last executing test programs: 9m2.028319454s ago: executing program 1 (id=377): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 9m0.761513136s ago: executing program 1 (id=380): syz_80211_join_ibss(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r3 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_FREE(0xffffffffffffffff, 0x4112, 0x0) ioctl$SNDCTL_DSP_POST(r3, 0x5008, 0x0) r4 = socket$key(0xf, 0x3, 0x2) syz_80211_inject_frame(0x0, &(0x7f0000000300)=ANY=[], 0x3e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto(r4, &(0x7f0000000400), 0x0, 0x4000000, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r5, &(0x7f0000000280)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x1c) 8m54.654690803s ago: executing program 1 (id=394): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r0}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 8m54.437740857s ago: executing program 1 (id=395): syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000940)={0x20, 0x31}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000a80)={0x44, &(0x7f0000000800)={0x20, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8m53.35040471s ago: executing program 1 (id=397): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) 8m44.303470397s ago: executing program 1 (id=406): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000638877fbac141416ac14141644089f034d2f87e5070f0cab845013f2325f1a39010702038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) 8m43.428578322s ago: executing program 32 (id=406): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e06bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23870140cde10e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b27663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3800000000000000009c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fba6f421145c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488a0200000000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e4a59414329a7c7f2fad6bc871f5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561fe589e0d12969bc982ff3f0000006c0c6c747d9a1cc500bb89283a16ff10feea20bdac0000000000000000ca06f256a55591019465f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ee40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734837ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a6d072034cecc457776c5fa1f33b0203c07052c6bc314b0ac5c63bc2083c9cda0b7480e0b17854ffcc76176ce266bc698f7921b8afe798a7a5ed33ab0374455ee368fda99a0e681bf9426831b193395cb01a7332a50aac841cb7d48a1768a7640a9820631ba775a3dc4e97f7fda840bcdd3afaa0d7c3c229de4f0f4ac4d04f1a4e52e38325ca2e5f1f9caaa7234053eca09ec3c8c16940bc3edfb2e016f355391c0e7"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 8m26.936071032s ago: executing program 0 (id=438): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f00000012c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2000}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r2}, 0x10) 8m26.641174085s ago: executing program 0 (id=439): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e25, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0xd4}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000002b80), 0x4) listen(r2, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) 8m25.48688036s ago: executing program 0 (id=442): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xc}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000008c0)=@deltaction={0x14, 0x31, 0x400, 0x70bd2d, 0x25dfdc02}, 0x14}}, 0x2400c884) syz_open_dev$loop(0x0, 0x75f, 0xa382) sched_setscheduler(0x0, 0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x101403, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x38, 0x301, 0x70bd2b, 0x25dfdbfa, {0x5}}, 0x14}}, 0x40800) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000009ad90602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r3 = memfd_create(0x0, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pwritev(r3, &(0x7f00000000c0)=[{0x0}], 0x1, 0x800000, 0x0) 8m23.54375727s ago: executing program 0 (id=444): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f00000001c0)='\x18\xbd@\xbd\xc9e2\x0e\xb2\xe2OAq\xa7\xa8\xadcz::\x00', 0x0) 8m18.350148261s ago: executing program 0 (id=452): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000b}, 0x94) 8m17.98909514s ago: executing program 0 (id=453): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 8m2.796123556s ago: executing program 33 (id=453): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 6.958451518s ago: executing program 4 (id=1171): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000340)={r3, r3, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c3, 0x6, 0x801, 0x0, 0x8, 'syz1\x00'}) 6.265768753s ago: executing program 3 (id=1174): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x28, 0x7, 0x0, 0xa56e}]}, 0x10) sendmmsg(r0, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000b40)="97a797c5", 0xa797}], 0x1}}], 0x1, 0x0) 5.211015953s ago: executing program 3 (id=1175): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x2, 0x8}}]}, 0x40}}, 0x4000010) 4.865338512s ago: executing program 2 (id=1176): r0 = socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) listen(r1, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCINQ(r3, 0x541b, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r6 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) 4.406346018s ago: executing program 4 (id=1177): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x8b40, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f00000009c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3) ftruncate(r2, 0xffff) close(0x3) fcntl$addseals(r2, 0x409, 0x7) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f00000001c0)={r2, 0x1, 0x0, 0x8000}) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x10c4, 0x0, 0x0, 0x180000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) unlink(&(0x7f0000000180)='./file1\x00') syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 3.246397557s ago: executing program 2 (id=1178): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e25, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0xd4}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$sock_int(r3, 0x1, 0xa, &(0x7f0000000080)=0x4, 0x4) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$qrtr(0xffffffffffffffff, &(0x7f0000002b40)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000180)="97da2166d8739949391b1d54c6a5d7de03c47e5dc9009ee1752deb76bbdb9c48a8f52e3ffb3fca9fe3892743a3460ea2e355216a6157745e55643834c94a1f3b0fb6eb2679196069d3ae0140b7553ca893648778f5125907af6b4a6a4fc52a99fd5b5f06fcb06b1f90ffab1c6eba5f41d5fd85d714361534f178c828adfe69ba58a5eab22b5834500e925989bcd3727be0b9749d3cb7ca9c92110a39a6c3c8188d1d0b96e60ad13f5ab580b8b79aa4cbc8c50a1c5eabc9a18f6ade96429d9a96e07a6f567a51fa57260074e6016faee7981afc", 0xd3}, {&(0x7f0000000500)="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", 0xb58}, {&(0x7f0000000300)="021f0150fc2655107441394c7c0cd68f428e4c2240599861dae13c2bb5a38e715a4c60489ce16a2c7f13b5b42d54206967f8b828429afbab439c544d2129fd1d6880ca59a20f753c9feabc6a6f26396eb14a5b4a85886da49dc7ad7f0b27ec54986440ac9e31f4b2afdbaa127951a5aba8b37695a1a433ec62b60309e985c994b4a4497f97cb7fb1366d2477ec80c3f8579baa486f9905a40e15bea54943227c18a9651592ebbca9918df39e7d356cabe0a0463a6bea03a8de5c8360839f7d89a48ff2cbb759d94797b076b7fc2f33053b299a5600072d004eb4aea63ca45d185b20", 0xe2}, {0x0}, {&(0x7f0000001600)="6b53b916cdf31290dacd2ed344e7cd7d51b5fd0a9dc0223486c39ed84c1881bc7b962a52c7db94b84c6dc676ef3e0494285fc4f7caf84dbbb76c9b0063142386ddcca674e8e479ba5e1b1740d45020187451d0222b77739a8c4153f17e064d53c6ef2cdc2fa931494439ad9192bd6eaf3898f2ad7d77666e2e", 0x79}, {&(0x7f0000000280)="fc4fd0fdb815319c995d9a6b58f4", 0xe}], 0x6, &(0x7f0000001740)=ANY=[@ANYBLOB="10000000000000000a0100000100000040000000000000000801000045000000bc4650f86cbf346086096548f93f036151df9358cfc004140e1e1ee652f067edaf48134249d4678b7771c8880000000010100000000000000f010000040000008bf66732a3ce14a688bd71056ce32a2b5a4a22fe223842f8deaffab0380f9cf4601b2935742975585505088e582f931b925b4c8bd59bdefddab33954c4114cef3184f638e64c3e0026245ba9b8214ee9a8d0cde6c756b0ead592bf62a0c51da4934daba4818d4724bb918d8b2387e2e31848d9ce47265060c7aa69533830e758c3a6922faea82203e499a907dac48d1b96011019fd031e66a0d97aa270f13d57cdc105da93986200ec08fb24af1b0bed3db1d070a3d98a81e9a6296e85d394128c52086b8f199c20a80af21a550937bae0de002fd1b59bbf0bb20af8488325a2e06248fedab464c4b9f607dd9a4f51fd7a7f56d33a3d4c6ec517fab6eeef9c9b30c87a2efda6bd9a3332c9336b04ca375bf7ee129b2a4117d4041186d5b7d648d5f9b3d40de50cec1f8b9f1a6e11b2d00f9d90be1800551eee0eaa4e0218efaa09d3915f491ec9b475992345653d9c3b2963da109ee598571414361fe604405b81220b5eb37053923a1bd390052830715eaa1a9fb6126815528fd67458a0d998e023e59af07bac13ffa0f782d5f5ab7e82156e6ec366f48fca5b89e70c6eededdf8ecc0966b9ba8a01a13d8ec5f7ce0afd42aaea544df67d182cdd4c45c8905cbd60dc47e33e65cbd5da2430bbd999843e6982b19cd95dd5cd399caf890441d0ac8d5b779640e48280d7fd6705da47294355f03773178102d7b546d7da5265829a14dcf03e923292fa671461fee314fb9a54caba0097f7a4802932e557bca5cf5ceb08f4d3c257fe5d24fc7d4609185d523b41ad1411475eccb2e46edb7326c1ee2e84e3ae80ee05670151f4226aa4671bd15b5f237e1ff2ba215dd07a100d273291957edfb28c2115851aa20211309ba6a4202e97f669324134cc0b9fa11c918c88df8fc82b6bbe1a5b1d2ea4ebbb6bf32cafba36cf7987c638f4bb9422e4dd03784d55ba01661bb4260441095a5795bdad74945f17a3901dc104dd54e29c6257a9e62b779b72b20fa5b700d428aba8a5972e246d339e2c763e2e5d60a3315d2bd199305abedd426f76407674161fd8d2bda6597bb4a7845cfa796d58433115eb492f83cfd5186e0ad2daf6f3e540a3346a8480c9c8141b3924d5993593f5a14ea2bf5ad49db79faf724387ee8f7785ad5d1bdaa96e8262b1681c45006bacf9bf9b391c6278d50055d3907fbe2c70a0414402be21fbeeb31c62b73fe3bf05d42f96005906e11952248455c8d54547681f21a430a920c96025260cef5ad959059459792e13a4e388bde04e3b1d51712c2f1d46f8901e4a59ccc5a920479496c53e858cf9d9ff83ef21ea7d59f9305e0e41dd89ec3a52597a2fea45eb4549b5d9b7c90b2804b3a9deabf05209058553fa0c72499c3edfb0c541e51a0fa1adc08ccc8a321fa01a479dcc6dc104520c21b473993f5c964e4ea89df85d4de56104ff669ec60c12363fa92699893e65264d2f57953384d1c552309ae81f20be8342fd0311b268be2f93e9f65d549173cf18340bd0545c34327385d84c22cc8c305f241209d5b11b8ef10239aecf22204895ef4eafd2ad34e47aacb69bab6ad224ae0ab51d354051538ee81b30c3b622f7bb9f29fa5000f0fe86997b5769ac857a14a453271577f3001f278422a352f87336ac40d6078d3f5a03af3ba24f2aae43135f5bb300f5787e23b15a1db9cc8aebfbb29799e5b077f8f23e117ebbf86a065891a0d75b689ec6736eff4a8d48fc76e45b7dd8f7a31e6de5eb1278fcf1aa2216e083ec0112c8a99dcb215e14befb5d18b3b87b4568ef1aa20ed6c129552637ea242dc1eef95dfd6a02cea23966a73df7c1acda322624b6c65c6b2a77de200288a4d83dc0ab20447861d652e8f348692ce79532351f9c5d5b0a2825bab535a52c4305a400ae1a1174e2fb19c396e3ac0832e1b8625066c2134dfdb21c2765515d80397e33a2824c52857f91929f5012c7e3753a9dfe09666fc70df0caf94918990942e855249ea89d350cbedf583cfdffc2016f01bfe67563d08fa168a4bda56cf5477af36906145b5883cb220e561ee454a45d7221f066324013125d9c8c90bf2b4897f2eb91914b16c26647903eb26e77b245080589682699940b39e821567b79b5f6060b4802f6a3cb61b31a431b4e45fdc9e4913013036a90cb7e5b529122573945741f687309c3f9541b228585452b02b6ad294cb7779aed148e7fb05d17ae8bb80337d9cd95714dbd347d6374fd951722daff8bd009b947f0628aa008f5f872c751d53ae4fb2877ea290cc15659a0dd440097fd69b912da5967a8f8e7ab6fd0a8c57586a56b39e786f0814eb380b4156c020568d57ded6d9fb150239210cbf427a25c2e9d50652561823ec8614ca4d996448956112d76812f8b6c889c2112cbd6201d4ed7779c7e5fc388ec5394baa51a27274e81c111f42f36f43305299972d99dc4757f4f4d71d7c87f944730e8269898e3e9172bc76e2c13cc0b5356c29ec8bdfb05a890abbc385e325c5702bc50bd8445664bb232461b8c615d567ba9f8febe5c0f53c45d884a9809474d44baf01ef5ec185ab11a42b44c8528de16e6025e1f4cf0c02577e47b5c8bf595b99487825b21a5bfb8a8e94aaede9f795580811834a2a8299c2b175baf5ee7b9bcae74b82f41efdcf2d1e9a03f5043ab7b8661cc3e5e94676c88b514bf0fe5efa9584a02cee92c4c02d7635e651184d75859f1d6182249e037533f5692f9ba4f7aa5fd29473fb989a7798ae017b7e3f5a55148da455f9acbf4299044c66e1890ce03cb2e2787df6125754f9a8729da4ad4cd39d8bcaa73a00741a286ce8607fbe89ed30fd8a72ae4475d3e3bd012972d5072d17bbd368c874d38864d844fc90a155831a087a3706979204c25dd1cd7c84d4a3743278b5ac1a435fe682ae28042ab1f066a1fafc34293d870e5e6249a07798c51e309867d6370748089458b379655c82b0a63a8b5175aba831e647de1710e6e8b8d8da3249b62840a9d64f2faedbe524966aa64b6ab942df696b701ef0910f5f3e8d797b4f9a0ec2504c2c5d589d77e3d0ef68b150c015a9c44936f6cfc9e34104d39a7b7c1be509497dbc885816d6f7bccd5a4f353997e44a2e03302b048ed6c4fff8123b4b21e63b4edd80e3c958296497243c854dece82f7edbe56c4009eab91a3ad2d4b9a0cfc401cd5dd5afee93a3bdd247ff08d75e054d7f11917c6ddc5766c06447b4a6cbfc0799974e4d12a0916051448bafecf6711b90cebeb1de02f51bdd67be805f77f10aeca6f6c83f2655f6b750d1cd39964345d5de7a9dc1df8a42e952e138f04af39657a6bcaf09f24e9c7f39ea92adea0945650de8e58f390e806695045c216f2e150c0d5e42d5f2c10d3f3efd6cea9a096fec2497697b75108c3bab77a091c778ea0fe4f33c40113e8d4eff16513e2a1728aeba3ec6fdadc5c5be64b3b84e6d5f8cf8905269125b66c6ede677069a89a43767a42db01ef88af6e7ecd907eb1d9f300c7ecbe5ebca59c90ef5e16869bbfa20430848ac3f74fd5a807aa35dc93e34207d2aeff1c4aa1797bd0fa2f22fe6a6151a0ad35b3f0c0535e2704b644cdcb724d914193bcc3070cb6268febf4d54cd6785d8f19351a044f76a0df3ce38e142e80d29db9efe80f56d99d37a05d559206398814433abccb2209df15145d752033ba6458d048b02dd04b597a7570cd40804bfda8bb3cc21be220537aece1b12c24e3205bf3e78a94188c77d2c9650f3ccffd2889222f65a3539b2db5940bcc11ca787f04f4959d2270b787fc4a537a025eb23a06c8c015e40000525362da946be6fdc182f8b49be5400410fea5f508043a76b0fa13951db34410927acaf47345ff357168002e4b553214252a62bd754890f4f0d1fdb452a47d3344e8fe03aba08267daba5b0800064560be14ac8f78d776b274cf4c332d97db213291b880b6964629d7221aa52fbc95f8517a9e358870aba6504189802812068edada420a578a39ae869a259ccc6476923ff4be0b668601ecd6969d589a79b20406e8d1ac5a95afdc17e2132d75f8a94689d0a3893dc9f724d37b1fad0e2699d68fd4c5e22f8eba1abfe179e546d821f6680d78bb49c3e631cf0b78d416db51ee075fd8c1e51fea9a6d950c1594c40ec8a949882d70016f286028e0118e425006e69a8c4f03b367d91d04f668e5ffac100efc7e417a28c137db4fdbec4584eba95556c1bce8e955fa4c942773c12d8638ff684973940944c17ee7ffb87f5318edcb9f347e3503e84ee3d22ec84b9c150a62e24f849499398f442495fec73b796d25aafce1a41d2a6d0bc72a36e55d612cacf998926471a700b79a6172ea9905ba88a2fb601bf90cc16bb223092ddf2b14c6e1f94f0e7b7073930fa04526c5a3f5edf160dec9f98e6a33105d1ceba10c7e3c74d151eea88dd39ad5b3e7f914f482fe360acf17bbe750894c9604edc856d14b3f147055b01788656738e2b41bddc0667bc89a2f060617a9d81794ea954fc1d5a4f007cf7743b8ce89fb61e36db5ee25a7bd2d54eb5972aeb0cfc9e1b6ceeeddbda7fe4da3bcd3803071903f5e8da9805c0b598f83fe6481d941b984c71fff8bfade2f6e9f0ce193ce3665805e10627b1fbcd0f8b8e77e836ec38d1614c9b4ed937416855f82c3c5727d9ddaef0a9fe916f3ae8093b623950de4abe3e5aaccc08884914c8b1aecf0037bc51b2561722a52eea0979ee857facb2f7e252ea9983452976ea61a2e7e296ce06f5e60f3503e289f6e979f70604590c3f2eaa3f8e8deecf40c7e4c6169258e195e223001ca92e9034a29655a01a3e708e17fd4362714b7b6c1655de5bf72a3f1c6c083c1a84be9749de0015667caefe861f5bba9b79ba8851f2468b48db1ce74e3f861278eb693af578dd064194f6ce196da9672bbd7f75418c304c77055c1de44c28bfd57be8147e4c844c7904fa0de7fb7d9351d7e453e3be8499ebd45fbbf8791a5bd880c04b627f254d0dbed0ba34d41d24d18c253e1a1f0e35254139084585125dc72fe75c1e417f487e2eca5840bdf2bf6f13a7565f661e86cd4288c76c9aa8ff6b9c93fc9ffba0ec3f53ccbefc14a06ceb7c8ec0ed78aec9934ec223ef0abac66a9017ec62c78eadbad65292560c2774dbff072a7d472802fb485db8f8b2d64111e92dacd9829a9ba6c304fc5febb845caec42a7c68bbd065129c0459f37a858ebfca0f18d2bb721f507196ad1ea5ec97878a453983185174ea766a350e2699b197a8fc864f19b3d3e79d0eeb5f8505df640287e59eff1ba4ffee0354dbabcf1970f1e2c66bd3aa5451bcecc6cb0d185c4897d3f29c95dfcd2df78783929a94999c9846e06d41ef6047965c8fa91ce167932dfd0b859e360c9f64e86d86bbf6c072bf8081358c49550005e25a650e1f13ba30a5740e87d3c808135d36c46a6cd4764d45cff479604cedae6945fa90ca8e81b3a76f379ec6f056c47231701f5a6949d684bc078f716b1da3b0af55057560543d76944b8bfaada11fe2c6ff50cd1736d5e320276729a3c4c269867270d831d2a6176b1a244495aa70ac15e0231cf68700b3cb1307a4285fddcb827f21241dc312627ebeeceaf049bd52050c7f993dd5af2ab3d02389b2ba7a3a5c20b21e818f839c08059c7b1df976b66c0d9086cf714d06d10f035a1d48e6f7e4d3b0e1f72d27a7a32cc9b869c7f5aeb2864ecec1a7320c70d39dec47971cdfe8784e444b34451e6605d6f57c11160b40880b446f1d26dd549956024f5b0c467f481d2db197691398443a54b9abc2e3271cf00c77d23b788a3c534f6317a8f1dced9d3000000000000000100100000700000092e86df0d79f4e539b856ace628b6fa2dd6268c072426c722b9db726adeb0000f0000000000000002f010000100000009946a4eda62a46be52ac3bda8210d3fdcb51383331026691fa116f172628e73ad276606e60e6f1d4bf730e8a5500a0d914811cbc2e2b88cd1f41d88ef6a8c8975672e2b2c884cc582e4756fe2651523d379509c58a84c33d1469513532af56e84e483cb52791ec35939cca6e8de0686cb94c40ea5e583ea0c13c40795f9fe809db5ea2cd5873e6554ced6b90892412d6be0252ed0f12ffdbf330cc6e80b8aadd1a20016bc58deba872a50c7b54b5fb013e5e60212a17369da27a307f6bef8fa6769788af35354d540ea52e141f1c217d5a9f2b847781363c22999cf9c1000000900000000000000008010000ffff00009991f06d98980e07c6cfee7b6903df32ab1fedb2f641e1cb61088d17208e9c19043e0de27e081bf0f67d685713ffbc0b977b3053e25cc1ac359632c4fb91e845a180a7b5ec183dff44a8d08dba4f3baa44301619c76bbd7cc53171c2a48cdd0a95d5241af15569b73839e202959b032d12687e664ff417ffa01b7c3662b695e3e8000000000000000e01000000000000448874354668dd753209c84a85cfc00c827602b224bafe66499031c72e64af4cf1b1bb0576a03cb312d6cc51f95f90a02d938e5f9039d20afbd6a354d18d0efb4c5c5cf679761c7eaed243e8364334d10b0f63c54a1d5d482459569b244a0ffe04f6f5871a1501b10b64b99a3a87a4d2bbcd6b8141ffa1d0b724b075c02f0023512824085ded2b4670e7f31a4e45170ca81b9b494644632707b0eca4ae88247e239861d8918e7a6132e220c4e1d36a06f79d52789718336e6b00eeaa19266ed1124f2c6daf70e233248ff6a067051b12fa2d7bd8626add01b800000000000000000000005300000009f081642eceefb05c26df0c4854eeb069ecea8e3a4dc06837d44c7e9df4b0a65242fc9441b11777b868be02c91847e744d0bdde160b1e4a6741feeb955096448bb2b1a62ee1e6a4aae12c331949df035b74c78d05500d615bbfe9f7636aa7f8b0c56b8160e324ec9086b5a0e881f0f9c0e704fde71b8b902921a18c10acd0a005c47cfc302e34b53ef2a283e45a43e2f2ab9f25c4e123bbec2897b6d197c19c4daf805a7a953e0028000000000000000100000008000000d941e0427226527b"], 0x13d8, 0x891}, 0x38) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) syz_open_dev$sndpcmp(&(0x7f0000002bc0), 0x9, 0x200400) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) 3.076968388s ago: executing program 3 (id=1179): ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0x7}, 'port0\x00', 0x44, 0xa04f2, 0x10000000, 0x8000008, 0x6, 0x4, 0x80000001}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x801f, 0xe1d9, 0x1101, 0xff}) 3.062881971s ago: executing program 4 (id=1180): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$sndseq(0xffffff9c, 0x0, 0x8000) openat$nullb(0xffffffffffffff9c, 0x0, 0x147c40, 0x0) keyctl$clear(0x5, 0xffffffffffffffff) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) prlimit64(r1, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40186f40, &(0x7f0000000440)=0x1f) syz_clone(0x120e1100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000040)={0x2, 0x1, 0x18, 0x7, 0x73, 0x0}) 2.866082023s ago: executing program 3 (id=1181): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e25, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0xd4}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000002b80), 0x4) listen(0xffffffffffffffff, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$sock_int(r3, 0x1, 0xa, &(0x7f0000000080)=0x4, 0x4) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$qrtr(0xffffffffffffffff, &(0x7f0000002b40)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000180)="97da2166d8739949391b1d54c6a5d7de03c47e5dc9009ee1752deb76bbdb9c48a8f52e3ffb3fca9fe3892743a3460ea2e355216a6157745e55643834c94a1f3b0fb6eb2679196069d3ae0140b7553ca893648778f5125907af6b4a6a4fc52a99fd5b5f06fcb06b1f90ffab1c6eba5f41d5fd85d714361534f178c828adfe69ba58a5eab22b5834500e925989bcd3727be0b9749d3cb7ca9c92110a39a6c3c8188d1d0b96e60ad13f5ab580b8b79aa4cbc8c50a1c5eabc9a18f6ade96429d9a96e07a6f567a51fa57260074e6016faee7981afc", 0xd3}, {&(0x7f0000000500)="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", 0xb58}, {&(0x7f0000000300)="021f0150fc2655107441394c7c0cd68f428e4c2240599861dae13c2bb5a38e715a4c60489ce16a2c7f13b5b42d54206967f8b828429afbab439c544d2129fd1d6880ca59a20f753c9feabc6a6f26396eb14a5b4a85886da49dc7ad7f0b27ec54986440ac9e31f4b2afdbaa127951a5aba8b37695a1a433ec62b60309e985c994b4a4497f97cb7fb1366d2477ec80c3f8579baa486f9905a40e15bea54943227c18a9651592ebbca9918df39e7d356cabe0a0463a6bea03a8de5c8360839f7d89a48ff2cbb759d94797b076b7fc2f33053b299a5600072d004eb4aea63ca45d185b20", 0xe2}, {0x0}, {&(0x7f0000001600)="6b53b916cdf31290dacd2ed344e7cd7d51b5fd0a9dc0223486c39ed84c1881bc7b962a52c7db94b84c6dc676ef3e0494285fc4f7caf84dbbb76c9b0063142386ddcca674e8e479ba5e1b1740d45020187451d0222b77739a8c4153f17e064d53c6ef2cdc2fa931494439ad9192bd6eaf3898f2ad7d77666e2e", 0x79}, {&(0x7f0000000280)="fc4fd0fdb815319c995d9a6b58f4", 0xe}], 0x6, &(0x7f0000001740)=ANY=[@ANYBLOB="10000000000000000a0100000100000040000000000000000801000045000000bc4650f86cbf346086096548f93f036151df9358cfc004140e1e1ee652f067edaf48134249d4678b7771c8880000000010100000000000000f010000040000008bf66732a3ce14a688bd71056ce32a2b5a4a22fe223842f8deaffab0380f9cf4601b2935742975585505088e582f931b925b4c8bd59bdefddab33954c4114cef3184f638e64c3e0026245ba9b8214ee9a8d0cde6c756b0ead592bf62a0c51da4934daba4818d4724bb918d8b2387e2e31848d9ce47265060c7aa69533830e758c3a6922faea82203e499a907dac48d1b96011019fd031e66a0d97aa270f13d57cdc105da93986200ec08fb24af1b0bed3db1d070a3d98a81e9a6296e85d394128c52086b8f199c20a80af21a550937bae0de002fd1b59bbf0bb20af8488325a2e06248fedab464c4b9f607dd9a4f51fd7a7f56d33a3d4c6ec517fab6eeef9c9b30c87a2efda6bd9a3332c9336b04ca375bf7ee129b2a4117d4041186d5b7d648d5f9b3d40de50cec1f8b9f1a6e11b2d00f9d90be1800551eee0eaa4e0218efaa09d3915f491ec9b475992345653d9c3b2963da109ee598571414361fe604405b81220b5eb37053923a1bd390052830715eaa1a9fb6126815528fd67458a0d998e023e59af07bac13ffa0f782d5f5ab7e82156e6ec366f48fca5b89e70c6eededdf8ecc0966b9ba8a01a13d8ec5f7ce0afd42aaea544df67d182cdd4c45c8905cbd60dc47e33e65cbd5da2430bbd999843e6982b19cd95dd5cd399caf890441d0ac8d5b779640e48280d7fd6705da47294355f03773178102d7b546d7da5265829a14dcf03e923292fa671461fee314fb9a54caba0097f7a4802932e557bca5cf5ceb08f4d3c257fe5d24fc7d4609185d523b41ad1411475eccb2e46edb7326c1ee2e84e3ae80ee05670151f4226aa4671bd15b5f237e1ff2ba215dd07a100d273291957edfb28c2115851aa20211309ba6a4202e97f669324134cc0b9fa11c918c88df8fc82b6bbe1a5b1d2ea4ebbb6bf32cafba36cf7987c638f4bb9422e4dd03784d55ba01661bb4260441095a5795bdad74945f17a3901dc104dd54e29c6257a9e62b779b72b20fa5b700d428aba8a5972e246d339e2c763e2e5d60a3315d2bd199305abedd426f76407674161fd8d2bda6597bb4a7845cfa796d58433115eb492f83cfd5186e0ad2daf6f3e540a3346a8480c9c8141b3924d5993593f5a14ea2bf5ad49db79faf724387ee8f7785ad5d1bdaa96e8262b1681c45006bacf9bf9b391c6278d50055d3907fbe2c70a0414402be21fbeeb31c62b73fe3bf05d42f96005906e11952248455c8d54547681f21a430a920c96025260cef5ad959059459792e13a4e388bde04e3b1d51712c2f1d46f8901e4a59ccc5a920479496c53e858cf9d9ff83ef21ea7d59f9305e0e41dd89ec3a52597a2fea45eb4549b5d9b7c90b2804b3a9deabf05209058553fa0c72499c3edfb0c541e51a0fa1adc08ccc8a321fa01a479dcc6dc104520c21b473993f5c964e4ea89df85d4de56104ff669ec60c12363fa92699893e65264d2f57953384d1c552309ae81f20be8342fd0311b268be2f93e9f65d549173cf18340bd0545c34327385d84c22cc8c305f241209d5b11b8ef10239aecf22204895ef4eafd2ad34e47aacb69bab6ad224ae0ab51d354051538ee81b30c3b622f7bb9f29fa5000f0fe86997b5769ac857a14a453271577f3001f278422a352f87336ac40d6078d3f5a03af3ba24f2aae43135f5bb300f5787e23b15a1db9cc8aebfbb29799e5b077f8f23e117ebbf86a065891a0d75b689ec6736eff4a8d48fc76e45b7dd8f7a31e6de5eb1278fcf1aa2216e083ec0112c8a99dcb215e14befb5d18b3b87b4568ef1aa20ed6c129552637ea242dc1eef95dfd6a02cea23966a73df7c1acda322624b6c65c6b2a77de200288a4d83dc0ab20447861d652e8f348692ce79532351f9c5d5b0a2825bab535a52c4305a400ae1a1174e2fb19c396e3ac0832e1b8625066c2134dfdb21c2765515d80397e33a2824c52857f91929f5012c7e3753a9dfe09666fc70df0caf94918990942e855249ea89d350cbedf583cfdffc2016f01bfe67563d08fa168a4bda56cf5477af36906145b5883cb220e561ee454a45d7221f066324013125d9c8c90bf2b4897f2eb91914b16c26647903eb26e77b245080589682699940b39e821567b79b5f6060b4802f6a3cb61b31a431b4e45fdc9e4913013036a90cb7e5b529122573945741f687309c3f9541b228585452b02b6ad294cb7779aed148e7fb05d17ae8bb80337d9cd95714dbd347d6374fd951722daff8bd009b947f0628aa008f5f872c751d53ae4fb2877ea290cc15659a0dd440097fd69b912da5967a8f8e7ab6fd0a8c57586a56b39e786f0814eb380b4156c020568d57ded6d9fb150239210cbf427a25c2e9d50652561823ec8614ca4d996448956112d76812f8b6c889c2112cbd6201d4ed7779c7e5fc388ec5394baa51a27274e81c111f42f36f43305299972d99dc4757f4f4d71d7c87f944730e8269898e3e9172bc76e2c13cc0b5356c29ec8bdfb05a890abbc385e325c5702bc50bd8445664bb232461b8c615d567ba9f8febe5c0f53c45d884a9809474d44baf01ef5ec185ab11a42b44c8528de16e6025e1f4cf0c02577e47b5c8bf595b99487825b21a5bfb8a8e94aaede9f795580811834a2a8299c2b175baf5ee7b9bcae74b82f41efdcf2d1e9a03f5043ab7b8661cc3e5e94676c88b514bf0fe5efa9584a02cee92c4c02d7635e651184d75859f1d6182249e037533f5692f9ba4f7aa5fd29473fb989a7798ae017b7e3f5a55148da455f9acbf4299044c66e1890ce03cb2e2787df6125754f9a8729da4ad4cd39d8bcaa73a00741a286ce8607fbe89ed30fd8a72ae4475d3e3bd012972d5072d17bbd368c874d38864d844fc90a155831a087a3706979204c25dd1cd7c84d4a3743278b5ac1a435fe682ae28042ab1f066a1fafc34293d870e5e6249a07798c51e309867d6370748089458b379655c82b0a63a8b5175aba831e647de1710e6e8b8d8da3249b62840a9d64f2faedbe524966aa64b6ab942df696b701ef0910f5f3e8d797b4f9a0ec2504c2c5d589d77e3d0ef68b150c015a9c44936f6cfc9e34104d39a7b7c1be509497dbc885816d6f7bccd5a4f353997e44a2e03302b048ed6c4fff8123b4b21e63b4edd80e3c958296497243c854dece82f7edbe56c4009eab91a3ad2d4b9a0cfc401cd5dd5afee93a3bdd247ff08d75e054d7f11917c6ddc5766c06447b4a6cbfc0799974e4d12a0916051448bafecf6711b90cebeb1de02f51bdd67be805f77f10aeca6f6c83f2655f6b750d1cd39964345d5de7a9dc1df8a42e952e138f04af39657a6bcaf09f24e9c7f39ea92adea0945650de8e58f390e806695045c216f2e150c0d5e42d5f2c10d3f3efd6cea9a096fec2497697b75108c3bab77a091c778ea0fe4f33c40113e8d4eff16513e2a1728aeba3ec6fdadc5c5be64b3b84e6d5f8cf8905269125b66c6ede677069a89a43767a42db01ef88af6e7ecd907eb1d9f300c7ecbe5ebca59c90ef5e16869bbfa20430848ac3f74fd5a807aa35dc93e34207d2aeff1c4aa1797bd0fa2f22fe6a6151a0ad35b3f0c0535e2704b644cdcb724d914193bcc3070cb6268febf4d54cd6785d8f19351a044f76a0df3ce38e142e80d29db9efe80f56d99d37a05d559206398814433abccb2209df15145d752033ba6458d048b02dd04b597a7570cd40804bfda8bb3cc21be220537aece1b12c24e3205bf3e78a94188c77d2c9650f3ccffd2889222f65a3539b2db5940bcc11ca787f04f4959d2270b787fc4a537a025eb23a06c8c015e40000525362da946be6fdc182f8b49be5400410fea5f508043a76b0fa13951db34410927acaf47345ff357168002e4b553214252a62bd754890f4f0d1fdb452a47d3344e8fe03aba08267daba5b0800064560be14ac8f78d776b274cf4c332d97db213291b880b6964629d7221aa52fbc95f8517a9e358870aba6504189802812068edada420a578a39ae869a259ccc6476923ff4be0b668601ecd6969d589a79b20406e8d1ac5a95afdc17e2132d75f8a94689d0a3893dc9f724d37b1fad0e2699d68fd4c5e22f8eba1abfe179e546d821f6680d78bb49c3e631cf0b78d416db51ee075fd8c1e51fea9a6d950c1594c40ec8a949882d70016f286028e0118e425006e69a8c4f03b367d91d04f668e5ffac100efc7e417a28c137db4fdbec4584eba95556c1bce8e955fa4c942773c12d8638ff684973940944c17ee7ffb87f5318edcb9f347e3503e84ee3d22ec84b9c150a62e24f849499398f442495fec73b796d25aafce1a41d2a6d0bc72a36e55d612cacf998926471a700b79a6172ea9905ba88a2fb601bf90cc16bb223092ddf2b14c6e1f94f0e7b7073930fa04526c5a3f5edf160dec9f98e6a33105d1ceba10c7e3c74d151eea88dd39ad5b3e7f914f482fe360acf17bbe750894c9604edc856d14b3f147055b01788656738e2b41bddc0667bc89a2f060617a9d81794ea954fc1d5a4f007cf7743b8ce89fb61e36db5ee25a7bd2d54eb5972aeb0cfc9e1b6ceeeddbda7fe4da3bcd3803071903f5e8da9805c0b598f83fe6481d941b984c71fff8bfade2f6e9f0ce193ce3665805e10627b1fbcd0f8b8e77e836ec38d1614c9b4ed937416855f82c3c5727d9ddaef0a9fe916f3ae8093b623950de4abe3e5aaccc08884914c8b1aecf0037bc51b2561722a52eea0979ee857facb2f7e252ea9983452976ea61a2e7e296ce06f5e60f3503e289f6e979f70604590c3f2eaa3f8e8deecf40c7e4c6169258e195e223001ca92e9034a29655a01a3e708e17fd4362714b7b6c1655de5bf72a3f1c6c083c1a84be9749de0015667caefe861f5bba9b79ba8851f2468b48db1ce74e3f861278eb693af578dd064194f6ce196da9672bbd7f75418c304c77055c1de44c28bfd57be8147e4c844c7904fa0de7fb7d9351d7e453e3be8499ebd45fbbf8791a5bd880c04b627f254d0dbed0ba34d41d24d18c253e1a1f0e35254139084585125dc72fe75c1e417f487e2eca5840bdf2bf6f13a7565f661e86cd4288c76c9aa8ff6b9c93fc9ffba0ec3f53ccbefc14a06ceb7c8ec0ed78aec9934ec223ef0abac66a9017ec62c78eadbad65292560c2774dbff072a7d472802fb485db8f8b2d64111e92dacd9829a9ba6c304fc5febb845caec42a7c68bbd065129c0459f37a858ebfca0f18d2bb721f507196ad1ea5ec97878a453983185174ea766a350e2699b197a8fc864f19b3d3e79d0eeb5f8505df640287e59eff1ba4ffee0354dbabcf1970f1e2c66bd3aa5451bcecc6cb0d185c4897d3f29c95dfcd2df78783929a94999c9846e06d41ef6047965c8fa91ce167932dfd0b859e360c9f64e86d86bbf6c072bf8081358c49550005e25a650e1f13ba30a5740e87d3c808135d36c46a6cd4764d45cff479604cedae6945fa90ca8e81b3a76f379ec6f056c47231701f5a6949d684bc078f716b1da3b0af55057560543d76944b8bfaada11fe2c6ff50cd1736d5e320276729a3c4c269867270d831d2a6176b1a244495aa70ac15e0231cf68700b3cb1307a4285fddcb827f21241dc312627ebeeceaf049bd52050c7f993dd5af2ab3d02389b2ba7a3a5c20b21e818f839c08059c7b1df976b66c0d9086cf714d06d10f035a1d48e6f7e4d3b0e1f72d27a7a32cc9b869c7f5aeb2864ecec1a7320c70d39dec47971cdfe8784e444b34451e6605d6f57c11160b40880b446f1d26dd549956024f5b0c467f481d2db197691398443a54b9abc2e3271cf00c77d23b788a3c534f6317a8f1dced9d3000000000000000100100000700000092e86df0d79f4e539b856ace628b6fa2dd6268c072426c722b9db726adeb0000f0000000000000002f010000100000009946a4eda62a46be52ac3bda8210d3fdcb51383331026691fa116f172628e73ad276606e60e6f1d4bf730e8a5500a0d914811cbc2e2b88cd1f41d88ef6a8c8975672e2b2c884cc582e4756fe2651523d379509c58a84c33d1469513532af56e84e483cb52791ec35939cca6e8de0686cb94c40ea5e583ea0c13c40795f9fe809db5ea2cd5873e6554ced6b90892412d6be0252ed0f12ffdbf330cc6e80b8aadd1a20016bc58deba872a50c7b54b5fb013e5e60212a17369da27a307f6bef8fa6769788af35354d540ea52e141f1c217d5a9f2b847781363c22999cf9c1000000900000000000000008010000ffff00009991f06d98980e07c6cfee7b6903df32ab1fedb2f641e1cb61088d17208e9c19043e0de27e081bf0f67d685713ffbc0b977b3053e25cc1ac359632c4fb91e845a180a7b5ec183dff44a8d08dba4f3baa44301619c76bbd7cc53171c2a48cdd0a95d5241af15569b73839e202959b032d12687e664ff417ffa01b7c3662b695e3e8000000000000000e01000000000000448874354668dd753209c84a85cfc00c827602b224bafe66499031c72e64af4cf1b1bb0576a03cb312d6cc51f95f90a02d938e5f9039d20afbd6a354d18d0efb4c5c5cf679761c7eaed243e8364334d10b0f63c54a1d5d482459569b244a0ffe04f6f5871a1501b10b64b99a3a87a4d2bbcd6b8141ffa1d0b724b075c02f0023512824085ded2b4670e7f31a4e45170ca81b9b494644632707b0eca4ae88247e239861d8918e7a6132e220c4e1d36a06f79d52789718336e6b00eeaa19266ed1124f2c6daf70e233248ff6a067051b12fa2d7bd8626add01b800000000000000000000005300000009f081642eceefb05c26df0c4854eeb069ecea8e3a4dc06837d44c7e9df4b0a65242fc9441b11777b868be02c91847e744d0bdde160b1e4a6741feeb955096448bb2b1a62ee1e6a4aae12c331949df035b74c78d05500d615bbfe9f7636aa7f8b0c56b8160e324ec9086b5a0e881f0f9c0e704fde71b8b902921a18c10acd0a005c47cfc302e34b53ef2a283e45a43e2f2ab9f25c4e123bbec2897b6d197c19c4daf805a7a953e0028000000000000000100000008000000d941e0427226527b"], 0x13d8, 0x891}, 0x38) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) syz_open_dev$sndpcmp(&(0x7f0000002bc0), 0x9, 0x200400) 2.500736443s ago: executing program 2 (id=1182): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000280)="65e20828"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) socket$tipc(0x1e, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 2.031692391s ago: executing program 2 (id=1183): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x28, 0x7, 0x0, 0xa56e}]}, 0x10) sendmmsg(r0, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000b40)="97a797c5", 0xa797}], 0x1}}], 0x1, 0x0) 1.898260408s ago: executing program 2 (id=1184): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x1, 0x0) write$vga_arbiter(r7, &(0x7f0000000080)=@target={'target ', {'PCI:', '0', ':', '0', ':', '5', '.', '0'}}, 0x13) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c}}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) 1.75119361s ago: executing program 4 (id=1185): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pselect6(0x40, &(0x7f0000000040)={0x2, 0x4, 0x5, 0x191f5194, 0x2, 0x3, 0xffff, 0x8000}, &(0x7f0000000080)={0x2, 0x81, 0xe, 0x8f, 0x3, 0x26e0, 0x7, 0x3ff}, &(0x7f0000000100)={0x0, 0x1, 0x687, 0x740a, 0xc, 0x7, 0x0, 0x80}, &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x2]}, 0x8}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002300)=ANY=[@ANYBLOB="2c00000010000304000000000000000000080000", @ANYRES32, @ANYBLOB="15020000000000000a000100aaaaaaaaaa1c"], 0x2c}, 0x1, 0xba01, 0x0, 0x20000000}, 0x0) 1.630997985s ago: executing program 3 (id=1186): r0 = socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) listen(r1, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCINQ(r3, 0x541b, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r6 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) 311.480604ms ago: executing program 2 (id=1187): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mprotect(&(0x7f00005ae000/0x1000)=nil, 0x1000, 0x1) r3 = syz_open_procfs(0x0, &(0x7f00000005c0)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r3, 0x2000, 0x0) 190.923719ms ago: executing program 3 (id=1188): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x8, 0x3, 0x1ff, 0x3d, 0x963, 0x3, 0x53, 0x202, 0x1, 0xc}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42400) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x800) socketpair$unix(0x1, 0x7, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 189.786141ms ago: executing program 4 (id=1189): ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0x7}, 'port0\x00', 0x44, 0xa04f2, 0x10000000, 0x8000008, 0x6, 0x4, 0x80000001}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x801f, 0xe1d9, 0x1101, 0xff}) 0s ago: executing program 4 (id=1190): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e25, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0xd4}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$sock_int(r3, 0x1, 0xa, &(0x7f0000000080)=0x4, 0x4) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$qrtr(0xffffffffffffffff, &(0x7f0000002b40)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000180)="97da2166d8739949391b1d54c6a5d7de03c47e5dc9009ee1752deb76bbdb9c48a8f52e3ffb3fca9fe3892743a3460ea2e355216a6157745e55643834c94a1f3b0fb6eb2679196069d3ae0140b7553ca893648778f5125907af6b4a6a4fc52a99fd5b5f06fcb06b1f90ffab1c6eba5f41d5fd85d714361534f178c828adfe69ba58a5eab22b5834500e925989bcd3727be0b9749d3cb7ca9c92110a39a6c3c8188d1d0b96e60ad13f5ab580b8b79aa4cbc8c50a1c5eabc9a18f6ade96429d9a96e07a6f567a51fa57260074e6016faee7981afc", 0xd3}, {&(0x7f0000000500)="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", 0xb58}, {&(0x7f0000000300)="021f0150fc2655107441394c7c0cd68f428e4c2240599861dae13c2bb5a38e715a4c60489ce16a2c7f13b5b42d54206967f8b828429afbab439c544d2129fd1d6880ca59a20f753c9feabc6a6f26396eb14a5b4a85886da49dc7ad7f0b27ec54986440ac9e31f4b2afdbaa127951a5aba8b37695a1a433ec62b60309e985c994b4a4497f97cb7fb1366d2477ec80c3f8579baa486f9905a40e15bea54943227c18a9651592ebbca9918df39e7d356cabe0a0463a6bea03a8de5c8360839f7d89a48ff2cbb759d94797b076b7fc2f33053b299a5600072d004eb4aea63ca45d185b20", 0xe2}, {0x0}, {&(0x7f0000001600)="6b53b916cdf31290dacd2ed344e7cd7d51b5fd0a9dc0223486c39ed84c1881bc7b962a52c7db94b84c6dc676ef3e0494285fc4f7caf84dbbb76c9b0063142386ddcca674e8e479ba5e1b1740d45020187451d0222b77739a8c4153f17e064d53c6ef2cdc2fa931494439ad9192bd6eaf3898f2ad7d77666e2e", 0x79}, {&(0x7f0000000280)="fc4fd0fdb815319c995d9a6b58f4", 0xe}], 0x6, &(0x7f0000001740)=ANY=[@ANYBLOB="10000000000000000a0100000100000040000000000000000801000045000000bc4650f86cbf346086096548f93f036151df9358cfc004140e1e1ee652f067edaf48134249d4678b7771c8880000000010100000000000000f010000040000008bf66732a3ce14a688bd71056ce32a2b5a4a22fe223842f8deaffab0380f9cf4601b2935742975585505088e582f931b925b4c8bd59bdefddab33954c4114cef3184f638e64c3e0026245ba9b8214ee9a8d0cde6c756b0ead592bf62a0c51da4934daba4818d4724bb918d8b2387e2e31848d9ce47265060c7aa69533830e758c3a6922faea82203e499a907dac48d1b96011019fd031e66a0d97aa270f13d57cdc105da93986200ec08fb24af1b0bed3db1d070a3d98a81e9a6296e85d394128c52086b8f199c20a80af21a550937bae0de002fd1b59bbf0bb20af8488325a2e06248fedab464c4b9f607dd9a4f51fd7a7f56d33a3d4c6ec517fab6eeef9c9b30c87a2efda6bd9a3332c9336b04ca375bf7ee129b2a4117d4041186d5b7d648d5f9b3d40de50cec1f8b9f1a6e11b2d00f9d90be1800551eee0eaa4e0218efaa09d3915f491ec9b475992345653d9c3b2963da109ee598571414361fe604405b81220b5eb37053923a1bd390052830715eaa1a9fb6126815528fd67458a0d998e023e59af07bac13ffa0f782d5f5ab7e82156e6ec366f48fca5b89e70c6eededdf8ecc0966b9ba8a01a13d8ec5f7ce0afd42aaea544df67d182cdd4c45c8905cbd60dc47e33e65cbd5da2430bbd999843e6982b19cd95dd5cd399caf890441d0ac8d5b779640e48280d7fd6705da47294355f03773178102d7b546d7da5265829a14dcf03e923292fa671461fee314fb9a54caba0097f7a4802932e557bca5cf5ceb08f4d3c257fe5d24fc7d4609185d523b41ad1411475eccb2e46edb7326c1ee2e84e3ae80ee05670151f4226aa4671bd15b5f237e1ff2ba215dd07a100d273291957edfb28c2115851aa20211309ba6a4202e97f669324134cc0b9fa11c918c88df8fc82b6bbe1a5b1d2ea4ebbb6bf32cafba36cf7987c638f4bb9422e4dd03784d55ba01661bb4260441095a5795bdad74945f17a3901dc104dd54e29c6257a9e62b779b72b20fa5b700d428aba8a5972e246d339e2c763e2e5d60a3315d2bd199305abedd426f76407674161fd8d2bda6597bb4a7845cfa796d58433115eb492f83cfd5186e0ad2daf6f3e540a3346a8480c9c8141b3924d5993593f5a14ea2bf5ad49db79faf724387ee8f7785ad5d1bdaa96e8262b1681c45006bacf9bf9b391c6278d50055d3907fbe2c70a0414402be21fbeeb31c62b73fe3bf05d42f96005906e11952248455c8d54547681f21a430a920c96025260cef5ad959059459792e13a4e388bde04e3b1d51712c2f1d46f8901e4a59ccc5a920479496c53e858cf9d9ff83ef21ea7d59f9305e0e41dd89ec3a52597a2fea45eb4549b5d9b7c90b2804b3a9deabf05209058553fa0c72499c3edfb0c541e51a0fa1adc08ccc8a321fa01a479dcc6dc104520c21b473993f5c964e4ea89df85d4de56104ff669ec60c12363fa92699893e65264d2f57953384d1c552309ae81f20be8342fd0311b268be2f93e9f65d549173cf18340bd0545c34327385d84c22cc8c305f241209d5b11b8ef10239aecf22204895ef4eafd2ad34e47aacb69bab6ad224ae0ab51d354051538ee81b30c3b622f7bb9f29fa5000f0fe86997b5769ac857a14a453271577f3001f278422a352f87336ac40d6078d3f5a03af3ba24f2aae43135f5bb300f5787e23b15a1db9cc8aebfbb29799e5b077f8f23e117ebbf86a065891a0d75b689ec6736eff4a8d48fc76e45b7dd8f7a31e6de5eb1278fcf1aa2216e083ec0112c8a99dcb215e14befb5d18b3b87b4568ef1aa20ed6c129552637ea242dc1eef95dfd6a02cea23966a73df7c1acda322624b6c65c6b2a77de200288a4d83dc0ab20447861d652e8f348692ce79532351f9c5d5b0a2825bab535a52c4305a400ae1a1174e2fb19c396e3ac0832e1b8625066c2134dfdb21c2765515d80397e33a2824c52857f91929f5012c7e3753a9dfe09666fc70df0caf94918990942e855249ea89d350cbedf583cfdffc2016f01bfe67563d08fa168a4bda56cf5477af36906145b5883cb220e561ee454a45d7221f066324013125d9c8c90bf2b4897f2eb91914b16c26647903eb26e77b245080589682699940b39e821567b79b5f6060b4802f6a3cb61b31a431b4e45fdc9e4913013036a90cb7e5b529122573945741f687309c3f9541b228585452b02b6ad294cb7779aed148e7fb05d17ae8bb80337d9cd95714dbd347d6374fd951722daff8bd009b947f0628aa008f5f872c751d53ae4fb2877ea290cc15659a0dd440097fd69b912da5967a8f8e7ab6fd0a8c57586a56b39e786f0814eb380b4156c020568d57ded6d9fb150239210cbf427a25c2e9d50652561823ec8614ca4d996448956112d76812f8b6c889c2112cbd6201d4ed7779c7e5fc388ec5394baa51a27274e81c111f42f36f43305299972d99dc4757f4f4d71d7c87f944730e8269898e3e9172bc76e2c13cc0b5356c29ec8bdfb05a890abbc385e325c5702bc50bd8445664bb232461b8c615d567ba9f8febe5c0f53c45d884a9809474d44baf01ef5ec185ab11a42b44c8528de16e6025e1f4cf0c02577e47b5c8bf595b99487825b21a5bfb8a8e94aaede9f795580811834a2a8299c2b175baf5ee7b9bcae74b82f41efdcf2d1e9a03f5043ab7b8661cc3e5e94676c88b514bf0fe5efa9584a02cee92c4c02d7635e651184d75859f1d6182249e037533f5692f9ba4f7aa5fd29473fb989a7798ae017b7e3f5a55148da455f9acbf4299044c66e1890ce03cb2e2787df6125754f9a8729da4ad4cd39d8bcaa73a00741a286ce8607fbe89ed30fd8a72ae4475d3e3bd012972d5072d17bbd368c874d38864d844fc90a155831a087a3706979204c25dd1cd7c84d4a3743278b5ac1a435fe682ae28042ab1f066a1fafc34293d870e5e6249a07798c51e309867d6370748089458b379655c82b0a63a8b5175aba831e647de1710e6e8b8d8da3249b62840a9d64f2faedbe524966aa64b6ab942df696b701ef0910f5f3e8d797b4f9a0ec2504c2c5d589d77e3d0ef68b150c015a9c44936f6cfc9e34104d39a7b7c1be509497dbc885816d6f7bccd5a4f353997e44a2e03302b048ed6c4fff8123b4b21e63b4edd80e3c958296497243c854dece82f7edbe56c4009eab91a3ad2d4b9a0cfc401cd5dd5afee93a3bdd247ff08d75e054d7f11917c6ddc5766c06447b4a6cbfc0799974e4d12a0916051448bafecf6711b90cebeb1de02f51bdd67be805f77f10aeca6f6c83f2655f6b750d1cd39964345d5de7a9dc1df8a42e952e138f04af39657a6bcaf09f24e9c7f39ea92adea0945650de8e58f390e806695045c216f2e150c0d5e42d5f2c10d3f3efd6cea9a096fec2497697b75108c3bab77a091c778ea0fe4f33c40113e8d4eff16513e2a1728aeba3ec6fdadc5c5be64b3b84e6d5f8cf8905269125b66c6ede677069a89a43767a42db01ef88af6e7ecd907eb1d9f300c7ecbe5ebca59c90ef5e16869bbfa20430848ac3f74fd5a807aa35dc93e34207d2aeff1c4aa1797bd0fa2f22fe6a6151a0ad35b3f0c0535e2704b644cdcb724d914193bcc3070cb6268febf4d54cd6785d8f19351a044f76a0df3ce38e142e80d29db9efe80f56d99d37a05d559206398814433abccb2209df15145d752033ba6458d048b02dd04b597a7570cd40804bfda8bb3cc21be220537aece1b12c24e3205bf3e78a94188c77d2c9650f3ccffd2889222f65a3539b2db5940bcc11ca787f04f4959d2270b787fc4a537a025eb23a06c8c015e40000525362da946be6fdc182f8b49be5400410fea5f508043a76b0fa13951db34410927acaf47345ff357168002e4b553214252a62bd754890f4f0d1fdb452a47d3344e8fe03aba08267daba5b0800064560be14ac8f78d776b274cf4c332d97db213291b880b6964629d7221aa52fbc95f8517a9e358870aba6504189802812068edada420a578a39ae869a259ccc6476923ff4be0b668601ecd6969d589a79b20406e8d1ac5a95afdc17e2132d75f8a94689d0a3893dc9f724d37b1fad0e2699d68fd4c5e22f8eba1abfe179e546d821f6680d78bb49c3e631cf0b78d416db51ee075fd8c1e51fea9a6d950c1594c40ec8a949882d70016f286028e0118e425006e69a8c4f03b367d91d04f668e5ffac100efc7e417a28c137db4fdbec4584eba95556c1bce8e955fa4c942773c12d8638ff684973940944c17ee7ffb87f5318edcb9f347e3503e84ee3d22ec84b9c150a62e24f849499398f442495fec73b796d25aafce1a41d2a6d0bc72a36e55d612cacf998926471a700b79a6172ea9905ba88a2fb601bf90cc16bb223092ddf2b14c6e1f94f0e7b7073930fa04526c5a3f5edf160dec9f98e6a33105d1ceba10c7e3c74d151eea88dd39ad5b3e7f914f482fe360acf17bbe750894c9604edc856d14b3f147055b01788656738e2b41bddc0667bc89a2f060617a9d81794ea954fc1d5a4f007cf7743b8ce89fb61e36db5ee25a7bd2d54eb5972aeb0cfc9e1b6ceeeddbda7fe4da3bcd3803071903f5e8da9805c0b598f83fe6481d941b984c71fff8bfade2f6e9f0ce193ce3665805e10627b1fbcd0f8b8e77e836ec38d1614c9b4ed937416855f82c3c5727d9ddaef0a9fe916f3ae8093b623950de4abe3e5aaccc08884914c8b1aecf0037bc51b2561722a52eea0979ee857facb2f7e252ea9983452976ea61a2e7e296ce06f5e60f3503e289f6e979f70604590c3f2eaa3f8e8deecf40c7e4c6169258e195e223001ca92e9034a29655a01a3e708e17fd4362714b7b6c1655de5bf72a3f1c6c083c1a84be9749de0015667caefe861f5bba9b79ba8851f2468b48db1ce74e3f861278eb693af578dd064194f6ce196da9672bbd7f75418c304c77055c1de44c28bfd57be8147e4c844c7904fa0de7fb7d9351d7e453e3be8499ebd45fbbf8791a5bd880c04b627f254d0dbed0ba34d41d24d18c253e1a1f0e35254139084585125dc72fe75c1e417f487e2eca5840bdf2bf6f13a7565f661e86cd4288c76c9aa8ff6b9c93fc9ffba0ec3f53ccbefc14a06ceb7c8ec0ed78aec9934ec223ef0abac66a9017ec62c78eadbad65292560c2774dbff072a7d472802fb485db8f8b2d64111e92dacd9829a9ba6c304fc5febb845caec42a7c68bbd065129c0459f37a858ebfca0f18d2bb721f507196ad1ea5ec97878a453983185174ea766a350e2699b197a8fc864f19b3d3e79d0eeb5f8505df640287e59eff1ba4ffee0354dbabcf1970f1e2c66bd3aa5451bcecc6cb0d185c4897d3f29c95dfcd2df78783929a94999c9846e06d41ef6047965c8fa91ce167932dfd0b859e360c9f64e86d86bbf6c072bf8081358c49550005e25a650e1f13ba30a5740e87d3c808135d36c46a6cd4764d45cff479604cedae6945fa90ca8e81b3a76f379ec6f056c47231701f5a6949d684bc078f716b1da3b0af55057560543d76944b8bfaada11fe2c6ff50cd1736d5e320276729a3c4c269867270d831d2a6176b1a244495aa70ac15e0231cf68700b3cb1307a4285fddcb827f21241dc312627ebeeceaf049bd52050c7f993dd5af2ab3d02389b2ba7a3a5c20b21e818f839c08059c7b1df976b66c0d9086cf714d06d10f035a1d48e6f7e4d3b0e1f72d27a7a32cc9b869c7f5aeb2864ecec1a7320c70d39dec47971cdfe8784e444b34451e6605d6f57c11160b40880b446f1d26dd549956024f5b0c467f481d2db197691398443a54b9abc2e3271cf00c77d23b788a3c534f6317a8f1dced9d3000000000000000100100000700000092e86df0d79f4e539b856ace628b6fa2dd6268c072426c722b9db726adeb0000f0000000000000002f010000100000009946a4eda62a46be52ac3bda8210d3fdcb51383331026691fa116f172628e73ad276606e60e6f1d4bf730e8a5500a0d914811cbc2e2b88cd1f41d88ef6a8c8975672e2b2c884cc582e4756fe2651523d379509c58a84c33d1469513532af56e84e483cb52791ec35939cca6e8de0686cb94c40ea5e583ea0c13c40795f9fe809db5ea2cd5873e6554ced6b90892412d6be0252ed0f12ffdbf330cc6e80b8aadd1a20016bc58deba872a50c7b54b5fb013e5e60212a17369da27a307f6bef8fa6769788af35354d540ea52e141f1c217d5a9f2b847781363c22999cf9c1000000900000000000000008010000ffff00009991f06d98980e07c6cfee7b6903df32ab1fedb2f641e1cb61088d17208e9c19043e0de27e081bf0f67d685713ffbc0b977b3053e25cc1ac359632c4fb91e845a180a7b5ec183dff44a8d08dba4f3baa44301619c76bbd7cc53171c2a48cdd0a95d5241af15569b73839e202959b032d12687e664ff417ffa01b7c3662b695e3e8000000000000000e01000000000000448874354668dd753209c84a85cfc00c827602b224bafe66499031c72e64af4cf1b1bb0576a03cb312d6cc51f95f90a02d938e5f9039d20afbd6a354d18d0efb4c5c5cf679761c7eaed243e8364334d10b0f63c54a1d5d482459569b244a0ffe04f6f5871a1501b10b64b99a3a87a4d2bbcd6b8141ffa1d0b724b075c02f0023512824085ded2b4670e7f31a4e45170ca81b9b494644632707b0eca4ae88247e239861d8918e7a6132e220c4e1d36a06f79d52789718336e6b00eeaa19266ed1124f2c6daf70e233248ff6a067051b12fa2d7bd8626add01b800000000000000000000005300000009f081642eceefb05c26df0c4854eeb069ecea8e3a4dc06837d44c7e9df4b0a65242fc9441b11777b868be02c91847e744d0bdde160b1e4a6741feeb955096448bb2b1a62ee1e6a4aae12c331949df035b74c78d05500d615bbfe9f7636aa7f8b0c56b8160e324ec9086b5a0e881f0f9c0e704fde71b8b902921a18c10acd0a005c47cfc302e34b53ef2a283e45a43e2f2ab9f25c4e123bbec2897b6d197c19c4daf805a7a953e0028000000000000000100000008000000d941e0427226527b"], 0x13d8, 0x891}, 0x38) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) syz_open_dev$sndpcmp(&(0x7f0000002bc0), 0x9, 0x200400) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) kernel console output (not intermixed with test programs): link: 8 bytes leftover after parsing attributes in process `syz.3.528'. [ 411.475050][ T7732] team0: Port device team_slave_0 added [ 411.477277][ T7859] lo speed is unknown, defaulting to 1000 [ 411.518741][ T7732] team0: Port device team_slave_1 added [ 412.000647][ T38] audit: type=1326 audit(1756880317.569:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7955 comm="syz.3.533" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc42d8febe9 code=0x0 [ 412.048015][ T31] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 412.178044][ T31] usb 3-1: device descriptor read/64, error -71 [ 412.248549][ T5838] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 412.331866][ T7732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.331882][ T7732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.331904][ T7732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.362666][ T7732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.362683][ T7732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.362712][ T7732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.434532][ T5838] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 412.434599][ T5838] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.439997][ T5838] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 412.440030][ T5838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.440055][ T5838] usb 5-1: Product: syz [ 412.440072][ T5838] usb 5-1: Manufacturer: syz [ 412.440090][ T5838] usb 5-1: SerialNumber: syz [ 412.474675][ T5838] usb 5-1: selecting invalid altsetting 1 [ 412.488078][ T31] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 412.658143][ T31] usb 3-1: device descriptor read/64, error -71 [ 412.749635][ T57] hsr_slave_0: left promiscuous mode [ 412.768423][ T31] usb usb3-port1: attempt power cycle [ 412.798173][ T57] hsr_slave_1: left promiscuous mode [ 412.800155][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 412.800187][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.873035][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 412.873070][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.902728][ T5838] cdc_ncm 5-1:1.1: failed GET_NTB_PARAMETERS [ 412.902777][ T5838] cdc_ncm 5-1:1.1: bind() failure [ 412.933595][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 412.963908][ T5838] usb 5-1: USB disconnect, device number 20 [ 413.037166][ T57] veth1_macvtap: left promiscuous mode [ 413.037254][ T57] veth0_macvtap: left promiscuous mode [ 413.037442][ T57] veth1_vlan: left promiscuous mode [ 413.037569][ T57] veth0_vlan: left promiscuous mode [ 413.118004][ T31] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 413.138789][ T31] usb 3-1: device descriptor read/8, error -71 [ 413.378136][ T31] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 413.399089][ T31] usb 3-1: device descriptor read/8, error -71 [ 413.508722][ T31] usb usb3-port1: unable to enumerate USB device [ 415.722395][ T7979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.540'. [ 415.722423][ T7979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.540'. [ 417.108218][ T7992] netlink: 28 bytes leftover after parsing attributes in process `syz.4.545'. [ 417.140503][ T7992] netlink: 'syz.4.545': attribute type 10 has an invalid length. [ 417.649917][ T57] team_slave_1 (unregistering): left promiscuous mode [ 417.678945][ T57] team0 (unregistering): Port device team_slave_1 removed [ 418.007222][ T57] team_slave_0 (unregistering): left promiscuous mode [ 418.068153][ T57] team0 (unregistering): Port device team_slave_0 removed [ 419.288819][ T8001] libceph: resolve '@e2OAqcz' (ret=-3): failed [ 422.550355][ T8012] netlink: 8 bytes leftover after parsing attributes in process `syz.4.550'. [ 422.550381][ T8012] netlink: 8 bytes leftover after parsing attributes in process `syz.4.550'. [ 422.764414][ T7732] hsr_slave_0: entered promiscuous mode [ 422.765418][ T7732] hsr_slave_1: entered promiscuous mode [ 422.766119][ T7732] debugfs: 'hsr0' already exists in 'hsr' [ 422.766141][ T7732] Cannot create hsr debugfs directory [ 425.543709][ T8047] netlink: 8 bytes leftover after parsing attributes in process `syz.4.557'. [ 425.543735][ T8047] netlink: 8 bytes leftover after parsing attributes in process `syz.4.557'. [ 426.081311][ T7859] chnl_net:caif_netlink_parms(): no params data found [ 426.123504][ T8057] netlink: 20 bytes leftover after parsing attributes in process `syz.2.558'. [ 426.253123][ T8054] netlink: 'syz.2.558': attribute type 10 has an invalid length. [ 426.286235][ T8054] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 428.938422][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 429.104488][ T9] usb 4-1: config 0 has no interfaces? [ 429.104528][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 429.104553][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.111907][ T9] usb 4-1: config 0 descriptor?? [ 429.344075][ T9] usb 4-1: USB disconnect, device number 14 [ 429.815106][ T7859] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.825619][ T7859] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.825879][ T7859] bridge_slave_0: entered allmulticast mode [ 429.846893][ T7859] bridge_slave_0: entered promiscuous mode [ 430.225476][ T8095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.569'. [ 430.225503][ T8095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.569'. [ 430.385280][ T7859] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.385509][ T7859] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.385841][ T7859] bridge_slave_1: entered allmulticast mode [ 430.411041][ T7859] bridge_slave_1: entered promiscuous mode [ 430.780093][ T7732] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 431.288448][ T7732] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 433.037990][ T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 433.081274][ T7859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 433.117539][ T7732] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 433.190227][ T9] usb 5-1: config 0 has no interfaces? [ 433.190254][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 433.190271][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.271975][ T9] usb 5-1: config 0 descriptor?? [ 433.366196][ T7859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 433.388257][ T7732] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 433.499097][ T9] usb 5-1: USB disconnect, device number 21 [ 434.393409][ T7859] team0: Port device team_slave_0 added [ 434.460506][ T7859] team0: Port device team_slave_1 added [ 435.089754][ T7859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.089773][ T7859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.089803][ T7859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.390432][ T7859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.390451][ T7859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.390481][ T7859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.242343][ T57] bridge_slave_1: left allmulticast mode [ 436.242379][ T57] bridge_slave_1: left promiscuous mode [ 436.242642][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.308010][ T5849] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 436.355547][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 436.383466][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 436.387280][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 436.399390][ T57] bridge_slave_0: left allmulticast mode [ 436.399420][ T57] bridge_slave_0: left promiscuous mode [ 436.402080][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.428239][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 436.434651][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 436.491058][ T5849] usb 3-1: Using ep0 maxpacket: 32 [ 436.567260][ T5849] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 436.567292][ T5849] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 436.567325][ T5849] usb 3-1: config 0 interface 0 has no altsetting 0 [ 436.574803][ T5849] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 436.574832][ T5849] usb 3-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 436.574854][ T5849] usb 3-1: Product: syz [ 436.574869][ T5849] usb 3-1: Manufacturer: syz [ 436.574884][ T5849] usb 3-1: SerialNumber: syz [ 436.580683][ T5849] usb 3-1: config 0 descriptor?? [ 438.078092][ T5849] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 438.280009][ T5849] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 438.280092][ T5849] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -121 [ 438.427931][ T5927] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 438.491023][ T9] usb 3-1: USB disconnect, device number 24 [ 438.569987][ T5155] Bluetooth: hci1: command tx timeout [ 438.717565][ T5927] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 438.717608][ T5927] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 438.717625][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.783275][ T5927] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 438.795961][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 439.148779][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 439.169905][ T8007] udevd[8007]: setting mode of /dev/mixer3 to 020660 failed: No such file or directory [ 439.170112][ T8007] udevd[8007]: setting owner of /dev/mixer3 to uid=0, gid=29 failed: No such file or directory [ 439.209562][ T8115] udevd[8115]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 439.223303][ T5927] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 439.231965][ T5927] usb 4-1: USB disconnect, device number 15 [ 439.266521][ T57] bond0 (unregistering): Released all slaves [ 439.392066][ T7859] hsr_slave_0: entered promiscuous mode [ 439.408513][ T7859] hsr_slave_1: entered promiscuous mode [ 439.409380][ T7859] debugfs: 'hsr0' already exists in 'hsr' [ 439.409399][ T7859] Cannot create hsr debugfs directory [ 440.814291][ T5155] Bluetooth: hci1: command tx timeout [ 442.888098][ T5155] Bluetooth: hci1: command tx timeout [ 442.958590][ T57] hsr_slave_0: left promiscuous mode [ 443.004024][ T57] hsr_slave_1: left promiscuous mode [ 443.005005][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 443.029496][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 444.978030][ T5155] Bluetooth: hci1: command tx timeout [ 445.299554][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.299636][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.768875][ T57] team0 (unregistering): Port device team_slave_1 removed [ 446.778775][ T57] team0 (unregistering): Port device team_slave_0 removed [ 447.817979][ T31] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 448.558316][ T31] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 448.559494][ T31] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 448.559606][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.900753][ T31] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 448.961236][ T31] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 449.082679][ T8115] udevd[8115]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 449.190258][ T9] usb 3-1: USB disconnect, device number 25 [ 450.696282][ T8142] lo speed is unknown, defaulting to 1000 [ 450.735981][ T8142] lo speed is unknown, defaulting to 1000 [ 452.054685][ T8231] program syz.2.603 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 453.909668][ T38] audit: type=1326 audit(1756880359.484:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8229 comm="syz.4.604" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4ac740ebe9 code=0x0 [ 455.267306][ T8265] rtc_cmos 00:00: Alarms can be up to one day in the future [ 455.282652][ T8265] rtc_cmos 00:00: Alarms can be up to one day in the future [ 457.577972][ T5927] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 457.764418][ T5927] usb 3-1: unable to get BOS descriptor or descriptor too short [ 457.768078][ T5927] usb 3-1: config 63 has an invalid interface number: 66 but max is 0 [ 457.768103][ T5927] usb 3-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 457.768122][ T5927] usb 3-1: config 63 has no interface number 0 [ 457.768154][ T5927] usb 3-1: config 63 interface 66 has no altsetting 0 [ 457.777605][ T5927] usb 3-1: language id specifier not provided by device, defaulting to English [ 457.865566][ T5927] usb 3-1: New USB device found, idVendor=174f, idProduct=8a31, bcdDevice=39.f4 [ 457.865598][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.903437][ T5927] usb 3-1: can't set config #63, error -71 [ 457.916074][ T5927] usb 3-1: USB disconnect, device number 26 [ 460.675077][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 460.709389][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 460.711364][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 460.738136][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 460.748911][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 460.825058][ T8294] program syz.4.614 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 461.302406][ T38] audit: type=1326 audit(1756880366.874:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8296 comm="syz.2.615" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdd1b7cebe9 code=0x0 [ 461.954195][ T8285] lo speed is unknown, defaulting to 1000 [ 462.481948][ T8285] lo speed is unknown, defaulting to 1000 [ 462.496337][ T8142] chnl_net:caif_netlink_parms(): no params data found [ 463.055912][ T5839] Bluetooth: hci5: command tx timeout [ 465.394965][ T5839] Bluetooth: hci5: command tx timeout [ 466.278468][ T8338] rtc_cmos 00:00: Alarms can be up to one day in the future [ 466.318950][ T8338] rtc_cmos 00:00: Alarms can be up to one day in the future [ 467.227942][ T6027] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 467.388009][ T6027] usb 5-1: unable to get BOS descriptor or descriptor too short [ 467.389531][ T6027] usb 5-1: config 63 has an invalid interface number: 66 but max is 0 [ 467.389556][ T6027] usb 5-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 467.389576][ T6027] usb 5-1: config 63 has no interface number 0 [ 467.389607][ T6027] usb 5-1: config 63 interface 66 has no altsetting 0 [ 467.390348][ T6027] usb 5-1: language id specifier not provided by device, defaulting to English [ 467.449292][ T6027] usb 5-1: New USB device found, idVendor=174f, idProduct=8a31, bcdDevice=39.f4 [ 467.449324][ T6027] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.449346][ T6027] usb 5-1: SerialNumber: ₯⬒᥋녽썶ᇎ귀금괢Г瞣ㄭ [ 467.618022][ T5839] Bluetooth: hci5: command tx timeout [ 467.695743][ T8336] binder: binder_mmap: 8329 200000ffb000-200000ffd000 bad vm_flags failed -1 [ 469.372985][ T6027] uvcvideo 5-1:63.66: probe with driver uvcvideo failed with error -22 [ 469.398070][ T6027] usb 5-1: USB disconnect, device number 22 [ 469.688252][ T5839] Bluetooth: hci5: command tx timeout [ 470.276326][ T38] audit: type=1326 audit(1756880375.844:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8367 comm="syz.2.627" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdd1b7cebe9 code=0x0 [ 471.556615][ T8142] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.556773][ T8142] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.557037][ T8142] bridge_slave_0: entered allmulticast mode [ 471.570142][ T8142] bridge_slave_0: entered promiscuous mode [ 471.675378][ T8142] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.675541][ T8142] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.675840][ T8142] bridge_slave_1: entered allmulticast mode [ 471.690877][ T8142] bridge_slave_1: entered promiscuous mode [ 473.443781][ T8142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 473.469177][ T8142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 473.921672][ T8142] team0: Port device team_slave_0 added [ 473.976638][ T8142] team0: Port device team_slave_1 added [ 475.003760][ C1] vkms_vblank_simulate: vblank timer overrun [ 475.188954][ C1] vkms_vblank_simulate: vblank timer overrun [ 475.701464][ C1] vkms_vblank_simulate: vblank timer overrun [ 476.002694][ C1] vkms_vblank_simulate: vblank timer overrun [ 476.269048][ T8142] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 476.269067][ T8142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.269095][ T8142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 476.334253][ T8142] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 476.334270][ T8142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.334300][ T8142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 476.588379][ C1] vkms_vblank_simulate: vblank timer overrun [ 476.750411][ C1] vkms_vblank_simulate: vblank timer overrun [ 477.275184][ C1] vkms_vblank_simulate: vblank timer overrun [ 477.921780][ C1] vkms_vblank_simulate: vblank timer overrun [ 478.069350][ T8414] rtc_cmos 00:00: Alarms can be up to one day in the future [ 478.070682][ T8414] rtc_cmos 00:00: Alarms can be up to one day in the future [ 478.072010][ C1] vkms_vblank_simulate: vblank timer overrun [ 478.551202][ C1] vkms_vblank_simulate: vblank timer overrun [ 479.088131][ T10] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 479.153270][ T8142] hsr_slave_0: entered promiscuous mode [ 479.169648][ T8142] hsr_slave_1: entered promiscuous mode [ 479.174227][ T8142] debugfs: 'hsr0' already exists in 'hsr' [ 479.174257][ T8142] Cannot create hsr debugfs directory [ 479.195560][ T8285] chnl_net:caif_netlink_parms(): no params data found [ 479.271405][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 479.273291][ T10] usb 3-1: config 63 has an invalid interface number: 66 but max is 0 [ 479.273318][ T10] usb 3-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 479.273338][ T10] usb 3-1: config 63 has no interface number 0 [ 479.273399][ T10] usb 3-1: config 63 interface 66 has no altsetting 0 [ 479.274245][ T10] usb 3-1: language id specifier not provided by device, defaulting to English [ 479.334940][ T10] usb 3-1: New USB device found, idVendor=174f, idProduct=8a31, bcdDevice=39.f4 [ 479.334972][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.334994][ T10] usb 3-1: SerialNumber: ₯⬒᥋녽썶ᇎ귀금괢Г瞣ㄭ [ 479.351655][ C1] vkms_vblank_simulate: vblank timer overrun [ 479.508899][ T38] audit: type=1326 audit(1756880385.074:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8421 comm="syz.3.641" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc42d8febe9 code=0x0 [ 479.582281][ T57] bridge_slave_1: left allmulticast mode [ 479.582318][ T57] bridge_slave_1: left promiscuous mode [ 479.583664][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.608446][ T8414] binder: binder_mmap: 8413 200000ffb000-200000ffd000 bad vm_flags failed -1 [ 479.631697][ T10] uvcvideo 3-1:63.66: probe with driver uvcvideo failed with error -22 [ 479.648799][ T10] usb 3-1: USB disconnect, device number 27 [ 479.689751][ T57] bridge_slave_0: left allmulticast mode [ 479.689784][ T57] bridge_slave_0: left promiscuous mode [ 479.690096][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.818641][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 480.908862][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 481.001586][ T57] bond0 (unregistering): Released all slaves [ 481.242998][ C0] vkms_vblank_simulate: vblank timer overrun [ 482.323633][ C0] vkms_vblank_simulate: vblank timer overrun [ 483.564436][ T57] hsr_slave_0: left promiscuous mode [ 483.738138][ T57] hsr_slave_1: left promiscuous mode [ 483.739137][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 484.064504][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 484.377940][ C0] vkms_vblank_simulate: vblank timer overrun [ 484.825683][ C0] vkms_vblank_simulate: vblank timer overrun [ 485.190434][ C0] vkms_vblank_simulate: vblank timer overrun [ 485.280734][ C0] vkms_vblank_simulate: vblank timer overrun [ 487.194811][ C0] vkms_vblank_simulate: vblank timer overrun [ 487.954541][ C0] vkms_vblank_simulate: vblank timer overrun [ 487.963933][ T38] audit: type=1326 audit(1756880393.534:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8481 comm="syz.4.657" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4ac740ebe9 code=0x0 [ 488.311204][ T8474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 488.670157][ C0] vkms_vblank_simulate: vblank timer overrun [ 489.981514][ C0] vkms_vblank_simulate: vblank timer overrun [ 490.872604][ C0] vkms_vblank_simulate: vblank timer overrun [ 490.986085][ C0] vkms_vblank_simulate: vblank timer overrun [ 491.049031][ C0] vkms_vblank_simulate: vblank timer overrun [ 491.332116][ C0] vkms_vblank_simulate: vblank timer overrun [ 491.704416][ T57] team0 (unregistering): Port device team_slave_1 removed [ 492.000505][ T57] team0 (unregistering): Port device team_slave_0 removed [ 493.937230][ T8285] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.937489][ T8285] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.937732][ T8285] bridge_slave_0: entered allmulticast mode [ 493.943630][ T8285] bridge_slave_0: entered promiscuous mode [ 493.966787][ T8285] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.966942][ T8285] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.967141][ T8285] bridge_slave_1: entered allmulticast mode [ 493.975799][ T8285] bridge_slave_1: entered promiscuous mode [ 493.979432][ C0] vkms_vblank_simulate: vblank timer overrun [ 494.813724][ T38] audit: type=1326 audit(1756880400.374:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8518 comm="syz.4.666" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4ac740ebe9 code=0x0 [ 494.979450][ C0] vkms_vblank_simulate: vblank timer overrun [ 495.512652][ C0] vkms_vblank_simulate: vblank timer overrun [ 495.727423][ C0] vkms_vblank_simulate: vblank timer overrun [ 496.835763][ C0] vkms_vblank_simulate: vblank timer overrun [ 496.961327][ C0] vkms_vblank_simulate: vblank timer overrun [ 497.392826][ T8285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 497.441132][ T8285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 497.705676][ T5155] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 497.735310][ T5155] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 497.740967][ T5155] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 497.750526][ T5155] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 497.751458][ T5155] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 498.274052][ T8285] team0: Port device team_slave_0 added [ 498.295819][ T8285] team0: Port device team_slave_1 added [ 499.739971][ T8564] rtc_cmos 00:00: Alarms can be up to one day in the future [ 499.740990][ T8564] rtc_cmos 00:00: Alarms can be up to one day in the future [ 499.849778][ T5839] Bluetooth: hci2: command tx timeout [ 500.289894][ T6027] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 500.782133][ T8285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 500.782152][ T8285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 500.782181][ T8285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 500.843719][ T8541] lo speed is unknown, defaulting to 1000 [ 500.856910][ T8285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 500.856927][ T8285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 500.856956][ T8285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 500.862922][ T8541] lo speed is unknown, defaulting to 1000 [ 500.890683][ T6027] usb 5-1: unable to get BOS descriptor or descriptor too short [ 500.892110][ T6027] usb 5-1: config 63 has an invalid interface number: 66 but max is 0 [ 500.892136][ T6027] usb 5-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 500.892157][ T6027] usb 5-1: config 63 has no interface number 0 [ 500.892197][ T6027] usb 5-1: config 63 interface 66 has no altsetting 0 [ 500.892877][ T6027] usb 5-1: language id specifier not provided by device, defaulting to English [ 501.010189][ T6027] usb 5-1: New USB device found, idVendor=174f, idProduct=8a31, bcdDevice=39.f4 [ 501.010220][ T6027] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.010241][ T6027] usb 5-1: SerialNumber: ₯⬒᥋녽썶ᇎ귀금괢Г瞣ㄭ [ 501.276890][ T8563] binder: binder_mmap: 8559 200000ffb000-200000ffd000 bad vm_flags failed -1 [ 501.938052][ T5839] Bluetooth: hci2: command tx timeout [ 502.379250][ T6027] uvcvideo 5-1:63.66: probe with driver uvcvideo failed with error -22 [ 502.384481][ T6027] usb 5-1: USB disconnect, device number 23 [ 502.473882][ T8285] hsr_slave_0: entered promiscuous mode [ 502.475332][ T8285] hsr_slave_1: entered promiscuous mode [ 502.476241][ T8285] debugfs: 'hsr0' already exists in 'hsr' [ 502.476265][ T8285] Cannot create hsr debugfs directory [ 503.095802][ T38] audit: type=1326 audit(1756880408.664:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8575 comm="syz.3.676" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc42d8febe9 code=0x0 [ 503.292678][ T57] bridge_slave_1: left allmulticast mode [ 503.292774][ T57] bridge_slave_1: left promiscuous mode [ 503.293165][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.359103][ T57] bridge_slave_0: left allmulticast mode [ 503.359134][ T57] bridge_slave_0: left promiscuous mode [ 503.359340][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.498156][ C1] vkms_vblank_simulate: vblank timer overrun [ 503.854847][ C1] vkms_vblank_simulate: vblank timer overrun [ 503.896689][ T57] bridge_slave_1: left allmulticast mode [ 503.896731][ T57] bridge_slave_1: left promiscuous mode [ 503.896991][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.158837][ C1] vkms_vblank_simulate: vblank timer overrun [ 504.266031][ C1] vkms_vblank_simulate: vblank timer overrun [ 504.721342][ C1] vkms_vblank_simulate: vblank timer overrun [ 504.746489][ C1] vkms_vblank_simulate: vblank timer overrun [ 504.780290][ T5839] Bluetooth: hci2: command tx timeout [ 505.607533][ C1] vkms_vblank_simulate: vblank timer overrun [ 505.879015][ T8594] netlink: 'syz.4.681': attribute type 10 has an invalid length. [ 506.157383][ C1] vkms_vblank_simulate: vblank timer overrun [ 506.229814][ T57] bridge_slave_0: left allmulticast mode [ 506.229847][ T57] bridge_slave_0: left promiscuous mode [ 506.230109][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.800526][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.800605][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.826133][ T5839] Bluetooth: hci2: command tx timeout [ 507.219513][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 507.322734][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 507.456207][ T57] bond0 (unregistering): Released all slaves [ 508.109587][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 508.209534][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 508.320395][ T57] bond0 (unregistering): Released all slaves [ 509.173925][ T8614] rtc_cmos 00:00: Alarms can be up to one day in the future [ 509.174986][ T8614] rtc_cmos 00:00: Alarms can be up to one day in the future [ 509.506836][ T10] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 509.695131][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 509.765334][ T10] usb 3-1: config 63 has an invalid interface number: 66 but max is 0 [ 509.765390][ T10] usb 3-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 509.765438][ T10] usb 3-1: config 63 has no interface number 0 [ 509.765641][ T10] usb 3-1: config 63 interface 66 has no altsetting 0 [ 509.818565][ T10] usb 3-1: language id specifier not provided by device, defaulting to English [ 509.935794][ T10] usb 3-1: New USB device found, idVendor=174f, idProduct=8a31, bcdDevice=39.f4 [ 509.935919][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.936003][ T10] usb 3-1: SerialNumber: ₯⬒᥋녽썶ᇎ귀금괢Г瞣ㄭ [ 510.267148][ T8613] binder: binder_mmap: 8611 200000ffb000-200000ffd000 bad vm_flags failed -1 [ 510.885506][ T8541] chnl_net:caif_netlink_parms(): no params data found [ 511.315464][ T38] audit: type=1326 audit(1756880416.884:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8622 comm="syz.4.687" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4ac740ebe9 code=0x0 [ 511.345797][ C0] vkms_vblank_simulate: vblank timer overrun [ 511.461809][ T57] hsr_slave_0: left promiscuous mode [ 511.478249][ T57] hsr_slave_1: left promiscuous mode [ 511.479479][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 511.527788][ C0] hrtimer: interrupt took 46826 ns [ 511.983483][ C0] vkms_vblank_simulate: vblank timer overrun [ 512.319286][ C0] vkms_vblank_simulate: vblank timer overrun [ 512.346299][ T10] uvcvideo 3-1:63.66: probe with driver uvcvideo failed with error -22 [ 512.415115][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 512.416082][ T10] usb 3-1: USB disconnect, device number 28 [ 513.694417][ C0] vkms_vblank_simulate: vblank timer overrun [ 513.924639][ T57] hsr_slave_0: left promiscuous mode [ 513.978075][ T57] hsr_slave_1: left promiscuous mode [ 513.979074][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 514.043433][ C0] vkms_vblank_simulate: vblank timer overrun [ 514.246549][ T8656] netlink: 'syz.3.693': attribute type 10 has an invalid length. [ 514.269388][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 514.387939][ C0] vkms_vblank_simulate: vblank timer overrun [ 515.682534][ C0] vkms_vblank_simulate: vblank timer overrun [ 516.714550][ T5155] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 516.718855][ T5155] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 516.720059][ T5155] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 516.721608][ T5155] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 516.722621][ T5155] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 516.951913][ C0] vkms_vblank_simulate: vblank timer overrun [ 517.039892][ C0] vkms_vblank_simulate: vblank timer overrun [ 517.429077][ C0] vkms_vblank_simulate: vblank timer overrun [ 518.165072][ C0] vkms_vblank_simulate: vblank timer overrun [ 518.301279][ C0] vkms_vblank_simulate: vblank timer overrun [ 518.425673][ C0] vkms_vblank_simulate: vblank timer overrun [ 518.727894][ T5155] Bluetooth: hci1: command tx timeout [ 518.743353][ T57] team0 (unregistering): Port device team_slave_1 removed [ 518.879545][ T57] team0 (unregistering): Port device team_slave_0 removed [ 518.988353][ C0] vkms_vblank_simulate: vblank timer overrun [ 519.823872][ C0] vkms_vblank_simulate: vblank timer overrun [ 519.948774][ T57] team0 (unregistering): Port device team_slave_1 removed [ 519.978344][ C0] vkms_vblank_simulate: vblank timer overrun [ 520.080491][ T57] team0 (unregistering): Port device team_slave_0 removed [ 520.741328][ C0] vkms_vblank_simulate: vblank timer overrun [ 520.808192][ T5155] Bluetooth: hci1: command tx timeout [ 521.290596][ T8688] rtc_cmos 00:00: Alarms can be up to one day in the future [ 521.291631][ T8688] rtc_cmos 00:00: Alarms can be up to one day in the future [ 521.297322][ C0] vkms_vblank_simulate: vblank timer overrun [ 522.548164][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 522.740484][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 522.741831][ T9] usb 4-1: config 63 has an invalid interface number: 66 but max is 0 [ 522.741917][ T9] usb 4-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 522.741943][ T9] usb 4-1: config 63 has no interface number 0 [ 522.741989][ T9] usb 4-1: config 63 interface 66 has no altsetting 0 [ 522.742744][ T9] usb 4-1: language id specifier not provided by device, defaulting to English [ 522.750597][ T9] usb 4-1: New USB device found, idVendor=174f, idProduct=8a31, bcdDevice=39.f4 [ 522.750621][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.750636][ T9] usb 4-1: SerialNumber: ₯⬒᥋녽썶ᇎ귀금괢Г瞣ㄭ [ 522.887886][ T5155] Bluetooth: hci1: command tx timeout [ 523.050234][ T8688] binder: binder_mmap: 8685 200000ffb000-200000ffd000 bad vm_flags failed -1 [ 523.378900][ T8679] lo speed is unknown, defaulting to 1000 [ 523.380190][ T8541] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.380339][ T8541] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.380587][ T8541] bridge_slave_0: entered allmulticast mode [ 523.437144][ T8541] bridge_slave_0: entered promiscuous mode [ 523.565912][ T8679] lo speed is unknown, defaulting to 1000 [ 523.569175][ T8541] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.569337][ T8541] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.569665][ T8541] bridge_slave_1: entered allmulticast mode [ 523.628297][ T8541] bridge_slave_1: entered promiscuous mode [ 524.001357][ T38] audit: type=1326 audit(1756880429.574:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8710 comm="syz.2.706" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdd1b7cebe9 code=0x0 [ 524.754704][ T9] uvcvideo 4-1:63.66: probe with driver uvcvideo failed with error -22 [ 524.791504][ T9] usb 4-1: USB disconnect, device number 16 [ 524.973676][ T5155] Bluetooth: hci1: command tx timeout [ 525.170470][ T8541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 525.591734][ T8541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 527.297146][ T8541] team0: Port device team_slave_0 added [ 527.343635][ T8541] team0: Port device team_slave_1 added [ 527.579528][ T8541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 527.579546][ T8541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 527.579574][ T8541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 527.596386][ T8541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 527.596406][ T8541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 527.596439][ T8541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 528.207184][ T38] audit: type=1326 audit(1756880433.774:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8745 comm="syz.3.716" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc42d8febe9 code=0x0 [ 529.217692][ T8541] hsr_slave_0: entered promiscuous mode [ 529.254626][ T8770] rtc_cmos 00:00: Alarms can be up to one day in the future [ 529.255515][ T8770] rtc_cmos 00:00: Alarms can be up to one day in the future [ 529.255822][ T8541] hsr_slave_1: entered promiscuous mode [ 529.257322][ T8541] debugfs: 'hsr0' already exists in 'hsr' [ 529.257347][ T8541] Cannot create hsr debugfs directory [ 529.577967][ T10] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 529.730657][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 529.731945][ T10] usb 4-1: config 63 has an invalid interface number: 66 but max is 0 [ 529.731971][ T10] usb 4-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 529.732001][ T10] usb 4-1: config 63 has no interface number 0 [ 529.732031][ T10] usb 4-1: config 63 interface 66 has no altsetting 0 [ 529.732592][ T10] usb 4-1: language id specifier not provided by device, defaulting to English [ 529.744113][ T10] usb 4-1: New USB device found, idVendor=174f, idProduct=8a31, bcdDevice=39.f4 [ 529.744182][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.744208][ T10] usb 4-1: SerialNumber: ₯⬒᥋녽썶ᇎ귀금괢Г瞣ㄭ [ 530.041791][ T8770] binder: binder_mmap: 8768 200000ffb000-200000ffd000 bad vm_flags failed -1 [ 530.496313][ T8679] chnl_net:caif_netlink_parms(): no params data found [ 532.137963][ T10] uvcvideo 4-1:63.66: probe with driver uvcvideo failed with error -22 [ 532.190413][ T10] usb 4-1: USB disconnect, device number 17 [ 532.681057][ T8803] netlink: 'syz.2.723': attribute type 10 has an invalid length. [ 532.990522][ T8803] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 533.176766][ T38] audit: type=1326 audit(1756880438.744:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8812 comm="syz.4.726" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4ac740ebe9 code=0x0 [ 533.323549][ T8679] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.323754][ T8679] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.324002][ T8679] bridge_slave_0: entered allmulticast mode [ 533.333180][ T8679] bridge_slave_0: entered promiscuous mode [ 533.371377][ T8679] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.371642][ T8679] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.371857][ T8679] bridge_slave_1: entered allmulticast mode [ 533.376310][ T8679] bridge_slave_1: entered promiscuous mode [ 533.608260][ T10] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 533.951711][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 533.954521][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 533.954551][ T10] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 533.954578][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 533.977175][ T10] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 533.977203][ T10] usb 3-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 533.977224][ T10] usb 3-1: Product: syz [ 533.977239][ T10] usb 3-1: Manufacturer: syz [ 533.977254][ T10] usb 3-1: SerialNumber: syz [ 534.024698][ T8821] rtc_cmos 00:00: Alarms can be up to one day in the future [ 534.025759][ T8821] rtc_cmos 00:00: Alarms can be up to one day in the future [ 534.068819][ T10] usb 3-1: config 0 descriptor?? [ 534.210027][ T8679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 534.214501][ T8679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 534.337978][ T5927] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 534.500798][ T10] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 534.566523][ T5927] usb 4-1: unable to get BOS descriptor or descriptor too short [ 534.569020][ T5927] usb 4-1: config 63 has an invalid interface number: 66 but max is 0 [ 534.569046][ T5927] usb 4-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 534.569067][ T5927] usb 4-1: config 63 has no interface number 0 [ 534.569114][ T5927] usb 4-1: config 63 interface 66 has no altsetting 0 [ 534.571198][ T5927] usb 4-1: language id specifier not provided by device, defaulting to English [ 534.657498][ T5927] usb 4-1: New USB device found, idVendor=174f, idProduct=8a31, bcdDevice=39.f4 [ 534.657541][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.657563][ T5927] usb 4-1: SerialNumber: ₯⬒᥋녽썶ᇎ귀금괢Г瞣ㄭ [ 534.701546][ T10] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 534.701604][ T10] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -121 [ 534.951408][ T10] usb 3-1: USB disconnect, device number 29 [ 535.089895][ T8821] binder: binder_mmap: 8819 200000ffb000-200000ffd000 bad vm_flags failed -1 [ 535.348604][ T8679] team0: Port device team_slave_0 added [ 535.364699][ T8679] team0: Port device team_slave_1 added [ 536.379388][ T8679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 536.379403][ T8679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 536.379423][ T8679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 536.396952][ T8679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 536.396973][ T8679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 536.397017][ T8679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 537.634956][ T5927] uvcvideo 4-1:63.66: probe with driver uvcvideo failed with error -22 [ 537.648628][ T5927] usb 4-1: USB disconnect, device number 18 [ 538.111949][ T8842] netlink: 'syz.3.735': attribute type 10 has an invalid length. [ 538.237970][ T8842] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 538.798647][ T38] audit: type=1326 audit(1756880444.374:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8847 comm="syz.4.738" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4ac740ebe9 code=0x0 [ 538.910738][ T57] bridge_slave_1: left allmulticast mode [ 538.924047][ T57] bridge_slave_1: left promiscuous mode [ 538.924288][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.998818][ T57] bridge_slave_0: left allmulticast mode [ 538.998854][ T57] bridge_slave_0: left promiscuous mode [ 538.999652][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.598970][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 540.975717][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 541.834291][ T57] bond0 (unregistering): Released all slaves [ 541.933395][ T8679] hsr_slave_0: entered promiscuous mode [ 541.934798][ T8679] hsr_slave_1: entered promiscuous mode [ 541.935753][ T8679] debugfs: 'hsr0' already exists in 'hsr' [ 541.935778][ T8679] Cannot create hsr debugfs directory [ 541.965026][ T8859] pim6reg1: entered promiscuous mode [ 541.965056][ T8859] pim6reg1: entered allmulticast mode [ 542.525047][ T8877] netlink: 'syz.3.746': attribute type 10 has an invalid length. [ 542.543214][ T8877] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 543.071401][ T38] audit: type=1326 audit(1756880448.644:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8885 comm="syz.4.749" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4ac740ebe9 code=0x0 [ 543.230361][ T57] hsr_slave_0: left promiscuous mode [ 543.248153][ T57] hsr_slave_1: left promiscuous mode [ 543.249323][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 543.292181][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 545.204657][ T57] team0 (unregistering): Port device team_slave_1 removed [ 545.417035][ T57] team0 (unregistering): Port device team_slave_0 removed [ 545.562968][ T8899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.752'. [ 545.562996][ T8899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.752'. [ 548.035446][ T8541] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 548.674316][ T8541] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 550.306573][ T8925] program syz.2.760 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 551.097191][ T8929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.762'. [ 551.097218][ T8929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.762'. [ 551.399524][ T8541] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 552.164049][ T8541] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 552.427993][ T5928] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 552.585433][ T5928] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 552.585464][ T5928] usb 4-1: config 1 has no interface number 0 [ 552.585513][ T5928] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 552.585542][ T5928] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 552.585580][ T5928] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 552.593762][ T5928] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 552.593796][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.593819][ T5928] usb 4-1: Product: syz [ 552.593834][ T5928] usb 4-1: Manufacturer: syz [ 552.593851][ T5928] usb 4-1: SerialNumber: syz [ 553.240315][ T5928] cdc_ncm 4-1:1.1: failed GET_NTB_PARAMETERS [ 553.240365][ T5928] cdc_ncm 4-1:1.1: bind() failure [ 553.607682][ T8541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 553.677223][ T9] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 553.827637][ T8541] 8021q: adding VLAN 0 to HW filter on device team0 [ 553.833271][ T9] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 553.833334][ T9] usb 3-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 553.833360][ T9] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 553.833409][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 553.833434][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.893924][ T1121] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.894158][ T1121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 553.962316][ T6298] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.964187][ T6298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 554.080691][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 554.381659][ T5928] usb 4-1: USB disconnect, device number 19 [ 554.529676][ T9] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 554.635796][ T9] usb 3-1: USB disconnect, device number 30 [ 555.163941][ T8679] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 555.466083][ T8679] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 555.672395][ T8679] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 555.894519][ T8679] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 557.731389][ T9000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.774'. [ 557.731417][ T9000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.774'. [ 558.222240][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 558.241375][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 558.243483][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 558.244828][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 558.246133][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 558.470009][ T8679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 560.421007][ T5839] Bluetooth: hci2: command tx timeout [ 560.464303][ T5928] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 561.567910][ T5928] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 561.567940][ T5928] usb 3-1: config 1 has no interface number 0 [ 561.567997][ T5928] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 561.568026][ T5928] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 561.568074][ T5928] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 561.577615][ T5928] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 561.577644][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.577665][ T5928] usb 3-1: Product: syz [ 561.577680][ T5928] usb 3-1: Manufacturer: syz [ 561.577695][ T5928] usb 3-1: SerialNumber: syz [ 562.125729][ T9002] lo speed is unknown, defaulting to 1000 [ 562.193282][ T8679] 8021q: adding VLAN 0 to HW filter on device team0 [ 562.285294][ T6299] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.286244][ T6299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 562.292165][ T9002] lo speed is unknown, defaulting to 1000 [ 562.337917][ T5928] cdc_ncm 3-1:1.1: failed GET_NTB_PARAMETERS [ 562.337961][ T5928] cdc_ncm 3-1:1.1: bind() failure [ 562.488590][ T5839] Bluetooth: hci2: command tx timeout [ 562.640251][ T6299] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.643668][ T6299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 563.855447][ T49] usb 3-1: USB disconnect, device number 31 [ 564.326986][ T9063] netlink: 8 bytes leftover after parsing attributes in process `syz.4.784'. [ 564.327013][ T9063] netlink: 8 bytes leftover after parsing attributes in process `syz.4.784'. [ 564.716462][ T5839] Bluetooth: hci2: command tx timeout [ 565.972622][ T9079] rtc_cmos 00:00: Alarms can be up to one day in the future [ 565.973572][ T9079] rtc_cmos 00:00: Alarms can be up to one day in the future [ 566.821018][ T5839] Bluetooth: hci2: command tx timeout [ 567.417133][ T5928] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 567.573225][ T5928] usb 5-1: unable to get BOS descriptor or descriptor too short [ 567.576101][ T5928] usb 5-1: config 63 has an invalid interface number: 66 but max is 0 [ 567.576126][ T5928] usb 5-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 567.576145][ T5928] usb 5-1: config 63 has no interface number 0 [ 567.576181][ T5928] usb 5-1: config 63 interface 66 has no altsetting 0 [ 567.577160][ T5928] usb 5-1: language id specifier not provided by device, defaulting to English [ 567.660713][ T5928] usb 5-1: New USB device found, idVendor=174f, idProduct=8a31, bcdDevice=39.f4 [ 567.660746][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.660767][ T5928] usb 5-1: SerialNumber: ₯⬒᥋녽썶ᇎ귀금괢Г瞣ㄭ [ 567.903516][ T9079] binder: binder_mmap: 9069 200000ffb000-200000ffd000 bad vm_flags failed -1 [ 568.147964][ T49] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 568.184353][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.184419][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.303109][ T49] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 568.303140][ T49] usb 4-1: config 1 has no interface number 0 [ 568.303192][ T49] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 568.303222][ T49] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 568.303260][ T49] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 568.333148][ T49] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 568.333178][ T49] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.333198][ T49] usb 4-1: Product: syz [ 568.333213][ T49] usb 4-1: Manufacturer: syz [ 568.333228][ T49] usb 4-1: SerialNumber: syz [ 568.975103][ C0] vkms_vblank_simulate: vblank timer overrun [ 569.071982][ C0] vkms_vblank_simulate: vblank timer overrun [ 569.101273][ T5928] uvcvideo 5-1:63.66: probe with driver uvcvideo failed with error -22 [ 569.109531][ T5928] usb 5-1: USB disconnect, device number 24 [ 569.148091][ T49] cdc_ncm 4-1:1.1: failed GET_NTB_PARAMETERS [ 569.148138][ T49] cdc_ncm 4-1:1.1: bind() failure [ 569.423335][ C0] vkms_vblank_simulate: vblank timer overrun [ 569.974990][ C0] vkms_vblank_simulate: vblank timer overrun [ 570.420029][ C0] vkms_vblank_simulate: vblank timer overrun [ 570.574967][ T5928] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 570.668027][ T9002] chnl_net:caif_netlink_parms(): no params data found [ 570.720744][ T5928] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 570.720811][ T5928] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 570.720836][ T5928] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 570.720881][ T5928] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 570.720906][ T5928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.985036][ T5849] usb 4-1: USB disconnect, device number 20 [ 571.709867][ C0] vkms_vblank_simulate: vblank timer overrun [ 571.853070][ T9111] netlink: 8 bytes leftover after parsing attributes in process `syz.3.795'. [ 571.853096][ T9111] netlink: 8 bytes leftover after parsing attributes in process `syz.3.795'. [ 572.023816][ T5928] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 572.105432][ T1108] bridge_slave_1: left allmulticast mode [ 572.105467][ T1108] bridge_slave_1: left promiscuous mode [ 572.105728][ T1108] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.213186][ T1108] bridge_slave_0: left allmulticast mode [ 572.213219][ T1108] bridge_slave_0: left promiscuous mode [ 572.213478][ T1108] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.213996][ T5928] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 572.250808][ T5928] usb 5-1: USB disconnect, device number 25 [ 574.384905][ C1] vkms_vblank_simulate: vblank timer overrun [ 574.400805][ T9117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 574.535253][ C1] vkms_vblank_simulate: vblank timer overrun [ 574.687264][ C1] vkms_vblank_simulate: vblank timer overrun [ 575.890163][ T9137] rtc_cmos 00:00: Alarms can be up to one day in the future [ 575.891145][ T9137] rtc_cmos 00:00: Alarms can be up to one day in the future [ 576.222937][ C1] vkms_vblank_simulate: vblank timer overrun [ 576.323192][ C1] vkms_vblank_simulate: vblank timer overrun [ 576.377944][ T6027] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 576.541520][ T6027] usb 3-1: unable to get BOS descriptor or descriptor too short [ 576.545043][ T6027] usb 3-1: config 63 has an invalid interface number: 66 but max is 0 [ 576.545067][ T6027] usb 3-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 576.545086][ T6027] usb 3-1: config 63 has no interface number 0 [ 576.545127][ T6027] usb 3-1: config 63 interface 66 has no altsetting 0 [ 576.547265][ T6027] usb 3-1: language id specifier not provided by device, defaulting to English [ 576.588765][ T6027] usb 3-1: New USB device found, idVendor=174f, idProduct=8a31, bcdDevice=39.f4 [ 576.588800][ T6027] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.588825][ T6027] usb 3-1: SerialNumber: ₯⬒᥋녽썶ᇎ귀금괢Г瞣ㄭ [ 576.858059][ T9136] binder: binder_mmap: 9132 200000ffb000-200000ffd000 bad vm_flags failed -1 [ 577.264454][ T5155] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 577.297063][ T5155] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 577.305822][ T5155] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 577.318215][ T5155] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 577.341255][ T5155] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 577.343474][ T1108] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 577.460911][ T1108] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 577.503144][ T1108] bond0 (unregistering): Released all slaves [ 577.656170][ C1] vkms_vblank_simulate: vblank timer overrun [ 578.006835][ C1] vkms_vblank_simulate: vblank timer overrun [ 578.074025][ T6027] uvcvideo 3-1:63.66: probe with driver uvcvideo failed with error -22 [ 578.325569][ C1] vkms_vblank_simulate: vblank timer overrun [ 578.380484][ T6027] usb 3-1: USB disconnect, device number 32 [ 578.533135][ C1] vkms_vblank_simulate: vblank timer overrun [ 579.017564][ C1] vkms_vblank_simulate: vblank timer overrun [ 579.457004][ T5155] Bluetooth: hci5: command tx timeout [ 579.689049][ T1108] hsr_slave_0: left promiscuous mode [ 579.768147][ T6027] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 579.820032][ T1108] hsr_slave_1: left promiscuous mode [ 579.821078][ T1108] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 579.888979][ T1108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 580.100894][ T6027] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 580.100930][ T6027] usb 3-1: config 1 has no interface number 0 [ 580.100976][ T6027] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 580.101002][ T6027] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 580.101035][ T6027] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 580.104088][ T6027] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 580.104115][ T6027] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.104135][ T6027] usb 3-1: Product: syz [ 580.104148][ T6027] usb 3-1: Manufacturer: syz [ 580.104163][ T6027] usb 3-1: SerialNumber: syz [ 581.449402][ T9157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.806'. [ 581.450073][ T9157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.806'. [ 581.527986][ T5155] Bluetooth: hci5: command tx timeout [ 581.747584][ T6027] cdc_ncm 3-1:1.1: failed GET_NTB_PARAMETERS [ 581.747634][ T6027] cdc_ncm 3-1:1.1: bind() failure [ 583.454177][ T31] usb 3-1: USB disconnect, device number 33 [ 583.610021][ T5155] Bluetooth: hci5: command tx timeout [ 583.643224][ T9170] netlink: 'syz.2.810': attribute type 10 has an invalid length. [ 584.211641][ T1108] team0 (unregistering): Port device team_slave_1 removed [ 585.697896][ T5155] Bluetooth: hci5: command tx timeout [ 585.885402][ T1108] team0 (unregistering): Port device team_slave_0 removed [ 586.321604][ T9191] netlink: 8 bytes leftover after parsing attributes in process `syz.3.816'. [ 586.321632][ T9191] netlink: 8 bytes leftover after parsing attributes in process `syz.3.816'. [ 588.368002][ T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 588.457946][ T9170] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 588.521432][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 588.521461][ T9] usb 4-1: config 1 has no interface number 0 [ 588.521538][ T9] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 588.521568][ T9] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 588.521605][ T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 588.524169][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 588.524197][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.524217][ T9] usb 4-1: Product: syz [ 588.524240][ T9] usb 4-1: Manufacturer: syz [ 588.524255][ T9] usb 4-1: SerialNumber: syz [ 589.901186][ T9] cdc_ncm 4-1:1.1: failed GET_NTB_PARAMETERS [ 589.901235][ T9] cdc_ncm 4-1:1.1: bind() failure [ 589.970081][ T9139] lo speed is unknown, defaulting to 1000 [ 589.973738][ T9139] lo speed is unknown, defaulting to 1000 [ 589.977225][ T9002] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.977447][ T9002] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.977646][ T9002] bridge_slave_0: entered allmulticast mode [ 590.023119][ T9002] bridge_slave_0: entered promiscuous mode [ 590.066550][ T9002] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.066713][ T9002] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.066918][ T9002] bridge_slave_1: entered allmulticast mode [ 590.122099][ T9002] bridge_slave_1: entered promiscuous mode [ 590.411866][ T9002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 590.467544][ T9002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 590.736026][ T9002] team0: Port device team_slave_0 added [ 590.770744][ T9002] team0: Port device team_slave_1 added [ 592.251066][ T5928] usb 4-1: USB disconnect, device number 21 [ 592.572162][ T9216] ubi31: attaching mtd0 [ 592.604444][ T9216] ubi31: scanning is finished [ 592.841623][ C1] vkms_vblank_simulate: vblank timer overrun [ 593.233831][ C1] vkms_vblank_simulate: vblank timer overrun [ 593.436569][ T9222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.825'. [ 593.436596][ T9222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.825'. [ 593.496668][ T9216] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 593.760594][ T9002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 593.760614][ T9002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 593.760645][ T9002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 594.104519][ T9002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 594.104538][ T9002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 594.104579][ T9002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 595.070806][ C1] vkms_vblank_simulate: vblank timer overrun [ 595.132260][ C1] vkms_vblank_simulate: vblank timer overrun [ 595.478532][ T9235] netlink: 'syz.3.827': attribute type 10 has an invalid length. [ 595.691101][ T9235] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 595.757016][ T9002] hsr_slave_0: entered promiscuous mode [ 595.765711][ T9002] hsr_slave_1: entered promiscuous mode [ 595.770139][ T9002] debugfs: 'hsr0' already exists in 'hsr' [ 595.770170][ T9002] Cannot create hsr debugfs directory [ 596.113841][ C1] vkms_vblank_simulate: vblank timer overrun [ 596.313907][ C1] vkms_vblank_simulate: vblank timer overrun [ 596.830146][ C1] vkms_vblank_simulate: vblank timer overrun [ 597.107130][ C1] vkms_vblank_simulate: vblank timer overrun [ 597.590663][ C1] vkms_vblank_simulate: vblank timer overrun [ 598.778328][ T9139] chnl_net:caif_netlink_parms(): no params data found [ 599.628193][ T9287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.836'. [ 599.628218][ T9287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.836'. [ 599.727868][ T9288] ubi31: attaching mtd0 [ 599.760657][ T9288] ubi31: scanning is finished [ 600.025709][ C1] vkms_vblank_simulate: vblank timer overrun [ 600.296307][ C1] vkms_vblank_simulate: vblank timer overrun [ 600.593241][ T9288] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 601.226581][ C1] vkms_vblank_simulate: vblank timer overrun [ 601.418898][ C1] vkms_vblank_simulate: vblank timer overrun [ 601.925440][ C1] vkms_vblank_simulate: vblank timer overrun [ 602.527507][ C1] vkms_vblank_simulate: vblank timer overrun [ 602.721633][ C1] vkms_vblank_simulate: vblank timer overrun [ 603.692335][ C1] vkms_vblank_simulate: vblank timer overrun [ 604.923888][ T9139] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.924121][ T9139] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.924330][ T9139] bridge_slave_0: entered allmulticast mode [ 604.951828][ T9139] bridge_slave_0: entered promiscuous mode [ 605.068784][ T9139] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.068923][ T9139] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.069157][ T9139] bridge_slave_1: entered allmulticast mode [ 605.071824][ T9139] bridge_slave_1: entered promiscuous mode [ 606.118406][ T9139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 606.526613][ T9139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 609.144616][ T9344] siw: device registration error -23 [ 609.150937][ T9344] netlink: 'syz.4.848': attribute type 10 has an invalid length. [ 610.710929][ T9359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.880714][ T9139] team0: Port device team_slave_0 added [ 611.060130][ T9139] team0: Port device team_slave_1 added [ 611.559960][ T9368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.854'. [ 611.560000][ T9368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.854'. [ 611.762635][ C1] vkms_vblank_simulate: vblank timer overrun [ 611.970847][ C1] vkms_vblank_simulate: vblank timer overrun [ 612.463393][ C1] vkms_vblank_simulate: vblank timer overrun [ 612.951934][ T9139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 612.951952][ T9139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 612.951984][ T9139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 612.986410][ T9139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 612.986431][ T9139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 612.986466][ T9139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 613.126811][ T1108] bridge_slave_1: left allmulticast mode [ 613.126847][ T1108] bridge_slave_1: left promiscuous mode [ 613.127133][ T1108] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.369603][ C1] vkms_vblank_simulate: vblank timer overrun [ 613.526710][ C1] vkms_vblank_simulate: vblank timer overrun [ 614.089640][ C1] vkms_vblank_simulate: vblank timer overrun [ 614.330345][ T1108] bridge_slave_0: left allmulticast mode [ 614.330381][ T1108] bridge_slave_0: left promiscuous mode [ 614.330595][ T1108] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.618306][ C1] vkms_vblank_simulate: vblank timer overrun [ 614.827374][ C1] vkms_vblank_simulate: vblank timer overrun [ 615.123801][ C1] vkms_vblank_simulate: vblank timer overrun [ 617.048138][ T10] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 617.683906][ T10] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 617.683948][ T10] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 617.683967][ T10] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 617.683983][ T10] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 617.684012][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 617.684029][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.802350][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 617.803471][ T10] usb 3-1: invalid MIDI out EP 0 [ 618.067352][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 618.100736][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 618.101934][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 618.112388][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 618.155547][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 618.233742][ T9291] udevd[9291]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 618.395828][ T10] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 618.406793][ T10] usb 3-1: USB disconnect, device number 34 [ 618.686284][ T9413] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 619.344325][ T1108] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 619.424694][ T1108] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 619.471550][ T1108] bond0 (unregistering): Released all slaves [ 619.707698][ C1] vkms_vblank_simulate: vblank timer overrun [ 619.885618][ T9405] syzkaller0: entered allmulticast mode [ 620.248337][ C1] vkms_vblank_simulate: vblank timer overrun [ 620.338520][ T5155] Bluetooth: hci1: command tx timeout [ 620.609434][ C1] vkms_vblank_simulate: vblank timer overrun [ 621.217997][ C1] vkms_vblank_simulate: vblank timer overrun [ 621.334944][ T9139] hsr_slave_0: entered promiscuous mode [ 621.346322][ T9139] hsr_slave_1: entered promiscuous mode [ 621.349769][ T9139] debugfs: 'hsr0' already exists in 'hsr' [ 621.349798][ T9139] Cannot create hsr debugfs directory [ 621.518014][ T1108] hsr_slave_0: left promiscuous mode [ 621.639815][ C1] vkms_vblank_simulate: vblank timer overrun [ 621.715886][ T1108] hsr_slave_1: left promiscuous mode [ 621.716668][ T1108] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 621.758916][ T1108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 622.418078][ T5155] Bluetooth: hci1: command tx timeout [ 622.538178][ T5928] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 622.693971][ T5928] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 622.694035][ T5928] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 622.694064][ T5928] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 622.694088][ T5928] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 622.694133][ T5928] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 622.694158][ T5928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.793784][ T5928] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 622.794884][ T5928] usb 5-1: invalid MIDI out EP 0 [ 623.263621][ T9450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.874'. [ 623.263647][ T9450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.874'. [ 623.535313][ T5928] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 623.561484][ T5928] usb 5-1: USB disconnect, device number 26 [ 624.070609][ C1] vkms_vblank_simulate: vblank timer overrun [ 624.260169][ C1] vkms_vblank_simulate: vblank timer overrun [ 624.769041][ C1] vkms_vblank_simulate: vblank timer overrun [ 625.054408][ T5155] Bluetooth: hci1: command tx timeout [ 625.282501][ C1] vkms_vblank_simulate: vblank timer overrun [ 625.445529][ C1] vkms_vblank_simulate: vblank timer overrun [ 625.964377][ C1] vkms_vblank_simulate: vblank timer overrun [ 626.281851][ C1] vkms_vblank_simulate: vblank timer overrun [ 626.442317][ C1] vkms_vblank_simulate: vblank timer overrun [ 627.090043][ T1108] team0 (unregistering): Port device team_slave_1 removed [ 627.136060][ T5155] Bluetooth: hci1: command tx timeout [ 627.488708][ T1108] team0 (unregistering): Port device team_slave_0 removed [ 628.457062][ T9473] libceph: resolve '@e2OAqcz' (ret=-3): failed [ 629.266657][ T9477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.882'. [ 629.266687][ T9477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.882'. [ 629.617202][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.617281][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 631.669396][ T9459] veth1_macvtap: left promiscuous mode [ 631.669427][ T9459] macsec0: entered promiscuous mode [ 631.939776][ T9407] lo speed is unknown, defaulting to 1000 [ 631.956997][ T9407] lo speed is unknown, defaulting to 1000 [ 634.902962][ T9510] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 636.277974][ T5928] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 637.088663][ C0] vkms_vblank_simulate: vblank timer overrun [ 637.105317][ T5928] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 637.105349][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.105370][ T5928] usb 4-1: Product: syz [ 637.105386][ T5928] usb 4-1: Manufacturer: syz [ 637.105401][ T5928] usb 4-1: SerialNumber: syz [ 637.709738][ T6300] bridge_slave_1: left allmulticast mode [ 637.709829][ T6300] bridge_slave_1: left promiscuous mode [ 637.716443][ T6300] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.869406][ T6300] bridge_slave_0: left allmulticast mode [ 637.869449][ T6300] bridge_slave_0: left promiscuous mode [ 637.871831][ T6300] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.568962][ T6300] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 638.675069][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 638.702314][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 638.706248][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 638.713938][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 638.715170][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 638.807246][ T6300] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 638.867291][ T6300] bond0 (unregistering): Released all slaves [ 639.156830][ T9543] wg2: entered promiscuous mode [ 639.156861][ T9543] wg2: entered allmulticast mode [ 639.207512][ T5928] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO [ 639.207575][ T5928] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 639.235694][ T5928] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 639.272044][ T5928] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 639.295799][ T5928] usb 4-1: USB disconnect, device number 22 [ 640.807868][ T5155] Bluetooth: hci2: command tx timeout [ 640.886404][ T9407] chnl_net:caif_netlink_parms(): no params data found [ 641.187947][ T6300] hsr_slave_0: left promiscuous mode [ 641.219609][ T6300] hsr_slave_1: left promiscuous mode [ 641.220606][ T6300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 641.280772][ T6300] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 642.888556][ T5155] Bluetooth: hci2: command tx timeout [ 643.428689][ T6300] team0 (unregistering): Port device team_slave_1 removed [ 643.879965][ T6300] team0 (unregistering): Port device team_slave_0 removed [ 644.969317][ T5155] Bluetooth: hci2: command tx timeout [ 646.919630][ T9549] lo speed is unknown, defaulting to 1000 [ 646.940586][ T9549] lo speed is unknown, defaulting to 1000 [ 647.997954][ T5155] Bluetooth: hci2: command tx timeout [ 649.163217][ T9621] netlink: 'syz.2.910': attribute type 10 has an invalid length. [ 650.236056][ T9407] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.236192][ T9407] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.236345][ T9407] bridge_slave_0: entered allmulticast mode [ 650.269839][ T9407] bridge_slave_0: entered promiscuous mode [ 650.343866][ T9407] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.344017][ T9407] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.344249][ T9407] bridge_slave_1: entered allmulticast mode [ 650.364074][ T9407] bridge_slave_1: entered promiscuous mode [ 651.056185][ T9407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 651.108605][ T9407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 651.449941][ T9645] pim6reg1: entered promiscuous mode [ 651.449979][ T9645] pim6reg1: entered allmulticast mode [ 651.530874][ T6300] bridge_slave_1: left allmulticast mode [ 651.531230][ T6300] bridge_slave_1: left promiscuous mode [ 651.531436][ T6300] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.618934][ T6300] bridge_slave_0: left allmulticast mode [ 651.618971][ T6300] bridge_slave_0: left promiscuous mode [ 651.619257][ T6300] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.248833][ T6300] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 652.309075][ T6300] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 652.352544][ T6300] bond0 (unregistering): Released all slaves [ 652.396388][ T9407] team0: Port device team_slave_0 added [ 652.621338][ T9407] team0: Port device team_slave_1 added [ 653.216780][ T9407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 653.216807][ T9407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 653.216838][ T9407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 653.380486][ T6300] hsr_slave_0: left promiscuous mode [ 653.437934][ T6300] hsr_slave_1: left promiscuous mode [ 653.438936][ T6300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 653.463440][ T6300] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 654.039786][ C1] vkms_vblank_simulate: vblank timer overrun [ 654.143201][ C1] vkms_vblank_simulate: vblank timer overrun [ 655.167122][ C1] vkms_vblank_simulate: vblank timer overrun [ 655.252730][ C1] vkms_vblank_simulate: vblank timer overrun [ 655.582058][ C1] vkms_vblank_simulate: vblank timer overrun [ 655.668213][ C1] vkms_vblank_simulate: vblank timer overrun [ 655.717156][ T9672] rtc_cmos 00:00: Alarms can be up to one day in the future [ 655.719339][ T9672] rtc_cmos 00:00: Alarms can be up to one day in the future [ 655.800360][ T6300] team0 (unregistering): Port device team_slave_1 removed [ 655.833428][ C1] vkms_vblank_simulate: vblank timer overrun [ 655.976773][ T6300] team0 (unregistering): Port device team_slave_0 removed [ 655.987948][ T5838] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 656.009312][ C1] vkms_vblank_simulate: vblank timer overrun [ 656.122982][ C1] vkms_vblank_simulate: vblank timer overrun [ 656.167012][ T5838] usb 5-1: unable to get BOS descriptor or descriptor too short [ 656.180578][ T5838] usb 5-1: config 63 has an invalid interface number: 66 but max is 0 [ 656.180617][ T5838] usb 5-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 656.180639][ T5838] usb 5-1: config 63 has no interface number 0 [ 656.180676][ T5838] usb 5-1: config 63 interface 66 has no altsetting 0 [ 656.181715][ T5838] usb 5-1: language id specifier not provided by device, defaulting to English [ 656.194571][ T5838] usb 5-1: New USB device found, idVendor=174f, idProduct=8a31, bcdDevice=39.f4 [ 656.194609][ T5838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.194631][ T5838] usb 5-1: SerialNumber: ₯⬒᥋녽썶ᇎ귀금괢Г瞣ㄭ [ 656.502215][ T9672] binder: binder_mmap: 9669 200000ffb000-200000ffd000 bad vm_flags failed -1 [ 656.584576][ C1] vkms_vblank_simulate: vblank timer overrun [ 656.747930][ T9407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 656.747948][ T9407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 656.747980][ T9407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 658.041563][ C1] vkms_vblank_simulate: vblank timer overrun [ 659.143804][ T9407] hsr_slave_0: entered promiscuous mode [ 659.159372][ T9407] hsr_slave_1: entered promiscuous mode [ 659.168237][ T9407] debugfs: 'hsr0' already exists in 'hsr' [ 659.168271][ T9407] Cannot create hsr debugfs directory [ 659.193745][ T9682] netlink: 'syz.3.925': attribute type 10 has an invalid length. [ 659.305593][ T9549] chnl_net:caif_netlink_parms(): no params data found [ 660.612878][ T5838] uvcvideo 5-1:63.66: probe with driver uvcvideo failed with error -22 [ 660.627587][ T5838] usb 5-1: USB disconnect, device number 27 [ 660.795810][ T9549] bridge0: port 1(bridge_slave_0) entered blocking state [ 660.796934][ T9549] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.797140][ T9549] bridge_slave_0: entered allmulticast mode [ 660.802362][ T9549] bridge_slave_0: entered promiscuous mode [ 660.849719][ T9549] bridge0: port 2(bridge_slave_1) entered blocking state [ 660.849883][ T9549] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.850129][ T9549] bridge_slave_1: entered allmulticast mode [ 660.864355][ T9549] bridge_slave_1: entered promiscuous mode [ 661.770590][ T9549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 662.066811][ T9549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 664.475102][ T9719] program syz.3.936 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 665.654347][ T9549] team0: Port device team_slave_0 added [ 666.459557][ T9549] team0: Port device team_slave_1 added [ 667.107942][ T5838] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 667.211683][ T9549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 667.211702][ T9549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 667.211732][ T9549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 667.276394][ T9549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 667.276411][ T9549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 667.276439][ T9549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 667.279708][ T5838] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 667.279740][ T5838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.279762][ T5838] usb 4-1: Product: syz [ 667.279777][ T5838] usb 4-1: Manufacturer: syz [ 667.279806][ T5838] usb 4-1: SerialNumber: syz [ 667.580604][ T9407] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 667.732945][ T9407] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 667.785762][ T9549] hsr_slave_0: entered promiscuous mode [ 667.787153][ T9549] hsr_slave_1: entered promiscuous mode [ 667.803044][ T9549] debugfs: 'hsr0' already exists in 'hsr' [ 667.803075][ T9549] Cannot create hsr debugfs directory [ 667.807423][ T9407] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 667.867423][ T9407] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 670.665264][ T5838] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO [ 670.665326][ T5838] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 670.669074][ T5838] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 670.871108][ T5838] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 670.945341][ T5838] usb 4-1: USB disconnect, device number 23 [ 671.665037][ T9549] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 671.896119][ T9549] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 672.667778][ T9549] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 673.098553][ T9549] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 673.433770][ T9766] ubi31: attaching mtd0 [ 673.468098][ T9766] ubi31: scanning is finished [ 674.332090][ T9766] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 674.481988][ T9407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 674.741345][ T9407] 8021q: adding VLAN 0 to HW filter on device team0 [ 674.825818][ T9086] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.826114][ T9086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 674.952505][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.952652][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 676.516577][ T9549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 676.699989][ T9549] 8021q: adding VLAN 0 to HW filter on device team0 [ 676.764621][ T1108] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.765046][ T1108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 676.801067][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.807912][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 679.286427][ T9549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 680.707354][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 680.726337][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 680.739721][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 680.878039][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 680.897971][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 682.065960][ T9813] lo speed is unknown, defaulting to 1000 [ 682.091841][ T9813] lo speed is unknown, defaulting to 1000 [ 683.048588][ T5155] Bluetooth: hci5: command tx timeout [ 683.768652][ T9851] ubi31: attaching mtd0 [ 683.803765][ T9851] ubi31: scanning is finished [ 684.385514][ T9851] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 684.385543][ T9851] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 684.385562][ T9851] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 684.385579][ T9851] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 684.385596][ T9851] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 684.385613][ T9851] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 684.385631][ T9851] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1240933764 [ 684.385652][ T9851] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 684.395681][ T9858] ubi31: background thread "ubi_bgt31d" started, PID 9858 [ 685.127952][ T5155] Bluetooth: hci5: command tx timeout [ 685.767887][ C1] vkms_vblank_simulate: vblank timer overrun [ 685.955070][ C1] vkms_vblank_simulate: vblank timer overrun [ 686.532057][ C1] vkms_vblank_simulate: vblank timer overrun [ 687.208321][ T5155] Bluetooth: hci5: command tx timeout [ 687.894423][ C1] vkms_vblank_simulate: vblank timer overrun [ 688.158028][ T9888] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input12 [ 688.586841][ C1] vkms_vblank_simulate: vblank timer overrun [ 688.976924][ T9549] veth0_vlan: entered promiscuous mode [ 689.288863][ T5155] Bluetooth: hci5: command tx timeout [ 689.299873][ T9549] veth1_vlan: entered promiscuous mode [ 689.913335][ T9900] netlink: 12 bytes leftover after parsing attributes in process `syz.2.968'. [ 689.994064][ T9813] chnl_net:caif_netlink_parms(): no params data found [ 691.046023][ T9917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.971'. [ 691.173639][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.176119][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.930118][ C1] vkms_vblank_simulate: vblank timer overrun [ 692.119060][ C1] vkms_vblank_simulate: vblank timer overrun [ 692.664260][ C1] vkms_vblank_simulate: vblank timer overrun [ 693.089124][ T983] bridge_slave_1: left allmulticast mode [ 693.089160][ T983] bridge_slave_1: left promiscuous mode [ 693.089486][ T983] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.105792][ T5155] Bluetooth: hci3: unexpected event for opcode 0x0413 [ 693.242968][ T983] bridge_slave_0: left allmulticast mode [ 693.243005][ T983] bridge_slave_0: left promiscuous mode [ 693.243299][ T983] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.713459][ T9938] netlink: 8 bytes leftover after parsing attributes in process `syz.2.976'. [ 693.713484][ T9938] netlink: 8 bytes leftover after parsing attributes in process `syz.2.976'. [ 694.160732][ C1] vkms_vblank_simulate: vblank timer overrun [ 702.406072][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 702.440130][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 702.469330][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 702.491960][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 702.495506][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 702.898153][ T9982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.989'. [ 702.898174][ T9982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.989'. [ 702.993826][ T983] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 703.308788][ T983] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 703.482736][ T983] bond0 (unregistering): Released all slaves [ 704.570885][ T5155] Bluetooth: hci1: command tx timeout [ 705.008984][ T9992] program syz.3.991 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 705.240629][ T9994] netlink: 'syz.2.993': attribute type 10 has an invalid length. [ 705.546361][ T9813] bridge0: port 1(bridge_slave_0) entered blocking state [ 705.546519][ T9813] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.546745][ T9813] bridge_slave_0: entered allmulticast mode [ 705.589364][ T9813] bridge_slave_0: entered promiscuous mode [ 705.634967][ T9813] bridge0: port 2(bridge_slave_1) entered blocking state [ 705.635125][ T9813] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.635348][ T9813] bridge_slave_1: entered allmulticast mode [ 705.691169][ T9813] bridge_slave_1: entered promiscuous mode [ 705.957310][ T983] hsr_slave_0: left promiscuous mode [ 706.015191][ T983] hsr_slave_1: left promiscuous mode [ 706.016138][ T983] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 706.280357][ T983] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 707.152066][ T5155] Bluetooth: hci1: command tx timeout [ 707.283764][T10004] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 707.284034][T10004] block device autoloading is deprecated and will be removed. [ 709.510308][ T5155] Bluetooth: hci1: command tx timeout [ 710.348846][ T983] team0 (unregistering): Port device team_slave_1 removed [ 710.519126][ T983] team0 (unregistering): Port device team_slave_0 removed [ 711.528641][ T5155] Bluetooth: hci1: command tx timeout [ 713.110787][ T9813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 713.147865][ T9974] lo speed is unknown, defaulting to 1000 [ 713.151895][ T9813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 713.152470][ T9974] lo speed is unknown, defaulting to 1000 [ 714.142924][ T9813] team0: Port device team_slave_0 added [ 714.842250][ T9813] team0: Port device team_slave_1 added [ 715.284572][T10061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1007'. [ 715.284599][T10061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1007'. [ 715.674923][T10050] syz.4.1004 (10050): drop_caches: 2 [ 715.761376][ T9813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 715.761395][ T9813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 715.761424][ T9813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 715.819437][ T9813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 715.819454][ T9813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 715.819484][ T9813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 716.146787][T10071] netlink: 'syz.3.1008': attribute type 10 has an invalid length. [ 716.306408][T10071] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 716.504582][ T9813] hsr_slave_0: entered promiscuous mode [ 716.506001][ T9813] hsr_slave_1: entered promiscuous mode [ 716.506975][ T9813] debugfs: 'hsr0' already exists in 'hsr' [ 716.507000][ T9813] Cannot create hsr debugfs directory [ 720.017921][ T5838] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 720.194306][ T5838] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 720.194348][ T5838] usb 4-1: can't read configurations, error -71 [ 720.826246][T10112] rtc_cmos 00:00: Alarms can be up to one day in the future [ 720.827349][T10112] rtc_cmos 00:00: Alarms can be up to one day in the future [ 720.844484][T10110] netlink: 'syz.2.1020': attribute type 10 has an invalid length. [ 720.981885][T10110] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 721.103155][ T49] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 721.274301][ T49] usb 5-1: unable to get BOS descriptor or descriptor too short [ 721.285791][ T49] usb 5-1: config 63 has an invalid interface number: 66 but max is 0 [ 721.285898][ T49] usb 5-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 721.285996][ T49] usb 5-1: config 63 has no interface number 0 [ 721.286307][ T49] usb 5-1: config 63 interface 66 has no altsetting 0 [ 721.305654][ T49] usb 5-1: language id specifier not provided by device, defaulting to English [ 721.748223][ T49] usb 5-1: New USB device found, idVendor=174f, idProduct=8a31, bcdDevice=39.f4 [ 721.748256][ T49] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.748278][ T49] usb 5-1: SerialNumber: ₯⬒᥋녽썶ᇎ귀금괢Г瞣ㄭ [ 722.024889][T10112] binder: binder_mmap: 10105 200000ffb000-200000ffd000 bad vm_flags failed -1 [ 723.617615][ T9974] chnl_net:caif_netlink_parms(): no params data found [ 723.889021][ T31] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 724.055020][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 724.078782][ T31] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 724.078887][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.078911][ T31] usb 3-1: Product: syz [ 724.078929][ T31] usb 3-1: Manufacturer: syz [ 724.078947][ T31] usb 3-1: SerialNumber: syz [ 724.119132][ T31] usb 3-1: config 0 descriptor?? [ 725.060062][T10143] binder: 10127:10143 ioctl c0306201 0 returned -14 [ 726.918099][ T49] uvcvideo 5-1:63.66: probe with driver uvcvideo failed with error -22 [ 727.158485][ T31] usb 3-1: USB disconnect, device number 35 [ 727.260731][T10154] team0: left promiscuous mode [ 727.260771][T10154] team_slave_0: left promiscuous mode [ 727.262026][T10154] team_slave_1: left promiscuous mode [ 727.506410][ T49] usb 5-1: USB disconnect, device number 28 [ 728.127405][ T9974] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.127545][ T9974] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.143463][ T9974] bridge_slave_0: entered allmulticast mode [ 728.169003][ T9974] bridge_slave_0: entered promiscuous mode [ 728.328835][ T9974] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.328991][ T9974] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.329244][ T9974] bridge_slave_1: entered allmulticast mode [ 728.335382][ T9974] bridge_slave_1: entered promiscuous mode [ 729.293461][ T9974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 729.701445][ C1] vkms_vblank_simulate: vblank timer overrun [ 729.774279][ T9974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 729.929427][T10172] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 729.952472][T10182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1030'. [ 729.952503][T10182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1030'. [ 730.029953][ T983] bridge_slave_1: left allmulticast mode [ 730.029988][ T983] bridge_slave_1: left promiscuous mode [ 730.030282][ T983] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.153954][ T983] bridge_slave_0: left allmulticast mode [ 730.153991][ T983] bridge_slave_0: left promiscuous mode [ 730.154293][ T983] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.406382][ C1] vkms_vblank_simulate: vblank timer overrun [ 730.662412][ C1] vkms_vblank_simulate: vblank timer overrun [ 731.166079][ C1] vkms_vblank_simulate: vblank timer overrun [ 733.657431][ C1] vkms_vblank_simulate: vblank timer overrun [ 734.594361][T10210] rtc_cmos 00:00: Alarms can be up to one day in the future [ 734.595437][T10210] rtc_cmos 00:00: Alarms can be up to one day in the future [ 735.117782][ T31] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 735.330436][ T31] usb 5-1: unable to get BOS descriptor or descriptor too short [ 735.331738][ T31] usb 5-1: config 63 has an invalid interface number: 66 but max is 0 [ 735.331764][ T31] usb 5-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 735.331785][ T31] usb 5-1: config 63 has no interface number 0 [ 735.331824][ T31] usb 5-1: config 63 interface 66 has no altsetting 0 [ 735.332461][ T31] usb 5-1: language id specifier not provided by device, defaulting to English [ 735.390732][ T31] usb 5-1: New USB device found, idVendor=174f, idProduct=8a31, bcdDevice=39.f4 [ 735.390764][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.390785][ T31] usb 5-1: SerialNumber: ₯⬒᥋녽썶ᇎ귀금괢Г瞣ㄭ [ 735.608037][T10209] binder: binder_mmap: 10197 200000ffb000-200000ffd000 bad vm_flags failed -1 [ 736.815277][ T31] uvcvideo 5-1:63.66: probe with driver uvcvideo failed with error -22 [ 737.106743][ T31] usb 5-1: USB disconnect, device number 29 [ 738.349855][ T983] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 738.415442][ T983] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 738.454677][ T983] bond0 (unregistering): Released all slaves [ 738.660674][T10223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1041'. [ 738.660701][T10223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1041'. [ 739.350017][ T9974] team0: Port device team_slave_0 added [ 739.693754][ T9974] team0: Port device team_slave_1 added [ 739.803192][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 739.824626][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 739.825991][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 739.827263][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 739.852174][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 741.187874][ T983] hsr_slave_0: left promiscuous mode [ 741.209998][ T983] hsr_slave_1: left promiscuous mode [ 741.211008][ T983] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 741.548968][ T983] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 742.465706][ T5155] Bluetooth: hci2: command tx timeout [ 742.496875][ T983] veth1_vlan: left promiscuous mode [ 742.497056][ T983] veth0_vlan: left promiscuous mode [ 744.488286][ T5155] Bluetooth: hci2: command tx timeout [ 744.504725][ T983] team0 (unregistering): Port device team_slave_1 removed [ 745.828721][ T983] team0 (unregistering): Port device team_slave_0 removed [ 746.446889][T10255] rtc_cmos 00:00: Alarms can be up to one day in the future [ 746.447950][T10255] rtc_cmos 00:00: Alarms can be up to one day in the future [ 746.727953][ T49] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 746.880987][ T49] usb 5-1: unable to get BOS descriptor or descriptor too short [ 746.882753][ T49] usb 5-1: config 63 has an invalid interface number: 66 but max is 0 [ 746.882782][ T49] usb 5-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 746.882804][ T49] usb 5-1: config 63 has no interface number 0 [ 746.882842][ T49] usb 5-1: config 63 interface 66 has no altsetting 0 [ 746.883707][ T49] usb 5-1: language id specifier not provided by device, defaulting to English [ 746.942733][ T49] usb 5-1: New USB device found, idVendor=174f, idProduct=8a31, bcdDevice=39.f4 [ 746.942765][ T49] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.942788][ T49] usb 5-1: SerialNumber: ₯⬒᥋녽썶ᇎ귀금괢Г瞣ㄭ [ 747.086823][ T5155] Bluetooth: hci2: command tx timeout [ 747.197934][T10254] binder: binder_mmap: 10252 200000ffb000-200000ffd000 bad vm_flags failed -1 [ 749.027971][ T49] uvcvideo 5-1:63.66: probe with driver uvcvideo failed with error -22 [ 749.031722][ T49] usb 5-1: USB disconnect, device number 30 [ 749.127947][ T5155] Bluetooth: hci2: command tx timeout [ 752.319892][T10270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1052'. [ 752.319922][T10270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1052'. [ 752.341661][ T9974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 752.341685][ T9974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 752.341730][ T9974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 752.364300][ T9974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 752.364323][ T9974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 752.364358][ T9974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 752.494444][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.494575][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 757.437397][ T9974] hsr_slave_0: entered promiscuous mode [ 757.490977][ T9974] hsr_slave_1: entered promiscuous mode [ 757.492063][ T9974] debugfs: 'hsr0' already exists in 'hsr' [ 757.492091][ T9974] Cannot create hsr debugfs directory [ 757.591265][T10229] lo speed is unknown, defaulting to 1000 [ 758.598611][T10283] netlink: zone id is out of range [ 758.636863][T10229] lo speed is unknown, defaulting to 1000 [ 759.058715][T10283] netlink: set zone limit has 4 unknown bytes [ 759.905957][ C0] vkms_vblank_simulate: vblank timer overrun [ 760.119580][ C0] vkms_vblank_simulate: vblank timer overrun [ 760.325786][ C0] vkms_vblank_simulate: vblank timer overrun [ 760.499085][T10290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 761.403904][ C0] vkms_vblank_simulate: vblank timer overrun [ 762.150343][ C0] vkms_vblank_simulate: vblank timer overrun [ 762.441927][ C0] vkms_vblank_simulate: vblank timer overrun [ 762.624637][ C0] vkms_vblank_simulate: vblank timer overrun [ 762.816303][T10317] vivid-006: disconnect [ 763.501819][T10309] vivid-006: reconnect [ 763.805160][ C0] vkms_vblank_simulate: vblank timer overrun [ 764.742111][ T983] bridge_slave_1: left allmulticast mode [ 764.742150][ T983] bridge_slave_1: left promiscuous mode [ 764.742446][ T983] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.043802][ T983] bridge_slave_0: left allmulticast mode [ 765.043843][ T983] bridge_slave_0: left promiscuous mode [ 765.044168][ T983] bridge0: port 1(bridge_slave_0) entered disabled state [ 766.562671][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 766.598124][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 766.601829][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 766.606116][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 766.609019][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 766.892699][T10342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1065'. [ 766.892720][T10342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1065'. [ 768.729535][ T5155] Bluetooth: hci1: command tx timeout [ 769.138714][ T983] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 771.196752][ T5155] Bluetooth: hci1: command tx timeout [ 771.945700][T10362] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 771.990417][T10362] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 772.108541][ T983] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 772.500182][ C0] vkms_vblank_simulate: vblank timer overrun [ 773.134569][ C0] vkms_vblank_simulate: vblank timer overrun [ 773.208118][ T5155] Bluetooth: hci1: command tx timeout [ 773.894721][ C0] vkms_vblank_simulate: vblank timer overrun [ 773.951893][ T983] bond0 (unregistering): Released all slaves [ 774.252282][ C0] vkms_vblank_simulate: vblank timer overrun [ 775.267519][ C0] vkms_vblank_simulate: vblank timer overrun [ 775.287992][ T5155] Bluetooth: hci1: command tx timeout [ 775.589585][ C0] vkms_vblank_simulate: vblank timer overrun [ 775.779261][ C0] vkms_vblank_simulate: vblank timer overrun [ 777.823450][T10229] chnl_net:caif_netlink_parms(): no params data found [ 778.968152][ T983] hsr_slave_0: left promiscuous mode [ 779.063457][ T983] hsr_slave_1: left promiscuous mode [ 779.064512][ T983] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 779.157978][ T983] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 783.034847][ C0] vkms_vblank_simulate: vblank timer overrun [ 783.134050][ C0] vkms_vblank_simulate: vblank timer overrun [ 783.225222][ C0] vkms_vblank_simulate: vblank timer overrun [ 783.349124][ C0] vkms_vblank_simulate: vblank timer overrun [ 784.007004][ C0] vkms_vblank_simulate: vblank timer overrun [ 784.133440][ C0] vkms_vblank_simulate: vblank timer overrun [ 784.249811][ C0] vkms_vblank_simulate: vblank timer overrun [ 785.020235][T10423] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 785.020264][T10423] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 785.134840][ C0] vkms_vblank_simulate: vblank timer overrun [ 785.189097][T10423] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 785.189126][T10423] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 785.274228][T10423] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 785.274256][T10423] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 785.329972][T10423] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 785.330100][T10423] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 785.468788][ C0] vkms_vblank_simulate: vblank timer overrun [ 785.470957][T10423] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 785.470982][T10423] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 785.542161][ C0] vkms_vblank_simulate: vblank timer overrun [ 785.754829][ T983] team0 (unregistering): Port device team_slave_1 removed [ 785.845862][ C0] vkms_vblank_simulate: vblank timer overrun [ 785.983802][ T983] team0 (unregistering): Port device team_slave_0 removed [ 786.501083][ C0] vkms_vblank_simulate: vblank timer overrun [ 787.094349][T10335] lo speed is unknown, defaulting to 1000 [ 787.120115][ C0] vkms_vblank_simulate: vblank timer overrun [ 787.165382][T10335] lo speed is unknown, defaulting to 1000 [ 788.325602][T10432] netlink: 'syz.3.1085': attribute type 10 has an invalid length. [ 788.468598][T10432] team0: entered promiscuous mode [ 788.468625][T10432] team_slave_0: entered promiscuous mode [ 788.468805][T10432] team_slave_1: entered promiscuous mode [ 788.773817][T10229] bridge0: port 1(bridge_slave_0) entered blocking state [ 788.774088][T10229] bridge0: port 1(bridge_slave_0) entered disabled state [ 788.774341][T10229] bridge_slave_0: entered allmulticast mode [ 788.820723][T10229] bridge_slave_0: entered promiscuous mode [ 788.882676][T10229] bridge0: port 2(bridge_slave_1) entered blocking state [ 788.882840][T10229] bridge0: port 2(bridge_slave_1) entered disabled state [ 788.883087][T10229] bridge_slave_1: entered allmulticast mode [ 788.886621][T10229] bridge_slave_1: entered promiscuous mode [ 791.869775][T10229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 791.906211][T10229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 793.140221][T10229] team0: Port device team_slave_0 added [ 793.171893][T10229] team0: Port device team_slave_1 added [ 793.663148][ C1] vkms_vblank_simulate: vblank timer overrun [ 793.718383][ C1] vkms_vblank_simulate: vblank timer overrun [ 793.880030][ C1] vkms_vblank_simulate: vblank timer overrun [ 794.836009][ C1] vkms_vblank_simulate: vblank timer overrun [ 795.285613][ C1] vkms_vblank_simulate: vblank timer overrun [ 795.626492][ C1] vkms_vblank_simulate: vblank timer overrun [ 795.819449][ C1] vkms_vblank_simulate: vblank timer overrun [ 796.058366][ C1] vkms_vblank_simulate: vblank timer overrun [ 796.320538][ C1] vkms_vblank_simulate: vblank timer overrun [ 796.590581][T10229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 796.590600][T10229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 796.590628][T10229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 796.699097][T10229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 796.699113][T10229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 796.699139][T10229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 796.948929][ C1] vkms_vblank_simulate: vblank timer overrun [ 797.304412][ C1] vkms_vblank_simulate: vblank timer overrun [ 798.379597][ C1] vkms_vblank_simulate: vblank timer overrun [ 798.439434][ C1] vkms_vblank_simulate: vblank timer overrun [ 798.776237][ C1] vkms_vblank_simulate: vblank timer overrun [ 799.523801][ C1] vkms_vblank_simulate: vblank timer overrun [ 799.830402][ T983] bridge_slave_1: left allmulticast mode [ 799.838059][ T983] bridge_slave_1: left promiscuous mode [ 799.838365][ T983] bridge0: port 2(bridge_slave_1) entered disabled state [ 799.939580][ T983] bridge_slave_0: left allmulticast mode [ 799.939619][ T983] bridge_slave_0: left promiscuous mode [ 799.948101][ T983] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.481288][ C1] vkms_vblank_simulate: vblank timer overrun [ 800.539358][ C1] vkms_vblank_simulate: vblank timer overrun [ 801.031423][ C1] vkms_vblank_simulate: vblank timer overrun [ 803.026016][T10499] netlink: 'syz.3.1096': attribute type 10 has an invalid length. [ 803.923389][ T983] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 804.018612][ T983] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 804.108696][ T983] bond0 (unregistering): Released all slaves [ 804.294235][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 804.311768][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 804.313198][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 804.315169][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 804.316026][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 804.462733][ T5155] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 804.468668][ T5155] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 804.515641][ T5155] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 804.533507][ T5155] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 804.538433][ T5155] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 805.720994][ T983] hsr_slave_0: left promiscuous mode [ 805.760794][ T983] hsr_slave_1: left promiscuous mode [ 805.761961][ T983] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 805.838945][ T983] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 806.648528][ T5155] Bluetooth: hci2: command tx timeout [ 808.778213][ T5155] Bluetooth: hci2: command tx timeout [ 810.603646][T10558] netlink: 'syz.3.1110': attribute type 10 has an invalid length. [ 810.904513][T10561] dlm: non-version read from control device 36 [ 811.023852][ T5155] Bluetooth: hci2: command tx timeout [ 811.160768][ T983] team0 (unregistering): Port device team_slave_1 removed [ 811.194486][T10567] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 813.067225][ T5155] Bluetooth: hci2: command tx timeout [ 813.106236][ T983] team0 (unregistering): Port device team_slave_0 removed [ 813.946599][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.946779][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.038582][T10582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1119'. [ 814.340428][T10335] chnl_net:caif_netlink_parms(): no params data found [ 814.440343][T10582] bridge0: port 2(bridge_slave_1) entered disabled state [ 814.440797][T10582] bridge0: port 1(bridge_slave_0) entered disabled state [ 817.525996][T10520] lo speed is unknown, defaulting to 1000 [ 817.593581][T10520] lo speed is unknown, defaulting to 1000 [ 819.599963][T10631] netlink: 'syz.4.1128': attribute type 10 has an invalid length. [ 820.814461][T10335] bridge0: port 1(bridge_slave_0) entered blocking state [ 820.814615][T10335] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.815593][T10335] bridge_slave_0: entered allmulticast mode [ 820.931364][T10335] bridge_slave_0: entered promiscuous mode [ 821.315607][T10335] bridge0: port 2(bridge_slave_1) entered blocking state [ 821.315770][T10335] bridge0: port 2(bridge_slave_1) entered disabled state [ 821.316020][T10335] bridge_slave_1: entered allmulticast mode [ 821.362507][T10335] bridge_slave_1: entered promiscuous mode [ 829.882467][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 829.937393][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 829.948612][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 829.954552][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 829.962694][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 830.155534][ T983] bridge_slave_1: left allmulticast mode [ 830.155572][ T983] bridge_slave_1: left promiscuous mode [ 830.155868][ T983] bridge0: port 2(bridge_slave_1) entered disabled state [ 830.265937][ T983] bridge_slave_0: left allmulticast mode [ 830.265977][ T983] bridge_slave_0: left promiscuous mode [ 830.266291][ T983] bridge0: port 1(bridge_slave_0) entered disabled state [ 832.110196][ T5839] Bluetooth: hci1: command tx timeout [ 832.293959][ T983] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 832.418637][ T983] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 832.545604][ T983] bond0 (unregistering): Released all slaves [ 834.197867][ T5839] Bluetooth: hci1: command tx timeout [ 834.326419][T10520] chnl_net:caif_netlink_parms(): no params data found [ 836.119498][ T983] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 836.278773][ T5839] Bluetooth: hci1: command tx timeout [ 836.771224][ T983] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 837.408926][ T983] team0 (unregistering): Port device team_slave_1 removed [ 837.436547][T10741] comedi comedi3: pcl726: I/O port conflict (0x40000101,16) [ 837.724374][ T983] team0 (unregistering): Port device team_slave_0 removed [ 838.390547][ T5839] Bluetooth: hci1: command tx timeout [ 841.135987][T10769] Invalid logical block size (16384) [ 841.272748][T10768] genirq: Flags mismatch irq 4. 00202000 (das16m1) vs. 00202080 (ttyS0) [ 841.680525][T10773] bridge0: port 2(bridge_slave_1) entered blocking state [ 841.680800][T10773] bridge0: port 2(bridge_slave_1) entered listening state [ 841.681972][T10773] bridge0: port 1(bridge_slave_0) entered blocking state [ 841.682161][T10773] bridge0: port 1(bridge_slave_0) entered listening state [ 841.683168][T10773] bridge0: entered allmulticast mode [ 841.695534][T10689] lo speed is unknown, defaulting to 1000 [ 841.865250][T10689] lo speed is unknown, defaulting to 1000 [ 843.671752][T10775] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 843.964332][T10520] bridge0: port 1(bridge_slave_0) entered blocking state [ 843.964485][T10520] bridge0: port 1(bridge_slave_0) entered disabled state [ 843.964928][T10520] bridge_slave_0: entered allmulticast mode [ 844.004789][T10520] bridge_slave_0: entered promiscuous mode [ 844.111312][T10520] bridge0: port 2(bridge_slave_1) entered blocking state [ 844.111471][T10520] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.111722][T10520] bridge_slave_1: entered allmulticast mode [ 844.137449][T10520] bridge_slave_1: entered promiscuous mode [ 844.285778][ C1] vkms_vblank_simulate: vblank timer overrun [ 844.801795][ C1] vkms_vblank_simulate: vblank timer overrun [ 844.823194][T10520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 844.849584][T10520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 845.072478][T10808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1164'. [ 845.072507][T10808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1164'. [ 845.491109][T10520] team0: Port device team_slave_0 added [ 846.478490][T10520] team0: Port device team_slave_1 added [ 847.162722][ C1] vkms_vblank_simulate: vblank timer overrun [ 848.147020][ C1] vkms_vblank_simulate: vblank timer overrun [ 848.578635][T10520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 848.578655][T10520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 848.578688][T10520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 848.915944][T10520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 848.915963][T10520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 848.915993][T10520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 851.096076][T10843] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input13 [ 851.112360][T10833] warning: `syz.3.1170' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 852.270270][ T983] bridge_slave_1: left allmulticast mode [ 852.270306][ T983] bridge_slave_1: left promiscuous mode [ 852.270620][ T983] bridge0: port 2(bridge_slave_1) entered disabled state [ 852.772044][ T983] bridge_slave_0: left allmulticast mode [ 852.772080][ T983] bridge_slave_0: left promiscuous mode [ 852.772408][ T983] bridge0: port 1(bridge_slave_0) entered disabled state [ 853.260287][ T983] bond0 (unregistering): Released all slaves [ 854.304516][T10520] hsr_slave_0: entered promiscuous mode [ 854.310028][T10520] hsr_slave_1: entered promiscuous mode [ 854.311286][T10520] debugfs: 'hsr0' already exists in 'hsr' [ 854.311317][T10520] Cannot create hsr debugfs directory [ 854.494700][T10871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1178'. [ 854.494730][T10871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1178'. [ 855.009172][T10689] chnl_net:caif_netlink_parms(): no params data found [ 855.085813][T10882] ubi: mtd0 is already attached to ubi31 [ 855.733834][ C1] vkms_vblank_simulate: vblank timer overrun [ 856.134988][ C1] vkms_vblank_simulate: vblank timer overrun [ 856.322683][ C1] vkms_vblank_simulate: vblank timer overrun [ 856.726225][ C1] vkms_vblank_simulate: vblank timer overrun [ 857.533536][ C1] vkms_vblank_simulate: vblank timer overrun [ 857.745795][T10916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1190'. [ 857.745825][T10916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1190'. [ 858.993363][ C1] ------------[ cut here ]------------ [ 858.993392][ C1] WARNING: CPU: 1 PID: 29 at ./include/linux/seqlock.h:221 est_timer+0x6dc/0x9f0 [ 858.993443][ C1] Modules linked in: [ 858.993497][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 858.993526][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 858.993550][ C1] RIP: 0010:est_timer+0x6dc/0x9f0 [ 858.993579][ C1] Code: ff c7 42 80 3c 23 00 74 08 4c 89 f7 e8 ed 22 41 f9 4d 89 3e 42 80 3c 23 00 0f 85 54 ff ff ff e9 57 ff ff ff e8 d5 e7 e1 f8 90 <0f> 0b 90 e9 63 fd ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 65 fa ff ff [ 858.993600][ C1] RSP: 0018:ffffc90000a3f7a0 EFLAGS: 00010246 [ 858.993632][ C1] RAX: ffffffff88dc772b RBX: 0000000000000001 RCX: ffff88801cac9dc0 [ 858.993650][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 858.993665][ C1] RBP: ffffc90000a3f8b0 R08: 0000000000000000 R09: 0000000000000100 [ 858.993680][ C1] R10: dffffc0000000000 R11: fffff52000147f0a R12: 0000000000000008 [ 858.993698][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888029147068 [ 858.993713][ C1] FS: 0000000000000000(0000) GS:ffff8881269c1000(0000) knlGS:0000000000000000 [ 858.993732][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 858.993748][ C1] CR2: 000020000002b000 CR3: 0000000049212000 CR4: 00000000003526f0 [ 858.993768][ C1] Call Trace: [ 858.993778][ C1] [ 858.993808][ C1] ? __pfx_est_timer+0x10/0x10 [ 858.993850][ C1] call_timer_fn+0x17e/0x5f0 [ 858.993960][ C1] ? __pfx_est_timer+0x10/0x10 [ 858.993991][ C1] ? call_timer_fn+0xbe/0x5f0 [ 858.994026][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 858.994075][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 858.994111][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 858.994142][ C1] ? __pfx_est_timer+0x10/0x10 [ 858.994173][ C1] __run_timer_base+0x648/0x970 [ 858.994225][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 858.994279][ C1] run_timer_softirq+0xb7/0x180 [ 858.994314][ C1] handle_softirqs+0x22f/0x710 [ 858.994361][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 858.994411][ C1] run_ktimerd+0xcf/0x190 [ 858.994457][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 858.994488][ C1] ? schedule+0x91/0x360 [ 858.994528][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 858.994556][ C1] smpboot_thread_fn+0x53f/0xa60 [ 858.994588][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 858.994632][ C1] kthread+0x70e/0x8a0 [ 858.994686][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 858.994718][ C1] ? __pfx_kthread+0x10/0x10 [ 858.994764][ C1] ? __pfx_kthread+0x10/0x10 [ 858.994805][ C1] ret_from_fork+0x3f9/0x770 [ 858.994842][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 858.994882][ C1] ? __switch_to_asm+0x39/0x70 [ 858.994905][ C1] ? __switch_to_asm+0x33/0x70 [ 858.994928][ C1] ? __pfx_kthread+0x10/0x10 [ 858.994965][ C1] ret_from_fork_asm+0x1a/0x30 [ 858.995011][ C1] [ 858.995037][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 858.995056][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 858.995094][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 858.995110][ C1] Call Trace: [ 858.995120][ C1] [ 858.995129][ C1] dump_stack_lvl+0x99/0x250 [ 858.995167][ C1] ? __asan_memcpy+0x40/0x70 [ 858.995194][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 858.995231][ C1] ? __pfx__printk+0x10/0x10 [ 858.995275][ C1] vpanic+0x281/0x750 [ 858.995311][ C1] ? __pfx__printk+0x10/0x10 [ 858.995336][ C1] ? __pfx_vpanic+0x10/0x10 [ 858.995372][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 858.995421][ C1] panic+0xb9/0xc0 [ 858.995455][ C1] ? __pfx_panic+0x10/0x10 [ 858.995510][ C1] __warn+0x31b/0x4b0 [ 858.995552][ C1] ? est_timer+0x6dc/0x9f0 [ 858.995584][ C1] ? est_timer+0x6dc/0x9f0 [ 858.995609][ C1] report_bug+0x2be/0x4f0 [ 858.995640][ C1] ? est_timer+0x6dc/0x9f0 [ 858.995673][ C1] ? est_timer+0x6dc/0x9f0 [ 858.995700][ C1] ? est_timer+0x6de/0x9f0 [ 858.995726][ C1] handle_bug+0x84/0x160 [ 858.995765][ C1] exc_invalid_op+0x1a/0x50 [ 858.995802][ C1] asm_exc_invalid_op+0x1a/0x20 [ 858.995826][ C1] RIP: 0010:est_timer+0x6dc/0x9f0 [ 858.995854][ C1] Code: ff c7 42 80 3c 23 00 74 08 4c 89 f7 e8 ed 22 41 f9 4d 89 3e 42 80 3c 23 00 0f 85 54 ff ff ff e9 57 ff ff ff e8 d5 e7 e1 f8 90 <0f> 0b 90 e9 63 fd ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 65 fa ff ff [ 858.995877][ C1] RSP: 0018:ffffc90000a3f7a0 EFLAGS: 00010246 [ 858.995899][ C1] RAX: ffffffff88dc772b RBX: 0000000000000001 RCX: ffff88801cac9dc0 [ 858.995918][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 858.995934][ C1] RBP: ffffc90000a3f8b0 R08: 0000000000000000 R09: 0000000000000100 [ 858.995950][ C1] R10: dffffc0000000000 R11: fffff52000147f0a R12: 0000000000000008 [ 858.995967][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888029147068 [ 858.995994][ C1] ? est_timer+0x6db/0x9f0 [ 858.996046][ C1] ? __pfx_est_timer+0x10/0x10 [ 858.996088][ C1] call_timer_fn+0x17e/0x5f0 [ 858.996122][ C1] ? __pfx_est_timer+0x10/0x10 [ 858.996148][ C1] ? call_timer_fn+0xbe/0x5f0 [ 858.996180][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 858.996225][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 858.996257][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 858.996287][ C1] ? __pfx_est_timer+0x10/0x10 [ 858.996316][ C1] __run_timer_base+0x648/0x970 [ 858.996366][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 858.996417][ C1] run_timer_softirq+0xb7/0x180 [ 858.996449][ C1] handle_softirqs+0x22f/0x710 [ 858.996491][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 858.996536][ C1] run_ktimerd+0xcf/0x190 [ 858.996648][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 858.996695][ C1] ? schedule+0x91/0x360 [ 858.996737][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 858.996768][ C1] smpboot_thread_fn+0x53f/0xa60 [ 858.996802][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 858.996843][ C1] kthread+0x70e/0x8a0 [ 858.996890][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 858.996926][ C1] ? __pfx_kthread+0x10/0x10 [ 858.996964][ C1] ? __pfx_kthread+0x10/0x10 [ 858.997004][ C1] ret_from_fork+0x3f9/0x770 [ 858.997045][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 858.997088][ C1] ? __switch_to_asm+0x39/0x70 [ 858.997113][ C1] ? __switch_to_asm+0x33/0x70 [ 858.997136][ C1] ? __pfx_kthread+0x10/0x10 [ 858.997177][ C1] ret_from_fork_asm+0x1a/0x30 [ 858.997222][ C1] [ 858.997470][ C1] Kernel Offset: disabled