][ C0] [ 2037.853554][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 2038.179968][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc2-syzkaller-00471-g119009db2674 #0 PREEMPT(full) [ 2038.191785][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2038.201849][ T31] Call Trace: [ 2038.205165][ T31] [ 2038.208120][ T31] dump_stack_lvl+0x241/0x360 [ 2038.212836][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2038.218059][ T31] ? __pfx__printk+0x10/0x10 [ 2038.222666][ T31] ? vscnprintf+0x5d/0x90 [ 2038.227012][ T31] panic+0x349/0x880 [ 2038.230918][ T31] ? __pfx_preempt_schedule+0x10/0x10 [ 2038.236332][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 2038.242497][ T31] ? __pfx_panic+0x10/0x10 [ 2038.246930][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 2038.252307][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 2038.258471][ T31] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 2038.264657][ T31] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 2038.270844][ T31] watchdog+0x1097/0x10a0 [ 2038.275187][ T31] ? watchdog+0x1ea/0x10a0 [ 2038.279615][ T31] ? __pfx_watchdog+0x10/0x10 [ 2038.284310][ T31] kthread+0x7b7/0x940 [ 2038.288386][ T31] ? __pfx_watchdog+0x10/0x10 [ 2038.293073][ T31] ? __pfx_kthread+0x10/0x10 [ 2038.297670][ T31] ? __pfx_kthread+0x10/0x10 [ 2038.302268][ T31] ? __pfx_kthread+0x10/0x10 [ 2038.306866][ T31] ? __pfx_kthread+0x10/0x10 [ 2038.311465][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2038.316679][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 2038.321888][ T31] ? __pfx_kthread+0x10/0x10 [ 2038.326484][ T31] ret_from_fork+0x4b/0x80 [ 2038.330910][ T31] ? __pfx_kthread+0x10/0x10 [ 2038.335506][ T31] ret_from_fork_asm+0x1a/0x30 [ 2038.340302][ T31] [ 2038.343650][ T31] Kernel Offset: disabled [ 2038.347985][ T31] Rebooting in 86400 seconds..