last executing test programs: 15m17.837366834s ago: executing program 32 (id=328): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, 0x0) r1 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000001f80)={0x0, 0x0, 0x0}, 0x0) 14m50.848678238s ago: executing program 33 (id=380): epoll_create(0x400) pipe(&(0x7f0000000280)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001240)={r2, &(0x7f00000001c0), 0x0, 0x1}, 0x20) close(0x3) shutdown(0xffffffffffffffff, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) epoll_create1(0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) socket$nl_generic(0x10, 0x3, 0x10) 10m27.399666595s ago: executing program 4 (id=872): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x400000000010, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b', @ANYRES32=r0], 0x24}}, 0x0) 10m27.302685708s ago: executing program 4 (id=874): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0x22, 0x0, &(0x7f0000000040)) 10m27.0842307s ago: executing program 4 (id=875): syz_usb_connect(0x0, 0xb6, &(0x7f0000000280)=ANY=[@ANYBLOB="12010003cf7e8f4040201f7200f2010203010902a400018104004f0904870605a97a37020a24010a0b06020102092403050703020496062404029cfe09050b004000800000072501af82a7ce1932dc70000464040507250103"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1555555555555709}) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) close_range(r0, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r1, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2c, &(0x7f00000001c0)=0x800, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000050000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x5, 0x8, 0x4fd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) syz_open_dev$midi(0x0, 0x3, 0x208c0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 10m25.07381413s ago: executing program 4 (id=882): r0 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) read$alg(r2, &(0x7f0000000500)=""/4096, 0x1000) splice(r0, 0x0, r3, 0x0, 0x400000008000f28, 0x0) splice(r2, 0x0, r1, 0x0, 0x1, 0xc) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000031401"], 0x100}, 0x1, 0x0, 0x0, 0x4040024}, 0x0) 10m24.585304458s ago: executing program 4 (id=883): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x400000000010, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b', @ANYRES32=r0], 0x24}}, 0x0) 10m24.537690611s ago: executing program 4 (id=884): r0 = socket$kcm(0x10, 0x2, 0x10) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) select(0x40, &(0x7f0000000000)={0xff, 0x6, 0x1fee, 0xdad8, 0x47e5, 0x10000, 0xe4f, 0xffffffff}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x2710}) 10m12.436635831s ago: executing program 34 (id=871): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffb, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x6, 0xd21, 0x101, 0x6, 0x5, 0xbd, 0x100, 0x4}}}}]}, 0x58}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x74, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0xe, 0x2, 0x6, 0x7, 0x8, {0x1, 0x1, 0x0, 0x101, 0x45}, {0xf, 0x2, 0x8, 0x5, 0xff81, 0xfffff3e5}, 0xfffffff7, 0xfffffffa, 0x92}}]}]}}]}, 0x74}}, 0x8080) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r10, 0x15}, 0x80, &(0x7f0000000500)=[{&(0x7f00000002c0)="f2", 0x14}], 0x1}, 0x44) 10m9.941603299s ago: executing program 35 (id=881): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x1}, 0x1c) socketpair(0x1, 0x3, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendto$packet(r2, 0x0, 0x0, 0x4004800, &(0x7f0000000080)={0x11, 0xf6, r3, 0x1, 0x7f, 0x6, @local}, 0x14) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r1, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44004}, 0x40000) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvfrom(r4, &(0x7f0000000080)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, 0x0, 0x0) 10m9.366093085s ago: executing program 36 (id=884): r0 = socket$kcm(0x10, 0x2, 0x10) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) select(0x40, &(0x7f0000000000)={0xff, 0x6, 0x1fee, 0xdad8, 0x47e5, 0x10000, 0xe4f, 0xffffffff}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x2710}) 8m58.865383457s ago: executing program 8 (id=965): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000003c0)=@dstopts={0x11}, 0x8) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) 8m57.719255664s ago: executing program 7 (id=968): sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x1) r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0x3, &(0x7f0000000680)=@framed={{0x18, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13}, 0x94) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="08002600940900000800b700c5000000"], 0x2c}}, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="001b"]) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) chdir(&(0x7f00000003c0)='./bus\x00') setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lgetxattr(0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) 8m56.73236184s ago: executing program 7 (id=972): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020080ffffff180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 8m56.457133247s ago: executing program 8 (id=973): socket$netlink(0x10, 0x3, 0x6) socket$packet(0x11, 0x3, 0x300) r0 = openat$full(0xffffff9c, &(0x7f00000003c0), 0x8002, 0x0) membarrier(0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) io_uring_setup(0x30ab, &(0x7f00000007c0)={0x0, 0x768, 0x1000, 0x1, 0x14c, 0x0, r0}) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x88a01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) getrlimit(0x6, &(0x7f00000001c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) writev(r2, &(0x7f0000000840)=[{0x0}], 0x1) mount(&(0x7f0000000480)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000004c0)='cramfs\x00', 0x208000, 0x0) syz_io_uring_setup(0x3075, &(0x7f0000000300)={0x0, 0x235d, 0x10100, 0x1, 0x400002d8, 0x0, r1}, 0x0, &(0x7f0000000200), &(0x7f0000000000)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x19, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 8m55.729439686s ago: executing program 8 (id=974): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, 0x0, 0x4) 8m55.575294061s ago: executing program 7 (id=975): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140ff"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x66, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x30, 0x3a, 0xff, @rand_addr=' \x01\x00', @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x6, 0x6, ':yE', 0x2, 0x3a, 0x0, @dev={0xfe, 0x80, '\x00', 0x1e}, @mcast2}}}}}}}, 0x0) 8m55.206272031s ago: executing program 8 (id=976): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000440)=0x135, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 8m54.952204483s ago: executing program 7 (id=977): sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r3, @ANYBLOB="05"], 0x6c}, 0x1, 0x0, 0x0, 0x14044085}, 0x20008040) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r2, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0, 0x0, 0x3e}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 8m53.337093754s ago: executing program 5 (id=980): unshare(0x22020400) r0 = socket(0x2d, 0x2, 0x0) bind$xdp(r0, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0x400003e}, 0x10) 8m53.150809864s ago: executing program 5 (id=981): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000400)="63eced8e460100000001acf12a04", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8m52.629977106s ago: executing program 5 (id=983): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1d, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000300000000000000fe02001085000000b900000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB='.\x00\x00\x00\x00\x00', @ANYBLOB], 0x20) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x2000, {0x0, 0x0, 0x74, r2, {0xd, 0x10}, {0xfff8, 0xb}, {0xfff2, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 8m52.504354791s ago: executing program 7 (id=985): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @local}, 0x800001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "fdffffffffffffff"}, 0x28) sendmsg$inet(r0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10"], 0x10}, 0x40) 8m51.654746456s ago: executing program 7 (id=988): r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x203, 0xfffffffe, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x4890) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000440)='\'', 0x1}], 0x1}, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 8m50.565466602s ago: executing program 5 (id=990): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40003}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x24004010) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000001c00)={&(0x7f0000000000)={0xa, 0xa, 0x7, @mcast2}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="671723d7c6012c", 0x7}, {0x0}, {&(0x7f0000000200)='\x00\x00\x00\x00\x00', 0x5}, {&(0x7f0000000840)="418a", 0x2}], 0x4}, 0x20008b88) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r4, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r3], 0x38}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c300000000033e00008510000006000000", @ANYRES32, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) gettid() socket(0x10, 0x803, 0x0) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000580)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x8, 0xa, 0x8001, 0x500, 0x6, 0x44000004}) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x6, &(0x7f00000001c0)=""/59, &(0x7f0000000200)=0x3b) 8m50.165155384s ago: executing program 9 (id=992): socket$netlink(0x10, 0x3, 0x6) socket$packet(0x11, 0x3, 0x300) r0 = openat$full(0xffffff9c, &(0x7f00000003c0), 0x8002, 0x0) membarrier(0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) io_uring_setup(0x30ab, &(0x7f00000007c0)={0x0, 0x768, 0x1000, 0x1, 0x14c, 0x0, r0}) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x88a01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) getrlimit(0x6, &(0x7f00000001c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) mount(&(0x7f0000000480)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000004c0)='cramfs\x00', 0x208000, 0x0) syz_io_uring_setup(0x3075, &(0x7f0000000300)={0x0, 0x235d, 0x10100, 0x1, 0x400002d8, 0x0, r1}, 0x0, &(0x7f0000000200), &(0x7f0000000000)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000"], 0x0, 0x34}, 0x28) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x19, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 8m50.077479908s ago: executing program 5 (id=993): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000400)="63eced8e460100000001acf12a04", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8m49.073670399s ago: executing program 5 (id=994): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x93}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r4, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[], 0x0) 8m47.845243862s ago: executing program 9 (id=995): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000240)="54ae1f6d19560625baa794a469ce", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 8m47.373395002s ago: executing program 9 (id=996): timer_create(0x1, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_clone3(&(0x7f00000001c0)={0x2322280, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) 8m47.035269986s ago: executing program 6 (id=997): sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x1) r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0x3, &(0x7f0000000680)=@framed={{0x18, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13}, 0x94) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="08002600940900000800b700c5000000"], 0x2c}}, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="001b"]) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) chdir(&(0x7f00000003c0)='./bus\x00') setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lgetxattr(0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) 8m46.969290504s ago: executing program 9 (id=998): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8090}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) 8m46.634505072s ago: executing program 9 (id=999): syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x8400, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0xfffffffffffffdb1, &(0x7f0000000280)=0x6) syz_open_dev$sg(0x0, 0x10000000000000, 0x802) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, 0x0) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f0000000280)={0x20, 0x0, &(0x7f00000002c0)}) ioctl$IOMMU_DESTROY$hwpt(r0, 0x3b80, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x10) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, 0x0, 0x1, {0x3, 0xff, 0x3}}, 0x18) ioctl$IOMMU_GET_HW_INFO(r0, 0x3b8a, &(0x7f0000000380)={0x24, 0x0, r3, 0x1c, &(0x7f00000003c0)=""/28}) ioctl$IOMMU_DESTROY$stdev(0xffffffffffffffff, 0x3b80, &(0x7f0000000400)={0x8, r2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) 8m46.527016917s ago: executing program 6 (id=1000): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x7400}, 0x20004800) 8m45.711022111s ago: executing program 9 (id=1001): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b0f, &(0x7f0000000040)={'wlan1\x00', @random="0100"}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a300000edff2b000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000078000000060a010400000000000000000500000008000b400000000050000480240001800b00010074756e6e656c000014000280080001400000000108000240000000092800018008000100667764001c000280080002400000000a080003400000008a08000140000000090900010073797a30"], 0xec}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) getsockname$packet(r8, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@delchain={0x48, 0x2c, 0xf31, 0x70bd27, 0x2000, {0x0, 0x0, 0x0, r9, {0x8}, {0xfff2, 0xffff}, {0xffff, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0x5}}, @TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f00000000c0)) writev(r3, &(0x7f0000000100)=[{&(0x7f00000001c0)="1515daf6667a1fb84e4e91e2e85d1debef12fa821399c0b30d3f3c46de80230b46282e4fecf74f43abd846e7da49546d69b9a328aee3b71a97d42150393b97dd9847951245bbf9429fa11b904e7e97ba0963fb6ab672d597269ec4e7", 0x5c}, {&(0x7f0000000280)="fcaa4615", 0x4}], 0x14) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="d80000001800811a0681f783db4cb9040a07080006007c09e8fc55a10a0015000600142603600e120800020081000401a8007e38a3fd8705df0100fcc0ffff000000fd035c0461c1d67f6f94007134cf6efb8000b607a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4e95367a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9eebee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4b43a3d93000000000000000000", 0xd8}], 0x1}, 0x0) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_RX(r10, 0x11a, 0x2, &(0x7f0000000040)=@gcm_128={{0x303}, "c65a41964e58e138", "5e474273303ad1b5ec8bc11908cc61a9", "56ab2656", "f5ca8d182fb95f43"}, 0x28) 8m45.593333542s ago: executing program 6 (id=1002): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000004680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48081}, 0x4) 8m45.509427293s ago: executing program 6 (id=1003): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x40003}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x24004010) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000001c00)={&(0x7f0000000000)={0xa, 0xa, 0x7, @mcast2}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="671723d7c6012c", 0x7}, {0x0}, {&(0x7f0000000200)='\x00\x00\x00\x00\x00', 0x5}, {&(0x7f0000000840)="418a", 0x2}], 0x4}, 0x20008b88) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r4, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r3], 0x38}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c300000000033e00008510000006000000", @ANYRES32, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) gettid() socket(0x10, 0x803, 0x0) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000580)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x8, 0xa, 0x8001, 0x500, 0x6, 0x44000004}) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x6, &(0x7f00000001c0)=""/59, &(0x7f0000000200)=0x3b) 8m45.297703478s ago: executing program 6 (id=1004): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000400)="63eced8e460100000001acf12a04", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8m45.037112181s ago: executing program 6 (id=1005): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x17, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x7}, 0x94) socket$unix(0x1, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000880)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000186dd609c040000280601fe800000000000", @ANYRES32=0x41424344], 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@gettclass={0x24, 0x2a, 0x129, 0xffffffff, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x6, 0x2}, {0x3, 0x2}, {0x4, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x2404c051}, 0x40004) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f00000002c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_256={{0x304}, "1eedc78106a0e743", "eba9f36855546014e24d7e30b50b3fde57008c99592d00", "8e8ec580", "3c3c23fff2050cf6"}, 0x38) setsockopt$inet6_tcp_TLS_RX(r1, 0x11a, 0x2, &(0x7f00000001c0)=@gcm_256={{0x304}, "bc24b7b807c98ce9", "31a2b0442f46f8e44f744b5ad8325093b37c20f65fc5aff1047a18b223494668", "325afc03", "f3a54a87f309dfb9"}, 0x38) sendto$inet6(r1, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) close(r1) 8m44.121128248s ago: executing program 8 (id=1006): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000240)="54ae1f6d19560625baa794a469ce", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 8m43.770844077s ago: executing program 8 (id=1007): shmctl$IPC_INFO(0x0, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x1c, 0x4, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x90) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="000000e8ff07000014000300200000000000000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2], 0x4c}}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x17c, r3, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_NODE={0x150, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "5cff716319b736ff66942102aed3c6b2f2cb7b36e7051e9d4ba03fbbea87b13efec424"}}, @TIPC_NLA_NODE_ID={0xa3, 0x3, "b76df59808e831093a63971361802b86d9b0c6057d5d651653b3aaf8add613dfc3e6b858af6368272c46822865519120cbbfe0ff052e048d4b4a5e8bd51539fea6baa08b23768886be178ee35cedb476afe94a0642cfb028b3870c6f382e439152a7552862a0674b1fd9f59f1ee1abf5e0fc1d13b5092651a7a2d672bba12a6c65cccbe3d2c2c6a010c6c9a9f6c38aaaba5e4d7bf17553ef7c2b88d297ed95"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "52ddc6b823ef28ecf0f5cc1913961ca5a7d7222f6aedab98720a5a4aa7918345754ec5"}}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x10}, 0x10) 8m36.476396464s ago: executing program 37 (id=988): r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x203, 0xfffffffe, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x4890) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000440)='\'', 0x1}], 0x1}, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 8m33.984399922s ago: executing program 38 (id=994): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x93}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r4, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[], 0x0) 8m30.454687839s ago: executing program 39 (id=1001): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b0f, &(0x7f0000000040)={'wlan1\x00', @random="0100"}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a300000edff2b000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000078000000060a010400000000000000000500000008000b400000000050000480240001800b00010074756e6e656c000014000280080001400000000108000240000000092800018008000100667764001c000280080002400000000a080003400000008a08000140000000090900010073797a30"], 0xec}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) getsockname$packet(r8, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@delchain={0x48, 0x2c, 0xf31, 0x70bd27, 0x2000, {0x0, 0x0, 0x0, r9, {0x8}, {0xfff2, 0xffff}, {0xffff, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0x5}}, @TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f00000000c0)) writev(r3, &(0x7f0000000100)=[{&(0x7f00000001c0)="1515daf6667a1fb84e4e91e2e85d1debef12fa821399c0b30d3f3c46de80230b46282e4fecf74f43abd846e7da49546d69b9a328aee3b71a97d42150393b97dd9847951245bbf9429fa11b904e7e97ba0963fb6ab672d597269ec4e7", 0x5c}, {&(0x7f0000000280)="fcaa4615", 0x4}], 0x14) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="d80000001800811a0681f783db4cb9040a07080006007c09e8fc55a10a0015000600142603600e120800020081000401a8007e38a3fd8705df0100fcc0ffff000000fd035c0461c1d67f6f94007134cf6efb8000b607a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4e95367a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9eebee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4b43a3d93000000000000000000", 0xd8}], 0x1}, 0x0) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_RX(r10, 0x11a, 0x2, &(0x7f0000000040)=@gcm_128={{0x303}, "c65a41964e58e138", "5e474273303ad1b5ec8bc11908cc61a9", "56ab2656", "f5ca8d182fb95f43"}, 0x28) 8m29.945784501s ago: executing program 40 (id=1005): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x17, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x7}, 0x94) socket$unix(0x1, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000880)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000186dd609c040000280601fe800000000000", @ANYRES32=0x41424344], 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@gettclass={0x24, 0x2a, 0x129, 0xffffffff, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x6, 0x2}, {0x3, 0x2}, {0x4, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x2404c051}, 0x40004) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f00000002c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_256={{0x304}, "1eedc78106a0e743", "eba9f36855546014e24d7e30b50b3fde57008c99592d00", "8e8ec580", "3c3c23fff2050cf6"}, 0x38) setsockopt$inet6_tcp_TLS_RX(r1, 0x11a, 0x2, &(0x7f00000001c0)=@gcm_256={{0x304}, "bc24b7b807c98ce9", "31a2b0442f46f8e44f744b5ad8325093b37c20f65fc5aff1047a18b223494668", "325afc03", "f3a54a87f309dfb9"}, 0x38) sendto$inet6(r1, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) close(r1) 8m28.483896842s ago: executing program 41 (id=1007): shmctl$IPC_INFO(0x0, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x1c, 0x4, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x90) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="000000e8ff07000014000300200000000000000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2], 0x4c}}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x17c, r3, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_NODE={0x150, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "5cff716319b736ff66942102aed3c6b2f2cb7b36e7051e9d4ba03fbbea87b13efec424"}}, @TIPC_NLA_NODE_ID={0xa3, 0x3, "b76df59808e831093a63971361802b86d9b0c6057d5d651653b3aaf8add613dfc3e6b858af6368272c46822865519120cbbfe0ff052e048d4b4a5e8bd51539fea6baa08b23768886be178ee35cedb476afe94a0642cfb028b3870c6f382e439152a7552862a0674b1fd9f59f1ee1abf5e0fc1d13b5092651a7a2d672bba12a6c65cccbe3d2c2c6a010c6c9a9f6c38aaaba5e4d7bf17553ef7c2b88d297ed95"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "52ddc6b823ef28ecf0f5cc1913961ca5a7d7222f6aedab98720a5a4aa7918345754ec5"}}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x10}, 0x10) 6m11.150137219s ago: executing program 1 (id=1095): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000400100004112200a4e2000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2000cc0, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, &(0x7f0000000040)=""/30, &(0x7f0000000280), &(0x7f00000005c0)="c773aa3e7bc3bbe41a98b8257f9237aa3ab924022d0e5b238b0e09e722b7848fc0d3afbc1929d9a8d10ff886f2230385f832359aeb48bbb47650dd8f9b5635", 0x1, r0}, 0x38) 6m10.516584302s ago: executing program 1 (id=1098): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r0, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x34, 0xd, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="140100002000010000000000"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 6m10.05541176s ago: executing program 1 (id=1100): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="120000000b0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000040), 0x0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0, &(0x7f00000009c0)="464827d838e85e4c50500c19"}, 0x20) 6m9.611591141s ago: executing program 1 (id=1102): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$unix(r1, &(0x7f0000007dc0), 0x0, 0x20008041) accept4$unix(r1, &(0x7f0000000300)=@abs, &(0x7f0000000380)=0x6e, 0x800) 6m9.237000864s ago: executing program 1 (id=1104): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xb20a000, 0x0, 0x3, 0x1, 0x0, 0x89d3}, &(0x7f00000000c0)=0x20) fsopen(&(0x7f0000000000)='cifs\x00', 0x0) sendmmsg(r4, &(0x7f00000006c0)=[{{&(0x7f0000000300)=@tipc=@name={0x1e, 0x2, 0x3, {{0x43, 0x2}, 0x3}}, 0x80, &(0x7f0000000680)=[{&(0x7f00000005c0)="2f470393424f97a2095bd4a885c45028bcbd73e8c95699799bc6b60dcd40d154344c6ed96cb626a6e702a09260912818a1b653b55d9b68b2040aed69ab0cacc20ad8923b7fa15236bd6c266ae2594b70af7aba72b485bc9d32b60573c67aff678b67b33812514e8af4133928e50e849f15cc4e9cbec0f009ebd903bf52de6840d6b9afd1e69d7b0532d9fe67363b7554e6ab98c082a6f060cd699aa5628ea9c4340902774c58fe76f85a67c652f215d3f824151bc6e161", 0xb7}], 0x1}}], 0x1, 0x0) 6m0.245505629s ago: executing program 1 (id=1121): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x40, r2, 0x1, 0x70bd25, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x52}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}]]}, 0x40}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000140), 0x7c, 0x20000) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f00000001c0)={0x1, 0x0, &(0x7f0000000180)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r4, 0xc04064aa, &(0x7f0000000200)={&(0x7f0000000040)=[0x0, 0x0], 0x0, r5, 0x0, '\x00', 0x2}) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r6 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$inet_sctp(0x2, 0x1, 0x84) r9 = socket$netlink(0x10, 0x3, 0x15) bind$netlink(r9, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe}, 0xc) bind$netlink(r9, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe}, 0xc) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r10, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) setsockopt$inet_sctp_SCTP_MAXSEG(r8, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={r11, 0x7d45}, 0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f00000002c0)={r11, 0x5}, &(0x7f0000000300)=0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) syz_open_dev$sndpcmp(&(0x7f0000000240), 0x8, 0x4481) 5m44.753960672s ago: executing program 42 (id=1121): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x40, r2, 0x1, 0x70bd25, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x52}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}]]}, 0x40}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000140), 0x7c, 0x20000) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f00000001c0)={0x1, 0x0, &(0x7f0000000180)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r4, 0xc04064aa, &(0x7f0000000200)={&(0x7f0000000040)=[0x0, 0x0], 0x0, r5, 0x0, '\x00', 0x2}) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r6 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$inet_sctp(0x2, 0x1, 0x84) r9 = socket$netlink(0x10, 0x3, 0x15) bind$netlink(r9, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe}, 0xc) bind$netlink(r9, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe}, 0xc) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r10, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) setsockopt$inet_sctp_SCTP_MAXSEG(r8, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={r11, 0x7d45}, 0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f00000002c0)={r11, 0x5}, &(0x7f0000000300)=0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) syz_open_dev$sndpcmp(&(0x7f0000000240), 0x8, 0x4481) 9.711290783s ago: executing program 0 (id=1866): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020205d0af8ff00000000bea100000000000007010000f8ffffffb702000008000000b7030000ffee000085000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x11, 0x4, 0x4, 0xc}, 0x50) write$nci(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB='b\x00'], 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000001800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x25, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9.613126619s ago: executing program 0 (id=1867): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000001000000000000000000008500000075"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 9.46989293s ago: executing program 0 (id=1868): r0 = io_uring_setup(0x68f4, &(0x7f0000000440)={0x0, 0x7ae8, 0x8, 0x3, 0x1000166}) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 9.424208687s ago: executing program 0 (id=1869): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xb20a000, 0x0, 0x3, 0x1, 0x0, 0x89d3}, &(0x7f00000000c0)=0x20) fsopen(&(0x7f0000000000)='cifs\x00', 0x0) sendmmsg(r4, &(0x7f00000006c0)=[{{&(0x7f0000000300)=@tipc=@name={0x1e, 0x2, 0x3, {{0x43, 0x2}, 0x3}}, 0x80, &(0x7f0000000680)=[{0x0}], 0x1}}], 0x1, 0x0) 8.183869402s ago: executing program 0 (id=1871): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x2000, 0x8000, 0x0, 0x4, {{0x5, 0x4, 0x0, 0x12, 0x14, 0x20, 0x4000, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x41, 0x0}, @dev={0xac, 0x14, 0x14, 0x21}}}}}) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0xa, '\x00', r1, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x101005) writev(r2, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f00000003c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCSREPORT(r7, 0x81044812, 0x0) r8 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00']) r9 = getpgid(0x0) syz_pidfd_open(r9, 0x0) 8.00256898s ago: executing program 3 (id=1872): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r2, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000c61000/0x4000)=nil, 0x4000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000140)={&(0x7f0000000000)=""/64, 0x1128000, 0x1000, 0x4}, 0x20) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r5, &(0x7f0000000100)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) r6 = socket$alg(0x26, 0x5, 0x0) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, 0x0) bind$alg(r6, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="0800d907", 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 7.011133563s ago: executing program 2 (id=1874): socket$netlink(0x10, 0x3, 0x6) socket$packet(0x11, 0x3, 0x300) r0 = openat$full(0xffffff9c, &(0x7f00000003c0), 0x8002, 0x0) membarrier(0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) io_uring_setup(0x30ab, &(0x7f00000007c0)={0x0, 0x768, 0x1000, 0x1, 0x14c, 0x0, r0}) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x88a01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) getrlimit(0x6, &(0x7f00000001c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) mount(&(0x7f0000000480)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000004c0)='cramfs\x00', 0x208000, 0x0) syz_io_uring_setup(0x3075, &(0x7f0000000300)={0x0, 0x235d, 0x10100, 0x1, 0x400002d8, 0x0, r1}, 0x0, &(0x7f0000000200), &(0x7f0000000000)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 4.933717979s ago: executing program 0 (id=1875): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x20, 0xffffffff}, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r2, &(0x7f0000000800)={'syz0\x00', {0x2, 0x10, 0x2, 0x4}, 0xf, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x298, 0x1, 0x0, 0x0, 0x0, 0x2000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x80, 0x8000, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x200, 0x7, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x1fd, 0x0, 0x2, 0x0, 0x3, 0x5, 0xfffffffd, 0x4000000, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x4000000, 0x0, 0x1, 0x4, 0x1000, 0x80, 0x0, 0x200, 0x0, 0xffffffff, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x20, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x4, 0x0, 0x6, 0x1, 0x0, 0xbda6, 0xe, 0x0, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x20, 0x0, 0x0, 0x0, 0x204, 0x0, 0x0, 0x0, 0xfff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8], [0x40000000, 0x0, 0x74e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0xbd, 0x0, 0xff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x80000020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5cb9, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4]}, 0x45c) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r4, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0x4}) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x4202) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000001400090a0000000000000000021f4800", @ANYRES32=r7, @ANYBLOB="08000200e4d4c21e080008004c06"], 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r7}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d80)=[{{&(0x7f0000000100)={0xa, 0xfffd, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000040)="cc41", 0x2}], 0x1}}], 0x1, 0x0) shutdown(0xffffffffffffffff, 0x1) ioctl$UI_DEV_CREATE(r2, 0x5501) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket(0x28, 0x1, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) 4.325317551s ago: executing program 2 (id=1876): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000001000000000000000000008500000075"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000010000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 3.938259039s ago: executing program 2 (id=1877): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020205d0af8ff00000000bea100000000000007010000f8ffffffb702000008000000b7030000ffee000085000000720000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x11, 0x4, 0x4, 0xc}, 0x50) write$nci(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB='b\x00'], 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000001800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x25, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.787111185s ago: executing program 2 (id=1878): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="20030000", @ANYRES16=0x0, @ANYBLOB="000425bd7000fcdbdf256000000008", @ANYRES32=0x0, @ANYBLOB="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"], 0x320}, 0x1, 0x0, 0x0, 0x40004}, 0x80) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000400)=0x134, 0x4) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@can={{}, 0x0, 0x3, 0x0, 0x0, "00000010000300"}, 0x10}, 0x1, 0x0, 0x0, 0x40810}, 0x20000000) read(r0, &(0x7f0000002340)=""/232, 0xe8) 3.729777222s ago: executing program 3 (id=1879): socket$netlink(0x10, 0x3, 0x6) socket$packet(0x11, 0x3, 0x300) r0 = openat$full(0xffffff9c, &(0x7f00000003c0), 0x8002, 0x0) membarrier(0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) io_uring_setup(0x30ab, &(0x7f00000007c0)={0x0, 0x768, 0x1000, 0x1, 0x14c, 0x0, r0}) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x88a01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) getrlimit(0x6, &(0x7f00000001c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) mount(&(0x7f0000000480)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000004c0)='cramfs\x00', 0x208000, 0x0) syz_io_uring_setup(0x3075, &(0x7f0000000300)={0x0, 0x235d, 0x10100, 0x1, 0x400002d8, 0x0, r1}, 0x0, &(0x7f0000000200), &(0x7f0000000000)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x19, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 1.954443954s ago: executing program 3 (id=1880): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x40003}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x24004010) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000001c00)={&(0x7f0000000000)={0xa, 0xa, 0x7, @mcast2}, 0x1c, &(0x7f00000004c0)}, 0x20008b88) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r4, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r3], 0x38}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c300000000033e00008510000006000000", @ANYRES32, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) gettid() r7 = socket(0x10, 0x803, 0x0) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000240)={0x0, @empty, @empty}, &(0x7f0000000540)=0xc) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000580)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x8, 0xa, 0x8001, 0x500, 0x6, 0x44000004, r8}) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000600)="c2a6048781ebb12c6beb8a8ba708715c515e627ef6ce9a5120322e38a7e44179c903908e5f006b2913f39fe228937c2fd33092f4dc7a014a069ac6093dc33f98541612383a700702a1b9cf8da59b3d2b950d256de8c497b690016f779ec715f9fc3e959d592288997dbe541092634927b7fdb72a4a05f7cdde3442e2e23d4d74504ac34b865257069096ed769d9bd6", 0x8f) 1.799397233s ago: executing program 2 (id=1881): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r0, &(0x7f0000000480)=[{0x0}], 0x1, 0x1, 0xd) 1.614029954s ago: executing program 3 (id=1882): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xf, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xcd, 0x0, &(0x7f0000000300)="b994bc444b9893b04bf30981fd1a626f7389e32a4a7941c2515284700e44a97c20a00f058be0da09f79b19459fe87a2d1c33b64e62a91efc244b5f1e5f2751a8a71426c42e2819529c68f0cb08d7abcb7517687c402e46f41741ed42cf78d4bb059cdd4cb3b8a6688aec470f364827b2fe1b2f117ffed12a16621878284769347464b039230762fe3606c1f2ad62d657d2280e735362c779b4e7ecf49f3f0f2ba3394636a7f2eb647d3fac6fe0e1360ed0c4e9bba1c89cd8bc9f415189d695f401f4993481e036bf159b1ff68c", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x1b) 1.429435422s ago: executing program 2 (id=1883): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x2000, 0x8000, 0x0, 0x4, {{0x5, 0x4, 0x0, 0x12, 0x14, 0x20, 0x4000, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x41, 0x0}, @dev={0xac, 0x14, 0x14, 0x21}}}}}) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0xa, '\x00', r1, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x101005) writev(r2, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f00000003c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCSREPORT(r7, 0x81044812, 0x0) r8 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00']) r9 = getpgid(0x0) syz_pidfd_open(r9, 0x0) 1.429100131s ago: executing program 3 (id=1884): socket$netlink(0x10, 0x3, 0x6) socket$packet(0x11, 0x3, 0x300) r0 = openat$full(0xffffff9c, &(0x7f00000003c0), 0x8002, 0x0) membarrier(0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) io_uring_setup(0x30ab, &(0x7f00000007c0)={0x0, 0x768, 0x1000, 0x1, 0x14c, 0x0, r0}) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x88a01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) getrlimit(0x6, &(0x7f00000001c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) mount(&(0x7f0000000480)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000004c0)='cramfs\x00', 0x208000, 0x0) syz_io_uring_setup(0x3075, &(0x7f0000000300)={0x0, 0x235d, 0x10100, 0x1, 0x400002d8, 0x0, r1}, 0x0, &(0x7f0000000200), &(0x7f0000000000)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 0s ago: executing program 3 (id=1885): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000001000000000000000000008500000075"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000010000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) kernel console output (not intermixed with test programs): ated IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 760.042980][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 760.367047][T11285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 760.514409][T11285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 760.702636][ T835] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.709627][ T835] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.711689][ T835] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.711752][ T835] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.735519][T11307] veth0_vlan: entered promiscuous mode [ 761.048644][T11307] veth1_vlan: entered promiscuous mode [ 762.461305][T11307] veth0_macvtap: entered promiscuous mode [ 762.491448][ T164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 762.491470][ T164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 762.684008][T11307] veth1_macvtap: entered promiscuous mode [ 764.691214][T10446] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 764.691237][T10446] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 764.865460][T11307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 765.049066][T11307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 765.154367][ T3267] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.154676][ T3267] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.174707][ T3267] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.177637][ T3267] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.781311][T12059] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 768.238725][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 768.238750][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 768.974586][T10576] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 768.974606][T10576] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 769.375715][T10133] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 769.525782][T10133] usb 1-1: Using ep0 maxpacket: 8 [ 769.554106][T10133] usb 1-1: unable to get BOS descriptor or descriptor too short [ 769.570463][T10133] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 90, changing to 7 [ 769.660795][T10133] usb 1-1: New USB device found, idVendor=1235, idProduct=800c, bcdDevice= 0.40 [ 769.660830][T10133] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.660851][T10133] usb 1-1: Product: syz [ 769.660866][T10133] usb 1-1: Manufacturer: syz [ 769.660881][T10133] usb 1-1: SerialNumber: syz [ 769.821449][T11289] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 769.886560][T11289] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 769.938717][T11289] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 770.025574][T11289] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 770.050522][T11289] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 771.064207][T12124] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 772.411029][ T5627] Bluetooth: hci5: command tx timeout [ 772.815698][T12129] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1062'. [ 774.220771][T12129] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 774.342295][T10133] usb 1-1: 1:1: invalid format type 0x1005 is detected, processed as PCM [ 774.487803][T11289] Bluetooth: hci5: command tx timeout [ 774.525838][T10133] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 774.784871][ T5619] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 775.172906][T12129] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 775.967110][ T5619] hid-generic 0000:0000:0000.0001: hidraw0: HID vff.ff Device [syz1] on syz0 [ 776.565997][T11289] Bluetooth: hci5: command tx timeout [ 777.057763][T12165] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 777.932110][T10133] usb 1-1: USB disconnect, device number 10 [ 778.648360][T11289] Bluetooth: hci5: command tx timeout [ 780.017745][ T5625] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 780.175172][ T5625] usb 3-1: Using ep0 maxpacket: 8 [ 780.178598][ T5625] usb 3-1: unable to get BOS descriptor or descriptor too short [ 780.310736][ T5625] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 780.310776][ T5625] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 780.310805][ T5625] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 780.310829][ T5625] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 780.310853][ T5625] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 780.310875][ T5625] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 780.310902][ T5625] usb 3-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x8F, skipping [ 780.700369][ T5625] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 780.700404][ T5625] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.700544][ T5625] usb 3-1: Product: syz [ 780.700562][ T5625] usb 3-1: Manufacturer: syz [ 780.700577][ T5625] usb 3-1: SerialNumber: syz [ 781.161497][ T155] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 783.197014][ T5625] usb 3-1: config 0 descriptor?? [ 783.304945][ T5625] usb 3-1: can't set config #0, error -71 [ 783.373649][ T5625] usb 3-1: USB disconnect, device number 6 [ 783.660032][T12213] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 783.723910][T12215] udevd[12215]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 786.625598][T11867] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 786.640508][ T155] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.692858][T12257] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 786.775712][T11867] usb 1-1: Using ep0 maxpacket: 16 [ 786.778660][T11867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 786.778692][T11867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 786.778710][T11867] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 786.778750][T11867] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 786.778775][T11867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.875948][T11867] usb 1-1: config 0 descriptor?? [ 787.042337][T12261] netlink: 'syz.1.1098': attribute type 1 has an invalid length. [ 787.042361][T12261] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1098'. [ 787.800077][ T155] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.986740][T11867] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 787.986782][T11867] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 787.986809][T11867] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 787.986834][T11867] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 787.986860][T11867] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 788.071835][T11867] input: HID 0955:7214 Haptics as /devices/virtual/input/input11 [ 790.020015][ T155] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.674985][T12303] netlink: 'syz.3.1109': attribute type 1 has an invalid length. [ 790.675009][T12303] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1109'. [ 790.766131][T11867] shield 0003:0955:7214.0002: Registered Thunderstrike controller [ 790.801533][T11867] shield 0003:0955:7214.0002: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 791.224326][T11867] usb 1-1: USB disconnect, device number 11 [ 791.307451][ T897] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 791.307545][ T897] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 791.307620][ T897] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 791.307694][ T897] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 793.798808][T12330] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 797.422362][T12355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1122'. [ 797.585400][ T32] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 798.735304][ T32] usb 2-1: Using ep0 maxpacket: 16 [ 798.739675][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 798.739711][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 798.739755][ T32] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 798.739797][ T32] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 798.739820][ T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.840221][ T32] usb 2-1: config 0 descriptor?? [ 799.404581][T12373] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 799.613336][ T32] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 799.613374][ T32] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 799.613397][ T32] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 799.613421][ T32] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 799.613600][ T32] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 799.663546][ T32] input: HID 0955:7214 Haptics as /devices/virtual/input/input12 [ 800.517750][T11929] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 800.682013][T11929] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 800.682072][T11929] usb 4-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 800.682098][T11929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.767378][ T155] bridge_slave_1: left allmulticast mode [ 800.767419][ T155] bridge_slave_1: left promiscuous mode [ 800.767745][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 800.810289][T11929] usb 4-1: config 0 descriptor?? [ 800.963593][ T155] bridge_slave_0: left allmulticast mode [ 800.963633][ T155] bridge_slave_0: left promiscuous mode [ 800.963937][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 801.008706][T11929] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 801.231823][T12385] netlink: 'syz.0.1131': attribute type 1 has an invalid length. [ 801.231850][T12385] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1131'. [ 804.708432][ T897] usb 4-1: USB disconnect, device number 2 [ 804.722856][ T32] shield 0003:0955:7214.0003: Registered Thunderstrike controller [ 804.723210][ T32] shield 0003:0955:7214.0003: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 804.974429][T12397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1133'. [ 805.946889][ T9993] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ESHUTDOWN [ 805.947026][ T9993] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENOENT [ 805.947131][ T9993] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENOENT [ 805.947222][ T9993] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENOENT [ 807.899706][ T32] usb 2-1: reset high-speed USB device number 7 using dummy_hcd [ 808.089112][ T32] usb 2-1: device descriptor read/64, error -32 [ 808.181498][T12418] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 808.925223][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.925333][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.023838][T12422] netlink: 'syz.3.1141': attribute type 1 has an invalid length. [ 809.023856][T12422] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1141'. [ 809.062504][ T32] usb 2-1: reset high-speed USB device number 7 using dummy_hcd [ 809.247187][ T32] usb 2-1: device descriptor read/64, error -32 [ 809.326966][ T37] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 810.459190][ T10] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 811.308326][ T10] usb 4-1: config 0 has no interfaces? [ 811.308523][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 811.308578][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.227100][ T10] usb 4-1: config 0 descriptor?? [ 812.402833][ T37] usb 1-1: unable to read config index 0 descriptor/all [ 812.412660][ T37] usb 1-1: can't read configurations, error -71 [ 812.530620][ T10] usb 4-1: USB disconnect, device number 3 [ 812.599977][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 812.656441][ T32] usb 2-1: reset high-speed USB device number 7 using dummy_hcd [ 812.719567][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 812.747419][ T32] usb 2-1: device descriptor read/8, error -32 [ 812.764537][ T155] bond0 (unregistering): Released all slaves [ 812.967526][T12109] bridge0: port 1(bridge_slave_0) entered blocking state [ 812.967800][T12109] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.968135][T12109] bridge_slave_0: entered allmulticast mode [ 812.971484][T12109] bridge_slave_0: entered promiscuous mode [ 812.995410][ T32] usb 2-1: reset high-speed USB device number 7 using dummy_hcd [ 813.284260][T12443] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1148'. [ 814.040402][ T5627] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 814.046275][ T32] usb 2-1: device descriptor read/8, error -32 [ 814.127777][ T5627] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 814.223182][ T5627] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 814.230230][ T32] raw-gadget.0 gadget.1: failed to queue suspend event [ 814.321417][ T5627] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 814.334444][ T5627] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 814.377254][T12109] bridge0: port 2(bridge_slave_1) entered blocking state [ 814.377539][T12109] bridge0: port 2(bridge_slave_1) entered disabled state [ 814.377855][T12109] bridge_slave_1: entered allmulticast mode [ 814.489614][T11929] usb 2-1: USB disconnect, device number 7 [ 814.719106][T12109] bridge_slave_1: entered promiscuous mode [ 816.645199][T11289] Bluetooth: hci4: command tx timeout [ 816.697762][T12462] netlink: 'syz.3.1153': attribute type 1 has an invalid length. [ 816.697778][T12462] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1153'. [ 816.709011][T11929] raw-gadget.0 gadget.1: failed to queue reset event [ 816.851105][T11929] raw-gadget.0 gadget.1: failed to queue resume event [ 816.915374][T11929] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 816.915656][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 816.915874][T11929] raw-gadget.0 gadget.1: failed to queue reset event [ 816.918649][T12463] /dev/nullb0: Can't open blockdev [ 816.995382][T11929] raw-gadget.0 gadget.1: failed to queue resume event [ 817.018760][T12109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 817.055256][T11929] usb 2-1: device descriptor read/64, error -32 [ 817.165535][T11929] raw-gadget.0 gadget.1: failed to queue suspend event [ 817.166067][T11929] raw-gadget.0 gadget.1: failed to queue reset event [ 817.235325][T11929] raw-gadget.0 gadget.1: failed to queue resume event [ 817.314818][T11929] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 817.315250][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 817.315449][T11929] raw-gadget.0 gadget.1: failed to queue reset event [ 817.395446][T11929] raw-gadget.0 gadget.1: failed to queue resume event [ 817.495955][T11929] usb 2-1: device descriptor read/64, error -32 [ 817.575318][T11929] raw-gadget.0 gadget.1: failed to queue suspend event [ 817.575505][T11929] usb usb2-port1: attempt power cycle [ 817.575757][T11929] raw-gadget.0 gadget.1: failed to queue disconnect event [ 817.576136][T11929] raw-gadget.0 gadget.1: failed to queue reset event [ 817.649831][T11929] raw-gadget.0 gadget.1: failed to queue resume event [ 817.677359][T11929] raw-gadget.0 gadget.1: failed to queue reset event [ 817.885422][T11929] raw-gadget.0 gadget.1: failed to queue resume event [ 817.945984][T11929] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 817.976395][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 817.976531][T11929] usb 2-1: device descriptor read/8, error -32 [ 818.096652][T11929] raw-gadget.0 gadget.1: failed to queue suspend event [ 818.097209][T11929] raw-gadget.0 gadget.1: failed to queue reset event [ 818.132355][T12109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 818.202725][T12353] raw-gadget.0 gadget.1: failed to queue disconnect event [ 818.255729][T10133] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 818.440706][T10133] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 818.440759][T10133] usb 4-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 818.440773][T10133] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.550434][T10133] usb 4-1: config 0 descriptor?? [ 818.569330][T10133] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 818.799262][T11289] Bluetooth: hci4: command tx timeout [ 818.834401][T12481] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1157'. [ 820.806060][T11289] Bluetooth: hci4: command tx timeout [ 821.730293][T12109] team0: Port device team_slave_0 added [ 821.764460][T12109] team0: Port device team_slave_1 added [ 821.985435][ T155] hsr_slave_0: left promiscuous mode [ 822.027593][ T155] hsr_slave_1: left promiscuous mode [ 822.028417][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 822.028437][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 822.033753][T12491] QAT: Device 7 not found [ 822.162016][ T5734] usb 4-1: USB disconnect, device number 4 [ 822.190312][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 822.190342][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 823.045396][T11289] Bluetooth: hci4: command tx timeout [ 823.065371][ T155] veth1_macvtap: left promiscuous mode [ 823.065454][ T155] veth0_macvtap: left promiscuous mode [ 823.065636][ T155] veth1_vlan: left promiscuous mode [ 823.065755][ T155] veth0_vlan: left promiscuous mode [ 823.131954][T12500] netlink: 'syz.3.1162': attribute type 1 has an invalid length. [ 823.131969][T12500] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1162'. [ 825.794245][T12514] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1166'. [ 826.565260][T11289] Bluetooth: hci0: command 0x0406 tx timeout [ 826.565307][T11289] Bluetooth: hci1: command 0x0406 tx timeout [ 828.042642][T12526] netlink: 'syz.0.1171': attribute type 1 has an invalid length. [ 828.042658][T12526] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1171'. [ 828.302796][ T824] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 828.348404][ T824] hid-generic 0000:0000:0000.0004: hidraw0: HID vff.ff Device [syz1] on syz0 [ 828.727516][ T155] team0 (unregistering): Port device team_slave_1 removed [ 828.821616][ T155] team0 (unregistering): Port device team_slave_0 removed [ 829.333389][T12109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 829.333408][T12109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 829.333437][T12109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 829.410254][T12109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 829.410274][T12109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 829.410305][T12109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 829.629800][T12545] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1176'. [ 831.672624][ T9672] Bluetooth: hci2: command 0x0406 tx timeout [ 832.306711][T11867] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 832.456851][T12554] fuse: Bad value for 'group_id' [ 832.456874][T12554] fuse: Bad value for 'group_id' [ 832.602044][ T9672] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 832.647380][ T9672] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 832.649570][ T9672] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 832.654449][ T9672] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 832.704877][ T9672] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 832.859311][T11867] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 832.859352][T11867] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 832.859395][T11867] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 832.859419][T11867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.049830][T12559] netlink: 'syz.2.1180': attribute type 1 has an invalid length. [ 833.049854][T12559] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1180'. [ 833.323731][T12550] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 833.544847][T11867] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 833.884562][ T5734] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 833.939359][T11867] usb 4-1: USB disconnect, device number 5 [ 834.084514][ T5734] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 834.084549][ T5734] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.084579][ T5734] usb 3-1: Product: syz [ 834.084592][ T5734] usb 3-1: Manufacturer: syz [ 834.084608][ T5734] usb 3-1: SerialNumber: syz [ 834.479720][ T5734] usb 3-1: config 0 descriptor?? [ 834.614135][ T5734] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 835.325961][ T5734] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 835.334717][ T5734] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 835.334821][ T5734] usb 3-1: media controller created [ 835.445880][ T9672] Bluetooth: hci3: command tx timeout [ 835.575692][ T5271] 8021q: adding VLAN 0 to HW filter on device eth5 [ 835.741719][ T5734] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 836.610092][ T5734] DVB: Unable to find symbol mt352_attach() [ 836.824593][ T5734] DVB: Unable to find symbol nxt6000_attach() [ 836.824612][ T5734] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 836.950532][T12609] netlink: 'syz.0.1189': attribute type 1 has an invalid length. [ 836.950554][T12609] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1189'. [ 837.212754][ T5734] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input14 [ 837.428440][ T5734] dvb-usb: schedule remote query interval to 1000 msecs. [ 837.428470][ T5734] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 837.430339][ T5734] dvb-usb: bulk message failed: -22 (7/0) [ 837.430374][ T5734] dvb-usb: bulk message failed: -22 (7/0) [ 837.449342][ T5734] usb 3-1: USB disconnect, device number 7 [ 837.525169][ T9672] Bluetooth: hci3: command tx timeout [ 839.249774][ T155] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.501091][ T5271] 8021q: adding VLAN 0 to HW filter on device eth6 [ 839.605153][ T9672] Bluetooth: hci3: command tx timeout [ 840.596087][ T5734] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 841.315404][ T824] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 841.578897][ T824] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 841.578952][ T824] usb 1-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 841.578978][ T824] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.582200][ T824] usb 1-1: config 0 descriptor?? [ 841.685519][ T9672] Bluetooth: hci3: command tx timeout [ 841.726178][ T155] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.727357][ T824] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 842.028682][T12438] bridge0: port 1(bridge_slave_0) entered blocking state [ 842.029124][T12438] bridge0: port 1(bridge_slave_0) entered disabled state [ 842.029490][T12438] bridge_slave_0: entered allmulticast mode [ 842.038494][T12438] bridge_slave_0: entered promiscuous mode [ 842.170704][T12438] bridge0: port 2(bridge_slave_1) entered blocking state [ 842.171060][T12438] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.171406][T12438] bridge_slave_1: entered allmulticast mode [ 842.214562][T12438] bridge_slave_1: entered promiscuous mode [ 843.837648][T11867] usb 1-1: USB disconnect, device number 14 [ 846.974801][ T155] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.164950][T12438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 847.843152][T12438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 848.466073][ T155] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.784697][T12438] team0: Port device team_slave_0 added [ 848.905394][T12438] team0: Port device team_slave_1 added [ 849.661618][T12727] netlink: 'syz.3.1211': attribute type 1 has an invalid length. [ 849.661634][T12727] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1211'. [ 852.087529][T12438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 852.087543][T12438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 852.087559][T12438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 852.099050][T12438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 852.099069][T12438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 852.099095][T12438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 853.189225][ T9672] Bluetooth: hci1: unexpected event for opcode 0x1009 [ 854.009418][T12438] hsr_slave_0: entered promiscuous mode [ 854.010969][T12438] hsr_slave_1: entered promiscuous mode [ 854.012148][T12438] debugfs: 'hsr0' already exists in 'hsr' [ 854.012172][T12438] Cannot create hsr debugfs directory [ 854.896523][T12553] bridge0: port 1(bridge_slave_0) entered blocking state [ 854.896965][T12553] bridge0: port 1(bridge_slave_0) entered disabled state [ 854.897332][T12553] bridge_slave_0: entered allmulticast mode [ 854.901469][T12553] bridge_slave_0: entered promiscuous mode [ 855.085341][T10168] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 855.238872][T12553] bridge0: port 2(bridge_slave_1) entered blocking state [ 855.239210][T12553] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.239578][T12553] bridge_slave_1: entered allmulticast mode [ 855.254705][T12553] bridge_slave_1: entered promiscuous mode [ 855.265321][T10168] usb 1-1: Using ep0 maxpacket: 8 [ 855.267638][T10168] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 855.267671][T10168] usb 1-1: config 0 has no interfaces? [ 855.272100][T10168] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 855.272128][T10168] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.272145][T10168] usb 1-1: Product: syz [ 855.272158][T10168] usb 1-1: Manufacturer: syz [ 855.272171][T10168] usb 1-1: SerialNumber: syz [ 855.306994][T10168] usb 1-1: config 0 descriptor?? [ 855.552858][ T155] bridge_slave_1: left allmulticast mode [ 855.552896][ T155] bridge_slave_1: left promiscuous mode [ 855.553231][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.676086][T12799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 855.677667][T12799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 855.742725][ T155] bridge_slave_0: left allmulticast mode [ 855.742764][ T155] bridge_slave_0: left promiscuous mode [ 855.743107][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 856.197306][ T155] bridge_slave_1: left allmulticast mode [ 856.197346][ T155] bridge_slave_1: left promiscuous mode [ 857.158855][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 857.438997][ T155] bridge_slave_0: left allmulticast mode [ 857.439037][ T155] bridge_slave_0: left promiscuous mode [ 857.439372][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 857.895938][ T5748] usb 1-1: USB disconnect, device number 15 [ 858.700186][ T5748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 858.959464][ T5748] hid-generic 0000:0000:0000.0005: hidraw0: HID vff.ff Device [syz1] on syz0 [ 859.656483][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 859.801358][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 859.930463][ T155] bond0 (unregistering): Released all slaves [ 860.896991][ T5734] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 861.045978][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 861.056174][ T5734] usb 3-1: Using ep0 maxpacket: 8 [ 861.062630][ T5734] usb 3-1: config 4 has an invalid interface number: 100 but max is 0 [ 861.062660][ T5734] usb 3-1: config 4 has no interface number 0 [ 861.062701][ T5734] usb 3-1: config 4 interface 100 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 861.062720][ T5734] usb 3-1: config 4 interface 100 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 861.062740][ T5734] usb 3-1: config 4 interface 100 altsetting 7 endpoint 0x4 has an invalid bInterval 251, changing to 11 [ 861.062764][ T5734] usb 3-1: config 4 interface 100 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 861.062785][ T5734] usb 3-1: config 4 interface 100 has no altsetting 0 [ 861.065555][ T5734] usb 3-1: New USB device found, idVendor=0471, idProduct=2126, bcdDevice=28.97 [ 861.065582][ T5734] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.065600][ T5734] usb 3-1: Product: á Œ [ 861.065613][ T5734] usb 3-1: Manufacturer: 欬멨敟᮶얒긙류难푵橂춗嵕餽异꡻à ã•â¨ˆá¤â¹ƒâ¡±æ¦æœ„㜼螓圿┬㉉â”î‚ꊵ䶙å‡î”Œî¢Ÿäš›ãŸƒí…•îŽ•â±¯é©ˆåžë¹®à·±ê•¥ë¶ƒá» [ 861.065632][ T5734] usb 3-1: SerialNumber: é˜â³¯ìƒ ä’­æ ¶æ—ŸÞ­ï˜„é”·æˆäž©ä­äœ„߈㞓頗﹥졻ï±â‹ãƒ‹ç…œç‰Žæ­–ê æ­ƒì–¬à§¹ï¾œà£¾ç–劊奼훫⿑é…풬ᕶéžê¡¢å»±ä¯µèŸ âœ‚á®ëŽá ‘ç䡂✵猌곢툳瓉₋綽â“븊碕ç ç£„ï¾é˜ï¸®ëƒªå´½îµã€šî·žãƒ´ê½«å¯‡ë¢—⦋℉岕댳ê«é¢µç¤ã ëš²ï£¯á¢—å±á«»é‘Œæœ‘ﳉ迾湄å᳗긡㥕ꛇ䓯亹é¯ä…忙铘ç°é¿ˆé™€â«“ﭔ࠘着ꪙꭎ䄟蔣鴂刢ꤚ [ 861.074328][T12859] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 861.116379][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 861.175202][T11929] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 861.300994][T12832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1226'. [ 861.310305][ T155] bond0 (unregistering): Released all slaves [ 861.363500][T11929] usb 4-1: Using ep0 maxpacket: 8 [ 861.382464][T11929] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 861.382484][T11929] usb 4-1: config 0 has no interfaces? [ 861.410155][T11929] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 861.410224][T11929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.410237][T11929] usb 4-1: Product: syz [ 861.410246][T11929] usb 4-1: Manufacturer: syz [ 861.410254][T11929] usb 4-1: SerialNumber: syz [ 861.495805][T11929] usb 4-1: config 0 descriptor?? [ 861.976632][T12832] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 862.618193][T12865] input: syz0 as /devices/virtual/input/input15 [ 863.584079][ T5734] usb 3-1: USB disconnect, device number 8 [ 864.181230][ T5619] usb 4-1: USB disconnect, device number 6 [ 864.414466][T12832] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 864.496830][T12864] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 864.682736][T12553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 866.904962][T12553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 867.063116][T12553] team0: Port device team_slave_0 added [ 867.239178][T12553] team0: Port device team_slave_1 added [ 868.895326][T10133] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 869.045885][T10133] usb 1-1: Using ep0 maxpacket: 8 [ 869.086297][T10133] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 869.086325][T10133] usb 1-1: config 0 has no interfaces? [ 869.114334][T10133] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 869.114367][T10133] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.114387][T10133] usb 1-1: Product: syz [ 869.114402][T10133] usb 1-1: Manufacturer: syz [ 869.114417][T10133] usb 1-1: SerialNumber: syz [ 869.120802][T12553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 869.120819][T12553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 869.120844][T12553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 869.247606][T10133] usb 1-1: config 0 descriptor?? [ 869.257174][T12553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 869.257191][T12553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 869.257215][T12553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 870.298127][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 870.335680][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.335791][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.382523][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 870.706642][ T155] hsr_slave_0: left promiscuous mode [ 870.905412][ T155] hsr_slave_1: left promiscuous mode [ 870.906351][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 870.906370][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 872.035501][ T155] veth1_macvtap: left promiscuous mode [ 872.035617][ T155] veth0_macvtap: left promiscuous mode [ 872.039021][ T155] veth1_vlan: left promiscuous mode [ 872.039274][ T155] veth0_vlan: left promiscuous mode [ 873.326686][T10133] usb 1-1: USB disconnect, device number 16 [ 873.859929][ T155] team0 (unregistering): Port device team_slave_1 removed [ 873.902885][T11288] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 873.940215][T11288] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 873.951087][T11288] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 873.953725][T11288] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 873.962854][T11288] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 874.223569][ T155] team0 (unregistering): Port device team_slave_0 removed [ 875.725818][ T155] team0 (unregistering): Port device team_slave_1 removed [ 875.776065][ T155] team0 (unregistering): Port device team_slave_0 removed [ 875.846331][T10133] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 876.028510][T10133] usb 4-1: Using ep0 maxpacket: 8 [ 876.037347][T10133] usb 4-1: unable to get BOS descriptor or descriptor too short [ 876.038963][T10133] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 876.038995][T10133] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 876.039023][T10133] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 876.039065][T10133] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 876.039090][T10133] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 876.039112][T10133] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 876.039137][T10133] usb 4-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x8F, skipping [ 876.133661][T10133] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 876.133693][T10133] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.133715][T10133] usb 4-1: Product: syz [ 876.133730][T10133] usb 4-1: Manufacturer: syz [ 876.133745][T10133] usb 4-1: SerialNumber: syz [ 876.165285][ T9672] Bluetooth: hci5: command tx timeout [ 876.186017][T10133] usb 4-1: config 0 descriptor?? [ 876.187087][T12950] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 876.187329][T12950] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 876.205163][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 876.243172][T10133] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 876.365180][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 876.392030][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 876.392061][ T10] usb 3-1: config 0 has no interfaces? [ 876.419802][ T10] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 876.419838][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.419859][ T10] usb 3-1: Product: syz [ 876.419874][ T10] usb 3-1: Manufacturer: syz [ 876.419889][ T10] usb 3-1: SerialNumber: syz [ 876.476966][ T10] usb 3-1: config 0 descriptor?? [ 876.907016][T10133] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 876.970220][T10133] usb 4-1: USB disconnect, device number 7 [ 877.170554][T12398] udevd[12398]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 877.581579][T12553] hsr_slave_0: entered promiscuous mode [ 877.649208][T12553] hsr_slave_1: entered promiscuous mode [ 877.657727][T12553] debugfs: 'hsr0' already exists in 'hsr' [ 877.657759][T12553] Cannot create hsr debugfs directory [ 878.330812][ T9672] Bluetooth: hci5: command tx timeout [ 879.608344][T10133] usb 3-1: USB disconnect, device number 9 [ 880.406408][T11867] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 880.407016][ T9672] Bluetooth: hci5: command tx timeout [ 880.635801][T11867] usb 4-1: Using ep0 maxpacket: 8 [ 880.638815][T11867] usb 4-1: unable to get BOS descriptor or descriptor too short [ 880.640002][T11867] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 880.640024][T11867] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 880.640041][T11867] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 880.640054][T11867] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 880.640068][T11867] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 880.640080][T11867] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 880.640094][T11867] usb 4-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x8F, skipping [ 880.642739][T11867] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 880.642759][T11867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.642771][T11867] usb 4-1: Product: syz [ 880.642780][T11867] usb 4-1: Manufacturer: syz [ 880.642788][T11867] usb 4-1: SerialNumber: syz [ 880.672806][T11867] usb 4-1: config 0 descriptor?? [ 880.674413][T12991] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 880.674907][T12991] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 881.952010][T11867] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 882.446392][T11867] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 882.468526][T12396] udevd[12396]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 882.488437][ T9672] Bluetooth: hci5: command tx timeout [ 882.515113][T11867] usb 4-1: USB disconnect, device number 8 [ 882.885385][T11929] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 883.077183][T11929] usb 1-1: Using ep0 maxpacket: 8 [ 883.079735][T11929] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 883.079763][T11929] usb 1-1: config 0 has no interfaces? [ 883.082850][T11929] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 883.082880][T11929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.082900][T11929] usb 1-1: Product: syz [ 883.082915][T11929] usb 1-1: Manufacturer: syz [ 883.082929][T11929] usb 1-1: SerialNumber: syz [ 883.142462][T11929] usb 1-1: config 0 descriptor?? [ 883.525621][T13015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 883.542115][T13015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 885.105346][ T155] bridge_slave_1: left allmulticast mode [ 885.105394][ T155] bridge_slave_1: left promiscuous mode [ 885.105734][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 885.220208][ T155] bridge_slave_0: left allmulticast mode [ 885.220257][ T155] bridge_slave_0: left promiscuous mode [ 885.221209][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 885.645982][T13037] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1286'. [ 886.917655][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 887.085636][ T5734] usb 1-1: USB disconnect, device number 17 [ 887.126670][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 887.206930][ T5625] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 887.306573][ T155] bond0 (unregistering): Released all slaves [ 887.365528][T12928] bridge0: port 1(bridge_slave_0) entered blocking state [ 887.366405][ T5625] usb 3-1: Using ep0 maxpacket: 8 [ 887.368662][T12928] bridge0: port 1(bridge_slave_0) entered disabled state [ 887.369016][T12928] bridge_slave_0: entered allmulticast mode [ 887.370984][ T5625] usb 3-1: unable to get BOS descriptor or descriptor too short [ 887.385347][ T5625] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 887.385381][ T5625] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 887.385414][ T5625] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 887.385435][ T5625] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 887.385457][ T5625] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 887.385477][ T5625] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 887.385498][ T5625] usb 3-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x8F, skipping [ 887.392556][ T5625] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 887.392585][ T5625] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.392603][ T5625] usb 3-1: Product: syz [ 887.392616][ T5625] usb 3-1: Manufacturer: syz [ 887.392629][ T5625] usb 3-1: SerialNumber: syz [ 887.490717][ T5625] usb 3-1: config 0 descriptor?? [ 887.533676][T13040] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 887.536306][T13040] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 887.564957][T12928] bridge_slave_0: entered promiscuous mode [ 887.581412][ T5625] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 887.593159][T12928] bridge0: port 2(bridge_slave_1) entered blocking state [ 887.593469][T12928] bridge0: port 2(bridge_slave_1) entered disabled state [ 887.593780][T12928] bridge_slave_1: entered allmulticast mode [ 887.652811][T12928] bridge_slave_1: entered promiscuous mode [ 888.192480][ T5625] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 888.273171][ T5625] usb 3-1: USB disconnect, device number 10 [ 889.235604][T12398] udevd[12398]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 889.547154][T12928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 889.656671][T12928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 889.795216][ T155] hsr_slave_0: left promiscuous mode [ 889.835248][ T155] hsr_slave_1: left promiscuous mode [ 889.836141][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 889.880829][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 891.977018][ T155] team0 (unregistering): Port device team_slave_1 removed [ 892.046053][ T155] team0 (unregistering): Port device team_slave_0 removed [ 892.390552][T12928] team0: Port device team_slave_0 added [ 892.462028][T12928] team0: Port device team_slave_1 added [ 892.803627][T12928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 892.803647][T12928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 892.803676][T12928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 892.815378][T12928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 892.815397][T12928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 892.815428][T12928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 893.754540][T11288] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 893.802940][T11288] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 893.824748][T11288] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 893.839553][T11288] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 893.840330][T11288] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 894.486414][T12928] hsr_slave_0: entered promiscuous mode [ 894.517264][T12928] hsr_slave_1: entered promiscuous mode [ 894.526732][T12928] debugfs: 'hsr0' already exists in 'hsr' [ 894.526760][T12928] Cannot create hsr debugfs directory [ 895.464642][T13112] fuse: Unknown parameter 'group_i00000000000000000000' [ 895.866650][T13120] fuse: Unknown parameter 'grou00000000000000000000' [ 896.095212][T11288] Bluetooth: hci4: command tx timeout [ 896.853251][T13142] fuse: Unknown parameter 'group_i00000000000000000000' [ 898.165265][T11288] Bluetooth: hci4: command tx timeout [ 898.366275][T13153] fuse: Unknown parameter 'grou00000000000000000000' [ 899.155590][T11929] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 899.316566][T11929] usb 4-1: Using ep0 maxpacket: 8 [ 899.334248][T11929] usb 4-1: unable to get BOS descriptor or descriptor too short [ 899.347691][T11929] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 899.347727][T11929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 899.347756][T11929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 899.347780][T11929] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 899.347804][T11929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 899.347827][T11929] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 899.353626][T11929] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 899.353656][T11929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.353674][T11929] usb 4-1: Product: syz [ 899.353686][T11929] usb 4-1: Manufacturer: syz [ 899.353699][T11929] usb 4-1: SerialNumber: syz [ 899.536309][T11929] usb 4-1: config 0 descriptor?? [ 899.543641][T13161] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 899.577466][T13181] fuse: Unknown parameter 'group_i00000000000000000000' [ 899.674169][T11929] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 900.075782][T11929] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 900.139031][T11929] usb 4-1: USB disconnect, device number 9 [ 900.255283][T11288] Bluetooth: hci4: command tx timeout [ 900.262157][T12398] udevd[12398]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 902.325613][T11288] Bluetooth: hci4: command tx timeout [ 903.360595][T13203] fuse: Unknown parameter 'grou00000000000000000000' [ 903.797853][T12928] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 903.884443][T12928] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 903.948395][T13218] fuse: Unknown parameter 'group_id00000000000000000000' [ 904.008941][T12928] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 904.079380][T12928] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 904.406150][T12928] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 904.464868][T12928] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 904.527162][T12928] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 904.620579][T12928] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 906.666015][T13267] fuse: Unknown parameter 'group_id00000000000000000000' [ 906.725938][ T13] bridge_slave_1: left allmulticast mode [ 906.725978][ T13] bridge_slave_1: left promiscuous mode [ 906.726287][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 907.275974][ T13] bridge_slave_0: left allmulticast mode [ 907.286021][ T13] bridge_slave_0: left promiscuous mode [ 907.439691][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 907.857452][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 907.976009][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 908.057563][ T13] bond0 (unregistering): Released all slaves [ 909.008304][T13094] bridge0: port 1(bridge_slave_0) entered blocking state [ 909.008636][T13094] bridge0: port 1(bridge_slave_0) entered disabled state [ 909.008967][T13094] bridge_slave_0: entered allmulticast mode [ 909.012721][T13094] bridge_slave_0: entered promiscuous mode [ 909.148500][T13296] fuse: Unknown parameter 'group_id00000000000000000000' [ 909.382513][ T13] hsr_slave_0: left promiscuous mode [ 909.417108][ T13] hsr_slave_1: left promiscuous mode [ 909.418430][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 910.262608][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 911.266150][ T13] team0 (unregistering): Port device team_slave_1 removed [ 911.325815][ T13] team0 (unregistering): Port device team_slave_0 removed [ 911.707519][T13094] bridge0: port 2(bridge_slave_1) entered blocking state [ 911.707708][T13094] bridge0: port 2(bridge_slave_1) entered disabled state [ 911.707985][T13094] bridge_slave_1: entered allmulticast mode [ 911.710188][T13094] bridge_slave_1: entered promiscuous mode [ 911.990947][T13094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 912.020601][T13094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 912.419700][T13094] team0: Port device team_slave_0 added [ 912.571919][T13094] team0: Port device team_slave_1 added [ 913.354921][ T5625] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 913.391684][ T5625] hid-generic 0000:0000:0000.0006: hidraw0: HID vff.ff Device [syz1] on syz0 [ 913.538511][T13094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 913.538530][T13094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 913.538559][T13094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 913.601900][T13094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 913.601919][T13094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 913.601946][T13094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 915.656974][T13094] hsr_slave_0: entered promiscuous mode [ 915.658278][T13094] hsr_slave_1: entered promiscuous mode [ 915.659323][T13094] debugfs: 'hsr0' already exists in 'hsr' [ 915.659340][T13094] Cannot create hsr debugfs directory [ 916.905152][ T5619] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 916.947142][T12928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 917.119203][ T5619] usb 3-1: Using ep0 maxpacket: 8 [ 917.136275][ T5619] usb 3-1: unable to get BOS descriptor or descriptor too short [ 917.163819][ T5619] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 917.163858][ T5619] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 917.163886][ T5619] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 917.163909][ T5619] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 917.163935][ T5619] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 917.163957][ T5619] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 917.239288][ T5619] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 917.239319][ T5619] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.239331][ T5619] usb 3-1: Product: syz [ 917.239340][ T5619] usb 3-1: Manufacturer: syz [ 917.239349][ T5619] usb 3-1: SerialNumber: syz [ 917.287653][ T5619] usb 3-1: config 0 descriptor?? [ 917.319834][T13402] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 917.366994][ T5619] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 918.629321][ T5619] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 918.698847][ T5619] usb 3-1: USB disconnect, device number 11 [ 918.923666][T13424] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1385'. [ 920.502737][T12396] udevd[12396]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 920.899652][T12928] 8021q: adding VLAN 0 to HW filter on device team0 [ 921.057278][ T164] bridge0: port 1(bridge_slave_0) entered blocking state [ 921.058109][ T164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 921.201440][T12168] bridge0: port 2(bridge_slave_1) entered blocking state [ 921.201609][T12168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 921.569250][T11867] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 921.587429][T11867] hid-generic 0000:0000:0000.0007: hidraw0: HID vff.ff Device [syz1] on syz0 [ 921.711133][ T5619] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 922.385750][ T5619] usb 3-1: Using ep0 maxpacket: 8 [ 922.388916][ T5619] usb 3-1: unable to get BOS descriptor or descriptor too short [ 922.396353][ T5619] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 922.396389][ T5619] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 922.396414][ T5619] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 922.396435][ T5619] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 922.396457][ T5619] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 922.396476][ T5619] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 922.523470][ T5619] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 922.523505][ T5619] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.523525][ T5619] usb 3-1: Product: syz [ 922.523539][ T5619] usb 3-1: Manufacturer: syz [ 922.523552][ T5619] usb 3-1: SerialNumber: syz [ 922.583602][ T5619] usb 3-1: config 0 descriptor?? [ 922.585848][T13458] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 922.670635][ T5619] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 924.174517][ T5619] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 924.199978][ T5619] usb 3-1: USB disconnect, device number 12 [ 924.403578][T12398] udevd[12398]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 926.248609][T13515] fuse: Unknown parameter 'group_id00000000000000000000' [ 927.567980][T13094] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 927.601762][T13094] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 927.603410][T13094] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 927.651851][T13094] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 927.668574][T13094] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 927.976639][T13094] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 928.003356][T13094] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 928.073369][T13094] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 928.359042][T12928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 929.003691][T13094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 929.049457][T13568] fuse: Bad value for 'user_id' [ 929.049478][T13568] fuse: Bad value for 'user_id' [ 929.173704][T13094] 8021q: adding VLAN 0 to HW filter on device team0 [ 929.247823][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 929.248110][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 929.338735][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 929.342130][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 931.851438][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.853564][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.031074][T12928] veth0_vlan: entered promiscuous mode [ 932.158912][T12928] veth1_vlan: entered promiscuous mode [ 932.574423][T12928] veth0_macvtap: entered promiscuous mode [ 932.624947][T12928] veth1_macvtap: entered promiscuous mode [ 932.847672][T12928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 932.969558][T12928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 933.133659][T13626] fuse: Bad value for 'user_id' [ 933.133681][T13626] fuse: Bad value for 'user_id' [ 933.202352][ T150] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.208589][ T150] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.209546][ T150] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.209590][ T150] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.229047][ T9672] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 936.326219][ T9672] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 936.341227][ T9672] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 936.369300][ T9672] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 936.377030][ T9672] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 936.668177][T13094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 937.631821][T13679] fuse: Bad value for 'user_id' [ 937.631842][T13679] fuse: Bad value for 'user_id' [ 940.717433][T11288] Bluetooth: hci3: command tx timeout [ 941.642709][T12070] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.726819][T11288] Bluetooth: hci3: command tx timeout [ 942.913367][T13094] veth0_vlan: entered promiscuous mode [ 943.902456][T13741] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1447'. [ 944.125980][T12070] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.844602][T11288] Bluetooth: hci3: command tx timeout [ 945.295304][T10168] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 945.526922][T13094] veth1_vlan: entered promiscuous mode [ 945.558173][T10168] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 945.558212][T10168] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 945.558254][T10168] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 945.558279][T10168] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 945.622482][T10168] usb 4-1: config 0 descriptor?? [ 946.219550][T13762] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1452'. [ 946.418132][T13736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 946.449177][T13736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 946.924102][T10168] logitech-djreceiver 0003:046D:C71F.0008: unknown main item tag 0x7 [ 946.990319][T11288] Bluetooth: hci3: command tx timeout [ 947.007247][T12070] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.298750][ T5271] 8021q: adding VLAN 0 to HW filter on device eth13 [ 947.617364][T10168] logitech-djreceiver 0003:046D:C71F.0008: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.3-1/input0 [ 947.812054][T11288] Bluetooth: hci0: unexpected event for opcode 0x1009 [ 947.817438][ T5619] usb 4-1: USB disconnect, device number 10 [ 948.023292][T13770] fido_id[13770]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 948.460468][ T5734] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 948.632718][T12070] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.661995][ T5734] hid-generic 0000:0000:0000.0009: hidraw0: HID vff.ff Device [syz1] on syz0 [ 950.875254][ T5271] 8021q: adding VLAN 0 to HW filter on device eth14 [ 952.628290][T13094] veth0_macvtap: entered promiscuous mode [ 953.667039][T12075] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 954.459992][T12075] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 954.460047][T12075] usb 3-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 954.460072][T12075] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 954.553426][T12075] usb 3-1: config 0 descriptor?? [ 954.572270][T12075] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 954.792612][ T9672] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 956.043078][ T9672] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 956.071907][ T9672] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 956.079921][ T9672] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 957.242893][ T5627] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 957.826269][ T824] usb 3-1: USB disconnect, device number 13 [ 958.166646][ T5627] Bluetooth: hci0: unexpected event for opcode 0x1009 [ 958.294088][T13647] bridge0: port 1(bridge_slave_0) entered blocking state [ 958.294421][T13647] bridge0: port 1(bridge_slave_0) entered disabled state [ 958.294861][T13647] bridge_slave_0: entered allmulticast mode [ 958.329928][T13647] bridge_slave_0: entered promiscuous mode [ 958.394373][ T5271] 8021q: adding VLAN 0 to HW filter on device eth25 [ 959.841361][ T5627] Bluetooth: hci5: command tx timeout [ 960.113151][T13647] bridge0: port 2(bridge_slave_1) entered blocking state [ 960.113503][T13647] bridge0: port 2(bridge_slave_1) entered disabled state [ 960.113868][T13647] bridge_slave_1: entered allmulticast mode [ 960.129421][T13647] bridge_slave_1: entered promiscuous mode [ 962.551886][ T5627] Bluetooth: hci5: command tx timeout [ 963.961280][ T5271] 8021q: adding VLAN 0 to HW filter on device eth26 [ 963.998160][T13647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 964.214356][ T824] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 964.371811][ T824] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 964.371865][ T824] usb 1-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 964.371890][ T824] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 964.412953][T13647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 964.494508][ T5627] Bluetooth: hci1: unexpected event for opcode 0x1009 [ 964.565159][ T5627] Bluetooth: hci5: command tx timeout [ 964.629470][ T824] usb 1-1: config 0 descriptor?? [ 964.714564][ T824] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 965.073524][T13647] team0: Port device team_slave_0 added [ 965.100999][T13647] team0: Port device team_slave_1 added [ 966.379578][ T824] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 966.383852][ T824] hid-generic 0000:0000:0000.000A: hidraw0: HID vff.ff Device [syz1] on syz0 [ 966.445313][T12070] bridge_slave_1: left allmulticast mode [ 966.445353][T12070] bridge_slave_1: left promiscuous mode [ 966.445705][T12070] bridge0: port 2(bridge_slave_1) entered disabled state [ 966.645183][ T5627] Bluetooth: hci5: command tx timeout [ 966.811011][T12070] bridge_slave_0: left allmulticast mode [ 966.811039][T12070] bridge_slave_0: left promiscuous mode [ 966.811226][T12070] bridge0: port 1(bridge_slave_0) entered disabled state [ 967.420015][ T5748] usb 1-1: USB disconnect, device number 18 [ 969.445858][T12070] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 969.505745][T12070] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 969.534335][T12070] bond0 (unregistering): Released all slaves [ 969.723559][ T5271] 8021q: adding VLAN 0 to HW filter on device eth27 [ 969.801515][T13647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 969.801536][T13647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 969.801567][T13647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 969.943853][T13647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 969.943874][T13647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 969.943904][T13647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 970.365213][T12070] hsr_slave_0: left promiscuous mode [ 970.395305][T12075] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 970.418594][T12070] hsr_slave_1: left promiscuous mode [ 970.452275][T12070] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 970.452346][T12070] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 970.505338][T12070] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 970.505583][T12070] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 970.555149][T12075] usb 4-1: device descriptor read/64, error -71 [ 970.659728][T12070] veth1_macvtap: left promiscuous mode [ 970.659835][T12070] veth0_macvtap: left promiscuous mode [ 970.660244][T12070] veth1_vlan: left promiscuous mode [ 970.660432][T12070] veth0_vlan: left promiscuous mode [ 970.954032][T12075] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 971.086744][T12075] usb 4-1: device descriptor read/64, error -71 [ 971.207354][T12075] usb usb4-port1: attempt power cycle [ 971.588190][T12075] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 971.614020][T12075] usb 4-1: device descriptor read/8, error -71 [ 971.845273][T12075] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 971.865880][T12075] usb 4-1: device descriptor read/8, error -71 [ 971.998102][T12075] usb usb4-port1: unable to enumerate USB device [ 972.715930][ T5748] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 973.429543][ T5748] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 973.429599][ T5748] usb 3-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 973.429624][ T5748] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.508955][ T5748] usb 3-1: config 0 descriptor?? [ 973.527744][ T5748] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 977.907452][T12070] team0 (unregistering): Port device team_slave_1 removed [ 978.066430][T12070] team0 (unregistering): Port device team_slave_0 removed [ 978.329658][ T5748] usb 3-1: USB disconnect, device number 14 [ 979.483308][ T5271] 8021q: adding VLAN 0 to HW filter on device eth28 [ 980.103176][T13647] hsr_slave_0: entered promiscuous mode [ 980.116753][T13647] hsr_slave_1: entered promiscuous mode [ 980.121163][T13647] debugfs: 'hsr0' already exists in 'hsr' [ 980.121191][T13647] Cannot create hsr debugfs directory [ 980.255816][T12075] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 980.364300][T14032] fuse: Bad value for 'fd' [ 980.427498][ T5734] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 980.446606][T12075] usb 3-1: Using ep0 maxpacket: 32 [ 980.448470][T12075] usb 3-1: no configurations [ 980.448490][T12075] usb 3-1: can't read configurations, error -22 [ 980.608179][ T5734] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 980.608235][ T5734] usb 1-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 980.608262][ T5734] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.656532][T12075] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 980.723519][ T5734] usb 1-1: config 0 descriptor?? [ 980.771410][ T5734] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 980.866337][T12075] usb 3-1: Using ep0 maxpacket: 32 [ 980.867245][T12075] usb 3-1: no configurations [ 980.867261][T12075] usb 3-1: can't read configurations, error -22 [ 980.867691][T12075] usb usb3-port1: attempt power cycle [ 981.347426][T12075] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 982.276111][T12075] usb 3-1: Using ep0 maxpacket: 32 [ 982.277206][T12075] usb 3-1: no configurations [ 982.277223][T12075] usb 3-1: can't read configurations, error -22 [ 982.935117][T12075] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 983.363624][T12075] usb 3-1: device descriptor read/8, error -71 [ 983.465482][T12075] usb usb3-port1: unable to enumerate USB device [ 984.048835][ T5734] usb 1-1: USB disconnect, device number 19 [ 985.619011][T14067] fuse: Invalid rootmode [ 986.017436][T14079] fuse: Invalid rootmode [ 986.608012][ T5734] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 986.869576][ T5734] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 986.869680][ T5734] usb 1-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 986.869747][ T5734] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.907987][ T5734] usb 1-1: config 0 descriptor?? [ 987.198476][ T5734] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 990.478678][ T824] usb 1-1: USB disconnect, device number 20 [ 990.645998][T14126] fuse: Bad value for 'rootmode' [ 991.789072][T14137] fuse: Invalid rootmode [ 993.207787][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.207890][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.623922][T14161] netlink: 'syz.2.1524': attribute type 2 has an invalid length. [ 993.730645][T13829] bridge0: port 1(bridge_slave_0) entered blocking state [ 993.731071][T13829] bridge0: port 1(bridge_slave_0) entered disabled state [ 993.731402][T13829] bridge_slave_0: entered allmulticast mode [ 993.735482][T13829] bridge_slave_0: entered promiscuous mode [ 993.943618][ T824] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 994.039097][T14169] fuse: Bad value for 'rootmode' [ 994.099174][ T824] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 994.099227][ T824] usb 4-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 994.099249][ T824] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.231950][ T824] usb 4-1: config 0 descriptor?? [ 994.294868][ T824] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 994.319852][T13829] bridge0: port 2(bridge_slave_1) entered blocking state [ 994.320239][T13829] bridge0: port 2(bridge_slave_1) entered disabled state [ 994.320572][T13829] bridge_slave_1: entered allmulticast mode [ 994.353477][T13829] bridge_slave_1: entered promiscuous mode [ 994.403371][T11288] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 994.469256][T11288] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 994.609159][T11288] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 994.681860][T11288] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 994.701540][T11288] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 994.762028][T12075] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 996.095676][T12075] usb 1-1: Using ep0 maxpacket: 32 [ 996.169376][T12075] usb 1-1: no configurations [ 996.169399][T12075] usb 1-1: can't read configurations, error -22 [ 996.316815][T12075] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 996.485339][T12075] usb 1-1: Using ep0 maxpacket: 32 [ 996.487746][T12075] usb 1-1: no configurations [ 996.487766][T12075] usb 1-1: can't read configurations, error -22 [ 996.488556][T12075] usb usb1-port1: attempt power cycle [ 996.856636][ T5627] Bluetooth: hci4: command tx timeout [ 996.975152][T12075] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 997.067231][T12075] usb 1-1: Using ep0 maxpacket: 32 [ 997.068216][T12075] usb 1-1: no configurations [ 997.068243][T12075] usb 1-1: can't read configurations, error -22 [ 997.465116][T12075] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 997.918676][T10168] usb 4-1: USB disconnect, device number 15 [ 997.977788][T12075] usb 1-1: device descriptor read/8, error -71 [ 998.096675][T12075] usb usb1-port1: unable to enumerate USB device [ 998.980718][ T5627] Bluetooth: hci4: command tx timeout [ 999.732109][T14209] fuse: Bad value for 'rootmode' [ 999.874022][T13829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 999.900188][T13829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1000.136192][T14218] netlink: 'syz.0.1536': attribute type 2 has an invalid length. [ 1000.426103][T12075] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1000.591019][T12075] usb 4-1: Using ep0 maxpacket: 8 [ 1000.594217][T12075] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1000.596237][T12075] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 1000.596278][T12075] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 1000.596303][T12075] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1000.596325][T12075] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 1000.596417][T12075] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1000.596437][T12075] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1000.596459][T12075] usb 4-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x8F, skipping [ 1000.602712][T12075] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1000.602741][T12075] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.602758][T12075] usb 4-1: Product: syz [ 1000.602855][T12075] usb 4-1: Manufacturer: syz [ 1000.602870][T12075] usb 4-1: SerialNumber: syz [ 1000.657066][T12075] usb 4-1: config 0 descriptor?? [ 1000.658469][T14222] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1000.658798][T14222] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1000.676093][T12075] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1001.050720][ T5627] Bluetooth: hci4: command tx timeout [ 1001.066695][T13829] team0: Port device team_slave_0 added [ 1001.347366][T12075] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1001.361168][T12075] usb 4-1: USB disconnect, device number 16 [ 1001.388352][T14028] udevd[14028]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1002.495364][ T5748] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 1002.873591][T13829] team0: Port device team_slave_1 added [ 1003.125290][ T5627] Bluetooth: hci4: command tx timeout [ 1003.157486][ T5748] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1003.157544][ T5748] usb 4-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 1003.157576][ T5748] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.935567][ T5748] usb 4-1: config 0 descriptor?? [ 1003.945844][ T5748] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1004.078943][T13829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1004.078955][T13829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1004.078971][T13829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1004.189428][T13829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1004.189446][T13829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1004.189477][T13829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1007.142210][ T5748] usb 4-1: USB disconnect, device number 17 [ 1007.402942][T14285] netlink: 'syz.0.1546': attribute type 2 has an invalid length. [ 1010.705803][T12075] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1010.733888][T13829] hsr_slave_0: entered promiscuous mode [ 1010.822879][T13829] hsr_slave_1: entered promiscuous mode [ 1010.912277][T13829] debugfs: 'hsr0' already exists in 'hsr' [ 1010.912297][T13829] Cannot create hsr debugfs directory [ 1011.465169][ T5748] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1011.615084][ T5748] usb 1-1: Using ep0 maxpacket: 8 [ 1011.627306][ T5748] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1011.645303][ T5748] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 1011.645338][ T5748] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 1011.645365][ T5748] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1011.645389][ T5748] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 1011.645413][ T5748] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1011.645437][ T5748] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1011.645461][ T5748] usb 1-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x8F, skipping [ 1011.661273][ T5748] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1011.661308][ T5748] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.661328][ T5748] usb 1-1: Product: syz [ 1011.661343][ T5748] usb 1-1: Manufacturer: syz [ 1011.661358][ T5748] usb 1-1: SerialNumber: syz [ 1011.914462][ T5748] usb 1-1: config 0 descriptor?? [ 1011.916088][T14310] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1011.916587][T14310] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1011.954594][ T5748] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1012.465992][ T5748] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1012.530118][ T5748] usb 1-1: USB disconnect, device number 25 [ 1012.811583][T14321] udevd[14321]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1014.155284][T10133] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 1014.346626][T10133] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1014.346682][T10133] usb 3-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 1014.346707][T10133] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.363581][T10133] usb 3-1: config 0 descriptor?? [ 1014.392540][T10133] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1014.856804][T12070] bridge_slave_1: left allmulticast mode [ 1014.856847][T12070] bridge_slave_1: left promiscuous mode [ 1014.857485][T12070] bridge0: port 2(bridge_slave_1) entered disabled state [ 1017.487206][T12070] bridge_slave_0: left allmulticast mode [ 1017.487244][T12070] bridge_slave_0: left promiscuous mode [ 1017.487544][T12070] bridge0: port 1(bridge_slave_0) entered disabled state [ 1017.748628][T11288] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1017.792936][T11288] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1017.804010][T11288] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1017.821870][T11288] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1017.838791][T11288] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1018.056671][T10133] usb 3-1: USB disconnect, device number 19 [ 1019.298123][T14367] process 'syz.0.1561' launched './file0' with NULL argv: empty string added [ 1020.186518][T10133] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1020.255689][ T5627] Bluetooth: hci3: command tx timeout [ 1020.397530][T10133] usb 3-1: device descriptor read/64, error -71 [ 1021.099055][T10133] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1021.385564][T10133] usb 3-1: device descriptor read/64, error -71 [ 1021.802700][T10133] usb usb3-port1: attempt power cycle [ 1022.205181][ T5748] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1022.233883][T10133] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1022.335409][ T5627] Bluetooth: hci3: command tx timeout [ 1022.355100][ T5748] usb 4-1: Using ep0 maxpacket: 8 [ 1022.360545][ T5748] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1022.362131][ T5748] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 1022.362165][ T5748] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 1022.362193][ T5748] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1022.362216][ T5748] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 1022.362249][ T5748] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1022.362270][ T5748] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1022.362340][ T5748] usb 4-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x8F, skipping [ 1022.460155][ T5748] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1022.460189][ T5748] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1022.460210][ T5748] usb 4-1: Product: syz [ 1022.460225][ T5748] usb 4-1: Manufacturer: syz [ 1022.460240][ T5748] usb 4-1: SerialNumber: syz [ 1022.510511][ T5748] usb 4-1: config 0 descriptor?? [ 1022.511880][T14377] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1022.512359][T14377] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1022.546619][ T5748] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1022.741812][T12070] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1022.787805][ T5748] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1022.811739][ T5748] usb 4-1: USB disconnect, device number 19 [ 1022.909499][T12070] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1022.933791][T13990] udevd[13990]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1023.002677][T12070] bond0 (unregistering): Released all slaves [ 1023.408697][T14367] ÿ: renamed from dummy0 (while UP) [ 1023.713821][T10133] usb 3-1: device descriptor read/8, error -71 [ 1024.588980][ T5627] Bluetooth: hci3: command tx timeout [ 1025.260088][T12070] hsr_slave_0: left promiscuous mode [ 1025.300299][T12070] hsr_slave_1: left promiscuous mode [ 1025.301691][T12070] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1025.347432][T12070] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1025.518187][T14407] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1568'. [ 1025.588960][T14406] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1568'. [ 1025.640693][T12070] veth0_macvtap: left promiscuous mode [ 1025.641865][T12070] veth1_vlan: left promiscuous mode [ 1025.650406][T12070] veth0_vlan: left promiscuous mode [ 1025.778259][T14414] capability: warning: `syz.3.1569' uses deprecated v2 capabilities in a way that may be insecure [ 1026.895299][ T5627] Bluetooth: hci3: command tx timeout [ 1027.506938][T12070] team0 (unregistering): Port device team_slave_1 removed [ 1027.570314][T12070] team0 (unregistering): Port device team_slave_0 removed [ 1028.180651][T14406] team0: Port device team_slave_1 removed [ 1029.815493][ T9993] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1029.862231][T14170] bridge0: port 1(bridge_slave_0) entered blocking state [ 1029.862668][T14170] bridge0: port 1(bridge_slave_0) entered disabled state [ 1029.863147][T14170] bridge_slave_0: entered allmulticast mode [ 1029.871045][T14170] bridge_slave_0: entered promiscuous mode [ 1029.889014][T14170] bridge0: port 2(bridge_slave_1) entered blocking state [ 1029.889459][T14170] bridge0: port 2(bridge_slave_1) entered disabled state [ 1029.889773][T14170] bridge_slave_1: entered allmulticast mode [ 1029.894411][T14170] bridge_slave_1: entered promiscuous mode [ 1029.965114][ T9993] usb 4-1: Using ep0 maxpacket: 8 [ 1029.968732][ T9993] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1029.970548][ T9993] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 1029.970584][ T9993] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 1029.970632][ T9993] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1029.970656][ T9993] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 1029.970679][ T9993] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1029.970699][ T9993] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1029.974344][ T9993] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1029.974378][ T9993] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.974399][ T9993] usb 4-1: Product: syz [ 1029.974414][ T9993] usb 4-1: Manufacturer: syz [ 1029.974427][ T9993] usb 4-1: SerialNumber: syz [ 1030.108349][ T9993] usb 4-1: config 0 descriptor?? [ 1030.133144][T14448] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1030.256493][ T9993] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1030.441339][T14170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1030.478745][T14465] fuse: Bad value for 'rootmode' [ 1030.541818][T14170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1030.589491][ T9993] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1030.613037][ T9993] usb 4-1: USB disconnect, device number 20 [ 1030.674103][T13990] udevd[13990]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1031.751321][T14170] team0: Port device team_slave_0 added [ 1031.823534][T14170] team0: Port device team_slave_1 added [ 1032.126983][T14483] bond0: entered promiscuous mode [ 1032.127000][T14483] bond_slave_0: entered promiscuous mode [ 1032.128924][T14483] bond_slave_1: entered promiscuous mode [ 1032.189955][T14483] batadv0: entered promiscuous mode [ 1032.243341][T14483] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1032.427017][T14483] bond0: left promiscuous mode [ 1032.427045][T14483] bond_slave_0: left promiscuous mode [ 1032.427333][T14483] bond_slave_1: left promiscuous mode [ 1032.466981][T14483] batadv0: left promiscuous mode [ 1033.093835][T14500] usb usb8: usbfs: process 14500 (syz.3.1583) did not claim interface 0 before use [ 1033.140791][T14170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1033.140811][T14170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1033.140838][T14170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1033.275357][T12070] bridge_slave_1: left allmulticast mode [ 1033.275387][T12070] bridge_slave_1: left promiscuous mode [ 1033.275664][T12070] bridge0: port 2(bridge_slave_1) entered disabled state [ 1033.476185][T12070] bridge_slave_0: left allmulticast mode [ 1033.476213][T12070] bridge_slave_0: left promiscuous mode [ 1033.476437][T12070] bridge0: port 1(bridge_slave_0) entered disabled state [ 1033.655315][T12070] bridge_slave_1: left allmulticast mode [ 1033.655357][T12070] bridge_slave_1: left promiscuous mode [ 1033.655653][T12070] bridge0: port 2(bridge_slave_1) entered disabled state [ 1033.716408][T12070] bridge_slave_0: left allmulticast mode [ 1033.716438][T12070] bridge_slave_0: left promiscuous mode [ 1033.716628][T12070] bridge0: port 1(bridge_slave_0) entered disabled state [ 1033.936023][T12070] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1034.036171][T12070] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1034.098954][T12070] bond0 (unregistering): Released all slaves [ 1034.275835][T12070] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1034.376245][T12070] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1034.439045][T12070] bond0 (unregistering): Released all slaves [ 1034.572966][T14170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1034.572980][T14170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1034.572996][T14170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1035.240571][T14518] fuse: Bad value for 'rootmode' [ 1035.489967][T14170] hsr_slave_0: entered promiscuous mode [ 1035.598524][T14170] hsr_slave_1: entered promiscuous mode [ 1035.601530][T14170] debugfs: 'hsr0' already exists in 'hsr' [ 1035.601560][T14170] Cannot create hsr debugfs directory [ 1036.561383][T12070] hsr_slave_0: left promiscuous mode [ 1036.597723][T12070] hsr_slave_1: left promiscuous mode [ 1036.598479][T12070] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1036.635781][T12070] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1036.845111][T12070] hsr_slave_0: left promiscuous mode [ 1036.885248][T12070] hsr_slave_1: left promiscuous mode [ 1036.886478][T12070] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1036.926338][T12070] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1037.216018][T12070] team0 (unregistering): Port device team_slave_1 removed [ 1037.255095][ T5619] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1037.265637][T12070] team0 (unregistering): Port device team_slave_0 removed [ 1037.565196][ T5619] usb 4-1: Using ep0 maxpacket: 32 [ 1037.573808][ T5619] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1037.573836][ T5619] usb 4-1: config 0 has no interfaces? [ 1037.609055][ T5619] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1037.609135][ T5619] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1037.609193][ T5619] usb 4-1: Product: syz [ 1037.609248][ T5619] usb 4-1: Manufacturer: syz [ 1037.609266][ T5619] usb 4-1: SerialNumber: syz [ 1037.709264][ T5619] usb 4-1: config 0 descriptor?? [ 1038.767049][ T5619] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1039.026237][T12070] team0 (unregistering): Port device team_slave_1 removed [ 1039.049618][ T5625] usb 4-1: USB disconnect, device number 21 [ 1039.062398][T12070] team0 (unregistering): Port device team_slave_0 removed [ 1039.739279][ T5619] usb 3-1: config 0 has no interfaces? [ 1039.851821][ T5619] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1039.851864][ T5619] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1039.851939][ T5619] usb 3-1: Manufacturer: syz [ 1040.215289][ T5619] usb 3-1: config 0 descriptor?? [ 1040.532456][ T5619] usb 3-1: can't set config #0, error -71 [ 1040.550612][T14349] bridge0: port 1(bridge_slave_0) entered blocking state [ 1040.550965][T14349] bridge0: port 1(bridge_slave_0) entered disabled state [ 1040.551315][T14349] bridge_slave_0: entered allmulticast mode [ 1040.587954][T14349] bridge_slave_0: entered promiscuous mode [ 1040.622493][ T5619] usb 3-1: USB disconnect, device number 24 [ 1040.777107][T14349] bridge0: port 2(bridge_slave_1) entered blocking state [ 1040.777490][T14349] bridge0: port 2(bridge_slave_1) entered disabled state [ 1040.777876][T14349] bridge_slave_1: entered allmulticast mode [ 1040.859431][T14349] bridge_slave_1: entered promiscuous mode [ 1040.927856][T14567] fuse: Bad value for 'rootmode' [ 1041.627567][T14349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1042.207071][T14349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1042.522499][T14349] team0: Port device team_slave_0 added [ 1042.566461][T14349] team0: Port device team_slave_1 added [ 1042.844154][ T5625] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1042.864642][T14349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1042.864655][T14349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1042.864670][T14349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1042.903061][T14349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1042.903079][T14349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1042.903106][T14349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1043.035435][ T5625] usb 4-1: device descriptor read/64, error -71 [ 1043.308227][ T5625] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1043.389526][T14349] hsr_slave_0: entered promiscuous mode [ 1043.392187][T14349] hsr_slave_1: entered promiscuous mode [ 1043.394286][T14349] debugfs: 'hsr0' already exists in 'hsr' [ 1043.394311][T14349] Cannot create hsr debugfs directory [ 1043.459186][ T5625] usb 4-1: device descriptor read/64, error -71 [ 1043.565505][ T5625] usb usb4-port1: attempt power cycle [ 1043.585187][ T5894] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1043.805317][ T5894] usb 3-1: Using ep0 maxpacket: 32 [ 1043.815834][ T5894] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1043.815864][ T5894] usb 3-1: config 0 has no interfaces? [ 1043.818291][ T5894] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1043.818319][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.818337][ T5894] usb 3-1: Product: syz [ 1043.818351][ T5894] usb 3-1: Manufacturer: syz [ 1043.818364][ T5894] usb 3-1: SerialNumber: syz [ 1043.833422][ T5894] usb 3-1: config 0 descriptor?? [ 1043.945574][ T5625] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1043.970490][ T5625] usb 4-1: device descriptor read/8, error -71 [ 1044.051345][ T5894] usb 3-1: USB disconnect, device number 25 [ 1044.205505][ T5625] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1044.229967][ T5625] usb 4-1: device descriptor read/8, error -71 [ 1044.338269][ T5625] usb usb4-port1: unable to enumerate USB device [ 1044.851477][T14620] fuse: Unknown parameter 'use00000000000000000000' [ 1045.176596][T14170] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1046.134603][T14170] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1046.320204][T14170] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1046.435493][T14170] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1046.499411][T14170] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1046.564030][T14170] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1046.645133][T14170] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1047.165973][ T9993] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1047.642800][ T9993] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1047.711566][ T9993] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1047.711615][ T9993] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1047.711677][ T9993] usb 3-1: Manufacturer: syz [ 1048.693372][ T9993] usb 3-1: config 0 descriptor?? [ 1049.090420][T14170] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1049.734520][ T9993] usb 3-1: USB disconnect, device number 26 [ 1049.817119][T10133] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1049.966879][T10133] usb 4-1: Using ep0 maxpacket: 32 [ 1049.969244][T10133] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1049.969274][T10133] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1049.974842][T10133] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1049.974874][T10133] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.974895][T10133] usb 4-1: Product: syz [ 1049.995170][T10133] usb 4-1: Manufacturer: syz [ 1049.995201][T10133] usb 4-1: SerialNumber: syz [ 1050.044028][T14664] fuse: Unknown parameter 'use00000000000000000000' [ 1050.065198][T10133] usb 4-1: config 0 descriptor?? [ 1050.451631][T10133] usb 4-1: USB disconnect, device number 26 [ 1052.882804][T14170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1053.396158][T14708] fuse: Unknown parameter 'use00000000000000000000' [ 1053.749625][T14170] 8021q: adding VLAN 0 to HW filter on device team0 [ 1053.793775][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1053.794047][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1054.179851][ T5271] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1054.500010][T11923] bridge0: port 2(bridge_slave_1) entered blocking state [ 1054.500290][T11923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1054.650066][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.650161][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.372080][T11288] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1055.487505][T11288] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1055.500860][T11288] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1055.528375][T11288] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1055.554693][T11288] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1057.164011][T14760] fuse: Unknown parameter 'use00000000000000000000' [ 1057.727248][T14770] netlink: 'syz.0.1639': attribute type 4 has an invalid length. [ 1057.848104][T11288] Bluetooth: hci5: command tx timeout [ 1059.339055][ T5271] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1059.927880][ T5627] Bluetooth: hci5: command tx timeout [ 1060.075043][T14783] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 1060.075157][T14783] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1060.124459][T14783] vhci_hcd vhci_hcd.0: Device attached [ 1061.315441][ T5625] usb 3-1: new low-speed USB device number 27 using dummy_hcd [ 1062.005754][ T5627] Bluetooth: hci5: command tx timeout [ 1062.288259][ T5625] usb 3-1: config 0 has no interfaces? [ 1062.288303][ T5625] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1062.288328][ T5625] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1062.541466][ T5625] usb 3-1: config 0 descriptor?? [ 1062.620480][T10133] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 1063.136136][T14785] vhci_hcd: connection reset by peer [ 1063.152570][ T5625] usb 3-1: can't set config #0, error -71 [ 1063.210936][ T5625] usb 3-1: USB disconnect, device number 27 [ 1063.603851][ T3267] vhci_hcd vhci_hcd.2: stop threads [ 1063.607063][ T3267] vhci_hcd vhci_hcd.2: release socket [ 1064.086273][ T5627] Bluetooth: hci5: command tx timeout [ 1064.731609][ T3267] vhci_hcd vhci_hcd.2: disconnect device [ 1067.152015][T14824] fuse: Unknown parameter '0xffffffffffffffff' [ 1068.726010][T10133] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1069.948319][ T5271] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1070.212293][T14349] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1070.278173][T14349] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1072.365403][T14349] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1072.450628][T14349] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1073.248620][T14349] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1073.479964][T14349] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1073.506681][T14349] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1074.385873][T14349] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1078.897453][T11288] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1079.060995][T11288] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1079.087236][T11288] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1079.181976][T11288] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1079.216508][T11288] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1081.093032][ T5271] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1081.526034][T11288] Bluetooth: hci3: command tx timeout [ 1083.463381][T14732] bridge0: port 1(bridge_slave_0) entered blocking state [ 1083.463747][T14732] bridge0: port 1(bridge_slave_0) entered disabled state [ 1083.464104][T14732] bridge_slave_0: entered allmulticast mode [ 1083.485716][T14732] bridge_slave_0: entered promiscuous mode [ 1083.673857][T11288] Bluetooth: hci3: command tx timeout [ 1083.995350][T14732] bridge0: port 2(bridge_slave_1) entered blocking state [ 1083.995663][T14732] bridge0: port 2(bridge_slave_1) entered disabled state [ 1083.995983][T14732] bridge_slave_1: entered allmulticast mode [ 1084.029438][T14732] bridge_slave_1: entered promiscuous mode [ 1084.402155][ T1457] bridge_slave_1: left allmulticast mode [ 1084.402195][ T1457] bridge_slave_1: left promiscuous mode [ 1084.402516][ T1457] bridge0: port 2(bridge_slave_1) entered disabled state [ 1085.695067][T11288] Bluetooth: hci3: command tx timeout [ 1085.962581][ T1457] bridge_slave_0: left allmulticast mode [ 1085.962608][ T1457] bridge_slave_0: left promiscuous mode [ 1085.962840][ T1457] bridge0: port 1(bridge_slave_0) entered disabled state [ 1087.766283][T11288] Bluetooth: hci3: command tx timeout [ 1088.614486][T15034] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1694'. [ 1088.886009][ T1457] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1089.757705][ T1457] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1089.978185][ T1457] bond0 (unregistering): Released all slaves [ 1090.854583][T14732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1090.906291][T14732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1091.914819][T14732] team0: Port device team_slave_0 added [ 1094.190058][ T1457] hsr_slave_0: left promiscuous mode [ 1094.447031][ T1457] hsr_slave_1: left promiscuous mode [ 1094.885463][ T1457] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1094.918677][ T1457] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1096.416442][ T1457] team0 (unregistering): Port device team_slave_1 removed [ 1096.455736][ T1457] team0 (unregistering): Port device team_slave_0 removed [ 1096.701382][T14732] team0: Port device team_slave_1 added [ 1097.645577][T14732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1097.645605][T14732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1097.645636][T14732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1097.673380][T14732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1097.673397][T14732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1097.673423][T14732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1099.691094][T14732] hsr_slave_0: entered promiscuous mode [ 1099.692604][T14732] hsr_slave_1: entered promiscuous mode [ 1099.693681][T14732] debugfs: 'hsr0' already exists in 'hsr' [ 1099.693697][T14732] Cannot create hsr debugfs directory [ 1106.904351][ T5748] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1107.685194][ T5748] usb 4-1: Using ep0 maxpacket: 8 [ 1107.694617][ T5748] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1108.010005][ T5748] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 1108.010113][ T5748] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 1108.010214][ T5748] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1108.010319][ T5748] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 1108.010414][ T5748] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1108.010506][ T5748] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1108.010571][ T5748] usb 4-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x8F, skipping [ 1109.544665][ T5748] usb 4-1: string descriptor 0 read error: -71 [ 1109.544808][ T5748] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1109.544832][ T5748] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.656150][ T5748] usb 4-1: config 0 descriptor?? [ 1109.656969][ T5748] usb 4-1: can't set config #0, error -71 [ 1109.728294][ T5748] usb 4-1: USB disconnect, device number 27 [ 1112.132778][T15208] fuse: Unknown parameter 'user_id00000000000000000000' [ 1113.518047][T15230] fuse: Bad value for 'fd' [ 1115.370365][T11288] Bluetooth: hci0: unexpected event for opcode 0x1009 [ 1115.478422][T14929] bridge0: port 1(bridge_slave_0) entered blocking state [ 1115.480356][T14929] bridge0: port 1(bridge_slave_0) entered disabled state [ 1115.480576][T14929] bridge_slave_0: entered allmulticast mode [ 1115.483941][T14929] bridge_slave_0: entered promiscuous mode [ 1115.523490][T14929] bridge0: port 2(bridge_slave_1) entered blocking state [ 1115.523864][T14929] bridge0: port 2(bridge_slave_1) entered disabled state [ 1115.524240][T14929] bridge_slave_1: entered allmulticast mode [ 1115.557196][T14929] bridge_slave_1: entered promiscuous mode [ 1115.630484][T14929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1115.721644][T14929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1115.989783][T14929] team0: Port device team_slave_0 added [ 1116.149432][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.149542][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.443669][ T5627] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1117.491433][ T5627] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1117.503469][ T5627] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1117.520822][ T5627] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1117.539684][ T5627] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1118.042003][T14929] team0: Port device team_slave_1 added [ 1119.925514][T11288] Bluetooth: hci4: command tx timeout [ 1120.084333][T11288] Bluetooth: hci1: unexpected event for opcode 0x1009 [ 1120.259657][T14929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1120.259675][T14929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1120.259704][T14929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1120.287185][T14929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1120.287203][T14929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1120.287227][T14929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1120.743149][T14929] hsr_slave_0: entered promiscuous mode [ 1120.753902][T14929] hsr_slave_1: entered promiscuous mode [ 1120.760522][T14929] debugfs: 'hsr0' already exists in 'hsr' [ 1120.760552][T14929] Cannot create hsr debugfs directory [ 1120.868340][ T1457] bridge_slave_1: left allmulticast mode [ 1120.868383][ T1457] bridge_slave_1: left promiscuous mode [ 1120.868685][ T1457] bridge0: port 2(bridge_slave_1) entered disabled state [ 1121.136819][ T1457] bridge_slave_0: left allmulticast mode [ 1121.136846][ T1457] bridge_slave_0: left promiscuous mode [ 1121.137068][ T1457] bridge0: port 1(bridge_slave_0) entered disabled state [ 1122.005240][T11288] Bluetooth: hci4: command tx timeout [ 1122.528196][ T1457] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1122.637596][ T1457] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1122.748685][ T1457] bond0 (unregistering): Released all slaves [ 1123.267440][ T5748] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1123.563180][ T5748] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1123.563303][ T5748] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1123.563395][ T5748] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1123.611761][ T5748] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1123.611832][ T5748] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1123.611893][ T5748] usb 4-1: Manufacturer: syz [ 1124.085123][T11288] Bluetooth: hci4: command tx timeout [ 1124.701105][ T5748] usb 4-1: config 0 descriptor?? [ 1125.656285][ T5748] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1125.808360][T10133] usb 4-1: USB disconnect, device number 28 [ 1126.135161][ T1457] hsr_slave_0: left promiscuous mode [ 1126.165081][T11288] Bluetooth: hci4: command tx timeout [ 1126.180878][ T1457] hsr_slave_1: left promiscuous mode [ 1126.181722][ T1457] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1126.216370][ T1457] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1126.355233][T10133] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1126.506951][T10133] usb 4-1: Using ep0 maxpacket: 32 [ 1126.509880][T10133] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1126.512761][T10133] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1126.512793][T10133] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1126.512826][T10133] usb 4-1: Product: syz [ 1126.512836][T10133] usb 4-1: Manufacturer: syz [ 1126.512844][T10133] usb 4-1: SerialNumber: syz [ 1126.532488][T10133] usb 4-1: config 0 descriptor?? [ 1126.807819][T10133] usb 4-1: USB disconnect, device number 29 [ 1126.876531][ T1457] team0 (unregistering): Port device team_slave_1 removed [ 1126.925893][ T1457] team0 (unregistering): Port device team_slave_0 removed [ 1128.187497][ T5625] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1128.536862][ T5625] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1128.536995][ T5625] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1128.537138][ T5625] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1128.544614][ T5625] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1128.544696][ T5625] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1128.544779][ T5625] usb 3-1: Manufacturer: syz [ 1128.644783][ T5625] usb 3-1: config 0 descriptor?? [ 1129.180027][ T5625] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1129.389613][T11929] usb 3-1: USB disconnect, device number 28 [ 1131.935187][ T5625] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1132.506249][ T5625] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1132.506309][ T5625] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1132.506430][ T5625] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1132.556162][ T5625] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1132.556208][ T5625] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1132.556275][ T5625] usb 4-1: Manufacturer: syz [ 1133.505335][ T5625] usb 4-1: config 0 descriptor?? [ 1134.050264][ T5625] usb 4-1: can't set config #0, error -71 [ 1134.130607][ T5625] usb 4-1: USB disconnect, device number 30 [ 1134.483754][T15254] bridge0: port 1(bridge_slave_0) entered blocking state [ 1134.484246][T15254] bridge0: port 1(bridge_slave_0) entered disabled state [ 1134.484626][T15254] bridge_slave_0: entered allmulticast mode [ 1134.491718][T15254] bridge_slave_0: entered promiscuous mode [ 1134.504274][T15254] bridge0: port 2(bridge_slave_1) entered blocking state [ 1134.504572][T15254] bridge0: port 2(bridge_slave_1) entered disabled state [ 1134.506602][T15254] bridge_slave_1: entered allmulticast mode [ 1134.513050][T15254] bridge_slave_1: entered promiscuous mode [ 1134.765198][ T1457] bridge_slave_1: left allmulticast mode [ 1134.765238][ T1457] bridge_slave_1: left promiscuous mode [ 1134.765487][ T1457] bridge0: port 2(bridge_slave_1) entered disabled state [ 1134.859185][ T1457] bridge_slave_0: left allmulticast mode [ 1134.859227][ T1457] bridge_slave_0: left promiscuous mode [ 1134.859781][ T1457] bridge0: port 1(bridge_slave_0) entered disabled state [ 1135.270500][ T1457] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1135.456646][ T1457] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1135.537649][ T1457] bond0 (unregistering): Released all slaves [ 1137.410345][T15254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1137.504563][T15254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1137.655330][ T1457] hsr_slave_0: left promiscuous mode [ 1137.675318][ T1457] hsr_slave_1: left promiscuous mode [ 1137.676538][ T1457] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1137.717245][ T1457] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1138.343291][ T5627] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1138.401570][ T5627] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1138.440390][ T5627] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1138.472578][ T5627] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1138.481905][ T5627] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1138.825931][ T1457] team0 (unregistering): Port device team_slave_1 removed [ 1138.906416][ T1457] team0 (unregistering): Port device team_slave_0 removed [ 1140.146123][T11929] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1140.549994][T11929] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1140.551320][T11929] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1140.553861][T11929] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1140.573845][T11929] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1140.574519][T11929] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1140.575207][T11929] usb 4-1: Manufacturer: syz [ 1140.639877][T11929] usb 4-1: config 0 descriptor?? [ 1140.727351][T11288] Bluetooth: hci5: command tx timeout [ 1140.769044][T11929] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1141.308263][ T5748] usb 4-1: USB disconnect, device number 31 [ 1141.657663][T15254] team0: Port device team_slave_0 added [ 1141.754432][T15254] team0: Port device team_slave_1 added [ 1142.805140][T11288] Bluetooth: hci5: command tx timeout [ 1142.911061][T15254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1142.911080][T15254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1142.911111][T15254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1142.988510][T15254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1142.988528][T15254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1142.988559][T15254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1143.507789][T15254] hsr_slave_0: entered promiscuous mode [ 1143.510340][T15254] hsr_slave_1: entered promiscuous mode [ 1143.512077][T15254] debugfs: 'hsr0' already exists in 'hsr' [ 1143.512102][T15254] Cannot create hsr debugfs directory [ 1143.729885][T15500] fuse: Unknown parameter '0x0000000000000003' [ 1144.457743][ T5894] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1144.493331][ T5894] hid-generic 0000:0000:0000.000B: hidraw0: HID vff.ff Device [syz1] on syz0 [ 1144.885173][T11288] Bluetooth: hci5: command tx timeout [ 1144.932197][T15525] fuse: Unknown parameter '0x0000000000000003' [ 1144.936332][T14553] bridge_slave_1: left allmulticast mode [ 1144.936366][T14553] bridge_slave_1: left promiscuous mode [ 1144.936660][T14553] bridge0: port 2(bridge_slave_1) entered disabled state [ 1145.021419][T14553] bridge_slave_0: left allmulticast mode [ 1145.021456][T14553] bridge_slave_0: left promiscuous mode [ 1145.021776][T14553] bridge0: port 1(bridge_slave_0) entered disabled state [ 1145.570931][T14553] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1145.677266][T14553] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1145.726145][T15537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1853'. [ 1145.777814][T14553] bond0 (unregistering): Released all slaves [ 1145.812669][T15512] input: syz0 as /devices/virtual/input/input20 [ 1146.605128][ T5894] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1146.605827][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 1146.765079][ T5894] usb 3-1: device descriptor read/64, error -32 [ 1146.916622][T14553] hsr_slave_0: left promiscuous mode [ 1146.955051][T14553] hsr_slave_1: left promiscuous mode [ 1146.956703][T14553] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1146.965751][T11288] Bluetooth: hci5: command tx timeout [ 1146.996896][T14553] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1147.005354][ T5894] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1147.178509][ T5894] usb 3-1: no configurations [ 1147.178531][ T5894] usb 3-1: can't read configurations, error -22 [ 1147.179369][ T5894] usb usb3-port1: attempt power cycle [ 1147.497357][T14553] team0 (unregistering): Port device team_slave_1 removed [ 1147.536241][T14553] team0 (unregistering): Port device team_slave_0 removed [ 1147.575112][ T5894] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1147.596876][ T5894] usb 3-1: no configurations [ 1147.596899][ T5894] usb 3-1: can't read configurations, error -22 [ 1147.726782][ T5894] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1147.748996][ T5894] usb 3-1: no configurations [ 1147.749017][ T5894] usb 3-1: can't read configurations, error -22 [ 1147.749576][ T5894] usb usb3-port1: unable to enumerate USB device [ 1153.185885][ T5894] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1153.203813][ T5894] hid-generic 0000:0000:0000.000C: hidraw0: HID vff.ff Device [syz1] on syz0 [ 1155.888241][T15612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1875'. [ 1157.166094][T11929] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1157.312463][ C1] BUG: workqueue function usb_giveback_urb_bh changed kcov_mode from 0 to 2 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1157.562434][ C1] BUG: workqueue function usb_giveback_urb_bh changed kcov_mode from 2 to 0 [ 1157.749602][T11929] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1157.781919][T11929] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1157.782100][T11929] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1157.825497][T11929] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1157.825578][T11929] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1157.825643][T11929] usb 3-1: Manufacturer: syz [ 1158.993062][T11929] usb 3-1: config 0 descriptor?? [ 1159.003555][T11929] usb 3-1: can't set config #0, error -71 [ 1159.062546][T11929] usb 3-1: USB disconnect, device number 33 [ 1162.240577][T10576] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.646987][T10576] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.014319][T10576] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.408198][T10576] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1164.125705][T10576] bridge_slave_1: left allmulticast mode [ 1164.125747][T10576] bridge_slave_1: left promiscuous mode [ 1164.126080][T10576] bridge0: port 2(bridge_slave_1) entered disabled state [ 1164.216141][T10576] bridge_slave_0: left allmulticast mode [ 1164.216169][T10576] bridge_slave_0: left promiscuous mode [ 1164.216388][T10576] bridge0: port 1(bridge_slave_0) entered disabled state [ 1165.036292][T10576] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1165.117708][T10576] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1165.167402][T10576] bond0 (unregistering): Released all slaves [ 1167.145131][T10576] hsr_slave_0: left promiscuous mode [ 1167.185167][T10576] hsr_slave_1: left promiscuous mode [ 1167.186074][T10576] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1167.186096][T10576] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1167.206521][T10576] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1167.206550][T10576] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1167.301428][T10576] veth1_macvtap: left promiscuous mode [ 1167.301851][T10576] veth0_macvtap: left promiscuous mode [ 1167.302153][T10576] veth1_vlan: left promiscuous mode [ 1167.302339][T10576] veth0_vlan: left promiscuous mode