last executing test programs: 12.336027955s ago: executing program 1 (id=4100): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000080)=0x2700, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) syz_open_dev$loop(&(0x7f0000000200), 0x6ff, 0xc0000) socket$rds(0x15, 0x5, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}}, 0x0) pselect6(0x40, &(0x7f0000000600)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0xfff}, 0x0, &(0x7f0000000100)={0xff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) sendto(r0, &(0x7f0000000440)="1db4d479c5faee911d50fbdf12a30d564a0e992d5f77ad426077a9f0ca1475183db32443011ff101251bcef8f165533aacd8c755793dc1ae99ad602c7cca2944de604d849a1e3b22905b0d26e9ff30b83f38a29b2530d22bdb6e73ef2a359249c3e29408dd3e0eb42bf3d6ecf7d9f6a38e6c0818e746843a829db24da275daaa1af5754e2aba22b617f1367566fd3b8892e4774e", 0x94, 0x0, 0x0, 0x0) 11.33991006s ago: executing program 1 (id=4106): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='veno\x00', 0x5) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) 10.940313233s ago: executing program 0 (id=4108): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x7, 0x2, 0x0, 0x2}, 0x10) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000002ac0)={&(0x7f0000002940)=@delqdisc={0x24}, 0x24}}, 0xc880) sendmmsg$alg(r3, &(0x7f0000007000), 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) syz_emit_vhci(&(0x7f0000000680)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}}}, 0xa) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = accept(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) 9.876137607s ago: executing program 0 (id=4111): bind(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r2, 0x4048aecb, 0x0) 9.605721769s ago: executing program 0 (id=4114): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) syz_open_dev$midi(&(0x7f0000000000), 0x100000000002, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x15) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r3, &(0x7f0000000000)=ANY=[], 0xff2e) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)) write(0xffffffffffffffff, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c383032313100aee1f5c088ae10376fd860057a4428d0ff3f9b44"], 0x20}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001580)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x1, 0x0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x7b, 0x0, 0x0, @time={0xc9, 0xfffffffc}, {}, {}, @raw32={[0x2600, 0x0, 0x20000]}}], 0x1c) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000ec0)=0x3) ioctl$TCGETA(r5, 0x5457, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r6, &(0x7f0000000640)={&(0x7f00000002c0)=@isdn, 0x80, &(0x7f0000000540), 0x0, &(0x7f0000001480)=""/172, 0xac}, 0x40000023) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r5, 0x40045730, &(0x7f0000000180)) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r7, &(0x7f0000000000)="c0", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, 0x0, &(0x7f00000004c0)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r8, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000170a010400000000000000000000000077aec6c1d00b04b83871c53f1eeea4580e598f80e8e4c0448921a13988d136b4606d66"], 0x14}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="6400000010003b0c00"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000300016802c000180280001008dffffffd4d80fe4de2a0000000000000000000000000000000001000000000000000000140014"], 0x64}}, 0x0) write$binfmt_elf64(r0, &(0x7f00000008c0)={{0x7f, 0x45, 0x4c, 0x46, 0x78, 0xa4, 0x6, 0x7, 0x2, 0x3, 0x6, 0x4, 0x39d, 0x40, 0x319, 0x2, 0x400, 0x38, 0x1, 0x2, 0x9, 0x3}, [{0x1, 0x6, 0x100000001, 0x2, 0x8001, 0xd23, 0x3, 0x20}], "9f228d6f13d2faa3d58f36ed3f4a780ab4976a12b713d89c7c50e706e414bce502c3571776345916dadc00c7376dceded1e76007e205fe992ee0ad5a9e56790609d7dbab6cd3", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x5be) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000040)) 9.296123991s ago: executing program 3 (id=4116): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000080)=0x2700, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) syz_open_dev$loop(&(0x7f0000000200), 0x6ff, 0xc0000) socket$rds(0x15, 0x5, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}}, 0x0) pselect6(0x40, &(0x7f0000000600)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0xfff}, 0x0, &(0x7f0000000100)={0xff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) sendto(r0, &(0x7f0000000440)="1db4d479c5faee911d50fbdf12a30d564a0e992d5f77ad426077a9f0ca1475183db32443011ff101251bcef8f165533aacd8c755793dc1ae99ad602c7cca2944de604d849a1e3b22905b0d26e9ff30b83f38a29b2530d22bdb6e73ef2a359249c3e29408dd3e0eb42bf3d6ecf7d9f6a38e6c0818e746843a829db24da275daaa1af5754e2aba22b617f1367566fd3b8892e4774e", 0x94, 0x0, 0x0, 0x0) 8.526344311s ago: executing program 0 (id=4118): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000000c0)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) (async) syz_fuse_handle_req(r0, &(0x7f0000002140)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007ed10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000889049938edebcd600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r0, &(0x7f0000004140)="02f00c1d0dda83190c8b2969e5d107b997d557314c4da896298ff72343456d7ad8d0a3c9d50de42ef139d0d06f47aefa86d39e623e4983730bc4acd2a3453e9ce8ab83ca57bba44ef9418053978935925402ab801b6979708a525ed019908b34e02f859ad4fe7ea4a350535a413c192c59200cfe1146cfce7eecb4623aeba4b78d98a60a06859f115f185f5849bc4bf657cc34fdbd22e7093ab80cc806d17ca48f8eece4181c9ac3c9683567bd26348a00f13b4227b52da5dbbff4d3903749eb428bb6a464379db2f0332abbfe4d5a1d8f3175def20fd81e00e99af5cd23e1fe1a02affae45d2fcca7311570b269f073fc727285b6eeaacd862f40f1e5b84abec8f63212c89e4458c61ab5c32f7347d7d537d267708129701bdc744d35218ce52988699adf1e34f61493fd397296b4ca0aefbeeea873eff80fe26c0bf3c058ab0ae570ac08e3c53079d31669f34bee6d68b92398fe21c1d76a24d858af557d7723d27c0435f70fe46b18d17f3c207ad809bf3cf81c3074be87ba9d2beb513903109a9dae4a56576ae7bd3ecd4917a2f22c756f100eb0f3b48f3c506aa5d717b9683762e8d268ecddcf5121ab06300b1cf3586c910bf23de3defeedfcc1e899c899eb483c9b30cc56181f34937c70e9a2482ce13531bb80293f85fe080e722bb628b67a1cc9a9e7607313f0ce60a8f79fb0807139f503622c7cdfbdef26fc004897ca200a9b4328e0961a79e46ea7734a51d3c8930ff903d4779a48b338f43ba5d6b50f27f69802ffeb5473b15e66835035b7bf41489804e99eab0fc7579f569b1ba37151913454be46c6cb12b4e5f8c7a0a64c992fe18e07088d4ae91fbe6ef05d74d63173823bcd63948ebd29b70f144c7a03c951de8e3873623c14c4a99b52a9ad881206005e66f8588b0d73994cbfd6aefddbf8cec9622f948fe21287b38b9daf40c6ccb3feedf50f90e8f4da6a6bbc14b87e514cd976302e223a3c9165ec4b79f341908a97e13331582f39da15f2e9a6ea5a836bff4a42cd816f7f2028763bee37e7bbd0ccdf419edd48c55a6883825cb3373eb0b222187fdbf7a0dd4c862e9c658a5590c62b95b2467b155a87013ad20d47bfc8e8049f8bee091cb893b5d507772ccaadabf407a25647019312cad64b940137ceb603e9854a41d540649d52e5b2a39e7865ac1ab41cc1304712520e8e2827403b01dbee87b8b0caffa3c1bdd3b81538743a5422be517a5c679543282fdb46b29cf256a9d7e1c3dfb69c399db615e2e785d5a3cc719cafaa7973a542679b3185f5f86e4864637ececc4557a5465b05bfbdfe433546fe822d00f41b45c1473fe88d8a6911cd673f3d71518d3d3918ed766030448f01ad5e5ab66a6eac88720f7205491f9bd15d448172de258c865534b0dad6e607819aca86211254ecaafe4597af845c1c92098320dc14d1bae44486a02b8e81733a2be227acf940df9a2e717d9373a52a82ae0863af2320ec820fa8778b1e0123d41e6a79055adbe1b63da8e84ad6eb7906ab65b92c493a8150685dab1e2f2a16da54abe9cddf141dc41ea8a600a5e28bd8a342be318fa91d2e98c36a681c98f5676b27583d49f4948666c80f3b49b2ef6b71896e980c6cf93856d2dfb59cdeab1d8940296207d1f15cf75d7beb6f744fdb38f34e00148f48b3b92d65dab43f3514761864c693e6fdf1e08be74ec507d180301d419cf151901bf2bbc1245bedfe9f8b91f64c869d0741026acb0499a4a7cb167107f609141c349a7810d16b417727ded0decd32b4d48a624d027a3d057a9763ac5139adb0042d70caf9969c7a6bad7afe5d8a48d0e5726396d379a2bfaf957468748c9944bad2dcbefb1474a7d782b2e8e278a10dc6d6dc921476d661cea4439d8ba17c95c9189ef879b52a1889574f70c022b0cb973587a70e5d4147aaf1d1f58836540eb0824e73386d2c3a94d253b99d4532c97c2a75588c536cbc24e47088dfebf31ffc0cb23076bb2f515546b3721d8063e3b88d3a8ea196b88564f65e5f808eff5ab6a30095d6e0978a286b9d693a6053231d71dbf96967b5a2c6eec44117078851bab60718ff22a3e8c522fa8d85d6df1a816b62a557b47b05c5df626a47928523541c23e9f0a0a86515437bc0eb7b9b4b7bb866206e093fb4a5dba6ad9d2424d7fb2f8f220b00be734c781a91ad4555f2714c6c59588300ad47d3ecb86fae178609fe60d9f604be31c05cf3cf1edffb45cc2ce24ec44434107834c6335ac09e2e931b0a8c6cea5ddee3686ec9bf9ef6693fc85e36a7fe1146aa93da6f4dd5f36ab0dcbc28d29ddeb481d5d4f8a2817733a8dff3cb07ac1256bd43dab768c1661e4c8bd3ede3aa548f90424fea8e39c6d5d639b49b7b4da6a95700ac6d9f66bae43320ebe5add0c0cf5fb8a1482c60a21d1ed54ca7967bc22362ccad5c9aca0a7151b53546618500ab0a32151c7e61fc1cd7207f165449d4935337ac69259142d952d83e415bf39227224f208ccd4f6476804b7a9ed45f14f7414e36c9c1000ae4ff34e5ccfa224875c81bf30a73300a22c9dbba7770d0078ff37c965b2d9f97e50e64072d7db371fe4cd364e305f64c1fc70b682cde8fa865fdd7cefbc528f3177a67a4f31f3085ab385705a5008d7572b8f6690c07a9f0d8754614bf036d4efa96b09258cc43787df3259138f995a6d9dd13728fa1745c8e4af63e48853bc63106859defe07c53ead96f2bbd300ace2df4281ee764ba0c2234d4e0da8c0bce90ee74322d50a5653001a6706c8f4f315219bbc7fa42ee186ac031ae2a7f806e539f6d498514c3b657f6b6864ba1cc94879bc70ec199ce4124907bbaf5087280f9288a51f6d2849a2ad906aac9e98874fa678c66e0d71479f71d81aea11acca91b1a80e1517f6ce93d63deb7712a15232856db2e4e33b0c50f638c5c0b11fb81c4d9d1f4ba9914b8cdb1ee091b320db91850700a5ee1f8b837deaf3eac758b1aa03ceaf559cd87f5bea97897b97661746fd0e08713fd5fe42a87de04a2c9256571a14818750dc51d3c5190d8c2055860c0470309ebdbcdf1c050e0de01e6111bafd83eed68935fa61dea3dc55c278080935ee9d36233148dcc1ea0a3867ece386248ffb58ad2c198ef8ba29ea07983740e584daad92c62ec10c3dc16be4283bae22ed5e39a9821a29a40952950abf6b41732933950312719749ad06eee0c08eae0136eb4f16cee5ed167df66482ece475632dd25cc43782df12a8573492fa46da81b527213b098e3d9b0bfc9da02bde9c8f0672778cc418f4c0a113a513b358674de8b218fd3345ccf4179a9db6c0e1858e558e749036ea70c045d572ead75e60cf08fb26551741fdb86ff3c0bfcda029aecb789c9b8e27f360ce04159b9814674a3b5ac823546d4ac467ae878d2d4482e4d5bbf8945155410b8e7ec05619c3d6e254e30879f4dcc3d93b5c3e3f73230e2bb406accf83cc5a3f4b8388b851a98fafa03ddf392b9c0c5232445a313f440f158b20cbc34c29a0e36a062a10ec77d0bbeeba5771da4dfdf3654140f53e85d98f6a065850ff5afec907eddae8b7128ba9dd0821acc8511f3e3c68e9ef9da35df09315619ab781192a648baf254fd5f35cb650b7672a9a82f989bf2039961f68763e34db401c903a40a5ee9495b7011893639ed3c3b83998503905cdc1dcfbc223bec4cbb5e1459ec4bfc6eb14dec0741e2364eb9cd9d988013ae2740b722704d99576f897aca6b3d5c34a057d8a5f51c1bce080936a21fe214c3516c6edda99c4fd104e033fb553839a386fa74549921ff4216589dfee205fec1031e121bb58ede2fad12805785abedd162396e11d36dcdb1993853eefb6e1c8c72afecf98969db8216da5276e347a327c60ec97865e2397127198151feeb9e0e6268fa6e88c50ec8d681450e642fc01455fa216f9835d6e309f9e4b5129a2a56db042f0c0486a47033b52f59513094864c0c6c313c7edebebc28db44679c3544e93375c80cb782763f37d85eba6c0bae5934875444245d467de5d6a463443933ae95400f88441d70891e6455f73356717f68e408b0cf91f0deb9aabce6c1cbb1459d8095433a1e08039132fb8ec30687f856e524ca8ba00b6a20225da41bfd260fa214c26de5844246d44ac5ee2af44f158da1f55188277161d7158fcb97b1e37ff3088cad7e79e78b19c7440ae76356f0b094f928a61e9195fe87a0330baa29dc5e1370abc024577a521ad224074f5ee52c30326e2d1e87044b2027232ac28ba099e211a7b33df9fb6d2fd662b7d38a14c40538dcad133f4f75ce114cf8e583f74d2d5251547541af0236aa59075263e2611fc807ff898163c56ef01e7454da2a6000ac229530ea7bf1eb75529d3c98e6f7fbf3d4cba327ed5cdcb83df0c11fbead1de4ec3ac5c2cb8dda8591f4c316e23a0668ca25149f8a55a47649daf9e40f784319e8b901e70a8a31bb4f8c0a86a4999bdfcb0e9f297e753bdb2a275ef98a92b8dbab2d6eedc06ce92502ae7ae76f6b13264ba41e717f8257e34bf1ba512b335d5d178d74742cc0ec6e7b16942095cde010cd90b5c8a158b65fc51d958a96a7d20446c1fd8d1b0fc9f2de8f404a80b504098dc68e2c60b0f43ab538cba0ca5409dacfbdff2267374775605dce498514ee7b32a7f55452986b12dc6178d6a926dfbac6bbdcc051d0cd54bc3aca47bd665e01bf1f050f7903f031197594c513ce5ba931e2819f5bb63c5238c19c1be9f4d9668e5c075804fd43ea60f0ab9f00e06683b8e29379a9326b40e8fe05161adf1cb519c31ecebcb042ed1fbb4b9f1b12470bef6e964855baaff5a7dd6146f07caa8097c778bd10e5ce995884d1f3b91962a7974d84de6157d3f54735d5b82e11e6fc000874ecd396114c693ce2297caf7a9c6a6814a890e4d74e17a16339ba103c0d2da87e522ed67cd23047c7d9bd1562234aec98b85ad4534522cca58ee17ccb9c8fe7cd68ad3d6d6e0edbb550ec957772ee1109d501ab76e364a988e02e6b4a5b62f72e61fa7cc6120d12414d3c8ea09bfaac8e806d19dd76f940b769863d200861e44c72bfd870005f6663a7a6d1d60ac1e376806293d5143968d37af14301c9d6506985eb7bdd607dfa4d3cb5cb058019cc5502c534d3a5a1337bbf6306184230cc21e3ef7744b839cd82fc6347316e098e05ced0f25b9cf5721f2d003bdb4e0a79eff90ec4aacd6afbb78ca6f129cd16c8b2f3aefb5a2036951db7ebb40d36723a75723b3d1011e6085493664bf5d336c5cb4079ae1ca2412c53c464831844c27f089ffe345a2029118672b2fd2a24c72f9088dc5f92cc5f3bcd6c7359f52d32ea15172e95af7e6c81c52f20995877cafed48dd49762701c88c225bbffbbc3160d838957588fc2d41efab4148bc961e8d66b5b21e7eb4228a132d61a1c9f6e2baf7430d92478a3948fca4e10594167ca5e72678189cb4e90a0b0e45caada64d15010d73157cd8b4d04099ecefb1ed187d673d1bd33f13dbe4b44d351a34738280f21a79b3146b0071a0924e643c1dffe0d8c72b3bdcc00f203153f63c249f18e0e9e7ed1c0237411893832fc5be40d308b194bb04a17e38f0717a0808058b7291d20b6f0f1e5ba11e2351d985138c61806b41ea5a77ef80feb1f6f7383000e97549487f1bc9c3b5e8ccb6ed7ab8e08b258c75d5aad2a01fe8b5777ef5c7ec1eb3feca16dabf8eb50312f8786d5018d7bb7c9776f028af7b3423af3410696587f3feba823e5e3ccacfeb23fd4359c252b2ab5136d2fa7a6633758b5c45099f70a672999329eba1c89f07af0eb7c3fea5ac468ce042d699b6f391eaccadcf6d14e97c620a5eff7d92946f09d79d31cc876da261182a73a3234d5e53709185680c8b5376e4d8445fe4fff988062f23e42e4b7908ec079a840f0be839062074c22c44b7f4c4b23be2b6656abbb103acc0bd5058e0112a7d55cdce5042a76fe24ba5e9a1105c68dab94dddd44cc6c860172847f20e6ebc49787ed8ca19824b09468933ae9a496e960b7c592e783b6a5f10a9d9c2265794c5891ae7eb9cca9b3f99981a252d522047b95fdb518fe681829948a9d329b9cc7cb2f806ee81a3c930c73c8f12a05b47f1470ff08d5a03f37dacc1e4a7f65563f8825f9ffc316c2ed7a5ea434cab348c850d1b8eaaa0ab2ef7460269aef06f9c46a1957575cee49e1aa72d470dc9763b4abd61d34693e462353c1d023249bb7085f1362ec6bab9d349633d5f9637e6a12690e502f8af9c2d37a3f573411595539c66e9f82d5b39c01606af258e769b2391c3cd0bb0d93eaa36e168136b301d516724ecb173a0766ea9e9d5be5dcbf58e0322261e584d22594cfac91d16bcf38b8cb69e022b0956fb4be2981a526bb1832749ea1f7b188dce590927620ad9d6162ea52bbdbd14b45ff967f183c1af4269dc16a1be7b0b5278ec02a259aed022039e70a9c1456997fc1d053b1ab54238d8282dd11b68b806c745a257a7c0fcfad3277245b1f7749243f457121b3d17122f27be6b1c56e9bc151f52db66c92246072ca4e5d10619a6730b1609f133b5db1f2b0bb4a86dee2c44a6e25299ee74b99eeab5f195728aa45dc7bd300bccb48819bd40b12152b40e1395ac25d8b0cd1ae12b9cd46a8e54f495cca85a680cd43f70f55505f1a72c030dcebbb2e5b26ec971cd58c76ee67d86fe075bcad475658f1cdf09c94bcb5b4db83b3147882f65f67921267f8471d8deb7b159761c83fb9547db71b6878a21287aef6a2e01134e735c073645d2488138f280754ddf66cf8c0208e51a96696e185120a6b84a73d2c9bfbfa9e501f1126b44c491ec437a0b490cbcec5e8e0e0c21f803354d2d1923fe82509706ab34eb03101dded5f6421a6b90dea3db643a22eee1549e30d44184bbe7b842a656b91184ebbea76d00942b429dc07c704750fcab290c43bfdd2aed8257c21312933a11a76d0be361753a49ccbad5fab68eef867e11fa99a1d8021218809c0ce0bd52bed2d5c97fff7283e549afee371b7f1b3973ebebcf11f9687c7086129ada7bc09bca2da4fc02c0af28aa043f3f2c1e02dadfbc3a245dfd2e30e6050e05388006852e871b6890ddc006072d1a062978240df6166ba6ccb732195f21bec579d3d2b3f13e818e9fac77be72152fd441f6ab772b7fd3f888a91f8420f336e5a69e36dfdcc23b066506167960dcd1e5c84d4f236bb83f8daf03007d86d5b34aee798755077dea9b4faf98daa725cc3ab671b3b2b95c193530e0d018309a460a518878ee82e8495622028383ee97fe6a0111521b9a60fe51011bd0c62ee11e7a3dc5a0e8e8b82e476e752f63c5ba75a32e7b5b40d8ed1f539b3262351ce42d1bbcae0371ca72790ca4deff1441404f072947970ed3f23894e6c894c9fc7644c4082188b1ac8ef1e5c045bf438b9b81c7333859fcd071100785e14568c784ca30c4aea8a728a7796a201aa1b65a9355cf368b440498c433414141aaeaf722b9ee70b7cd28a3c2beb61ed99b619a4486b4b7210fe5b1cffa4474421b41303f6de7432874327532cbaecd0e1e9e90f00cf03161e9748807f3728e947c1ce281f3417a3a162deb2d01a5aa330e95b5624769d278aabfdfe6e8089c62ee1c26be5c121cfef2fcb549c1671497a05c2a397f5090caf6913fb39f01a095d55d33ae31d36bf223cd506ef2eaa48b1729c2dbdd7cf84bd1c2d0ebed7b6487991de616517c4e53665e60e6bbf559dd5cddd5eb88087fe6d0e2632f10b9e0f653bafbf992f55dd2592bea82a9a5958ae3e767bcf2c50b691e33dab8d2b1b2fb33419b5dae945a7d4a0169ec64817cc02b02139d7f70bfb42516c913311b42323cca46e690467c894a26ea624432b3c536f48ad569d56d8bf131048f81c0bf77460bf7acdf513087bcca1366bbfd05136ab5456f7e99f545f343eebf57299bfb4ef4a3af05357037e7080ba36084505eaa7339fc981cb99e381c3456d3de6cec5c5dc76427b13db53c9bfe516577b51411602146929e08c8762e6c99325a00242bd15f511f25eed7aac3537aca0407c70f362a0583fa10bb259f758feca1edb4f8adff7626bbf67fa0d940bb773d1afd523033b25107fe02161faa7a2bfcd629e58d681be5e980f8d563daac8532bc747a4242fa539416bfedf38cd8e3aab1764102c87627308abc41f6ebf8f03126d26ef90c10f0dd0fb5be22ee794fffb3ef0537f640b92c2ec335ff99422fe5fa41467e1a95fdc98e13881e1912f73afb489f237acfa971f6f64d9dc0066552167ebad1a7797412998a748d3b236e41ee5a8c223a1fa033389dfd2beb582987344db19988096e3bc0c44c8fcc4ef4a1d60b3991a5e3eb08d476c6dbdef30ce2b7f84de6925e28eed23daafe6be895d9b9c055519f9f3dd5c67cfafb5138380f581ec2bcd15c415087c85c32db56fd589883d3f1c81d56fe2436e910bc873596d4fc5abe0046e00934912f70c028c41390091988fe9fc46df6f10edb697bd1408486860fb6e77c76b4778a151769be25d891c1bde084ddcf964a7d3e528fb39835d8a003ee95e31f7c6c8f22e2d97454b8bff0450f6d9d3f3066041f19aa7e99cd00bcdb238e493912ffa5992eaa0c10dc4e0c4277ad8b5b9be74f72a0b2b89cb5df3ff6e06d84b4db052a1846a2b8284d49c0562f561dde8fe38bde79afa4eb12095c9fcfb9805ff76db4c63f2c737bb97117f880284feac51aeb26e21071a8770cffb4670fb94894c5b7cb6b60c3cc6a0e04458371bf59669f07be5517d5aafd2485aac11e29332bc9c0d9aab851d40aa713665be691c1887ed057e63bdb4da732f70dfe503a009c6c431d6780559273215a222228082dbe613d2dc235908927b1693adf812ddd267d1f7b64abc5e174b057e550c60d5b4e5f4aed8fe16dc5ecd7d7fbc3647efe8abbd9f2ce4f21a14d2e76af8a0551d99f1d35cfee6a068f521af0340750658b415685ae99459744c3b29e24f70977ca21e8638045a3dcb88556904f4cdb31920b89dadc5b846d7a1306d1f86d179e1f611d0c061146e3df0aac42cc6710231d844e167a57b99f68ca174152d088d5af232d5d4e186f026dbd0fff228e7de1ce0e5d28f439e94b6cf106306a740071a03ee25387d1c0b2da3b24dfbbbf078458e3db1c42d1c369b3f57946cfba615151c118e5bc31d43f9621bc30ab6fca226285c50eaca6daedb148d0c4acf1d9691e875338221074630d9ac117fc704b06da6b595f9906681f5a598d0308da0d56e45a216860a3acbb2e00376d2931a21695239a8216347d39f649c0d990191a62a32563cc967a03e606ada7dc76e67a1e867ace9e05e8a27d96987b93eec3cbce6c8c4021ef2a7a862bcb49b2450c63802c41bbfd8ae9f3c9a55a570470c41a9ac7ec88c83d5c1f2c9342b30ab09e50271a7be04feedf85abac9efaf1422a045f6383886d3014c6436c7986f264d119b1f8aec8c67be8147feebbb94266c009d98db54dcfd9b6f275f13c210d10d808b55cb558faaa2a89f90023fb7aff01dcd6143c7fb985e286ae7bcd521916794ac148bf85ef14d8a54fe91739a4b0c3bfa4e77d70ebe0bd187364be48953bbcbb220dd43f2e9382d430dd0baf069b6e3fa46d696317b4b0dc030c7edf27c416f33082ae1b0b13290580b5c513adb90fd373af0403f268521fcad12940dec7f0532aff0f78813416cf965937f7ca0eaeee97dcf7a7ec603b892ba55801a6637ff1a8e4d99bbb969ae06bfadc232f131b19cece7b8c998d6c57b9b68d2252d7e543091583b67b868c8dc079c1c95294c5e039c637b1a02e58d614fdb79f3f08a29f9f90ba09370675ac1b071f07bbf97e48d3e3d102590c2fc4ccf5354c088f41f1abe507901a1b5e246c88f81e297a2876182669b16f1be10e68f3bc66c7e20f34ea5a5252ea013f71ef78931ea4e99f5ee9e4761cc3f773eb02fce9065c333eb58da334a67525d9f885747aeeb3193c3e6b60e037b7006435be7bf1eb5ac592e288984885b5f9781a900885c59ee235785501ab93d73ce758aba261f5cf1d732246096412a0a9334fc113b1fdedd0a15961a252479a91a889dd312a4fe44a49a5c8f3364740e2c84ad375226b0a8070d6e5f316320c6f33461e7c32395c60b531aef2690da2ce0a965df38756c26be257f62e89404ce58a62846e11ae30490ed476a484c5b798d0c67cbd795b7e02d460fc1be0dbf85180fbc7d650c14cc86cfe65259fde8d330ff96a175c49ccdca9dcc9886dcfdd763a8ac7bf4c02cec7ca5f808406a9a04ea18cab07febdb8f1f65e987de2cf830ed782ee590f857385f3514798bd3c98bc0bf3c9ceb63b7d2c4d084332f0f4702c185fe9b1a5780f8b11f18b10c9eae1d18a5d45d2677cda5c927906c507f21b987026965d5a9edc182cf6b104878aa8afe22731b2ec16b692cd2819b37a50036db1b6a47f6c47299a8bd35735d180eb1d75d956e8d020db4279fe1332664dfc01cedb5742545a3f2173a159841e11552564c3fbd39fdff26c4438d0b2f66b65f4ddd5778734562eb2bf1d56f5970a8463b520cbbc55dbacdf37a6a16e5c7135f3120c7bd4bf2fcefdf47d55d5a7ac628341ecf694098fd457d23bcce0b2296bf99ab9aff749af11b22fa2f24d4ee95659f3faf48978aea794a80415c845a6d7f924c68a62972db65b9185ff527719c5f8bae299fd50bb7ee1ced73528ab0648b870d8e8ff0acecabf2de8fd4ad30b1fce4084d8e1cfcee237f13a27e4d238f6d2eff350f2393f5ed9918cc35917f2035b1a5faf297bff886b6716db37215b822c8af5142ac94849e5484adb4e59ef85dd56473b1f6e1f6065c8e744377d98815f53244558c42af67e3502865bc81c37741c5ed3ed07e33c64a9d8b2f527e54e3c7e10666dd95eed759e8a3244c5a704a9349ee929752226d01c10bfa94d31ac2ced8261e5fc3a15f68500a9e7b5ad53fe3de581ae3fc9a03fc4da706c17b40ba5d9505938dd55f09989812e25ee54f7668fe8bd274e0c0b040a15c18b9d8bcee0cc88590637a8e7b6792ea8aa8dfd4fa8cfa183f3ce15308acc9d91d02e7f7b46f472c8fabead73ebe033fcc507384948a1eaf03548d79b649be7715b1aa0814a59183424e49e86bc9781ce2e9e8277a85f9b0b4faff231453829faa628ab00daedf8b8aeaeef758bbcbeaf8863ba179e1054b3da56466486fd9b8dcc42ca1bae2d4ff8e0877d9a726744080e125f7a1bbca906bcc59e8798e73bd79e5de3b4a79aa2bc2e8be40b695b5add3a8fc0952053bfc352849fe1ba9da83daca4c904c66fe91e55709ebca2a36356912a285f2206446b3216d78c9fe498431025b1af22d99537d5f86efb23e11e6e8e7d6cd97069c533e908cfb234c26a3424915459c53bf76ff18d7cceca11511b689611ff74118844aed1d4882f5d2a9d051bc3e051a53b7633138d0325082263497c9102cd33fb16c27a93055617ad14befe6321d40251d239d45a89bb079e24b04470fa75454d91bcc39c233eb0ad4a03d5667b9c7eea0d927d665dc2db377c71cfee93bbcd77f6096a2dd14452f1d74a9ebc7288670943ce9910f", 0x2000, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xffffffffffffffda}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) (async) syz_fuse_handle_req(r0, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x78}, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000001200)='./file0\x00', 0x0, 0x0) fstat(r2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) unshare(0x400) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x9e, 0x88080) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000100)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x2, 0x3, 0x4, 0x4}) (async, rerun: 32) r5 = openat$vmci(0xffffff9c, &(0x7f0000001640), 0x2, 0x0) (rerun: 32) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000380)={0x9, 0x2bd, &(0x7f0000000280)="7d0a285ec19c9648baa69cda354ccf14c6eee1d36b679972b6e8b26d8f036d39fa5cb320178c51bbb4cb54f5bd81c3370e58991e374f7bc5c0cd7505809bbd557aa2b7b360805e2f400add66a72040a50fc360f4c8a9409f2aac371f07441156394de498d0bd16ad15a0d30dff246d080e12d3bb6afc793ee545ef72", &(0x7f0000000300)="8a3cbf5058e8b3e3296e2cf4d17e85cf778d48aa7676aaf4c4034be6e33bc783ba4f10f36a474dc2912b066175991463d12c0da361", 0x7c, 0x35}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r5, 0x7b2, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r6, 0xffffffffffffffff, 0x37, 0x0, @void}, 0x10) (async, rerun: 32) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) (rerun: 32) r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r7, &(0x7f0000000180)=ANY=[@ANYBLOB="9b020909e66cb7519e6ab9cd230092507bd3f560d14c12630613e7c2ce6d022fb5003e833f79664146f6b376fd3f320f8359e288ca5a22a057beee5e2d36895c0d89c465f876ad02db3b10b9dc7f75537a0e580f8e2da028b20cf0a9603e3ee41801b62eafbc03136953187d7043644b765971f3d23452165c41f941534c36d26671f70f7dc3e072c9ac5917450a24bf1e92be1cadb40bcd7498dd024bf73b1c315957691587ad60c5ee03976a09"], 0xb0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) (async) r8 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r8, r7, 0x0) (async) r9 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r9, 0x11b, 0x8, 0xffffffffffffffff, &(0x7f00000001c0)=0x4) (async) setsockopt$inet6_mtu(r3, 0x29, 0x4a, &(0x7f0000000080), 0x4) 8.249839474s ago: executing program 3 (id=4119): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x3a) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000040)="050000000091c700", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000140)="308f6fdcd8ef95ac180e28e3b7da7a546e208e234300caf3672deb128dccb3484f7fe40ca53a391fc3abc8c5ed020000000000000092db918b2dfc94ff02a734074ca0cbb4e1e3125a8ed1a9959f11f08effc423db5fe68e52d5a79ece3dc9edb20fac857a5ee112cd9bdd5b", 0x6c, 0x0, 0x0, 0x0) 8.179672233s ago: executing program 0 (id=4120): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r2, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], 0x0, 0x7f, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0xaa, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000240)={'wg2\x00', 0x0}) r5 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000200)) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100687372001c00028008000100", @ANYRES32=r3, @ANYBLOB="08000200", @ANYRES32=r4], 0x48}}, 0x0) 8.006898041s ago: executing program 3 (id=4121): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) socket$kcm(0x11, 0xa, 0x300) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6f94f90524fc6010000200d7070000053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000080)=0x8001100) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) listen(0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) write$binfmt_script(r4, &(0x7f0000000080), 0x76e5467) 7.985278654s ago: executing program 1 (id=4122): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x7, 0x2, 0x0, 0x2}, 0x10) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000002ac0)={&(0x7f0000002940)=@delqdisc={0x24}, 0x24}}, 0xc880) sendmmsg$alg(r3, &(0x7f0000007000), 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) syz_emit_vhci(&(0x7f0000000680)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}}}, 0xa) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = accept(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) 7.591491101s ago: executing program 0 (id=4123): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240)={'#! ', '', [], 0xa, "09e4f4dd461b7a58a145832df7802b7bd50d08f5edf09e37bd"}, 0x1d) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000500)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500005cf50083000000bf0900000000000055090100000000009500000000000000b702000000000000639a00fe00000000b5090800000000007baaf0ff00000000bf9800000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf9100000000000056080000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) io_cancel(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0) (async) nanosleep(&(0x7f0000000000)={0x0, 0x989680}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r3 = socket$pppoe(0x18, 0x1, 0x0) accept4(r3, 0x0, &(0x7f0000000040), 0x400) socket$kcm(0x29, 0x0, 0x0) (async) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x240080, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0, r4}, 0x68) r5 = memfd_create(&(0x7f0000000080)='\\\\,}&}+*,,-\x00', 0x4) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000100)={0x0, 0x8, [{r4}, {r0, 0x0, 0x2000, 0x2000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x1000000}, {r0, 0x0, 0x1000000000000}, {r0, 0x0, 0x1000000018000, 0xfffffffff0000000}, {r0, 0x0, 0x1000, 0x10000}, {r5, 0x0, 0x8000, 0xffffe000}, {r0, 0x0, 0x100000000, 0xfffffffffffff000}]}) (async, rerun: 32) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) (rerun: 32) write(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) syz_emit_ethernet(0x1bf, &(0x7f0000000840)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x189, 0x2b, 0x0, @private2, @local, {[@fragment={0x87, 0x0, 0x18, 0x1, 0x0, 0x8, 0x67}, @routing={0x0, 0x12, 0x0, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @loopback}, @private2, @private2, @empty, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback]}, @fragment={0x0, 0x0, 0x5b}, @hopopts={0x33, 0x2, '\x00', [@ra={0x5, 0x2, 0x6}, @enc_lim={0x4, 0x1, 0x4}, @calipso={0x7, 0x8, {0x3, 0x0, 0x1f, 0x132}}, @pad1]}], {0x0, 0x0, 0xc1, 0x0, @opaque="ee7835fe64614b0e3a5978394b34141423efb175aed783f3258c5e730f5b9578da91249d7f15dee988d8db09eca8b5bf29c09cffd7dcaa80e2524f8e9e542589ca11d8228ecd3792f088ec3ef0198afb201f8bdcd4f5c4af339595226c5bed59c22408086f7c0edc6eb1fe7e4ba26ad70bb68dfc0606c4a8083579ec699fefb74735e89b97162f247c0df4711b9b2650753b6bc12021acf6bae7737f0fb948eae1fb7148ff7775d4d9f82fae022477aa70e5bbf118cc807b84"}}}}}}, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="98030000", @ANYRES16=r7, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r9, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) 5.901189164s ago: executing program 3 (id=4126): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010400a00009040000010301010009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000004c0)={0x0, 0x0, 0xc, {0xc, 0x0, "07acd22cdca63a05e90b"}}, 0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000f3ffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = io_uring_setup(0x4f01, &(0x7f0000000180)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r5 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x10, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000200)={0x100, r6}, 0x0) close(r6) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000010000304000000000000000000000400", @ANYRESDEC, @ANYBLOB="000000006200001f050021000000000008000d"], 0x30}}, 0x0) 5.899989983s ago: executing program 4 (id=4127): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r1, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x9}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x3}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0xc040) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x6c, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback={0x48}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) 5.872038835s ago: executing program 1 (id=4128): syz_emit_ethernet(0x17a, &(0x7f0000000280)=ANY=[@ANYRESOCT, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000400)=""/102391, 0x18ff7}], 0x1, 0x0, 0x5) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth1\x00'}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r4 = socket(0x10, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYBLOB="0000000200000000280012000c0001"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60ff00f500140600fe8000000000000000000000000000aa31cbe1b9fde28bef00"/56, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x1e, &(0x7f0000000080)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r7, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r7, &(0x7f0000000340)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r7, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)='\x00', 0xff1a}], 0x1}}], 0x1, 0x2400005c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000003240)=@delchain={0x24, 0x64, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r3, 0x80e85411, &(0x7f0000000240)=""/4096) 5.324932419s ago: executing program 4 (id=4129): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000080)=0x2700, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) syz_open_dev$loop(&(0x7f0000000200), 0x6ff, 0xc0000) socket$rds(0x15, 0x5, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}}, 0x0) pselect6(0x40, &(0x7f0000000600)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0xfff}, 0x0, &(0x7f0000000100)={0xff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) sendto(r0, &(0x7f0000000440)="1db4d479c5faee911d50fbdf12a30d564a0e992d5f77ad426077a9f0ca1475183db32443011ff101251bcef8f165533aacd8c755793dc1ae99ad602c7cca2944de604d849a1e3b22905b0d26e9ff30b83f38a29b2530d22bdb6e73ef2a359249c3e29408dd3e0eb42bf3d6ecf7d9f6a38e6c0818e746843a829db24da275daaa1af5754e2aba22b617f1367566fd3b8892e4774e", 0x94, 0x0, 0x0, 0x0) 4.996457064s ago: executing program 1 (id=4130): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_queued_recursive\x00', 0x26e1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x40, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x25}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}], @NL80211_ATTR_MESH_ID={0xa}]}, 0x40}}, 0x0) close(r0) socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$sock(r0, &(0x7f0000007140)=[{{&(0x7f0000000240)=@in6={0xa, 0x4e21, 0x0, @empty}, 0x80, 0x0}}, {{&(0x7f0000000080)=@in6={0x2, 0x4e24, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000003700)=[@timestamping={{0x18}}], 0x18}}], 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_queued_recursive\x00', 0x26e1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x40, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x25}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}], @NL80211_ATTR_MESH_ID={0xa}]}, 0x40}}, 0x0) (async) close(r0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) sendmmsg$sock(r0, &(0x7f0000007140)=[{{&(0x7f0000000240)=@in6={0xa, 0x4e21, 0x0, @empty}, 0x80, 0x0}}, {{&(0x7f0000000080)=@in6={0x2, 0x4e24, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000003700)=[@timestamping={{0x18}}], 0x18}}], 0x2, 0x0) (async) 4.878532567s ago: executing program 4 (id=4131): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000d00)={0x44, &(0x7f0000000300)=ANY=[@ANYBLOB="000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10, 0x0}, 0x30004081) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000000c0)=r2, 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000005c0)='\f', 0x1}], 0x1}, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f0000000180)="17000000020001000003be8c5ee1768810006c00020100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880000d6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3da400001fb7315033bf79ac2df5bc080236e2b68c8eec25a02aff06011500394100000000000affff02dfccebf6ba00085d024f0298e9e90554062a80e605007f71174aa9", 0xb8) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r3, &(0x7f0000000040)="0500", 0xffeb, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) 4.804885082s ago: executing program 2 (id=4132): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x3a) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000140)="308f6fdcd8ef95ac180e28e3b7da7a546e208e234300caf3672deb128dccb3484f7fe40ca53a391fc3abc8c5ed020000000000000092db918b2dfc94ff02a734074ca0cbb4e1e3125a8ed1a9959f11f08effc423db5fe68e52d5a79ece3dc9edb20fac857a5ee112cd9bdd5b", 0x6c, 0x0, 0x0, 0x0) 4.705223316s ago: executing program 2 (id=4133): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r2, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], 0x0, 0x7f, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0xaa, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000240)={'wg2\x00', 0x0}) r5 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000200)) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100687372001c00028008000100", @ANYRES32=r3, @ANYBLOB="08000200", @ANYRES32=r4], 0x48}}, 0x0) 4.542358291s ago: executing program 2 (id=4134): syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe4, 0xcb, 0x3, 0x20, 0x421, 0x223, 0xb1bd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x2, 0xff, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@mdlm_detail={0x4}]}]}}]}}]}}, 0x0) 3.611654541s ago: executing program 1 (id=4135): r0 = socket$inet6(0xa, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0_to_team\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES32=r5], 0x48}}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x8800}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000180)="ecd45d54b24094f1277a6cb19a87e938907c1250268fd572965cadc2c5d2a2414c58b1af2eadbdd6ac8bdf99cf3b67a383d5a07c825b22068c1a7698c2d9e5", 0x3f) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_usb_connect(0x0, 0x24, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000780)=[{0x0}, {&(0x7f0000000600)=""/235, 0xeb}, {&(0x7f0000000540)=""/167, 0xa7}, {&(0x7f0000000700)=""/40, 0x28}, {&(0x7f0000000840)=""/207, 0xcf}, {0x0}], 0x6}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0xe7, 0x3, 0x7, 0x0, 0x0, 0x20, 0xc636}, &(0x7f0000000300)={0x0, 0x989680}, 0x0) r7 = shmget$private(0x0, 0x2000, 0x10, &(0x7f00003b2000/0x2000)=nil) shmctl$SHM_STAT(r7, 0xd, &(0x7f0000000080)=""/134) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0x17}]}}]}, 0x3c}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@private1, 0x800, 0x0, 0x103, 0x1}, 0x20) 2.704177334s ago: executing program 3 (id=4136): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) socket$kcm(0x11, 0xa, 0x300) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6f94f90524fc6010000200d7070000053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000080)=0x8001100) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) listen(0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) write$binfmt_script(r4, &(0x7f0000000080), 0x76e5467) 2.252591096s ago: executing program 2 (id=4137): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) socket$kcm(0x11, 0xa, 0x300) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6f94f90524fc6010000200d7070000053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000080)=0x8001100) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) listen(0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) write$binfmt_script(r4, &(0x7f0000000080), 0x76e5467) 2.239755279s ago: executing program 4 (id=4138): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000004140)={0x78, 0x0, r1}, 0x78) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0xfe4f, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) socket$kcm(0x29, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000200)=0x12) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r9, &(0x7f0000000180)={0xa, 0x4001, 0x0, @loopback}, 0x1c) recvmmsg(r9, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001880)=""/252, 0xfc}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002200)=ANY=[@ANYBLOB="48100000", @ANYRES16=r7, @ANYBLOB="280000000000000000003a81000008000300", @ANYRES32=r8, @ANYBLOB="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"], 0x1048}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000002100)={'wlan0\x00', 0x0}) r11 = syz_open_dev$dri(&(0x7f0000000080), 0x8d, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r11, 0xc04064a0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000440)=[0x0], &(0x7f0000002ac0), 0x0, 0x1, 0x0, 0x0, r12}) r13 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r13, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r13, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r14, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r13, 0xc06864ce, &(0x7f0000000440)={r15}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000003580)={&(0x7f0000003540)=[0x0, 0x0, 0x0, 0x0, 0x0, r12], 0x6, 0x0, r15, 0xa6, 0x0, 0x9, 0xffffffff, {0x5b95, 0x8000, 0x0, 0x1, 0xb3, 0xeabc, 0x101, 0x8, 0x1, 0x4, 0x1, 0x2, 0x1, 0x3ff, "cb6d63ca3b85a41f71dedeeede29aa03615fa5ee3ed2e1d760b262ecf9f69a60"}}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f00000021c0)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002180)={&(0x7f0000003280)=ANY=[@ANYBLOB="030000f5c504cbf536b71c912c6d5d000000000000", @ANYRES16=r7, @ANYBLOB="28002abd7000fcdbdf257f00000008000300", @ANYRES32=r10, @ANYBLOB="0a00f500df081a3fff090000"], 0x28}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4000000) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2a0842, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, &(0x7f0000000080)={0x3ff, 0x0, 0x0, 0x3f9, 0x7973}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) 1.575666515s ago: executing program 4 (id=4139): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000001740)="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", 0xf82}], 0x1}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f00009a1000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000fef000/0x4000)=nil) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x0, 0x0, @empty}, 0x1c) mremap(&(0x7f00002d7000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) (async) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) write$binfmt_script(r1, &(0x7f00000016c0), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket(0x200000100000011, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'gre0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'gre0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x1, r4, 0x1, 0x0, 0x6, @local}, 0x14) (async) bind$packet(r3, &(0x7f0000000180)={0x11, 0x1, r4, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x3c0, 0x43) (async) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x3c0, 0x43) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="0201130010061e00cb2f4359b648d5ed0000388dcf66ac141415ef06e63a808a5e5cbd43af9111aa0c520f06"], 0x3000}], 0x1}, 0x0) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="0201130010061e00cb2f4359b648d5ed0000388dcf66ac141415ef06e63a808a5e5cbd43af9111aa0c520f06"], 0x3000}], 0x1}, 0x0) sendfile(r3, r2, 0x0, 0x80004700) (async) sendfile(r3, r2, 0x0, 0x80004700) 1.077745539s ago: executing program 4 (id=4140): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000080)=0x2700, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) syz_open_dev$loop(&(0x7f0000000200), 0x6ff, 0xc0000) socket$rds(0x15, 0x5, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}}, 0x0) pselect6(0x40, &(0x7f0000000600)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0xfff}, 0x0, &(0x7f0000000100)={0xff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) sendto(r0, &(0x7f0000000440)="1db4d479c5faee911d50fbdf12a30d564a0e992d5f77ad426077a9f0ca1475183db32443011ff101251bcef8f165533aacd8c755793dc1ae99ad602c7cca2944de604d849a1e3b22905b0d26e9ff30b83f38a29b2530d22bdb6e73ef2a359249c3e29408dd3e0eb42bf3d6ecf7d9f6a38e6c0818e746843a829db24da275daaa1af5754e2aba22b617f1367566fd3b8892e4774e", 0x94, 0x0, 0x0, 0x0) 362.250326ms ago: executing program 3 (id=4141): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c188001ac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x2c}}, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast2}, r6}}, 0x48) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1e3003, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000300)) ioctl$SNDCTL_SEQ_RESET(r8, 0x5100) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, r10, 0x0, 0x1, 0x4}}, 0x20) 206.347635ms ago: executing program 2 (id=4142): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x3a) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000140)="308f6fdcd8ef95ac180e28e3b7da7a546e208e234300caf3672deb128dccb3484f7fe40ca53a391fc3abc8c5ed020000000000000092db918b2dfc94ff02a734074ca0cbb4e1e3125a8ed1a9959f11f08effc423db5fe68e52d5a79ece3dc9edb20fac857a5ee112cd9bdd5b", 0x6c, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=4143): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r2, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], 0x0, 0x7f, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0xaa, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000240)={'wg2\x00', 0x0}) r5 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000200)) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100687372001c00028008000100", @ANYRES32=r3, @ANYBLOB="08000200", @ANYRES32=r4], 0x48}}, 0x0) kernel console output (not intermixed with test programs): 10 [ 979.865705][ T5636] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 255, setting to 64 [ 979.922464][ T5636] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 979.981688][ T5636] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 980.011772][ T5636] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.030597][T20555] bridge_slave_1: left allmulticast mode [ 980.048104][T21322] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 980.071989][T20555] bridge_slave_1: left promiscuous mode [ 980.074116][ T5636] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 980.098238][T20555] bridge0: port 2(bridge_slave_1) entered disabled state [ 980.144614][T20555] bridge_slave_0: left allmulticast mode [ 980.153925][T20555] bridge_slave_0: left promiscuous mode [ 980.160947][T20555] bridge0: port 1(bridge_slave_0) entered disabled state [ 980.782175][T21330] sctp: [Deprecated]: syz.2.3758 (pid 21330) Use of int in max_burst socket option deprecated. [ 980.782175][T21330] Use struct sctp_assoc_value instead [ 981.393694][T19557] Bluetooth: hci3: command tx timeout [ 981.488403][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 981.511230][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 981.534837][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 981.548612][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 981.587944][ T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 981.623108][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 981.795215][T21343] loop0: detected capacity change from 0 to 6 [ 981.824436][T21343] Dev loop0: unable to read RDB block 6 [ 981.837110][T21343] loop0: unable to read partition table [ 981.850148][T21343] loop0: partition table beyond EOD, truncated [ 981.867244][T21343] loop_reread_partitions: partition scan of loop0 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 981.867244][T21343] ) failed (rc=-5) [ 982.256295][ T5636] snd_usb_pod 3-1:1.1: set_interface failed [ 982.273147][ T5636] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 982.307330][ T5636] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 982.344055][ T5636] usb 3-1: USB disconnect, device number 111 [ 982.561366][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 982.681646][T21353] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.3768'. [ 982.776984][T20555] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 982.830897][T20555] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 982.861087][T20555] bond0 (unregistering): Released all slaves [ 983.476542][T19557] Bluetooth: hci3: command tx timeout [ 983.712831][T19557] Bluetooth: hci1: command tx timeout [ 983.837728][T21364] loop0: detected capacity change from 0 to 6 [ 983.854272][T21364] Dev loop0: unable to read RDB block 6 [ 983.861168][T21364] loop0: unable to read partition table [ 983.875137][T21364] loop0: partition table beyond EOD, truncated [ 983.899103][T21364] loop_reread_partitions: partition scan of loop0 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 983.899103][T21364] ) failed (rc=-5) [ 984.022653][ T25] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 984.068081][T20555] hsr_slave_0: left promiscuous mode [ 984.123263][T20555] hsr_slave_1: left promiscuous mode [ 984.169886][T20555] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 984.192073][T20555] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 984.216698][T20555] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 984.237503][T20555] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 984.274716][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 984.299829][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 984.305116][ T25] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 984.326034][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 984.329058][ T25] usb 3-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 984.344247][T20555] veth0_macvtap: left promiscuous mode [ 984.357525][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 984.361876][ T25] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 984.388344][T20555] veth1_vlan: left promiscuous mode [ 984.389942][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.402342][T20555] veth0_vlan: left promiscuous mode [ 984.425239][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 984.431682][ T25] hub 3-1:4.0: bad descriptor, ignoring hub [ 984.447427][ T25] hub 3-1:4.0: probe with driver hub failed with error -5 [ 984.459383][ T25] usbhid 3-1:4.0: couldn't find an input interrupt endpoint [ 984.459476][ T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 984.479239][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 985.329214][T21389] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.3776'. [ 985.553976][ T53] Bluetooth: hci3: command tx timeout [ 985.793639][ T53] Bluetooth: hci1: command tx timeout [ 985.822253][T20555] team0 (unregistering): Port device team_slave_1 removed [ 985.915773][T20555] team0 (unregistering): Port device team_slave_0 removed [ 986.593350][ T53] Bluetooth: hci0: command tx timeout [ 986.881724][T21324] chnl_net:caif_netlink_parms(): no params data found [ 986.947218][T21384] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3772'. [ 987.103494][T15367] usb 3-1: USB disconnect, device number 112 [ 987.589519][T21398] netlink: 'syz.0.3778': attribute type 10 has an invalid length. [ 987.622697][T21398] team0: Device ipvlan1 failed to register rx_handler [ 987.643489][ T53] Bluetooth: hci3: command tx timeout [ 987.673290][T21324] bridge0: port 1(bridge_slave_0) entered blocking state [ 987.681152][T21324] bridge0: port 1(bridge_slave_0) entered disabled state [ 987.756729][T21324] bridge_slave_0: entered allmulticast mode [ 987.798969][T21324] bridge_slave_0: entered promiscuous mode [ 987.829257][T21324] bridge0: port 2(bridge_slave_1) entered blocking state [ 987.868239][T21324] bridge0: port 2(bridge_slave_1) entered disabled state [ 987.882971][ T53] Bluetooth: hci1: command tx timeout [ 987.914502][T21324] bridge_slave_1: entered allmulticast mode [ 987.955812][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 987.985716][T21324] bridge_slave_1: entered promiscuous mode [ 988.064220][T21342] chnl_net:caif_netlink_parms(): no params data found [ 988.226818][T21324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 988.277850][T21324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 988.684561][ T53] Bluetooth: hci0: command tx timeout [ 988.715777][T21324] team0: Port device team_slave_0 added [ 988.735464][T21324] team0: Port device team_slave_1 added [ 988.973932][T21342] bridge0: port 1(bridge_slave_0) entered blocking state [ 989.006975][ T8792] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 989.037132][T21439] netlink: 'syz.0.3786': attribute type 2 has an invalid length. [ 989.047626][T21439] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3786'. [ 989.053357][T21342] bridge0: port 1(bridge_slave_0) entered disabled state [ 989.092961][T21342] bridge_slave_0: entered allmulticast mode [ 989.124123][T21342] bridge_slave_0: entered promiscuous mode [ 989.252935][ T8792] usb 3-1: Using ep0 maxpacket: 32 [ 989.303625][ T8792] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 989.347328][ T8792] usb 3-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 989.373341][ T8792] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 989.389944][ T8792] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.415745][ T8792] hub 3-1:4.0: bad descriptor, ignoring hub [ 989.430075][T21324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 989.447233][ T8792] hub 3-1:4.0: probe with driver hub failed with error -5 [ 989.458735][T21324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 989.458775][T21324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 989.473138][T21324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 989.547087][ T8792] usbhid 3-1:4.0: couldn't find an input interrupt endpoint [ 989.579788][T21324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 989.711865][T21324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 989.774209][T21342] bridge0: port 2(bridge_slave_1) entered blocking state [ 989.813430][T21342] bridge0: port 2(bridge_slave_1) entered disabled state [ 989.841503][T21342] bridge_slave_1: entered allmulticast mode [ 989.865524][T21342] bridge_slave_1: entered promiscuous mode [ 989.953115][ T53] Bluetooth: hci1: command tx timeout [ 990.121509][T20555] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.224176][T21380] chnl_net:caif_netlink_parms(): no params data found [ 990.278756][T20555] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.520405][T21324] hsr_slave_0: entered promiscuous mode [ 990.564528][T21324] hsr_slave_1: entered promiscuous mode [ 990.595165][T21324] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 990.639759][T21324] Cannot create hsr debugfs directory [ 990.746196][T20555] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.763713][ T53] Bluetooth: hci0: command tx timeout [ 990.798120][T21342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 990.870687][T21342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 990.899245][T21457] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.3788'. [ 991.034321][T20555] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 991.093411][T21447] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3785'. [ 991.378362][T21342] team0: Port device team_slave_0 added [ 991.568898][T21342] team0: Port device team_slave_1 added [ 991.581921][T21380] bridge0: port 1(bridge_slave_0) entered blocking state [ 991.590789][T21380] bridge0: port 1(bridge_slave_0) entered disabled state [ 991.599143][T21380] bridge_slave_0: entered allmulticast mode [ 991.637324][T21380] bridge_slave_0: entered promiscuous mode [ 991.651403][T21380] bridge0: port 2(bridge_slave_1) entered blocking state [ 991.678678][T21380] bridge0: port 2(bridge_slave_1) entered disabled state [ 991.700058][T21380] bridge_slave_1: entered allmulticast mode [ 991.715873][T21380] bridge_slave_1: entered promiscuous mode [ 991.927343][T21380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 991.940830][T21342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 991.951900][T21342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 992.003432][T21342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 992.060930][T21380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 992.109316][T21342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 992.123269][T21342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 992.221650][T21342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 992.324407][T21478] netlink: 'syz.0.3790': attribute type 10 has an invalid length. [ 992.353855][T21478] team0: Device ipvlan1 failed to register rx_handler [ 992.494558][T20555] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.552869][ T5144] usb 3-1: USB disconnect, device number 113 [ 992.639779][T21380] team0: Port device team_slave_0 added [ 992.739928][T20555] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.757243][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 992.826373][T21380] team0: Port device team_slave_1 added [ 992.851528][ T53] Bluetooth: hci0: command tx timeout [ 992.882180][T21342] hsr_slave_0: entered promiscuous mode [ 992.896610][T21342] hsr_slave_1: entered promiscuous mode [ 992.918630][T21342] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 992.938309][T21342] Cannot create hsr debugfs directory [ 992.982723][ T5144] usb 3-1: new full-speed USB device number 114 using dummy_hcd [ 993.028761][T21380] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 993.037219][T21380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 993.102338][T21380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 993.182169][T20555] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 993.194890][ T5144] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 993.194925][ T5144] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 993.194947][ T5144] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 993.194969][ T5144] usb 3-1: config 1 has no interface number 0 [ 993.195012][ T5144] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 993.195040][ T5144] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 255, setting to 64 [ 993.195067][ T5144] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 993.195109][ T5144] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 993.195133][ T5144] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.199363][T21480] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 993.326292][ T5144] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 993.335003][ T1242] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.343996][ T1242] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.969167][T21380] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 994.015567][T21380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 994.015827][T21498] sctp: [Deprecated]: syz.2.3791 (pid 21498) Use of int in max_burst socket option deprecated. [ 994.015827][T21498] Use struct sctp_assoc_value instead [ 994.155339][T21380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 994.611804][T20555] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.825094][T21508] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.3794'. [ 995.885475][T21380] hsr_slave_0: entered promiscuous mode [ 995.900659][ T5144] snd_usb_pod 3-1:1.1: set_interface failed [ 995.927437][T21380] hsr_slave_1: entered promiscuous mode [ 995.937443][ T5144] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 995.975581][ T5144] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 995.993318][T21380] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 996.023791][ T5144] usb 3-1: USB disconnect, device number 114 [ 996.041983][T21380] Cannot create hsr debugfs directory [ 996.383926][T20555] bridge_slave_1: left allmulticast mode [ 996.390029][T20555] bridge_slave_1: left promiscuous mode [ 996.398711][T20555] bridge0: port 2(bridge_slave_1) entered disabled state [ 996.413785][T20555] bridge_slave_0: left allmulticast mode [ 996.420112][T20555] bridge_slave_0: left promiscuous mode [ 996.435908][T20555] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.465274][T20555] bridge_slave_1: left allmulticast mode [ 996.474457][T20555] bridge_slave_1: left promiscuous mode [ 996.485939][T20555] bridge0: port 2(bridge_slave_1) entered disabled state [ 996.498139][T20555] bridge_slave_0: left allmulticast mode [ 996.509633][T20555] bridge_slave_0: left promiscuous mode [ 996.529745][T20555] bridge0: port 1(bridge_slave_0) entered disabled state [ 997.645287][T20555] dvmrp1 (unregistering): left allmulticast mode [ 997.768863][T21535] netlink: 'syz.2.3800': attribute type 2 has an invalid length. [ 997.783457][T21535] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3800'. [ 997.981524][T20555] team0: Port device bridge0 removed [ 998.357429][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 998.446035][T20555] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 998.479041][T20555] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 998.496009][T20555] bond0 (unregistering): Released all slaves [ 998.921706][T20555] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 998.975750][T20555] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 998.998159][T20555] bond0 (unregistering): Released all slaves [ 999.621925][T21324] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 999.759082][T21324] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 999.853230][ T5144] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 999.878550][ C1] raw-gadget.1 gadget.2: ignoring, device is not running [ 1000.005982][T21324] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1000.101749][T21324] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1000.430543][T20555] hsr_slave_0: left promiscuous mode [ 1000.441066][T20555] hsr_slave_1: left promiscuous mode [ 1000.455796][T20555] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1000.468902][T20555] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1000.487278][T20555] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1000.497203][T20555] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1000.514068][T20555] hsr_slave_0: left promiscuous mode [ 1000.526211][T20555] hsr_slave_1: left promiscuous mode [ 1000.534439][T20555] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1000.544728][T20555] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1000.558776][T20555] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1000.569153][T20555] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1000.612057][T20555] veth0_macvtap: left promiscuous mode [ 1000.619553][T20555] veth1_vlan: left promiscuous mode [ 1000.631372][T20555] veth0_vlan: left promiscuous mode [ 1000.639599][T20555] veth1_macvtap: left promiscuous mode [ 1000.648209][T20555] veth0_macvtap: left promiscuous mode [ 1000.655381][T20555] veth1_vlan: left promiscuous mode [ 1000.661123][T20555] veth0_vlan: left promiscuous mode [ 1000.713158][ T5144] usb 3-1: new full-speed USB device number 116 using dummy_hcd [ 1000.904500][ T5144] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 1000.927068][ T5144] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1000.945533][ T5144] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1000.964989][ T5144] usb 3-1: config 1 has no interface number 0 [ 1000.981475][ T5144] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1001.014199][ T5144] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 255, setting to 64 [ 1001.029017][ T5144] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1001.047125][ T5144] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1001.066646][ T5144] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.101971][T21546] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1001.126890][ T5144] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 1001.755938][T21548] sctp: [Deprecated]: syz.2.3804 (pid 21548) Use of int in max_burst socket option deprecated. [ 1001.755938][T21548] Use struct sctp_assoc_value instead [ 1001.777322][ C1] vkms_vblank_simulate: vblank timer overrun [ 1002.159128][ C1] vkms_vblank_simulate: vblank timer overrun [ 1002.396279][T20555] team0 (unregistering): Port device team_slave_1 removed [ 1002.617387][T20555] team0 (unregistering): Port device team_slave_0 removed [ 1003.190814][ T5144] snd_usb_pod 3-1:1.1: set_interface failed [ 1003.221314][ T5144] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 1003.272996][ T5144] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 1003.294516][T21558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3806'. [ 1003.308638][ T5144] usb 3-1: USB disconnect, device number 116 [ 1003.328779][T21558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3806'. [ 1003.691112][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1004.731453][T21569] netlink: 'syz.2.3809': attribute type 2 has an invalid length. [ 1004.751579][T21569] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3809'. [ 1004.974940][T20555] team0 (unregistering): Port device team_slave_1 removed [ 1005.105414][T20555] team0 (unregistering): Port device team_slave_0 removed [ 1006.370372][T21324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1006.823204][T21324] 8021q: adding VLAN 0 to HW filter on device team0 [ 1006.839736][T21342] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1006.942905][ T6524] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1006.972773][T21342] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1007.006696][ T5144] bridge0: port 1(bridge_slave_0) entered blocking state [ 1007.015393][ T5144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1007.051792][ T5144] bridge0: port 2(bridge_slave_1) entered blocking state [ 1007.060147][ T5144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1007.143325][T21342] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1007.154724][ T6524] usb 3-1: Using ep0 maxpacket: 8 [ 1007.167872][ T6524] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1007.195018][T21342] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1007.215883][ T6524] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.253171][ T6524] usb 3-1: config 0 descriptor?? [ 1007.535071][T21324] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1007.568266][T21324] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1008.016713][T21324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1008.062285][T21380] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1008.178843][T21380] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1008.273766][T21380] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1008.296254][T21380] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1008.373364][T21342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1008.495346][T21342] 8021q: adding VLAN 0 to HW filter on device team0 [ 1008.549468][ T5636] bridge0: port 1(bridge_slave_0) entered blocking state [ 1008.558249][ T5636] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1008.622274][T21324] veth0_vlan: entered promiscuous mode [ 1008.669172][ T5636] bridge0: port 2(bridge_slave_1) entered blocking state [ 1008.679825][ T5636] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1008.766638][T21324] veth1_vlan: entered promiscuous mode [ 1008.927110][T21380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1008.949054][ T6524] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1008.998887][ T6524] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1009.023510][ T6524] asix 3-1:0.0: probe with driver asix failed with error -71 [ 1009.057604][ T6524] usb 3-1: USB disconnect, device number 117 [ 1009.059216][T21380] 8021q: adding VLAN 0 to HW filter on device team0 [ 1009.128510][ T5147] bridge0: port 1(bridge_slave_0) entered blocking state [ 1009.138090][ T5147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1009.170158][T21324] veth0_macvtap: entered promiscuous mode [ 1009.196896][T21324] veth1_macvtap: entered promiscuous mode [ 1009.221715][ T5193] bridge0: port 2(bridge_slave_1) entered blocking state [ 1009.229940][ T5193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1009.282000][T21342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1009.355386][T21324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1009.385002][T21324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1009.405478][T21324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1009.430797][T21324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1009.455925][T21324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1009.478115][T21324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1009.498721][T21324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1009.564289][T21324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1009.585075][T21324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1009.599606][T21324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1009.616316][T21324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1009.630556][T21324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1009.647227][T21324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1009.674577][T21324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1009.755217][T21324] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1009.779761][T21324] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1009.802765][T21324] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1009.826402][T21324] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1009.958674][T21342] veth0_vlan: entered promiscuous mode [ 1010.049382][T21342] veth1_vlan: entered promiscuous mode [ 1010.208827][T21380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1010.287567][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1010.331029][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1010.464652][T10643] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1010.466273][T21342] veth0_macvtap: entered promiscuous mode [ 1010.482453][T10643] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1010.603530][T21342] veth1_macvtap: entered promiscuous mode [ 1010.669777][T21380] veth0_vlan: entered promiscuous mode [ 1010.728863][T21380] veth1_vlan: entered promiscuous mode [ 1010.799966][T21342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1010.839481][T21342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1010.859969][T21342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1010.904022][T21342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1010.956684][T21342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1010.989406][T21342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.010626][T21342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1011.036532][T21342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.112330][T21342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1011.475975][T21342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1011.534353][T21342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.607604][T21342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1011.651928][T19557] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1011.683420][T19557] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1011.699835][T19557] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1011.721294][T21342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.740749][T19557] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1011.757034][T19557] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1011.763060][T21342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1011.767497][T19557] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1011.893501][T21342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.987000][T21342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1012.019632][T21342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1012.067031][T21342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1012.170649][T21342] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1012.185139][T21342] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1012.208375][T21342] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1012.233932][T21342] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1012.281537][T21380] veth0_macvtap: entered promiscuous mode [ 1012.400549][T21380] veth1_macvtap: entered promiscuous mode [ 1012.556015][T21380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1012.576731][T21380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1012.597190][T21380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1012.673244][T21380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1012.713802][T21380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1012.749572][T21380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1012.771255][T21380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1012.785588][T21380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1012.799426][T21380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1012.823227][T21380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1012.875187][T21380] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1012.994825][T21380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1013.030852][T21380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1013.053583][T21380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1013.072212][T21380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1013.090534][T21380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1013.106666][T21380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1013.132758][T21380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1013.148482][T21380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1013.180498][T21380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1013.208377][T21380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1013.268372][T21380] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1013.458086][T21380] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.493312][T21380] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.511785][T21380] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.542612][T21380] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.815285][T10643] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1013.829580][T10643] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1013.882347][ T53] Bluetooth: hci2: command tx timeout [ 1014.173471][T20559] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1014.173826][T21657] chnl_net:caif_netlink_parms(): no params data found [ 1014.203971][T20559] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1014.468952][T20548] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1014.511306][T20548] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1014.646821][T21657] bridge0: port 1(bridge_slave_0) entered blocking state [ 1014.678818][T21657] bridge0: port 1(bridge_slave_0) entered disabled state [ 1014.703627][T21657] bridge_slave_0: entered allmulticast mode [ 1014.720407][T21657] bridge_slave_0: entered promiscuous mode [ 1014.737094][T21657] bridge0: port 2(bridge_slave_1) entered blocking state [ 1014.746781][T21657] bridge0: port 2(bridge_slave_1) entered disabled state [ 1014.771105][T21657] bridge_slave_1: entered allmulticast mode [ 1014.784074][T21657] bridge_slave_1: entered promiscuous mode [ 1014.854111][T15606] usb 5-1: new full-speed USB device number 116 using dummy_hcd [ 1014.905151][T21657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1014.965100][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1014.965141][T21657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1014.975491][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1015.075720][ T8792] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1015.085583][T15606] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 1015.120792][T15606] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1015.178764][T15606] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1015.190758][T15606] usb 5-1: config 1 has no interface number 0 [ 1015.204936][T21657] team0: Port device team_slave_0 added [ 1015.212614][T15606] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1015.237435][T21657] team0: Port device team_slave_1 added [ 1015.243448][T15606] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 255, setting to 64 [ 1015.261734][T15606] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1015.297543][T15606] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1015.324137][T15606] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1015.356570][T21696] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1015.397009][T15606] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 1015.450929][T21657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1015.476962][T21657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1015.532911][T21657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1015.605034][T21657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1015.631480][T21657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1015.680139][T21657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1015.721262][T21707] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3823'. [ 1015.953467][ T53] Bluetooth: hci2: command tx timeout [ 1016.198488][T21657] hsr_slave_0: entered promiscuous mode [ 1016.244972][T21657] hsr_slave_1: entered promiscuous mode [ 1016.386303][T21714] sctp: [Deprecated]: syz.4.3761 (pid 21714) Use of int in max_burst socket option deprecated. [ 1016.386303][T21714] Use struct sctp_assoc_value instead [ 1016.494295][ T8792] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 1016.715840][ T8792] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 1016.753762][ T8792] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1016.768878][ T8792] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1016.783909][ T8792] usb 2-1: config 1 has no interface number 0 [ 1016.791737][ T8792] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1016.800440][T21657] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.807927][ T8792] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 255, setting to 64 [ 1016.835854][ T8792] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1016.858621][ T8792] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1016.875314][ T8792] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.897919][T21716] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1016.919373][ T8792] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 1017.016839][T21657] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.158220][T21657] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.343494][T21657] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.569991][T21723] sctp: [Deprecated]: syz.1.3825 (pid 21723) Use of int in max_burst socket option deprecated. [ 1017.569991][T21723] Use struct sctp_assoc_value instead [ 1018.017162][T15606] snd_usb_pod 5-1:1.1: set_interface failed [ 1018.034737][ T53] Bluetooth: hci2: command tx timeout [ 1018.109215][T15606] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 1018.174972][T21657] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1018.201850][T15606] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 1018.286390][T21657] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1018.326431][T15606] usb 5-1: USB disconnect, device number 116 [ 1018.394325][T21657] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1018.466036][T21657] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1018.935615][T21657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1019.139476][T21657] 8021q: adding VLAN 0 to HW filter on device team0 [ 1019.180600][ T6524] bridge0: port 1(bridge_slave_0) entered blocking state [ 1019.188444][ T6524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1019.294998][ T5117] bridge0: port 2(bridge_slave_1) entered blocking state [ 1019.302914][ T5117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1019.501083][ T8792] snd_usb_pod 2-1:1.1: set_interface failed [ 1019.557270][ T8792] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 1019.624520][ T8792] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 1019.659553][ T8792] usb 2-1: USB disconnect, device number 12 [ 1020.006935][T21657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1020.115790][ T53] Bluetooth: hci2: command tx timeout [ 1020.323247][T21657] veth0_vlan: entered promiscuous mode [ 1020.387489][T21657] veth1_vlan: entered promiscuous mode [ 1020.505163][T21657] veth0_macvtap: entered promiscuous mode [ 1020.537580][T21657] veth1_macvtap: entered promiscuous mode [ 1020.577381][T21657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1020.633002][ T6524] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1020.635393][T21657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.676448][T21657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1020.694728][T21657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.713345][T21657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1020.787124][T21657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.830288][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 1020.882263][T21657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1020.922166][T21657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.935056][ T6524] usb 5-1: Using ep0 maxpacket: 32 [ 1020.942748][T21657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1020.957439][ T6524] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1020.975215][T21657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.993886][T21657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1020.997711][ T6524] usb 5-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1021.025385][T21657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1021.032260][ T6524] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1021.064234][ T6524] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.095768][T21657] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1021.127058][T21657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1021.139610][T21657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1021.142082][ T6524] hub 5-1:4.0: bad descriptor, ignoring hub [ 1021.152326][T21657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1021.190037][T21657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1021.204097][ T6524] hub 5-1:4.0: probe with driver hub failed with error -5 [ 1021.221030][T21657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1021.251834][ T6524] usbhid 5-1:4.0: couldn't find an input interrupt endpoint [ 1021.264606][T21657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1021.333808][T21657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1021.347335][T21657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1021.361693][T21657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1021.388157][T21657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1021.418694][T21657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1021.439407][T21657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1021.498124][T21657] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1021.535099][T21757] netlink: 'syz.3.3835': attribute type 10 has an invalid length. [ 1021.549486][T21757] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3835'. [ 1021.578076][T21757] ipvlan1: entered promiscuous mode [ 1021.587712][T21757] ipvlan1: entered allmulticast mode [ 1021.613598][T21757] veth0_vlan: entered allmulticast mode [ 1021.660540][T21757] bridge0: port 3(ipvlan1) entered blocking state [ 1021.683299][T21757] bridge0: port 3(ipvlan1) entered disabled state [ 1021.710174][T21757] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1021.791898][T21657] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.808593][T21657] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.825181][T21657] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.854093][T21657] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.862073][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1021.959335][T21771] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3834'. [ 1022.156404][T20559] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1022.174533][T20559] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1022.233600][T20548] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1022.250498][T20548] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1022.363732][ T53] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1022.376990][ T53] Bluetooth: hci1: Injecting HCI hardware error event [ 1022.389603][ T53] Bluetooth: hci1: hardware error 0x00 [ 1022.604531][ T29] audit: type=1326 audit(1719294112.217:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21779 comm="syz.0.3842" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcd2a775d39 code=0x0 [ 1022.712184][T21785] netlink: 'syz.0.3842': attribute type 4 has an invalid length. [ 1022.735193][T21785] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3842'. [ 1022.972814][ T8792] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1023.083635][ T5147] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1023.163428][ T8792] usb 3-1: Using ep0 maxpacket: 16 [ 1023.174473][ T8792] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1023.193129][ T8792] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1023.211622][ T8792] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1023.229003][ T8792] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1023.245151][ T8792] usb 3-1: config 0 descriptor?? [ 1023.273950][ T5147] usb 2-1: Using ep0 maxpacket: 16 [ 1023.317124][ T5147] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=37.3e [ 1023.344212][ T5147] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.371719][ T5147] usb 2-1: Product: syz [ 1023.377857][ T5147] usb 2-1: Manufacturer: syz [ 1023.389000][ T5147] usb 2-1: SerialNumber: syz [ 1023.398857][ T5147] usb 2-1: config 0 descriptor?? [ 1023.416059][ T5147] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1023.424264][ T5147] dvb-usb: bulk message failed: -22 (3/0) [ 1023.463898][ T5147] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1023.496736][ T5147] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1023.504749][ T5147] usb 2-1: media controller created [ 1023.538232][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 1023.558312][ T5147] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1023.601016][ T5117] usb 5-1: reset high-speed USB device number 117 using dummy_hcd [ 1023.608711][ T5147] dvb-usb: bulk message failed: -22 (6/0) [ 1023.631060][ T5117] usb 5-1: device reset changed ep0 maxpacket size! [ 1023.652976][ T5147] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1023.671139][ T5117] usb 5-1: USB disconnect, device number 117 [ 1023.703849][ T5147] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input105 [ 1023.780211][ T5147] dvb-usb: schedule remote query interval to 150 msecs. [ 1023.803779][ T5147] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1023.830887][ T5147] usb 2-1: USB disconnect, device number 13 [ 1023.896639][T21784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1023.926404][T21784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1023.965121][ T45] dvb-usb: did not find the firmware file 'af9005.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1023.976636][ T29] audit: type=1326 audit(1719294113.577:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21794 comm="syz.0.3848" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcd2a775d39 code=0x0 [ 1023.997293][ T45] dvb_usb_af9005 4-1:127.127: probe with driver dvb_usb_af9005 failed with error -110 [ 1024.045601][ T5147] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1024.074727][ T5117] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1024.078471][ T45] af9005: boot packet bulk message failed: -22 (252/0) [ 1024.104662][ T45] dvb-usb: found a 'TerraTec Cinergy T USB XE' in cold state, will try to load a firmware [ 1024.126327][ T45] usb 4-1: Direct firmware load for af9005.fw failed with error -2 [ 1024.138622][ T45] usb 4-1: Falling back to sysfs fallback for: af9005.fw [ 1024.225172][ T8792] usbhid 3-1:0.0: can't add hid device: -71 [ 1024.238188][ T8792] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1024.263088][ T5117] usb 5-1: Using ep0 maxpacket: 16 [ 1024.280542][ T8792] usb 3-1: USB disconnect, device number 118 [ 1024.287689][ T5117] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1024.287725][ T5117] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1024.287765][ T5117] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1024.287788][ T5117] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1024.295856][ T5117] usb 5-1: config 0 descriptor?? [ 1024.513553][ T53] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1024.806696][T21788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1024.842937][T21788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1024.863542][ T8792] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 1024.917809][T21802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3851'. [ 1025.070403][ T8792] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 1025.087072][ T5117] usbhid 5-1:0.0: can't add hid device: -71 [ 1025.110957][ T5117] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1025.133910][ T5117] usb 5-1: USB disconnect, device number 118 [ 1025.145361][T21807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1025.167136][ T8792] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1025.207866][T21807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1025.257924][ T8792] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1025.318020][ T8792] usb 2-1: config 1 has no interface number 0 [ 1025.363887][ T8792] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1025.445981][ T8792] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 255, setting to 64 [ 1025.474385][ T8792] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1025.491331][ T8792] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1025.531371][ T8792] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.556568][T21798] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1025.574428][ T8792] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 1025.773436][ T5144] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1025.964234][ T5144] usb 3-1: Using ep0 maxpacket: 32 [ 1026.007713][ T5144] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1026.062201][ T5144] usb 3-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1026.101267][T21821] sctp: [Deprecated]: syz.1.3849 (pid 21821) Use of int in max_burst socket option deprecated. [ 1026.101267][T21821] Use struct sctp_assoc_value instead [ 1026.102050][ T5144] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1026.176003][ T5144] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.204583][ T5144] hub 3-1:4.0: bad descriptor, ignoring hub [ 1026.210907][ T5144] hub 3-1:4.0: probe with driver hub failed with error -5 [ 1026.234119][ T5144] usbhid 3-1:4.0: couldn't find an input interrupt endpoint [ 1026.982028][T21840] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3861'. [ 1027.057464][T21838] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3855'. [ 1027.104056][ T5117] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1027.343074][ T5117] usb 5-1: Using ep0 maxpacket: 16 [ 1027.379999][ T5117] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1027.429968][ T5117] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1027.487858][ T5117] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1027.517487][ T5117] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.564485][ T5117] usb 5-1: config 0 descriptor?? [ 1028.010839][T21837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1028.053262][T21837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1028.275999][ T8792] snd_usb_pod 2-1:1.1: set_interface failed [ 1028.309237][ T8792] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 1028.328988][ T8792] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 1028.361226][ T8792] usb 2-1: USB disconnect, device number 14 [ 1028.362501][ T5117] usbhid 5-1:0.0: can't add hid device: -71 [ 1028.431182][ T5117] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1028.474277][ T5117] usb 5-1: USB disconnect, device number 119 [ 1028.653608][ T5144] usb 3-1: USB disconnect, device number 119 [ 1028.735810][T21851] netlink: 'syz.3.3864': attribute type 2 has an invalid length. [ 1028.797866][T21851] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3864'. [ 1028.824285][T21853] netlink: 'syz.2.3865': attribute type 10 has an invalid length. [ 1028.989546][T21853] team0: Device ipvlan1 failed to register rx_handler [ 1030.293611][ T5144] usb 5-1: new full-speed USB device number 120 using dummy_hcd [ 1030.473361][ T25] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1030.554518][ T5144] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 1030.591461][ T5144] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1030.632970][ T5144] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1030.668540][ T5144] usb 5-1: config 1 has no interface number 0 [ 1030.694003][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 1030.710694][ T5144] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1030.760853][ T5144] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 255, setting to 64 [ 1030.777229][ T25] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1030.792567][ T25] usb 2-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1030.814639][ T5144] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1030.839037][ T25] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1030.853590][ T5144] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1030.870751][ T5144] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.881060][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.901670][ T25] hub 2-1:4.0: bad descriptor, ignoring hub [ 1030.909245][ T25] hub 2-1:4.0: probe with driver hub failed with error -5 [ 1030.926330][T21884] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1030.947635][T21892] random: crng reseeded on system resumption [ 1030.964505][ T5144] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 1030.972700][T21901] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3881'. [ 1031.007639][ T25] usbhid 2-1:4.0: couldn't find an input interrupt endpoint [ 1031.541334][T21910] netlink: 'syz.0.3882': attribute type 10 has an invalid length. [ 1031.612335][T21909] sctp: [Deprecated]: syz.4.3874 (pid 21909) Use of int in max_burst socket option deprecated. [ 1031.612335][T21909] Use struct sctp_assoc_value instead [ 1031.694306][T21910] team0: Device ipvlan1 failed to register rx_handler [ 1031.740580][T21914] fuse: Bad value for 'fd' [ 1031.933076][T21914] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3875'. [ 1032.332084][ T5144] snd_usb_pod 5-1:1.1: set_interface failed [ 1032.357809][ T5144] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 1032.381943][ T5144] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 1032.418467][ T5144] usb 5-1: USB disconnect, device number 120 [ 1032.651800][T21922] netlink: 'syz.3.3885': attribute type 2 has an invalid length. [ 1032.671786][T21922] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3885'. [ 1033.022112][T21926] kvm: kvm [21924]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 1033.240925][T21933] netlink: 'syz.4.3888': attribute type 2 has an invalid length. [ 1033.271603][T21933] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3888'. [ 1033.508897][ T5636] usb 2-1: USB disconnect, device number 15 [ 1033.700349][T21942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3891'. [ 1033.778043][T21942] mac80211_hwsim hwsim158 wlan1: entered promiscuous mode [ 1034.257205][T21950] netlink: 'syz.2.3894': attribute type 10 has an invalid length. [ 1034.334559][ T29] audit: type=1326 audit(1719294123.937:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21952 comm="syz.4.3895" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcee7d75d39 code=0x0 [ 1034.401784][T21950] team0: Device ipvlan1 failed to register rx_handler [ 1035.033308][ T5117] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1035.243380][ T5117] usb 3-1: Using ep0 maxpacket: 8 [ 1035.264343][ T5117] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1035.295936][ T5117] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.296773][T21970] netlink: 'syz.4.3900': attribute type 10 has an invalid length. [ 1035.344834][ T5117] usb 3-1: config 0 descriptor?? [ 1035.392134][T21970] team0: Device ipvlan1 failed to register rx_handler [ 1035.673171][ T5147] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1035.862761][ T5147] usb 2-1: Using ep0 maxpacket: 32 [ 1035.883170][ T5144] usb 5-1: new full-speed USB device number 121 using dummy_hcd [ 1035.893944][ T5147] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1035.910025][ T5147] usb 2-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1035.927272][ T5147] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1035.937964][ T5147] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.971766][ T5147] hub 2-1:4.0: bad descriptor, ignoring hub [ 1035.980517][ T5147] hub 2-1:4.0: probe with driver hub failed with error -5 [ 1035.991568][ T5147] usbhid 2-1:4.0: couldn't find an input interrupt endpoint [ 1036.106616][ T5144] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 1036.131966][ T5144] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1036.152524][ T5144] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1036.166818][ T5144] usb 5-1: config 1 has no interface number 0 [ 1036.177243][ T5144] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1036.195262][ T5144] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 255, setting to 64 [ 1036.228237][ T5144] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1036.260008][ T5144] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1036.283745][ T5144] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.301415][T21974] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 1036.317914][ T5144] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 1036.867284][T21977] sctp: [Deprecated]: syz.4.3902 (pid 21977) Use of int in max_burst socket option deprecated. [ 1036.867284][T21977] Use struct sctp_assoc_value instead [ 1036.908292][T21975] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3901'. [ 1037.053040][ T5117] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1037.102180][ T5117] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1037.134483][ T5117] asix 3-1:0.0: probe with driver asix failed with error -71 [ 1037.165486][ T5117] usb 3-1: USB disconnect, device number 120 [ 1038.446118][T21988] kvm: kvm [21987]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 1038.554363][T15367] usb 2-1: USB disconnect, device number 16 [ 1038.933458][ T5144] snd_usb_pod 5-1:1.1: set_interface failed [ 1038.940195][ T5144] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 1038.982896][ T5144] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 1039.031783][ T5144] usb 5-1: USB disconnect, device number 121 [ 1039.122026][T21994] kvm: kvm [21993]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 1039.184860][T21999] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3908'. [ 1039.357558][T22000] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1039.394565][T22000] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1039.471085][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 1039.557467][ T29] audit: type=1326 audit(1719294129.167:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22003 comm="syz.2.3910" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4866775d39 code=0x0 [ 1040.403627][ T5117] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 1040.653566][ T5117] usb 5-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 1040.672342][ T5117] usb 5-1: New USB device strings: Mfr=16, Product=0, SerialNumber=0 [ 1040.685119][ T5117] usb 5-1: Manufacturer: syz [ 1040.692258][ T5117] usb 5-1: config 0 descriptor?? [ 1040.702290][ T5117] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 1040.715424][ T5117] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 1040.733418][ T5144] usb 3-1: new full-speed USB device number 121 using dummy_hcd [ 1040.863007][ T5636] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1040.909096][T22020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1040.923038][T22020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1040.926019][ T5144] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 1040.953531][ T5144] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1040.971144][ T5144] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1040.984992][ T5144] usb 3-1: config 1 has no interface number 0 [ 1041.003375][ T5144] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1041.017546][ T5144] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 255, setting to 64 [ 1041.029847][ T5144] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1041.037185][ T5117] usb 5-1: USB disconnect, device number 122 [ 1041.045789][ T5144] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1041.067202][ T5636] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1041.076348][ T5144] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1041.086709][ T5117] ftdi_sio 5-1:0.0: device disconnected [ 1041.105662][T22032] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1041.109077][ T5636] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1041.124800][ T5144] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 1041.149211][ T5636] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1041.177412][ T5636] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1041.203840][ T5636] usb 2-1: config 0 descriptor?? [ 1041.286573][T22038] dccp_invalid_packet: P.Data Offset(128) too large [ 1041.327988][T22038] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3920'. [ 1041.827993][T22036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3919'. [ 1041.916400][T22045] sctp: [Deprecated]: syz.2.3918 (pid 22045) Use of int in max_burst socket option deprecated. [ 1041.916400][T22045] Use struct sctp_assoc_value instead [ 1041.937771][ C0] vkms_vblank_simulate: vblank timer overrun [ 1041.966444][ T5636] usb 2-1: string descriptor 0 read error: -71 [ 1042.006045][ T5636] uclogic 0003:256C:006D.0033: failed retrieving string descriptor #200: -71 [ 1042.017566][ T5636] uclogic 0003:256C:006D.0033: failed retrieving pen parameters: -71 [ 1042.029886][ T5636] uclogic 0003:256C:006D.0033: failed probing pen v2 parameters: -71 [ 1042.053233][ T5636] uclogic 0003:256C:006D.0033: failed probing parameters: -71 [ 1042.114259][ T5636] uclogic 0003:256C:006D.0033: probe with driver uclogic failed with error -71 [ 1042.169880][ T5636] usb 2-1: USB disconnect, device number 17 [ 1042.394746][T20555] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.585511][T20555] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.788988][T20555] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.050657][T20555] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.441057][T19557] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1043.463489][T19557] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1043.481990][T19557] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1043.540551][T19557] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1043.583419][T19557] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1043.593749][T19557] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1043.858955][ T5144] snd_usb_pod 3-1:1.1: set_interface failed [ 1043.918952][T20555] bridge_slave_1: left allmulticast mode [ 1043.927418][ T29] audit: type=1326 audit(1719294133.497:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22064 comm="syz.3.3928" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6b78375d39 code=0x0 [ 1043.943444][ T5144] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 1043.954698][ C0] vkms_vblank_simulate: vblank timer overrun [ 1043.992918][T20555] bridge_slave_1: left promiscuous mode [ 1044.000985][T20555] bridge0: port 2(bridge_slave_1) entered disabled state [ 1044.029280][ T5144] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 1044.091648][ T5144] usb 3-1: USB disconnect, device number 121 [ 1044.163876][T20555] bridge_slave_0: left allmulticast mode [ 1044.224478][T20555] bridge_slave_0: left promiscuous mode [ 1044.282192][T20555] bridge0: port 1(bridge_slave_0) entered disabled state [ 1045.716094][T19557] Bluetooth: hci4: command tx timeout [ 1046.309094][T20555] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1046.326232][T20555] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1046.349343][T20555] bond0 (unregistering): Released all slaves [ 1046.469551][T22060] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3927'. [ 1046.580562][T22076] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3930'. [ 1046.724457][T22101] netlink: 'syz.2.3934': attribute type 10 has an invalid length. [ 1046.757314][T22101] team0: Device ipvlan1 failed to register rx_handler [ 1047.364832][T22066] chnl_net:caif_netlink_parms(): no params data found [ 1047.465876][ T5117] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1047.706028][ T5117] usb 2-1: Using ep0 maxpacket: 32 [ 1047.717182][ T5117] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1047.737883][ T5117] usb 2-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1047.760281][ T5117] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1047.783505][ T6524] usb 3-1: new full-speed USB device number 122 using dummy_hcd [ 1047.793754][ T53] Bluetooth: hci4: command tx timeout [ 1047.805957][ T5117] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.905595][ T5117] hub 2-1:4.0: bad descriptor, ignoring hub [ 1047.944608][ T5117] hub 2-1:4.0: probe with driver hub failed with error -5 [ 1047.964154][T22066] bridge0: port 1(bridge_slave_0) entered blocking state [ 1047.984790][ T5117] usbhid 2-1:4.0: couldn't find an input interrupt endpoint [ 1048.006896][T22066] bridge0: port 1(bridge_slave_0) entered disabled state [ 1048.038767][ T6524] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 1048.053370][T22066] bridge_slave_0: entered allmulticast mode [ 1048.074637][ T6524] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1048.093161][T22066] bridge_slave_0: entered promiscuous mode [ 1048.116811][ T6524] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1048.155597][ T6524] usb 3-1: config 1 has no interface number 0 [ 1048.172516][T20555] hsr_slave_0: left promiscuous mode [ 1048.196424][T20555] hsr_slave_1: left promiscuous mode [ 1048.214532][T22143] netlink: 'syz.4.3942': attribute type 2 has an invalid length. [ 1048.232599][T20555] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1048.252634][ T6524] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1048.262672][T20555] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1048.288799][T22143] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3942'. [ 1048.334195][ T6524] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 255, setting to 64 [ 1048.383675][T20555] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1048.391712][ T6524] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1048.392086][T20555] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1048.419429][ T6524] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1048.437667][ T6524] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1048.535534][T22122] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1048.586969][ T6524] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 1048.698151][T20555] veth0_macvtap: left promiscuous mode [ 1048.746437][T20555] veth1_vlan: left promiscuous mode [ 1048.795850][T20555] veth0_vlan: left promiscuous mode [ 1049.488453][T22152] sctp: [Deprecated]: syz.2.3939 (pid 22152) Use of int in max_burst socket option deprecated. [ 1049.488453][T22152] Use struct sctp_assoc_value instead [ 1049.874166][ T53] Bluetooth: hci4: command tx timeout [ 1051.436045][ T6524] snd_usb_pod 3-1:1.1: set_interface failed [ 1051.495642][ T6524] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 1051.528276][ T6524] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 1051.549882][ T6524] usb 3-1: USB disconnect, device number 122 [ 1051.613007][ C0] vkms_vblank_simulate: vblank timer overrun [ 1051.952645][ T53] Bluetooth: hci4: command tx timeout [ 1052.213918][T20555] team0 (unregistering): Port device team_slave_1 removed [ 1052.331097][T20555] team0 (unregistering): Port device team_slave_0 removed [ 1053.518897][T22066] bridge0: port 2(bridge_slave_1) entered blocking state [ 1053.533238][T22066] bridge0: port 2(bridge_slave_1) entered disabled state [ 1053.544255][T22066] bridge_slave_1: entered allmulticast mode [ 1053.559320][T22066] bridge_slave_1: entered promiscuous mode [ 1053.592758][T22148] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3937'. [ 1053.650928][T22161] netlink: 'syz.4.3945': attribute type 10 has an invalid length. [ 1053.731311][T22161] team0: Device ipvlan1 failed to register rx_handler [ 1053.763165][ T8792] usb 2-1: USB disconnect, device number 18 [ 1053.774932][T22172] netlink: 'syz.2.3948': attribute type 10 has an invalid length. [ 1053.826940][T22172] team0: Device ipvlan1 failed to register rx_handler [ 1054.136299][T22066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1054.181709][T22066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1054.203489][ T6524] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 1054.390503][T22066] team0: Port device team_slave_0 added [ 1054.403664][ T6524] usb 5-1: Using ep0 maxpacket: 16 [ 1054.462012][T22066] team0: Port device team_slave_1 added [ 1054.515914][T22191] netlink: 'syz.3.3953': attribute type 2 has an invalid length. [ 1054.534344][T22193] program syz.2.3954 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1054.538071][ T6524] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1054.562967][T22191] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3953'. [ 1054.583289][ T6524] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1054.613960][ T6524] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1054.707620][ T1242] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.712688][ T6524] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1054.732628][ T1242] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.767742][T22066] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1054.813395][ T29] audit: type=1326 audit(1719294144.397:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22192 comm="syz.2.3954" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4866775d39 code=0x0 [ 1054.829844][ T6524] usb 5-1: config 0 descriptor?? [ 1054.855444][T22066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1055.021088][T22066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1055.298286][T22066] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1055.313619][T20555] IPVS: stop unused estimator thread 0... [ 1055.341791][T22066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1055.446662][T22066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1055.575474][T22177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1055.603821][T22177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1055.789771][T22066] hsr_slave_0: entered promiscuous mode [ 1055.852192][ T25] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1055.890975][ T6524] usbhid 5-1:0.0: can't add hid device: -71 [ 1055.904145][T22066] hsr_slave_1: entered promiscuous mode [ 1055.923094][ T6524] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1055.984228][ T6524] usb 5-1: USB disconnect, device number 123 [ 1056.005422][T22066] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1056.093199][ T25] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1056.139925][T22066] Cannot create hsr debugfs directory [ 1056.162175][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.229788][ T25] usb 3-1: config 0 descriptor?? [ 1056.251811][ T25] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1056.689240][ T25] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 1056.938003][ T6524] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1057.038957][T22228] netlink: 'syz.4.3958': attribute type 10 has an invalid length. [ 1057.099586][ T25] gspca_cpia1: usb_control_msg 01, error -71 [ 1057.133864][ T25] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 1057.168880][T22228] team0: Device ipvlan1 failed to register rx_handler [ 1057.194265][ T25] usb 3-1: USB disconnect, device number 123 [ 1057.197249][ T6524] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1057.322037][ T6524] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.354935][ T6524] usb 2-1: Product: syz [ 1057.359697][ T6524] usb 2-1: Manufacturer: syz [ 1057.404256][ T6524] usb 2-1: SerialNumber: syz [ 1057.459896][ T6524] usb 2-1: config 0 descriptor?? [ 1057.784824][ T5117] usb 2-1: USB disconnect, device number 19 [ 1058.984443][T22066] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1059.067353][T22066] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1059.123054][T22066] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1059.170176][T22066] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1059.385916][ T5636] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1059.619647][T22066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1059.620040][ T5636] usb 5-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 1059.654824][T22265] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3960'. [ 1059.670552][T22233] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3960'. [ 1059.679894][ T5636] usb 5-1: New USB device strings: Mfr=16, Product=0, SerialNumber=0 [ 1059.715809][T22066] 8021q: adding VLAN 0 to HW filter on device team0 [ 1059.742982][ T5636] usb 5-1: Manufacturer: syz [ 1059.785648][ T5636] usb 5-1: config 0 descriptor?? [ 1059.804050][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 1059.812553][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1059.834950][ T5636] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 1059.853525][ T5147] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1059.877618][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 1059.882792][ T5636] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 1059.886005][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1060.028973][T22259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1060.068239][T22259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1060.085058][ T5147] usb 3-1: Using ep0 maxpacket: 16 [ 1060.105399][ T5147] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1060.167745][ T5147] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1060.192135][T22066] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1060.215533][ T5147] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1060.246675][ T5147] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1060.309839][ T5147] usb 3-1: config 0 descriptor?? [ 1060.400787][T22066] veth0_vlan: entered promiscuous mode [ 1060.503478][T22066] veth1_vlan: entered promiscuous mode [ 1060.555409][ T5636] usb 5-1: USB disconnect, device number 124 [ 1060.606287][ T5636] ftdi_sio 5-1:0.0: device disconnected [ 1060.704464][T22066] veth0_macvtap: entered promiscuous mode [ 1060.799300][T22066] veth1_macvtap: entered promiscuous mode [ 1060.941639][T22066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1060.956943][T22266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1060.981772][T22066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.011851][T22266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1061.025497][T22066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1061.051715][T22066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.066719][T22066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1061.212331][T22066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.246692][T22066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1061.297116][T22066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.319254][ T5147] usbhid 3-1:0.0: can't add hid device: -71 [ 1061.331330][T22066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1061.352871][ T5147] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1061.402955][T22066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.433203][ T5147] usb 3-1: USB disconnect, device number 124 [ 1061.480522][T22066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1061.541244][T22066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.621176][T22066] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1061.758164][T22066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1061.802399][T22066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.843157][T22066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1061.869256][T22066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.914015][T22066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1061.955160][T22066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1062.001024][T22066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1062.031840][T22066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1062.084786][T22066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1062.109558][T22066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1062.134178][T22066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1062.161571][T22066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1062.207979][T22066] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1062.341797][T22066] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.359290][T22313] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.3974'. [ 1062.379725][T22066] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.400711][T22066] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.466604][T22066] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.763232][T22322] netlink: 'syz.1.3975': attribute type 2 has an invalid length. [ 1062.830551][T22322] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3975'. [ 1063.040312][T20553] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1063.135047][T20553] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1063.318136][T20555] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1063.349993][T20555] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1063.903239][ T6524] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1064.025662][ T29] audit: type=1326 audit(1719294153.637:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22353 comm="syz.1.3979" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f46f2b75d39 code=0x0 [ 1064.198247][ T6524] usb 3-1: Using ep0 maxpacket: 8 [ 1064.226778][ T6524] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1064.244847][ T6524] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1064.261284][ T6524] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1064.289101][ T6524] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1064.427371][ T6524] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1064.502081][ T6524] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1064.545757][ T6524] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1064.812169][ T6524] usb 3-1: usb_control_msg returned -32 [ 1064.846222][ T6524] usbtmc 3-1:16.0: can't read capabilities [ 1065.080252][T22378] loop0: detected capacity change from 0 to 7 [ 1065.111498][T22378] Dev loop0: unable to read RDB block 7 [ 1065.121486][T22378] loop0: AHDI p3 p4 [ 1065.127529][T22378] loop0: partition table partially beyond EOD, truncated [ 1065.143439][T22378] loop0: p3 start 6514546 is beyond EOD, truncated [ 1065.156516][T22348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1065.185754][T22348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1065.625471][T22384] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 1065.651885][T22392] netlink: 'syz.3.3985': attribute type 10 has an invalid length. [ 1065.676904][T22392] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 1066.239970][T22397] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3981'. [ 1066.277970][T22369] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3981'. [ 1066.848810][ T5117] usb 3-1: USB disconnect, device number 125 [ 1066.872840][T22403] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3984'. [ 1066.916217][T22391] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3984'. [ 1067.928165][T22416] netlink: 'syz.2.3988': attribute type 10 has an invalid length. [ 1068.073422][T22416] team0: Device ipvlan1 failed to register rx_handler [ 1068.841167][T22442] loop0: detected capacity change from 0 to 7 [ 1068.877735][T22442] Dev loop0: unable to read RDB block 7 [ 1068.896790][T22442] loop0: AHDI p3 p4 [ 1068.904896][T22442] loop0: partition table partially beyond EOD, truncated [ 1068.936493][T22442] loop0: p3 start 6514546 is beyond EOD, truncated [ 1069.338766][T22451] netlink: 'syz.3.3996': attribute type 10 has an invalid length. [ 1069.376678][T22451] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 1069.552676][ T5147] usb 3-1: new full-speed USB device number 126 using dummy_hcd [ 1069.675495][ T1151] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1069.767977][ T5147] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1069.805826][ T5147] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1069.855756][ T5147] usb 3-1: New USB device found, idVendor=05ac, idProduct=0272, bcdDevice= 0.40 [ 1069.880445][ T5147] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.898646][ T5147] usb 3-1: Product: syz [ 1069.913709][ T5147] usb 3-1: Manufacturer: syz [ 1069.913829][ T1151] usb 5-1: Using ep0 maxpacket: 8 [ 1069.931385][ T5147] usb 3-1: SerialNumber: syz [ 1069.965840][ T5147] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input106 [ 1069.989003][T22460] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.4000'. [ 1070.022971][ T1151] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1070.071440][ T1151] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1070.119604][ T1151] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1070.206479][ T1151] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1070.224074][ T4534] bcm5974 3-1:1.0: could not read from device [ 1070.276594][ T1151] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1070.308714][ T4534] bcm5974 3-1:1.0: could not read from device [ 1070.327989][ T5147] usb 3-1: USB disconnect, device number 126 [ 1070.400246][ T1151] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1070.478256][ T1151] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1070.712199][ T1151] usb 5-1: usb_control_msg returned -32 [ 1070.760866][ T1151] usbtmc 5-1:16.0: can't read capabilities [ 1070.936113][T22469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4002'. [ 1071.085105][T22454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1071.131239][T22454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1071.521069][T22485] loop0: detected capacity change from 0 to 7 [ 1071.599892][T22485] Dev loop0: unable to read RDB block 7 [ 1071.616401][T22485] loop0: AHDI p3 p4 [ 1071.621932][T22480] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 1071.627657][T22485] loop0: partition table partially beyond EOD, truncated [ 1071.666025][T22485] loop0: p3 start 6514546 is beyond EOD, truncated [ 1071.720454][T22486] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4001'. [ 1071.747946][T22467] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4001'. [ 1072.741515][ T6524] usb 5-1: USB disconnect, device number 125 [ 1073.313490][ T6524] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1073.422766][ T8792] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1073.534368][ T6524] usb 5-1: Using ep0 maxpacket: 32 [ 1073.560660][ T6524] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1073.589653][ T6524] usb 5-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1073.624688][ T6524] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1073.642554][ T8792] usb 2-1: Using ep0 maxpacket: 32 [ 1073.643898][ T6524] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1073.664046][ T8792] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 1073.676771][ T6524] hub 5-1:4.0: bad descriptor, ignoring hub [ 1073.695569][ T6524] hub 5-1:4.0: probe with driver hub failed with error -5 [ 1073.716608][ T6524] usbhid 5-1:4.0: couldn't find an input interrupt endpoint [ 1073.720984][ T8792] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1073.752174][ T8792] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1073.782592][ T8792] usb 2-1: New USB device found, idVendor=0c52, idProduct=2822, bcdDevice= e.fa [ 1073.802082][ T8792] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1073.819933][ T8792] usb 2-1: config 0 descriptor?? [ 1073.841641][ T8792] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 1073.893980][ T8792] ftdi_sio ttyUSB0: unknown device type: 0xefa [ 1074.083496][ T8792] usb 2-1: USB disconnect, device number 20 [ 1074.095640][ T29] audit: type=1326 audit(1719294163.697:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22527 comm="syz.0.4017" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee10d75d39 code=0x0 [ 1074.135900][ T8792] ftdi_sio 2-1:0.0: device disconnected [ 1074.217100][T22531] loop0: detected capacity change from 0 to 7 [ 1074.339275][T22532] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4011'. [ 1074.733003][ T1151] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1074.962049][ T1151] usb 3-1: Using ep0 maxpacket: 8 [ 1075.022821][ T1151] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1075.056286][ T1151] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1075.080501][ T1151] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1075.110686][ T1151] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1075.200036][ T1151] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1075.258027][ T1151] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1075.310033][ T1151] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1075.597481][ T1151] usb 3-1: usb_control_msg returned -32 [ 1075.637943][ T1151] usbtmc 3-1:16.0: can't read capabilities [ 1075.927139][T22552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1075.972960][T22552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1076.043028][ T5636] usb 5-1: USB disconnect, device number 126 [ 1076.043807][T20555] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.088104][T19557] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1076.139876][T19557] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1076.182424][T19557] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1076.263521][T19557] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1076.309459][T19557] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1076.369740][T19557] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1076.451853][T22557] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 1076.595371][T20555] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.711701][T22562] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4024'. [ 1076.857805][T20555] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.950254][T22550] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4024'. [ 1077.106428][T20555] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.241087][T22564] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4025'. [ 1077.258939][T22551] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4025'. [ 1077.787409][ T5636] usb 3-1: USB disconnect, device number 127 [ 1078.347970][T22574] loop0: detected capacity change from 0 to 7 [ 1078.368232][T20555] bridge_slave_1: left allmulticast mode [ 1078.420158][T20555] bridge_slave_1: left promiscuous mode [ 1078.433133][T19557] Bluetooth: hci3: command tx timeout [ 1078.513486][T20555] bridge0: port 2(bridge_slave_1) entered disabled state [ 1078.627903][T20555] bridge_slave_0: left allmulticast mode [ 1078.676841][T20555] bridge_slave_0: left promiscuous mode [ 1078.701113][T20555] bridge0: port 1(bridge_slave_0) entered disabled state [ 1078.802223][ T29] audit: type=1326 audit(1719294168.397:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22583 comm="syz.0.4031" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee10d75d39 code=0x0 [ 1079.132590][ T5636] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 1079.412770][ T5636] usb 3-1: device descriptor read/64, error -71 [ 1079.444719][ T29] audit: type=1326 audit(1719294169.047:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22597 comm="syz.4.4033" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcee7d75d39 code=0x0 [ 1079.718456][ T5636] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 1079.902612][ T5636] usb 3-1: device descriptor read/64, error -71 [ 1080.081444][ T5636] usb usb3-port1: attempt power cycle [ 1080.389965][T22618] kvm: kvm [22617]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x6d00000800 [ 1080.417525][T22618] kvm: kvm [22617]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x14500000800 [ 1080.454238][T22618] kvm: kvm [22617]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x14600000000 [ 1080.470014][T22618] kvm: kvm [22617]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x1cd00000800 [ 1080.487587][T22618] kvm: kvm [22617]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x2e500000800 [ 1080.504969][ T5636] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 1080.514338][T19557] Bluetooth: hci3: command tx timeout [ 1080.521615][T22618] kvm: kvm [22617]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x45e00000000 [ 1080.551607][T22618] kvm: kvm [22617]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x6ce00000000 [ 1080.555017][ T5636] usb 3-1: device descriptor read/8, error -71 [ 1080.716204][T20555] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1080.733253][T15367] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1080.757483][T20555] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1080.778564][T20555] bond0 (unregistering): Released all slaves [ 1080.915168][ T5636] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 1080.921060][T22561] chnl_net:caif_netlink_parms(): no params data found [ 1080.953333][T15367] usb 5-1: Using ep0 maxpacket: 8 [ 1080.963169][T15367] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1080.981507][ T5636] usb 3-1: device descriptor read/8, error -71 [ 1081.002844][T15367] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1081.032585][T15367] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1081.070448][T15367] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1081.139384][T15367] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1081.163063][ T5636] usb usb3-port1: unable to enumerate USB device [ 1081.195215][T15367] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1081.213828][T15367] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1081.383454][T22635] loop0: detected capacity change from 0 to 7 [ 1081.483007][T15367] usb 5-1: usb_control_msg returned -32 [ 1081.521892][T15367] usbtmc 5-1:16.0: can't read capabilities [ 1081.685621][T22641] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.4040'. [ 1081.810097][T20555] hsr_slave_0: left promiscuous mode [ 1081.847223][T20555] hsr_slave_1: left promiscuous mode [ 1081.857523][T22624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1081.881565][T22624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1081.913619][T20555] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1081.938519][T20555] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1081.974341][T20555] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1082.000072][T20555] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1082.125440][T20555] veth1_macvtap: left promiscuous mode [ 1082.147881][T20555] veth0_macvtap: left promiscuous mode [ 1082.188987][T20555] veth1_vlan: left promiscuous mode [ 1082.238629][T20555] veth0_vlan: left promiscuous mode [ 1082.595634][T19557] Bluetooth: hci3: command tx timeout [ 1082.651886][T22657] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 1084.042730][T20555] team0 (unregistering): Port device team_slave_1 removed [ 1084.161126][T20555] team0 (unregistering): Port device team_slave_0 removed [ 1084.684730][T19557] Bluetooth: hci3: command tx timeout [ 1085.183230][T22561] bridge0: port 1(bridge_slave_0) entered blocking state [ 1085.195092][T22561] bridge0: port 1(bridge_slave_0) entered disabled state [ 1085.220893][T22561] bridge_slave_0: entered allmulticast mode [ 1085.230901][T22561] bridge_slave_0: entered promiscuous mode [ 1085.281810][T22658] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4042'. [ 1085.357693][T22561] bridge0: port 2(bridge_slave_1) entered blocking state [ 1085.369415][T22561] bridge0: port 2(bridge_slave_1) entered disabled state [ 1085.398362][ T45] dvb-usb: did not find the firmware file 'af9005.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1085.409311][T22561] bridge_slave_1: entered allmulticast mode [ 1085.435861][T22561] bridge_slave_1: entered promiscuous mode [ 1085.492658][ T45] dvb_usb_af9005 4-1:127.3: probe with driver dvb_usb_af9005 failed with error -110 [ 1085.558999][ T45] af9005: boot packet bulk message failed: -22 (252/0) [ 1085.602867][ T45] dvb-usb: found a 'TerraTec Cinergy T USB XE' in cold state, will try to load a firmware [ 1085.673777][ T45] usb 4-1: Direct firmware load for af9005.fw failed with error -2 [ 1085.695303][T15367] usb 5-1: USB disconnect, device number 127 [ 1085.743220][ T45] usb 4-1: Falling back to sysfs fallback for: af9005.fw [ 1085.818284][T22561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1085.910798][T22561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1085.965469][T22681] netlink: 'syz.0.4046': attribute type 2 has an invalid length. [ 1085.966843][ T29] audit: type=1326 audit(1719294175.577:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22677 comm="syz.2.4047" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4866775d39 code=0x0 [ 1086.015682][T22681] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4046'. [ 1086.282739][T22561] team0: Port device team_slave_0 added [ 1086.398982][T22561] team0: Port device team_slave_1 added [ 1086.495397][T15367] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1086.559081][T22561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1086.579640][T22561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1086.620151][T22561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1086.677338][T22561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1086.698290][T22561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1086.738804][T15367] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1086.801685][T15367] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.856323][T15367] usb 5-1: config 0 descriptor?? [ 1086.866688][T22561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1086.882326][T15367] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1087.201266][T22561] hsr_slave_0: entered promiscuous mode [ 1087.250635][T22561] hsr_slave_1: entered promiscuous mode [ 1087.296120][T15367] cpia1 5-1:0.0: unexpected state after lo power cmd: 00 [ 1087.353835][T22561] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1087.400325][T22561] Cannot create hsr debugfs directory [ 1087.579723][T22706] netlink: 'syz.2.4051': attribute type 10 has an invalid length. [ 1087.639729][T22706] team0: Device ipvlan1 failed to register rx_handler [ 1087.699866][T15367] gspca_cpia1: usb_control_msg 01, error -71 [ 1087.802642][T15367] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 1087.875598][T15367] usb 5-1: USB disconnect, device number 2 [ 1088.632617][ T5117] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1088.778996][T22728] netlink: 'syz.0.4057': attribute type 4 has an invalid length. [ 1088.862708][ T5117] usb 3-1: Using ep0 maxpacket: 32 [ 1088.935090][ T5117] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1088.978028][ T5117] usb 3-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1089.045427][ T5117] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1089.112864][ T5117] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1089.140871][T22732] netlink: 'syz.0.4057': attribute type 4 has an invalid length. [ 1089.174886][ T5117] hub 3-1:4.0: bad descriptor, ignoring hub [ 1089.206017][ T5117] hub 3-1:4.0: probe with driver hub failed with error -5 [ 1089.260296][ T5117] usbhid 3-1:4.0: couldn't find an input interrupt endpoint [ 1089.530303][ T29] audit: type=1326 audit(1719294179.137:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22738 comm="syz.4.4059" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcee7d75d39 code=0x0 [ 1089.607994][T22561] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1089.696140][T22561] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1089.764923][T22561] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1089.835630][T22561] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1090.045555][T22747] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4052'. [ 1090.271605][T22561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1090.337487][T22561] 8021q: adding VLAN 0 to HW filter on device team0 [ 1090.447122][T15367] bridge0: port 1(bridge_slave_0) entered blocking state [ 1090.458356][T15367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1090.496117][T15367] bridge0: port 2(bridge_slave_1) entered blocking state [ 1090.506765][T15367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1090.576029][T22754] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4056'. [ 1090.644661][T22730] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4056'. [ 1090.958485][T22561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1091.197409][T22769] netlink: 'syz.0.4062': attribute type 10 has an invalid length. [ 1091.309769][T22769] team0: Device ipvlan1 failed to register rx_handler [ 1091.458074][T15367] usb 3-1: USB disconnect, device number 6 [ 1091.596819][T22561] veth0_vlan: entered promiscuous mode [ 1091.806854][T22561] veth1_vlan: entered promiscuous mode [ 1091.876940][T22776] netlink: 'syz.2.4063': attribute type 2 has an invalid length. [ 1091.898345][T22776] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4063'. [ 1092.019637][T22561] veth0_macvtap: entered promiscuous mode [ 1092.097956][T22561] veth1_macvtap: entered promiscuous mode [ 1092.204285][T22561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1092.266730][T22561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.307383][T22561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1092.329270][T22561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.366771][T22561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1092.434897][T22561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.471537][T22561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1092.509713][T22561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.562675][T22561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1092.582583][T15367] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1092.623702][T22561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.644432][T22561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1092.667429][T22561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.787764][T22561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1092.803129][T15367] usb 5-1: Using ep0 maxpacket: 16 [ 1092.818178][T15367] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1092.855476][T22561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1092.904994][T22561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.925626][T15367] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1092.950340][T22561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1092.970969][T15367] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1093.006399][T22561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1093.034535][T15367] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1093.061315][T22561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1093.104617][T15367] usb 5-1: config 0 descriptor?? [ 1093.111289][T22561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1093.145740][T22561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1093.185947][T22561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1093.223539][T22561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1093.286471][T22561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1093.306125][T22561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1093.323359][T22561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1093.360579][T15367] usbhid 5-1:0.0: can't add hid device: -71 [ 1093.418786][T22561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1093.439188][T15367] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1093.471777][T15367] usb 5-1: USB disconnect, device number 3 [ 1093.514945][T22561] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1093.604219][T22561] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1093.661284][T22561] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1093.773053][T22561] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.199145][T20555] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1094.247444][T20555] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1094.435663][T20551] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1094.493720][T20551] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1095.517185][T22856] netlink: 'syz.3.4080': attribute type 2 has an invalid length. [ 1095.534002][T22856] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4080'. [ 1095.622911][T15577] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1095.763029][ T5636] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1096.012776][ T5636] usb 5-1: Using ep0 maxpacket: 16 [ 1096.038361][ T5636] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1096.085842][ T5636] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1096.178737][ T5636] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1096.226588][T22865] netlink: 'syz.0.4081': attribute type 10 has an invalid length. [ 1096.283775][ T5636] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1096.323930][T22865] team0: Device ipvlan1 failed to register rx_handler [ 1096.344537][ T5636] usb 5-1: config 0 descriptor?? [ 1096.545523][T22869] netlink: 'syz.1.4082': attribute type 4 has an invalid length. [ 1096.599731][ T5636] usbhid 5-1:0.0: can't add hid device: -71 [ 1096.652812][ T5636] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1096.729043][T22870] netlink: 'syz.1.4082': attribute type 4 has an invalid length. [ 1096.823000][ T5636] usb 5-1: USB disconnect, device number 4 [ 1096.925111][T22874] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4076'. [ 1096.959159][T22842] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4076'. [ 1097.905273][T15577] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1097.916893][ T25] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1098.162569][T15577] usb 5-1: Using ep0 maxpacket: 8 [ 1098.168570][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 1098.194804][T15577] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1098.237922][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1098.263033][T15577] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1098.289222][T15577] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1098.303433][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1098.324691][T15577] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1098.338530][ T25] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1098.350223][T15577] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1098.379086][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.436938][ T25] usb 2-1: config 0 descriptor?? [ 1098.483117][T15577] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1098.524057][T15577] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.802524][T15577] usb 5-1: usb_control_msg returned -32 [ 1098.809080][T15577] usbtmc 5-1:16.0: can't read capabilities [ 1099.148863][T22931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1099.199579][T22931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1099.281928][ T25] usbhid 2-1:0.0: can't add hid device: -71 [ 1099.319608][ T25] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1099.388288][ T25] usb 2-1: USB disconnect, device number 22 [ 1099.559592][T22934] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 1100.251810][T22965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4102'. [ 1100.293034][T22965] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4102'. [ 1100.660081][T22972] netlink: 'syz.2.4104': attribute type 2 has an invalid length. [ 1100.674168][ T5193] usb 5-1: USB disconnect, device number 5 [ 1100.688558][T22972] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4104'. [ 1101.627574][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1102.520038][T22995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4113'. [ 1102.583998][T22995] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4113'. [ 1102.965566][T23007] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1103.182505][ T25] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 1103.242972][ T5117] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1103.386310][ T25] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 1103.398669][ T25] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1103.410999][ T25] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1103.422887][ T25] usb 5-1: config 1 has no interface number 0 [ 1103.435830][ T25] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1103.460387][ T25] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 255, setting to 64 [ 1103.461096][ T5117] usb 3-1: Using ep0 maxpacket: 32 [ 1103.489224][ T25] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1103.504499][ T5117] usb 3-1: New USB device found, idVendor=0421, idProduct=0223, bcdDevice=b1.bd [ 1103.521794][ T25] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1103.521827][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1103.539351][T23002] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1103.582063][ T25] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 1103.659041][ T5117] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1103.683252][ T5117] usb 3-1: Product: syz [ 1103.693330][ T5117] usb 3-1: Manufacturer: syz [ 1103.711555][ T5117] usb 3-1: SerialNumber: syz [ 1103.736052][ T5117] usb 3-1: config 0 descriptor?? [ 1103.764073][ T5117] usb 3-1: bad CDC descriptors [ 1103.771173][ T5117] cdc_acm 3-1:0.0: Control and data interfaces are not separated! [ 1103.815535][ T5117] cdc_acm 3-1:0.0: This needs exactly 3 endpoints [ 1103.838685][ T5117] cdc_acm 3-1:0.0: probe with driver cdc_acm failed with error -22 [ 1103.968802][T15577] usb 3-1: USB disconnect, device number 7 [ 1104.386170][T23017] sctp: [Deprecated]: syz.4.4115 (pid 23017) Use of int in max_burst socket option deprecated. [ 1104.386170][T23017] Use struct sctp_assoc_value instead [ 1104.406991][T23023] netlink: 'syz.3.4121': attribute type 2 has an invalid length. [ 1104.432106][T23023] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4121'. [ 1105.060141][T20559] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1105.526608][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1105.684735][T20559] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1106.205636][ T25] snd_usb_pod 5-1:1.1: set_interface failed [ 1106.207741][T20559] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1106.294133][ T25] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 1106.343173][ T25] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 1106.460502][ T25] usb 5-1: USB disconnect, device number 6 [ 1106.561144][T20559] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1106.625443][T23035] tipc: Started in network mode [ 1106.630787][T23035] tipc: Node identity 00000000000000480000000000000001, cluster identity 4711 [ 1106.658812][T23035] tipc: Enabling of bearer rejected, failed to enable media [ 1106.807510][ T5100] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1106.831599][ T5100] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1106.890015][ T5100] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1106.905378][ T5100] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1106.918100][ T5100] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1106.927075][ T5100] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1106.953032][T15577] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1107.235175][T20559] bridge_slave_1: left allmulticast mode [ 1107.275618][T20559] bridge_slave_1: left promiscuous mode [ 1107.285102][T20559] bridge0: port 2(bridge_slave_1) entered disabled state [ 1107.326267][T20559] bridge_slave_0: left allmulticast mode [ 1107.343094][T20559] bridge_slave_0: left promiscuous mode [ 1107.362630][T20559] bridge0: port 1(bridge_slave_0) entered disabled state [ 1107.643770][T15367] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1107.864728][T15367] usb 5-1: Using ep0 maxpacket: 8 [ 1107.880528][T15367] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1107.896939][T15367] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1107.909611][T15367] usb 5-1: config 0 descriptor?? [ 1107.966409][T19557] Bluetooth: hci0: command 0x0406 tx timeout [ 1108.164017][T15577] usb 3-1: device descriptor read/64, error -71 [ 1108.335490][T20559] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1108.363355][T20559] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1108.393885][T20559] bond0 (unregistering): Released all slaves [ 1108.453260][T15577] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1108.672652][T15577] usb 3-1: Using ep0 maxpacket: 32 [ 1108.764177][T15577] usb 3-1: New USB device found, idVendor=0421, idProduct=0223, bcdDevice=b1.bd [ 1108.822461][T15577] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.882477][T15577] usb 3-1: Product: syz [ 1108.892462][T15577] usb 3-1: Manufacturer: syz [ 1108.897709][T15577] usb 3-1: SerialNumber: syz [ 1108.908631][T15577] usb 3-1: config 0 descriptor?? [ 1108.921382][T15577] usb 3-1: bad CDC descriptors [ 1108.931401][T15577] cdc_acm 3-1:0.0: Control and data interfaces are not separated! [ 1108.945597][T15577] cdc_acm 3-1:0.0: This needs exactly 3 endpoints [ 1108.953218][T15577] cdc_acm 3-1:0.0: probe with driver cdc_acm failed with error -22 [ 1108.993349][ T53] Bluetooth: hci4: command tx timeout [ 1109.134152][ T6524] usb 3-1: USB disconnect, device number 9 [ 1109.211150][T15367] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1109.253773][T15367] asix 5-1:0.0: probe with driver asix failed with error -71 [ 1109.353268][T15367] usb 5-1: USB disconnect, device number 7 [ 1109.513720][T23042] chnl_net:caif_netlink_parms(): no params data found [ 1109.725419][T23076] netlink: 'syz.3.4136': attribute type 2 has an invalid length. [ 1109.766225][T23076] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4136'. [ 1109.802469][T20559] hsr_slave_0: left promiscuous mode [ 1109.918140][T20559] hsr_slave_1: left promiscuous mode [ 1109.988882][T20559] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1110.022931][T20559] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1110.081943][T20559] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1110.094839][T23083] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4138'. [ 1110.126925][T20559] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1110.179958][T23086] netlink: 'syz.2.4137': attribute type 2 has an invalid length. [ 1110.242822][T23086] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4137'. [ 1110.308447][T20559] veth1_macvtap: left promiscuous mode [ 1110.391611][T20559] veth0_macvtap: left promiscuous mode [ 1110.419354][T20559] veth1_vlan: left promiscuous mode [ 1110.459941][T20559] veth0_vlan: left promiscuous mode [ 1111.073165][ T53] Bluetooth: hci4: command tx timeout [ 1111.729406][ C0] vkms_vblank_simulate: vblank timer overrun [ 1111.943162][T23099] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.4141'. [ 1112.010054][ C0] vkms_vblank_simulate: vblank timer overrun [ 1112.287422][ T30] INFO: task udevd:19637 blocked for more than 143 seconds. [ 1112.296318][ T30] Not tainted 6.10.0-rc5-syzkaller-00012-g626737a5791b #0 [ 1112.307912][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 1112.331371][ T30] task:udevd state:D stack:24864 pid:19637 tgid:19637 ppid:4549 flags:0x00000002 [ 1112.351147][ T30] Call Trace: [ 1112.358795][ T30] [ 1112.364698][ T30] __schedule+0x17e8/0x4a20 [ 1112.375326][ T30] ? __pfx___schedule+0x10/0x10 [ 1112.390621][ T30] ? __pfx_lock_release+0x10/0x10 [ 1112.398970][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1112.407427][ T30] ? schedule+0x90/0x320 [ 1112.418441][ T30] schedule+0x14b/0x320 [ 1112.424187][ T30] schedule_preempt_disabled+0x13/0x30 [ 1112.437059][ T30] __mutex_lock+0x6a4/0xd70 [ 1112.451268][ T30] ? __mutex_lock+0x527/0xd70 [ 1112.471512][ T30] ? uevent_show+0x17d/0x340 [ 1112.492504][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1112.508183][ T30] ? __kasan_kmalloc+0x98/0xb0 [ 1112.517649][ T30] ? uevent_show+0x163/0x340 [ 1112.528047][ T30] uevent_show+0x17d/0x340 [ 1112.535751][ T30] dev_attr_show+0x55/0xc0 [ 1112.542015][ T30] ? __pfx_dev_attr_show+0x10/0x10 [ 1112.566839][ T30] sysfs_kf_seq_show+0x331/0x4c0 [ 1112.579081][ T30] seq_read_iter+0x445/0xd60 [ 1112.595463][ T30] vfs_read+0x9c4/0xbd0 [ 1112.603907][ T30] ? __pfx_vfs_read+0x10/0x10 [ 1112.613798][ T30] ? vfs_fstatat+0xef/0x190 [ 1112.619781][ T30] ? __x64_sys_newfstatat+0x14d/0x1b0 [ 1112.633316][ T30] ksys_read+0x1a0/0x2c0 [ 1112.638913][ T30] ? __pfx_ksys_read+0x10/0x10 [ 1112.650740][ T30] ? do_syscall_64+0x100/0x230 [ 1112.676632][ T30] ? do_syscall_64+0xb6/0x230 [ 1112.692236][ T30] do_syscall_64+0xf3/0x230 [