last executing test programs: 11m5.416182327s ago: executing program 2 (id=1276): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) symlink(0x0, &(0x7f0000000000)='./file0\x00') preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11m3.880840575s ago: executing program 2 (id=1280): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='thermal_power_devfreq_get_power\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) read$FUSE(r4, &(0x7f00000076c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3}, 0x18) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYRES32=r5, @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x101}, 0x18) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401000000000000000000090002002f797a2f0000"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x8, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x840}, 0x20040004) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, 0xffffffffffffffff, 0x0) syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) 11m1.947712514s ago: executing program 2 (id=1284): sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16], 0x1c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x101}, 0x18) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 11m1.712607599s ago: executing program 2 (id=1287): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x90040) syz_open_dev$vcsu(&(0x7f0000000240), 0x4, 0x100) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 11m0.70110731s ago: executing program 2 (id=1291): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r0 = getpid() r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505331, &(0x7f0000000240)={{0x8, 0x9}, {0x3, 0x6}, 0x2, 0x7, 0x2}) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f0000000480)={{0x3, 0x0, 0x1, 0x1, 0x4}, 0x0, 0x6, 'id0\x00', 'timer0\x00', 0x0, 0x0, 0x0, 0x0, 0xfc3c}) syz_emit_ethernet(0x5e, &(0x7f0000001a00)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x28, 0x3a, 0xff, @dev={0xfb}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1}}}}}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x40000, 0x6) syz_open_dev$usbmon(&(0x7f0000000040), 0x4, 0x900) recvfrom$unix(r6, &(0x7f0000000100)=""/133, 0x85, 0x40010101, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) getpid() r7 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) 10m59.323670942s ago: executing program 2 (id=1294): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='children\x00') socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee00]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0xc000400) syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user', @ANYBLOB=',gro', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006300)={0x2020}, 0x2020) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000300000784"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x9}, 0x94) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a339f2d30afddbdf4d200f070700000000000025862f00000001ffffffc3000000060000000087c32be695bfd3ead0084f", @ANYRES32=0x0, @ANYBLOB="de00fbffa611195cc93f0347080000"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) 10m43.764530323s ago: executing program 32 (id=1294): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='children\x00') socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee00]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0xc000400) syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user', @ANYBLOB=',gro', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006300)={0x2020}, 0x2020) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000300000784"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x9}, 0x94) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a339f2d30afddbdf4d200f070700000000000025862f00000001ffffffc3000000060000000087c32be695bfd3ead0084f", @ANYRES32=0x0, @ANYBLOB="de00fbffa611195cc93f0347080000"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) 6.940438437s ago: executing program 0 (id=3537): sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00'}, 0x18) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085", 0xcb}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 6.632394831s ago: executing program 0 (id=3538): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45", 0xc8}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 6.402433759s ago: executing program 0 (id=3540): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x80, 0x0, 0x4000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x300) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 6.267310748s ago: executing program 4 (id=3541): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000006300)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000390000000000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xab) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xdb6, &(0x7f0000004800)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0xd80, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x1d, 0xff, @private0, @private0={0xfc, 0x0, '\x00', 0x1}, [@srh={0x0, 0x6, 0x4, 0x3, 0x3, 0x0, 0x1d76, [@dev={0xfe, 0x80, '\x00', 0x31}, @rand_addr=' \x01\x00', @mcast1]}, @fragment={0x8, 0x0, 0x9, 0x0, 0x0, 0x7, 0x67}, @fragment={0x67, 0x0, 0x8, 0x1, 0x0, 0x5, 0x66}, @dstopts={0x2b, 0x4, '\x00', [@hao={0xc9, 0x10, @empty}, @hao={0xc9, 0x10, @local}]}, @routing={0x3a, 0xa, 0x0, 0x5, 0x0, [@mcast2, @local, @private0={0xfc, 0x0, '\x00', 0x1}, @local, @remote]}, @hopopts={0x62, 0x18d, '\x00', [@generic={0x2, 0xc67, "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"}]}, @routing={0x2e, 0x0, 0x2}]}}}}}}}, 0x0) 5.914722442s ago: executing program 4 (id=3543): sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r0}, 0x18) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e", 0xc2}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5.646747929s ago: executing program 4 (id=3548): sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00'}, 0x18) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f", 0xcd}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5.640200464s ago: executing program 0 (id=3549): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x23, 0x0, &(0x7f0000000000)) 5.514888335s ago: executing program 0 (id=3550): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmmsg$unix(r0, 0x0, 0x0, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000180)={{{@in=@private=0xa010102, @in6=@mcast1, 0x4e20, 0x0, 0x4e20, 0x0, 0x2, 0xa0, 0x20, 0x73, 0x0, 0xee00}, {0x8, 0x9, 0x81, 0x3a4, 0x4, 0x8, 0x6, 0x1}, {0x0, 0xff7fffffffff98c9, 0x3ff, 0xffff}, 0x0, 0x6e6bc0, 0x2, 0x0, 0x6, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, 0x4d3, 0x32}, 0x2, @in=@broadcast, 0x3500, 0x2, 0x1, 0x6, 0x0, 0x1, 0x5}}, 0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000030000005800018044000400200001000a000000000000000000000000000000400000000000000000000000200002000a00000000000000fc"], 0x6c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r3, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, 0x0, 0x0, 0x700, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, "7563928c1287aee0", "7a1dc8b556b44e6b447e7676310cf765", "b911e897", "7da2d95e1f2e9631"}, 0x28) setsockopt$inet6_tcp_int(r5, 0x11a, 0x4, &(0x7f00000000c0)=0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00'}) 5.45936569s ago: executing program 1 (id=3551): r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) r1 = syz_io_uring_setup(0x1725, &(0x7f0000000740)={0x0, 0xbe47, 0x10100, 0x0, 0xfffffffc}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r1, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) sendmsg$tipc(r4, 0x0, 0x0) 5.437147935s ago: executing program 5 (id=3552): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x14, 0x18, {0x8, @bearer=@udp='udp:syz0\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40001) r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), 0x0, 0x0, 0xfffffffffffffffe) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r1}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) 5.420452374s ago: executing program 4 (id=3553): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000940)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000080)={0x34, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000280)={0x40, 0x13}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.15927483s ago: executing program 1 (id=3554): r0 = add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$unlink(0x9, r1, r2) 5.079405731s ago: executing program 5 (id=3555): sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[], 0x1c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0}, 0x18) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4.953260342s ago: executing program 1 (id=3556): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x8000800000012) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) fsopen(&(0x7f0000000200)='ramfs\x00', 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)="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", 0x155}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffe8d}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18, 0x800}], 0x1, 0x40800) syz_usb_connect(0x4, 0x0, 0x0, 0x0) 4.666415448s ago: executing program 5 (id=3558): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000a40), 0x5d, 0x4000000) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_connect(0x5, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x2}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) 4.386673155s ago: executing program 3 (id=3560): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_setup(0xa, &(0x7f0000000680)={0x0, 0x34b, 0x800, 0x2, 0x2d, 0x0, r2}, &(0x7f0000000080)=0x0, &(0x7f0000000300)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) syz_io_uring_submit(r5, r4, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100, 0x23456}) io_uring_enter(r2, 0x627, 0xc1040000, 0x43, 0x0, 0x0) 2.683498899s ago: executing program 0 (id=3561): bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xc, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = getpid() r4 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0xddbf, 0x1, 0x3, 0x156}, &(0x7f0000000100), &(0x7f0000000000)) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000770000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r5}, 0x18) io_uring_register$IORING_REGISTER_BUFFERS2(r4, 0xf, &(0x7f00000003c0)={0x1, 0x1, 0x0, &(0x7f00000002c0)=[{0x0}], 0x0}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000080000000180100002020702500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000680)='sched_switch\x00', r8}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x66, 0x0) io_submit(0x0, 0x0, 0x0) dup3(r2, r1, 0x0) socket(0x10, 0x3, 0x0) fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="0200000001"], 0x48) 2.479971195s ago: executing program 3 (id=3562): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x23, 0x0, &(0x7f0000000000)) 2.336025838s ago: executing program 3 (id=3563): sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00'}, 0x18) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f", 0xcd}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.103898493s ago: executing program 3 (id=3564): r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000019c0)=""/4096, 0x1000}, {&(0x7f0000000180)=""/59, 0x3b}, {&(0x7f0000002e40)=""/260, 0x104}], 0x3}, 0xfffffffe}], 0x1, 0x40000022, 0x0) 1.51987771s ago: executing program 4 (id=3565): sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[], 0x1c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x101}, 0x18) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.22083051s ago: executing program 4 (id=3566): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, 0x0) r3 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000001c0)={0x0, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000000)={0x0, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) 1.091472291s ago: executing program 3 (id=3567): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="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", 0x174}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="d9811f946a6135512fb5bc84ff4e6534f1f82e8ea82f08349805d0b1772ad3b4e61a5a251e7da64c925e751e54d1c6fd65398229815f490a3446138174c9a774129306f50e4599a361dcccb49a918eda9c788c772dc1", 0x56}, {&(0x7f00000002c0)="c59b371437562fc61222c13a7fe96d4719a197db7b2bbbfcb5691325314935fd871d1e7d6656222a88107b47a47584b193ee73a103e6cbd1a0bb7c39b98b2a682ec5c105dbcbec5b944990d94b7bdf37972edfd0a3db0c785d7b1da887aec3f2a0854630fb1e93676fc10731f57c5040871c3c38", 0x74}, {&(0x7f0000000340)="6417be624b8bb8bc50daeb55345be2aefa4c4a64d6f2e25fc80bb5f935fadb554316ace61183ce877a7b474893da8050b0762e92bac72d0fed2bbb3105d7db1cbca4bcfb626916ca3fc0d285fd7c59ed8394d3fea56e1e291f41332556e6858cb9ce82bea2cc87e4022dd3cdabc60eea950dbebbc3dfbc82746c865300e52bb52f2e864f3e604b603aa319ddf75fed590d5a4f", 0x93}], 0x3}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000a00)="35ee794114cb483e00ee95482ced45ac186b84dc573446b6a5c008304f6654195f1aeeea1adc6c7815df6b7d83128affaa528d40708cf761c61639cd8a48", 0x3e}, {&(0x7f0000000a80)="61aa2885774534647a4b1627ae9836605a24f3ab2cfbf9d8e46f81428d62f187696b5d18a9d208803716b7e6", 0x2c}], 0x2}}], 0x3, 0x54004) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008034, 0x0, 0x0) 592.124017ms ago: executing program 5 (id=3568): sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[], 0x1c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 555.596772ms ago: executing program 1 (id=3569): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x28, r1, 0x1, 0x4, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004010}, 0x4004000) 191.626771ms ago: executing program 5 (id=3570): sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c"], 0x1c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x101}, 0x18) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 139.06597ms ago: executing program 3 (id=3571): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmmsg$unix(r0, 0x0, 0x0, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000180)={{{@in=@private=0xa010102, @in6=@mcast1, 0x4e20, 0x0, 0x4e20, 0x0, 0x2, 0xa0, 0x20, 0x73, 0x0, 0xee00}, {0x8, 0x9, 0x81, 0x3a4, 0x4, 0x8, 0x6, 0x1}, {0x0, 0xff7fffffffff98c9, 0x3ff, 0xffff}, 0x0, 0x6e6bc0, 0x2, 0x0, 0x6, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, 0x4d3, 0x32}, 0x2, @in=@broadcast, 0x3500, 0x2, 0x1, 0x6, 0x0, 0x1, 0x5}}, 0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000030000005800018044000400200001000a000000000000000000000000000000400000000000000000000000200002000a00000000000000fc"], 0x6c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r3, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, 0x0, 0x0, 0x700, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, "7563928c1287aee0", "7a1dc8b556b44e6b447e7676310cf765", "b911e897", "7da2d95e1f2e9631"}, 0x28) setsockopt$inet6_tcp_int(r5, 0x11a, 0x4, &(0x7f00000000c0)=0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00'}) 138.357188ms ago: executing program 1 (id=3572): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="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", 0x147}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="d9811f946a6135512fb5bc84ff4e6534f1f82e8ea82f08349805d0b1772ad3b4e61a5a251e7da64c925e751e54d1c6fd65398229815f490a3446138174c9a774129306f50e4599a361dcccb49a918eda9c788c772d", 0x55}, {&(0x7f00000002c0)="c59b371437562fc61222c13a7fe96d4719a197db7b2bbbfcb5691325314935fd871d1e7d6656222a88107b47a47584b193ee73a103e6cbd1a0bb7c39b98b2a682ec5c105dbcbec5b944990d94b7bdf37972edf", 0x53}, {&(0x7f0000000340)="6417be624b8bb8bc50daeb55345be2aefa4c4a64d6f2e25fc80bb5f935fadb554316ace61183ce877a7b474893da8050b0762e92bac72d0fed2bbb3105d7db1cbca4bcfb626916ca3fc0d285fd7c59ed8394d3fea56e1e291f41332556e6858cb9ce82bea2cc87e4022dd3cdabc60eea950dbebbc3dfbc82746c865300e52b", 0x7f}], 0x3}}], 0x2, 0x54004) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, 0x0, 0x0, 0x10008034, 0x0, 0x0) 19.868789ms ago: executing program 1 (id=3573): socket$unix(0x1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x5, 0x0, 0xb49, 0x9, 0xdbc8, 0x2, 0x3}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000680)={0xa, 0x4e24, 0xfffffffe, @mcast2, 0x20002}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff8, @ipv4}, 0x1c) socket$kcm(0x10, 0x2, 0x4) setsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r2, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r2, &(0x7f00000000c0)="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", 0x467, 0x6000000000000000, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) unshare(0x62040200) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040010) 0s ago: executing program 5 (id=3574): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8008}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x4}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0x1}]}}}]}, 0x44}}, 0x8000) madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x1) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) fcntl$getown(r2, 0x9) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000640)={0x8e, 0x9, 0x2a8595a080e25b94, 0xfffffffe, 0x7fff, 0x7fff, 0xd7, 0x80000000}, &(0x7f0000000680)=0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) kernel console output (not intermixed with test programs): .3.530'. [ 324.066925][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 326.437553][ T5788] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 326.587525][ T5788] usb 1-1: Using ep0 maxpacket: 16 [ 326.589954][ T5788] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 326.589979][ T5788] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 326.590018][ T5788] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 326.590039][ T5788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.667776][ T5788] usb 1-1: config 0 descriptor?? [ 326.690587][ T5788] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 326.744304][ T7637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.538'. [ 326.808434][ T7639] loop2: detected capacity change from 0 to 7 [ 326.828401][ T7639] Dev loop2: unable to read RDB block 7 [ 326.828432][ T7639] loop2: AHDI p1 p2 p3 [ 326.828455][ T7639] loop2: partition table partially beyond EOD, truncated [ 326.828666][ T7639] loop2: p1 start 1601398130 is beyond EOD, truncated [ 326.828683][ T7639] loop2: p2 start 1702059890 is beyond EOD, truncated [ 326.879858][ T6279] udevd[6279]: symlink '../../loop2' '/dev/disk/by-diskseq/73.tmp-b7:2' failed: Read-only file system [ 326.955815][ T6279] udevd[6279]: symlink '../../loop2' '/dev/disk/by-diskseq/73.tmp-b7:2' failed: Read-only file system [ 327.076799][ T6279] udevd[6279]: symlink '../../loop2' '/dev/disk/by-diskseq/73.tmp-b7:2' failed: Read-only file system [ 327.103183][ T6279] udevd[6279]: symlink '../../loop2' '/dev/disk/by-diskseq/73.tmp-b7:2' failed: Read-only file system [ 327.325110][ T7645] 8021q: adding VLAN 0 to HW filter on device bond1 [ 328.139003][ T7058] usb 1-1: USB disconnect, device number 13 [ 328.267642][ T6167] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 328.647732][ T6167] usb 5-1: Using ep0 maxpacket: 16 [ 328.652553][ T6167] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.652583][ T6167] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 328.652622][ T6167] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 328.652643][ T6167] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.228188][ T6167] usb 5-1: config 0 descriptor?? [ 329.689149][ T7675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.552'. [ 330.634522][ T7682] process 'syz.0.556' launched './file0' with NULL argv: empty string added [ 333.072664][ T6167] usbhid 5-1:0.0: can't add hid device: -71 [ 333.072780][ T6167] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 333.134169][ T6167] usb 5-1: USB disconnect, device number 16 [ 333.224366][ T7689] netlink: 36 bytes leftover after parsing attributes in process `syz.2.558'. [ 334.538111][ T6265] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 334.707631][ T6265] usb 4-1: Using ep0 maxpacket: 16 [ 334.749787][ T6265] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 334.749815][ T6265] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 334.749854][ T6265] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 334.749875][ T6265] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.753780][ T6265] usb 4-1: config 0 descriptor?? [ 334.834871][ T6265] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 335.084140][ T7710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.566'. [ 336.345114][ T6639] usb 4-1: USB disconnect, device number 18 [ 338.093411][ T7724] program syz.3.569 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 338.093561][ T7727] netlink: 36 bytes leftover after parsing attributes in process `syz.2.571'. [ 339.501644][ T6639] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 340.474851][ T6639] usb 2-1: Using ep0 maxpacket: 8 [ 340.525474][ T6639] usb 2-1: unable to get BOS descriptor or descriptor too short [ 340.526473][ T6639] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 340.526505][ T6639] usb 2-1: can't read configurations, error -71 [ 342.431902][ T7758] bridge0: port 3(syz_tun) entered blocking state [ 342.436215][ T7758] bridge0: port 3(syz_tun) entered disabled state [ 342.442028][ T7758] syz_tun: entered allmulticast mode [ 342.501936][ T7758] syz_tun: entered promiscuous mode [ 342.529325][ T7758] bridge0: port 3(syz_tun) entered blocking state [ 342.530686][ T7758] bridge0: port 3(syz_tun) entered forwarding state [ 343.226449][ T7763] netlink: 36 bytes leftover after parsing attributes in process `syz.1.584'. [ 345.936335][ T7783] program syz.4.591 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 347.545614][ T7798] netlink: 36 bytes leftover after parsing attributes in process `syz.2.598'. [ 348.042077][ T7817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.587'. [ 348.090829][ T7819] netlink: 44 bytes leftover after parsing attributes in process `syz.0.605'. [ 348.960468][ T7823] 9p: Bad value for 'wfdno' [ 349.379352][ T7832] netlink: 36 bytes leftover after parsing attributes in process `syz.0.610'. [ 350.737386][ T7844] loop2: detected capacity change from 0 to 7 [ 350.748238][ T7844] Dev loop2: unable to read RDB block 7 [ 350.748270][ T7844] loop2: AHDI p1 p2 p3 [ 350.748297][ T7844] loop2: partition table partially beyond EOD, truncated [ 350.748720][ T7844] loop2: p1 start 1601398130 is beyond EOD, truncated [ 350.748740][ T7844] loop2: p2 start 1702059890 is beyond EOD, truncated [ 352.003918][ T6279] udevd[6279]: symlink '../../loop2' '/dev/disk/by-diskseq/75.tmp-b7:2' failed: Read-only file system [ 352.042204][ T6279] udevd[6279]: symlink '../../loop2' '/dev/disk/by-diskseq/75.tmp-b7:2' failed: Read-only file system [ 352.109111][ T6279] udevd[6279]: symlink '../../loop2' '/dev/disk/by-diskseq/75.tmp-b7:2' failed: Read-only file system [ 352.154331][ T6279] udevd[6279]: symlink '../../loop2' '/dev/disk/by-diskseq/75.tmp-b7:2' failed: Read-only file system [ 352.195557][ T6279] udevd[6279]: symlink '../../loop2' '/dev/disk/by-diskseq/76.tmp-b7:2' failed: Read-only file system [ 353.089069][ T7870] netlink: 8 bytes leftover after parsing attributes in process `syz.4.619'. [ 355.777812][ T7905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.635'. [ 360.090844][ T7941] overlayfs: failed to clone upperpath [ 360.482181][ T7949] 9p: Bad value for 'wfdno' [ 363.955667][ T7961] netlink: 20 bytes leftover after parsing attributes in process `syz.3.654'. [ 364.067761][ T7961] 8021q: adding VLAN 0 to HW filter on device bond2 [ 364.532867][ T7980] netlink: 36 bytes leftover after parsing attributes in process `syz.4.659'. [ 370.170643][ T8015] netlink: 36 bytes leftover after parsing attributes in process `syz.4.672'. [ 372.794966][ T8029] fuse: Unknown parameter 'user' [ 376.779942][ T8061] netlink: 20 bytes leftover after parsing attributes in process `syz.1.668'. [ 376.823099][ T8065] netlink: 20 bytes leftover after parsing attributes in process `syz.0.686'. [ 376.937248][ T8061] 8021q: adding VLAN 0 to HW filter on device bond1 [ 382.667174][ T8107] netlink: 20 bytes leftover after parsing attributes in process `syz.1.699'. [ 390.615928][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 391.084823][ T8158] netlink: 20 bytes leftover after parsing attributes in process `syz.4.713'. [ 391.344179][ T8172] No control pipe specified [ 393.601894][ T8169] fuse: Unknown parameter 'user' [ 394.118892][ T8200] netlink: 20 bytes leftover after parsing attributes in process `syz.3.728'. [ 396.830176][ T8224] process '/newroot/175/file0' started with executable stack [ 397.135612][ T8232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.740'. [ 397.178692][ T8232] 8021q: adding VLAN 0 to HW filter on device bond2 [ 397.598915][ T8247] fuse: Unknown parameter 'user' [ 399.752287][ T8273] netlink: 20 bytes leftover after parsing attributes in process `syz.2.741'. [ 399.876033][ T8275] netlink: 8 bytes leftover after parsing attributes in process `syz.0.755'. [ 399.956362][ T8275] 8021q: adding VLAN 0 to HW filter on device bond3 [ 402.469225][ T6926] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 402.630124][ T6926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.630155][ T6926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.630168][ T6926] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 402.630200][ T6926] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 402.630211][ T6926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.633711][ T6926] usb 2-1: config 0 descriptor?? [ 402.925752][ T8327] netlink: 16 bytes leftover after parsing attributes in process `syz.3.776'. [ 403.274022][ T6926] usbhid 2-1:0.0: can't add hid device: -71 [ 403.274138][ T6926] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 404.085115][ T6926] usb 2-1: USB disconnect, device number 17 [ 406.571672][ T8372] overlayfs: failed to clone upperpath [ 407.186158][ T8382] bridge0: port 3(vlan2) entered blocking state [ 407.186289][ T8382] bridge0: port 3(vlan2) entered disabled state [ 407.186462][ T8382] vlan2: entered allmulticast mode [ 407.186476][ T8382] bridge0: entered allmulticast mode [ 407.339088][ T8382] vlan2: left allmulticast mode [ 407.339111][ T8382] bridge0: left allmulticast mode [ 415.441535][ T8452] bridge0: port 3(vlan2) entered blocking state [ 415.441669][ T8452] bridge0: port 3(vlan2) entered disabled state [ 415.441834][ T8452] vlan2: entered allmulticast mode [ 415.441849][ T8452] bridge0: entered allmulticast mode [ 415.598953][ T8452] vlan2: left allmulticast mode [ 415.598975][ T8452] bridge0: left allmulticast mode [ 417.425872][ T8492] 8021q: adding VLAN 0 to HW filter on device bond2 [ 417.593738][ T8501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.835'. [ 420.081831][ T8550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.854'. [ 422.842309][ T8573] syz.2.859 (8573) used greatest stack depth: 18336 bytes left [ 425.325753][ T8602] netlink: 8 bytes leftover after parsing attributes in process `syz.4.872'. [ 435.179843][ T8701] fuse: Unknown parameter 'user' [ 451.248873][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 460.788311][ T8976] autofs: Bad value for 'fd' [ 460.819827][ T8970] fuse: Unknown parameter 'user' [ 462.194673][ T8994] fuse: Unknown parameter 'user' [ 465.034654][ T9009] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1006'. [ 466.337337][ T9018] autofs: Bad value for 'fd' [ 467.434452][ T9038] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1018'. [ 469.166009][ T9053] autofs: Bad value for 'fd' [ 472.715539][ T9094] fuse: Unknown parameter 'user' [ 473.663078][ T9098] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1034'. [ 477.530512][ T9130] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1043'. [ 482.239316][ T9168] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1058'. [ 503.905122][ T9377] fuse: Unknown parameter 'user' [ 508.415247][ T9413] bridge0: port 3(vlan2) entered blocking state [ 508.415322][ T9413] bridge0: port 3(vlan2) entered disabled state [ 508.415420][ T9413] vlan2: entered allmulticast mode [ 508.415429][ T9413] bridge0: entered allmulticast mode [ 508.450877][ T9413] vlan2: left allmulticast mode [ 508.450899][ T9413] bridge0: left allmulticast mode [ 512.530508][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 521.324721][ T9591] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1203'. [ 523.297027][ T9629] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1215'. [ 523.625922][ T9638] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1218'. [ 527.908463][ T9681] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1231'. [ 528.185552][ T9692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1236'. [ 531.608642][ T9719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1245'. [ 536.050518][ T9761] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1258'. [ 542.771511][ T9843] fuse: Unknown parameter 'user' [ 545.299621][ T9871] fuse: Unknown parameter 'user' [ 563.095694][ T5815] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 563.116483][ T5815] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 563.119216][ T5815] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 563.135449][ T5815] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 563.136594][ T5815] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 565.565439][ T9999] bridge0: port 4(vlan2) entered blocking state [ 565.565572][ T9999] bridge0: port 4(vlan2) entered disabled state [ 565.565741][ T9999] vlan2: entered allmulticast mode [ 565.565763][ T9999] bridge0: entered allmulticast mode [ 565.637462][ T5118] Bluetooth: hci5: command tx timeout [ 565.718963][ T9999] vlan2: left allmulticast mode [ 565.718986][ T9999] bridge0: left allmulticast mode [ 566.734503][T10008] fuse: Unknown parameter 'user' [ 568.053541][ T5118] Bluetooth: hci5: command tx timeout [ 570.493217][ T5118] Bluetooth: hci5: command tx timeout [ 573.027580][ T5118] Bluetooth: hci5: command tx timeout [ 573.223326][ T8865] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.862658][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 573.904094][ T8865] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.636560][ T9973] chnl_net:caif_netlink_parms(): no params data found [ 574.911066][T10093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1364'. [ 575.422848][ T8865] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.201096][ T8865] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.539080][T10131] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1377'. [ 578.540656][ T9973] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.542254][ T9973] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.542485][ T9973] bridge_slave_0: entered allmulticast mode [ 578.580904][ T9973] bridge_slave_0: entered promiscuous mode [ 578.595334][ T9973] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.595538][ T9973] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.595771][ T9973] bridge_slave_1: entered allmulticast mode [ 578.622540][ T9973] bridge_slave_1: entered promiscuous mode [ 579.959577][ T9973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 579.975397][ T9973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 580.115004][T10169] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1392'. [ 581.231575][ T9973] team0: Port device team_slave_0 added [ 582.389088][ T9973] team0: Port device team_slave_1 added [ 583.907484][ T9973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 583.907502][ T9973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 583.907527][ T9973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 583.912474][ T9973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 583.912489][ T9973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 583.912514][ T9973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 584.033388][ T8865] bridge_slave_1: left allmulticast mode [ 584.033682][ T8865] bridge_slave_1: left promiscuous mode [ 584.034673][ T8865] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.595382][ T8865] bridge_slave_0: left allmulticast mode [ 584.708431][ T8865] bridge_slave_0: left promiscuous mode [ 584.963768][ T8865] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.602660][ T8865] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 587.668161][ T8865] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 587.689730][ T8865] bond0 (unregistering): Released all slaves [ 588.360676][ T8865] bond1 (unregistering): Released all slaves [ 589.040141][ T8865] bond2 (unregistering): Released all slaves [ 589.626447][T10248] fuse: Unknown parameter 'user' [ 590.294058][ T9973] hsr_slave_0: entered promiscuous mode [ 590.295490][ T9973] hsr_slave_1: entered promiscuous mode [ 590.296571][ T9973] debugfs: 'hsr0' already exists in 'hsr' [ 590.296594][ T9973] Cannot create hsr debugfs directory [ 592.639586][T10281] netlink: 'syz.3.1425': attribute type 4 has an invalid length. [ 596.703891][T10337] fuse: Unknown parameter 'user' [ 599.207845][ T8865] hsr_slave_0: left promiscuous mode [ 599.247567][ T8865] hsr_slave_1: left promiscuous mode [ 599.254243][ T8865] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 599.254339][ T8865] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 599.299415][ T8865] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 599.299443][ T8865] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 599.427181][ T8865] veth1_macvtap: left promiscuous mode [ 599.437543][ T8865] veth0_macvtap: left promiscuous mode [ 599.437980][ T8865] veth1_vlan: left promiscuous mode [ 599.441074][ T8865] veth0_vlan: left promiscuous mode [ 601.788072][ T8865] team0 (unregistering): Port device team_slave_1 removed [ 601.999471][ T8865] team0 (unregistering): Port device team_slave_0 removed [ 604.815899][T10372] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1453'. [ 604.870568][ T9973] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 605.708981][ T9973] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 605.736879][ T9973] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 605.793977][ T9973] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 605.827994][T10394] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1455'. [ 606.133247][ T9973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 606.180697][ T9973] 8021q: adding VLAN 0 to HW filter on device team0 [ 606.261168][ T9973] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 606.261193][ T9973] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 606.333297][ T2129] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.356975][ T2129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 606.360342][ T2129] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.360473][ T2129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 606.775545][T10412] lo speed is unknown, defaulting to 1000 [ 606.781501][T10412] lo speed is unknown, defaulting to 1000 [ 606.842881][T10412] lo speed is unknown, defaulting to 1000 [ 606.912274][T10412] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 606.920890][T10412] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 606.993787][T10412] lo speed is unknown, defaulting to 1000 [ 606.999077][T10412] lo speed is unknown, defaulting to 1000 [ 607.002128][T10412] lo speed is unknown, defaulting to 1000 [ 607.005105][T10412] lo speed is unknown, defaulting to 1000 [ 607.007654][T10412] lo speed is unknown, defaulting to 1000 [ 608.886634][T10444] capability: warning: `syz.4.1470' uses 32-bit capabilities (legacy support in use) [ 609.078690][ T9973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 609.348654][T10453] fuse: Unknown parameter 'user' [ 614.112803][ T9973] veth0_vlan: entered promiscuous mode [ 614.163836][ T9973] veth1_vlan: entered promiscuous mode [ 614.323533][ T9973] veth0_macvtap: entered promiscuous mode [ 614.372700][ T9973] veth1_macvtap: entered promiscuous mode [ 614.471235][ T9973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 614.511991][ T9973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 614.568341][ T6337] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.572462][ T6337] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.572669][ T6337] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.572703][ T6337] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.040317][ T4145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 616.040338][ T4145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 616.166551][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 616.166572][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 618.955585][T10586] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1510'. [ 625.551342][T10665] program syz.5.1534 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 630.635007][T10744] 9pnet_fd: p9_fd_create_tcp (10744): problem connecting socket to 127.0.0.1 [ 630.644193][T10744] 9pnet_fd: p9_fd_create_tcp (10744): problem connecting socket to 127.0.0.1 [ 630.652908][T10744] 9pnet_fd: p9_fd_create_tcp (10744): problem connecting socket to 127.0.0.1 [ 630.672475][T10744] 9pnet_fd: p9_fd_create_tcp (10744): problem connecting socket to 127.0.0.1 [ 630.683214][T10744] 9pnet_fd: p9_fd_create_tcp (10744): problem connecting socket to 127.0.0.1 [ 630.686724][T10744] 9pnet_fd: p9_fd_create_tcp (10744): problem connecting socket to 127.0.0.1 [ 630.691708][T10744] 9pnet_fd: p9_fd_create_tcp (10744): problem connecting socket to 127.0.0.1 [ 630.707985][T10744] 9pnet_fd: p9_fd_create_tcp (10744): problem connecting socket to 127.0.0.1 [ 630.716175][T10744] 9pnet_fd: p9_fd_create_tcp (10744): problem connecting socket to 127.0.0.1 [ 630.722607][T10744] 9pnet_fd: p9_fd_create_tcp (10744): problem connecting socket to 127.0.0.1 [ 630.727948][T10744] 9pnet_fd: p9_fd_create_tcp (10744): problem connecting socket to 127.0.0.1 [ 630.730775][T10744] 9pnet_fd: p9_fd_create_tcp (10744): problem connecting socket to 127.0.0.1 [ 630.738000][T10744] 9pnet_fd: p9_fd_create_tcp (10744): problem connecting socket to 127.0.0.1 [ 630.742194][T10744] 9pnet_fd: p9_fd_create_tcp (10744): problem connecting socket to 127.0.0.1 [ 630.783688][T10744] 9pnet_fd: p9_fd_create_tcp (10744): problem connecting socket to 127.0.0.1 [ 630.786802][T10744] 9pnet_fd: p9_fd_create_tcp (10744): problem connecting socket to 127.0.0.1 [ 630.788592][T10744] 9pnet_fd: p9_fd_create_tcp (10744): problem connecting socket to 127.0.0.1 [ 630.789952][T10744] 9pnet_fd: p9_fd_create_tcp (10744): problem connecting socket to 127.0.0.1 [ 630.791337][T10744] 9pnet_fd: p9_fd_create_tcp (10744): problem connecting socket to 127.0.0.1 [ 630.792512][T10744] 9pnet_fd: p9_fd_create_tcp (10744): problem connecting socket to 127.0.0.1 [ 630.793715][T10744] 9pnet_fd: p9_fd_create_tcp (10744): problem connecting socket to 127.0.0.1 [ 630.794882][T10744] 9pnet_fd: p9_fd_create_tcp (10744): problem connecting socket to 127.0.0.1 [ 630.797027][T10744] 9pnet_fd: p9_fd_create_tcp (10744): problem connecting socket to 127.0.0.1 [ 630.798442][T10744] 9pnet_fd: p9_fd_create_tcp (10744): problem connecting socket to 127.0.0.1 [ 630.799805][T10744] 9pnet_fd: p9_fd_create_tcp (10744): problem connecting socket to 127.0.0.1 [ 630.811924][T10744] 9pnet_fd: p9_fd_create_tcp (10744): problem connecting socket to 127.0.0.1 [ 630.816215][T10744] 9pnet_fd: p9_fd_create_tcp (10744): problem connecting socket to 127.0.0.1 [ 630.819889][T10744] 9pnet_fd: p9_fd_create_tcp (10744): problem connecting socket to 127.0.0.1 [ 630.821513][T10744] 9pnet_fd: p9_fd_create_tcp (10744): problem connecting socket to 127.0.0.1 [ 630.839455][T10744] 9pnet_fd: p9_fd_create_tcp (10744): problem connecting socket to 127.0.0.1 [ 630.842779][T10744] 9pnet_fd: p9_fd_create_tcp (10744): problem connecting socket to 127.0.0.1 [ 630.851905][T10744] 9pnet_fd: p9_fd_create_tcp (10744): problem connecting socket to 127.0.0.1 [ 630.858788][T10744] 9pnet_fd: p9_fd_create_tcp (10744): problem connecting socket to 127.0.0.1 [ 630.873003][T10744] 9pnet_fd: p9_fd_create_tcp (10744): problem connecting socket to 127.0.0.1 [ 630.876864][T10744] 9pnet_fd: p9_fd_create_tcp (10744): problem connecting socket to 127.0.0.1 [ 630.884337][T10744] 9pnet_fd: p9_fd_create_tcp (10744): problem connecting socket to 127.0.0.1 [ 630.888808][T10744] 9pnet_fd: p9_fd_create_tcp (10744): problem connecting socket to 127.0.0.1 [ 630.893387][T10744] 9pnet_fd: p9_fd_create_tcp (10744): problem connecting socket to 127.0.0.1 [ 630.899022][T10744] 9pnet_fd: p9_fd_create_tcp (10744): problem connecting socket to 127.0.0.1 [ 630.903545][T10744] 9pnet_fd: p9_fd_create_tcp (10744): problem connecting socket to 127.0.0.1 [ 630.907671][T10744] 9pnet_fd: p9_fd_create_tcp (10744): problem connecting socket to 127.0.0.1 [ 630.928052][T10744] 9pnet_fd: p9_fd_create_tcp (10744): problem connecting socket to 127.0.0.1 [ 630.941341][T10744] 9pnet_fd: p9_fd_create_tcp (10744): problem connecting socket to 127.0.0.1 [ 630.943780][T10744] 9pnet_fd: p9_fd_create_tcp (10744): problem connecting socket to 127.0.0.1 [ 631.170342][T10744] 9pnet_fd: p9_fd_create_tcp (10744): problem connecting socket to 127.0.0.1 [ 631.176301][T10744] 9pnet_fd: p9_fd_create_tcp (10744): problem connecting socket to 127.0.0.1 [ 631.177825][T10744] 9pnet_fd: p9_fd_create_tcp (10744): problem connecting socket to 127.0.0.1 [ 631.210425][T10744] 9pnet_fd: p9_fd_create_tcp (10744): problem connecting socket to 127.0.0.1 [ 631.761701][T10744] 9pnet_fd: p9_fd_create_tcp (10744): problem connecting socket to 127.0.0.1 [ 634.027836][T10783] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1576'. [ 634.865087][T10791] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1578'. [ 635.347043][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 639.900817][T10868] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1600'. [ 642.847678][T10918] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1618'. [ 644.330806][ T824] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 645.565984][ T824] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 645.566011][ T824] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.566028][ T824] usb 6-1: Product: syz [ 645.566041][ T824] usb 6-1: Manufacturer: syz [ 645.566053][ T824] usb 6-1: SerialNumber: syz [ 645.621253][ T824] usb 6-1: config 0 descriptor?? [ 645.827437][ T824] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 646.028385][ T824] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 648.549893][ T5905] usb 6-1: USB disconnect, device number 2 [ 653.747896][T11128] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1686'. [ 653.747921][T11128] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1686'. [ 653.747936][T11128] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1686'. [ 653.975280][T11136] program syz.5.1688 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 653.982998][T11128] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1686'. [ 653.983024][T11128] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1686'. [ 653.983038][T11128] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1686'. [ 660.868611][T11220] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1719'. [ 666.034750][T11263] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1731'. [ 668.846152][T11308] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1748'. [ 688.796437][ T5815] Bluetooth: hci5: command 0x0406 tx timeout [ 692.080179][T11509] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1820'. [ 692.155323][T11511] program syz.5.1821 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 694.312316][T11524] 9pnet_virtio: no channels available for device syz [ 696.826793][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 699.237924][T11551] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1835'. [ 700.864838][T11565] 9pnet_virtio: no channels available for device syz [ 701.173506][T11576] 9pnet_virtio: no channels available for device syz [ 704.020777][T11607] overlayfs: failed to clone upperpath [ 706.082794][T11629] 9pnet_virtio: no channels available for device syz [ 706.815179][T11634] overlayfs: failed to resolve './file1/file0': -2 [ 707.696521][T11640] 9pnet_virtio: no channels available for device syz [ 707.827049][T11637] overlayfs: failed to clone upperpath [ 708.102799][T11647] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1866'. [ 709.000841][T11659] 9pnet_virtio: no channels available for device syz [ 709.314856][T11664] 9pnet_virtio: no channels available for device syz [ 710.888163][T11678] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1877'. [ 710.994102][T11675] overlayfs: failed to clone upperpath [ 717.227767][T11729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1893'. [ 717.227813][T11729] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1893'. [ 717.871276][T11734] 9pnet_virtio: no channels available for device syz [ 719.966763][T11766] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1905'. [ 720.086797][T11768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1906'. [ 720.086826][T11768] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1906'. [ 720.744883][T11778] 9pnet_virtio: no channels available for device syz [ 720.871200][T11782] 9pnet_virtio: no channels available for device syz [ 721.459777][T11794] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1917'. [ 721.459806][T11794] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1917'. [ 722.274468][T11799] overlayfs: failed to clone upperpath [ 724.313326][T11826] 9pnet_virtio: no channels available for device syz [ 725.609935][T11843] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1932'. [ 725.611154][T11842] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1933'. [ 726.717154][T11849] 9pnet_virtio: no channels available for device syz [ 728.450814][T11877] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1945'. [ 728.769789][T11883] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1949'. [ 728.769814][T11883] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1949'. [ 728.769829][T11883] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1949'. [ 728.870434][T11883] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1949'. [ 728.870452][T11883] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1949'. [ 728.870460][T11883] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1949'. [ 728.940528][T11889] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1948'. [ 731.442451][T11917] overlayfs: failed to resolve './file1/file0': -2 [ 731.561558][T11916] overlayfs: failed to clone upperpath [ 734.693948][T11926] overlayfs: failed to clone upperpath [ 737.859482][T11942] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1962'. [ 739.061204][T11949] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1964'. [ 739.061232][T11949] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1964'. [ 739.061247][T11949] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1964'. [ 739.101210][T11948] 9pnet_virtio: no channels available for device syz [ 739.190750][T11953] 9pnet_virtio: no channels available for device syz [ 739.821136][T11965] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1971'. [ 739.844386][T11949] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1964'. [ 739.844410][T11949] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1964'. [ 739.844425][T11949] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1964'. [ 740.053013][T11970] 9pnet_virtio: no channels available for device syz [ 742.758978][T11986] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 4Ï€!F€õïVl‘uc'f`å”Þ†’;œ1µ [ 743.363324][T11987] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1977'. [ 745.545411][T12013] overlayfs: failed to clone upperpath [ 749.180452][T12049] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1993'. [ 751.046967][T12075] 9pnet_virtio: no channels available for device syz [ 751.263318][T12082] overlayfs: failed to clone upperpath [ 756.101235][T12163] 9pnet_virtio: no channels available for device syz [ 758.716845][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 759.965095][T12201] overlayfs: failed to clone upperpath [ 763.821811][T12251] 9pnet_virtio: no channels available for device syz [ 773.723165][T12341] 9pnet_virtio: no channels available for device syz [ 788.924340][T12526] 9pnet_virtio: no channels available for device syz [ 797.229021][T12583] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2167'. [ 798.365660][T12599] sysfs: cannot create duplicate filename '/class/ieee80211/4Ï€!F€õïVl‘uc'f`å”Þ†’;œ1µx%' [ 798.365762][T12599] CPU: 1 UID: 0 PID: 12599 Comm: syz.5.2176 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 798.365788][T12599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 798.365808][T12599] Call Trace: [ 798.365821][T12599] [ 798.365830][T12599] dump_stack_lvl+0xe8/0x150 [ 798.365873][T12599] sysfs_warn_dup+0x8e/0xa0 [ 798.365902][T12599] sysfs_do_create_link_sd+0xc0/0x110 [ 798.365939][T12599] device_add_class_symlinks+0x1d2/0x240 [ 798.365967][T12599] device_add+0x475/0xb80 [ 798.365993][T12599] wiphy_register+0x1d2e/0x2d20 [ 798.366036][T12599] ? __pfx_wiphy_register+0x10/0x10 [ 798.366061][T12599] ? __pfx_netdev_run_todo+0x10/0x10 [ 798.366089][T12599] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 798.366118][T12599] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 798.366153][T12599] ieee80211_register_hw+0x34a7/0x4110 [ 798.366189][T12599] ? ieee80211_register_hw+0x13d1/0x4110 [ 798.366221][T12599] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 798.366262][T12599] ? __hrtimer_setup+0x184/0x200 [ 798.366280][T12599] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 798.366309][T12599] mac80211_hwsim_new_radio+0x2ef5/0x5210 [ 798.366345][T12599] ? mac80211_hwsim_new_radio+0x106/0x5210 [ 798.366386][T12599] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 798.366407][T12599] ? kstrndup+0xbf/0x160 [ 798.366439][T12599] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 798.366468][T12599] ? __pfx___nla_validate_parse+0x10/0x10 [ 798.366511][T12599] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 798.366539][T12599] ? rcu_is_watching+0x15/0xb0 [ 798.366563][T12599] ? __nla_parse+0x40/0x60 [ 798.366594][T12599] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 798.366624][T12599] genl_family_rcv_msg_doit+0x215/0x300 [ 798.366652][T12599] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 798.366686][T12599] ? bpf_lsm_capable+0x9/0x20 [ 798.366704][T12599] ? security_capable+0x7e/0x2e0 [ 798.366730][T12599] genl_rcv_msg+0x60e/0x790 [ 798.366757][T12599] ? __pfx_genl_rcv_msg+0x10/0x10 [ 798.366775][T12599] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 798.366813][T12599] netlink_rcv_skb+0x208/0x470 [ 798.366839][T12599] ? __pfx_genl_rcv_msg+0x10/0x10 [ 798.366860][T12599] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 798.366912][T12599] genl_rcv+0x28/0x40 [ 798.366933][T12599] netlink_unicast+0x846/0xa10 [ 798.366966][T12599] ? __pfx_netlink_unicast+0x10/0x10 [ 798.366989][T12599] ? netlink_sendmsg+0x6c0/0xb30 [ 798.367021][T12599] netlink_sendmsg+0x805/0xb30 [ 798.367057][T12599] ? __pfx_netlink_sendmsg+0x10/0x10 [ 798.367091][T12599] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 798.367115][T12599] ? __pfx_netlink_sendmsg+0x10/0x10 [ 798.367141][T12599] __sock_sendmsg+0x21c/0x270 [ 798.367174][T12599] ____sys_sendmsg+0x508/0x810 [ 798.367204][T12599] ? __pfx_____sys_sendmsg+0x10/0x10 [ 798.367240][T12599] ? import_iovec+0x74/0xa0 [ 798.367260][T12599] ___sys_sendmsg+0x21f/0x2a0 [ 798.367282][T12599] ? __pfx____sys_sendmsg+0x10/0x10 [ 798.367311][T12599] ? trace_sched_exit_tp+0x36/0xf0 [ 798.367339][T12599] ? __schedule+0x1475/0x5070 [ 798.367397][T12599] ? __fget_files+0x2a/0x420 [ 798.367417][T12599] ? __fget_files+0x3a6/0x420 [ 798.367449][T12599] __x64_sys_sendmsg+0x1a1/0x260 [ 798.367476][T12599] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 798.367528][T12599] do_syscall_64+0xec/0xf80 [ 798.367546][T12599] ? rcu_is_watching+0x15/0xb0 [ 798.367562][T12599] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.367582][T12599] ? clear_bhb_loop+0x60/0xb0 [ 798.367606][T12599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.367625][T12599] RIP: 0033:0x7fb2a710f749 [ 798.367657][T12599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 798.367674][T12599] RSP: 002b:00007fb2a532c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 798.367696][T12599] RAX: ffffffffffffffda RBX: 00007fb2a7366180 RCX: 00007fb2a710f749 [ 798.367711][T12599] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000005 [ 798.367725][T12599] RBP: 00007fb2a7193f91 R08: 0000000000000000 R09: 0000000000000000 [ 798.367737][T12599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 798.367749][T12599] R13: 00007fb2a7366218 R14: 00007fb2a7366180 R15: 00007ffc09c5ae98 [ 798.367783][T12599] [ 798.762134][T12600] overlayfs: failed to clone upperpath [ 802.202046][T12636] program syz.5.2188 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 802.385567][T12641] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2189'. [ 802.969035][T12640] 9pnet_virtio: no channels available for device syz [ 803.018150][T12644] 9pnet_virtio: no channels available for device syz [ 803.798548][T12654] 9pnet_virtio: no channels available for device syz [ 804.765507][T12687] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2205'. [ 804.856394][T12693] 9pnet_virtio: no channels available for device syz [ 807.887700][T12738] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2223'. [ 809.908190][T12774] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2238'. [ 812.417392][ T6926] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 812.587807][ T6926] usb 6-1: Using ep0 maxpacket: 8 [ 812.597386][ T6926] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 812.597413][ T6926] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 812.597435][ T6926] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 812.597456][ T6926] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 812.597494][ T6926] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 812.597515][ T6926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.921581][ T6926] usb 6-1: GET_CAPABILITIES returned 0 [ 812.921609][ T6926] usbtmc 6-1:16.0: can't read capabilities [ 814.869635][ T6926] usb 6-1: USB disconnect, device number 3 [ 815.014493][T12814] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2249'. [ 817.384427][T12835] Process accounting resumed [ 819.549703][T12853] 9pnet_virtio: no channels available for device syz [ 820.179787][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 820.417675][T12864] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2267'. [ 825.244812][T12900] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2279'. [ 825.245890][T12900] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2279'. [ 828.308810][T12900] Process accounting resumed [ 828.761224][T12917] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2284'. [ 830.817605][T12926] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2288'. [ 830.817661][T12926] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2288'. [ 831.917587][T12926] Process accounting resumed [ 832.285526][T12954] netlink: 105 bytes leftover after parsing attributes in process `syz.0.2296'. [ 832.286287][T12954] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2296'. [ 832.422561][T12958] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2297'. [ 834.218537][T12975] 9pnet_virtio: no channels available for device syz [ 835.535559][T12980] overlayfs: overlapping lowerdir path [ 836.285744][T13006] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2309'. [ 837.576623][T12986] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2306'. [ 837.576650][T12986] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2306'. [ 837.576665][T12986] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2306'. [ 837.800197][T13018] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2313'. [ 838.845828][T13032] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2316'. [ 838.846257][T13032] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2316'. [ 839.773034][T13032] Process accounting resumed [ 840.144669][T13044] 9pnet_virtio: no channels available for device syz [ 840.306764][T13051] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2323'. [ 842.873641][T13073] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2326'. [ 843.969510][T13104] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2338'. [ 846.026805][T13122] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2342'. [ 846.026870][T13122] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2342'. [ 846.935729][T13122] Process accounting resumed [ 847.238997][T13134] netlink: 'syz.5.2349': attribute type 10 has an invalid length. [ 847.239012][T13134] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2349'. [ 847.466092][T13134] team0: Failed to send options change via netlink (err -105) [ 847.466117][T13134] team0: Port device geneve0 added [ 850.741143][T13172] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2360'. [ 850.741647][T13172] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2360'. [ 851.660381][T13172] Process accounting resumed [ 851.804492][T13178] netlink: 'syz.3.2364': attribute type 2 has an invalid length. [ 855.143249][T13216] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.2374'. [ 856.348590][T13223] Process accounting resumed [ 862.221837][T13286] netlink: 'syz.4.2400': attribute type 10 has an invalid length. [ 862.221860][T13286] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2400'. [ 863.306386][T13286] team0: Port device geneve0 added [ 863.695390][T13301] 9p: Bad value for 'wfdno' [ 867.095313][T13370] netlink: 'syz.3.2431': attribute type 10 has an invalid length. [ 867.095333][T13370] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2431'. [ 867.177022][T13370] team0: Port device geneve0 added [ 867.286181][T13381] netlink: 'syz.3.2435': attribute type 10 has an invalid length. [ 867.286360][T13381] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2435'. [ 868.624592][T13403] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2442'. [ 868.912255][T13396] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.587958][ T5888] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 869.655084][T13396] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.325313][ T5888] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 870.325346][ T5888] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 870.325372][ T5888] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 870.366167][ T5888] usb 6-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 870.366197][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.366216][ T5888] usb 6-1: Product: syz [ 870.366230][ T5888] usb 6-1: Manufacturer: syz [ 870.366243][ T5888] usb 6-1: SerialNumber: syz [ 870.402374][ T5888] usb 6-1: config 0 descriptor?? [ 870.497826][ T7247] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 870.851094][T13396] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.876633][ T5888] powermate: Expected payload of 3--6 bytes, found 0 bytes! [ 870.884874][ T5888] powermate 6-1:0.0: probe with driver powermate failed with error -5 [ 870.919396][ T5888] usb 6-1: USB disconnect, device number 4 [ 871.283854][T13396] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.517921][T13463] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2467'. [ 873.536282][ T9000] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.557283][ T9000] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.577895][T11601] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.624090][T11601] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.348200][T13497] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2481'. [ 877.554960][T13519] 9p: Bad value for 'wfdno' [ 877.556377][T13518] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2489'. [ 878.333554][ T5889] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 878.687351][ T5889] usb 6-1: Using ep0 maxpacket: 8 [ 878.696072][ T5889] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 878.696100][ T5889] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 878.696118][ T5889] usb 6-1: config 0 has no interface number 0 [ 878.735250][ T5889] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 878.735279][ T5889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.735304][ T5889] usb 6-1: Product: syz [ 878.735318][ T5889] usb 6-1: Manufacturer: syz [ 878.735332][ T5889] usb 6-1: SerialNumber: syz [ 878.779715][ T5889] usb 6-1: config 0 descriptor?? [ 878.799036][ T5889] uvcvideo 6-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 878.799077][ T5889] uvcvideo 6-1:0.31: No valid video chain found. [ 878.844814][T13542] netlink: 'syz.4.2498': attribute type 10 has an invalid length. [ 878.844838][T13542] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2498'. [ 879.026177][ T5889] usb 6-1: USB disconnect, device number 5 [ 879.158560][T13555] 9p: Bad value for 'wfdno' [ 879.291474][T13564] netlink: 'syz.3.2507': attribute type 10 has an invalid length. [ 879.291498][T13564] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2507'. [ 881.059085][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 881.858992][T13578] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.454433][T13578] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.816918][T13578] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.213674][T13578] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.476556][ C1] wlan0: beacon TX faster than countdown (channel/color switch) completion [ 887.935021][ T1314] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.174945][ T1226] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.083531][ T6015] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.217809][ T6015] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.087458][ T6478] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 891.090391][T13692] netlink: 'syz.3.2551': attribute type 10 has an invalid length. [ 891.090411][T13692] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2551'. [ 891.372756][ T6478] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 891.372803][ T6478] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 891.372824][ T6478] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 891.372835][ T6478] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.387568][ T6478] usb 6-1: config 0 descriptor?? [ 892.002488][ T6478] usbhid 6-1:0.0: can't add hid device: -71 [ 892.002568][ T6478] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 892.008219][ T6478] usb 6-1: USB disconnect, device number 6 [ 896.934694][T13756] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2573'. [ 897.860205][ T9000] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 897.862971][T13756] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2573'. [ 897.863357][ T9000] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 897.864075][ T9000] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 897.864115][ T9000] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 898.053893][T13760] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.557690][T13760] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.377906][T13760] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 901.394078][T13760] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.973859][T13816] Illegal XDP return value 453600225 on prog (id 293) dev syz_tun, expect packet loss! [ 903.156955][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.269261][ T9000] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.363260][ T8865] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.402509][ T41] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.551164][T13871] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2614'. [ 908.551653][T13871] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2614'. [ 914.318124][ T7058] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 914.494068][ T7058] usb 6-1: config 5 has an invalid interface number: 123 but max is 0 [ 914.494086][ T7058] usb 6-1: config 5 has no interface number 0 [ 914.494115][ T7058] usb 6-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 914.494128][ T7058] usb 6-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid maxpacket 26469, setting to 64 [ 914.494142][ T7058] usb 6-1: config 5 interface 123 has no altsetting 0 [ 914.532892][ T7058] usb 6-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 914.532921][ T7058] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.532938][ T7058] usb 6-1: Product: syz [ 914.532951][ T7058] usb 6-1: Manufacturer: syz [ 914.532964][ T7058] usb 6-1: SerialNumber: syz [ 914.543157][T13931] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 914.884895][ T7058] comedi comedi5: driver 'ni6501' has successfully auto-configured 'ni6501'. [ 914.915569][ T7058] usb 6-1: USB disconnect, device number 7 [ 918.697860][ T5815] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 918.702466][ T5815] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 918.703689][ T5815] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 918.803228][ T5815] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 918.806626][ T5815] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 919.664087][T13972] lo speed is unknown, defaulting to 1000 [ 919.965091][ T6015] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.081390][T13993] bond2: entered allmulticast mode [ 920.081941][T13993] 8021q: adding VLAN 0 to HW filter on device bond2 [ 920.124298][T13997] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 920.126373][T13999] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 920.474107][ T6015] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.535838][T14019] veth0_to_team: entered promiscuous mode [ 920.747551][T14031] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2665'. [ 920.783191][ T6015] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.867363][ T5815] Bluetooth: hci2: command tx timeout [ 921.082555][ T6015] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.137390][T13291] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 921.289154][T13291] usb 6-1: Using ep0 maxpacket: 8 [ 921.291005][T13291] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 921.294188][T13972] chnl_net:caif_netlink_parms(): no params data found [ 921.298760][T13291] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 921.298796][T13291] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 921.298814][T13291] usb 6-1: Product: syz [ 921.298827][T13291] usb 6-1: Manufacturer: syz [ 921.298840][T13291] usb 6-1: SerialNumber: syz [ 921.559241][T13291] usb 6-1: palm_os_3_probe - error -71 getting connection information [ 921.559321][T13291] visor 6-1:1.0: probe with driver visor failed with error -71 [ 921.604781][T13291] usb 6-1: USB disconnect, device number 8 [ 922.947372][ T5815] Bluetooth: hci2: command tx timeout [ 923.208324][T14069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2679'. [ 923.518421][T14069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2679'. [ 923.518577][T13972] bridge0: port 1(bridge_slave_0) entered blocking state [ 923.518743][T13972] bridge0: port 1(bridge_slave_0) entered disabled state [ 923.518903][T13972] bridge_slave_0: entered allmulticast mode [ 923.520529][T13972] bridge_slave_0: entered promiscuous mode [ 923.523581][T13972] bridge0: port 2(bridge_slave_1) entered blocking state [ 923.523778][T13972] bridge0: port 2(bridge_slave_1) entered disabled state [ 923.523953][T13972] bridge_slave_1: entered allmulticast mode [ 923.525584][T13972] bridge_slave_1: entered promiscuous mode [ 923.603465][T13291] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 923.765863][T13291] usb 6-1: unable to get BOS descriptor or descriptor too short [ 923.779862][T13291] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 923.779895][T13291] usb 6-1: too many endpoints for config 1 interface 0 altsetting 7: 66, using maximum allowed: 30 [ 923.779920][T13291] usb 6-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 66 [ 923.779933][T13291] usb 6-1: config 1 interface 0 has no altsetting 0 [ 923.852345][T13972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 923.856478][T13291] usb 6-1: string descriptor 0 read error: -22 [ 923.856677][T13291] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 923.856701][T13291] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.945623][T13972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 923.964264][T13291] usb 6-1: bad CDC descriptors [ 924.391240][ T6015] bridge_slave_1: left allmulticast mode [ 924.391273][ T6015] bridge_slave_1: left promiscuous mode [ 924.391505][ T6015] bridge0: port 2(bridge_slave_1) entered disabled state [ 924.488189][ T6015] bridge_slave_0: left allmulticast mode [ 924.488209][ T6015] bridge_slave_0: left promiscuous mode [ 924.488375][ T6015] bridge0: port 1(bridge_slave_0) entered disabled state [ 925.027344][ T5815] Bluetooth: hci2: command tx timeout [ 926.726129][ T5904] usb 6-1: USB disconnect, device number 9 [ 927.194940][ T5815] Bluetooth: hci2: command tx timeout [ 927.976297][ T6015] team0: Port device geneve0 removed [ 928.977912][ T6015] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 929.059292][ T6015] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 929.118940][ T6015] bond0 (unregistering): Released all slaves [ 929.952857][ T6015] bond1 (unregistering): Released all slaves [ 930.819834][ T6015] bond2 (unregistering): Released all slaves [ 930.859096][T13972] team0: Port device team_slave_0 added [ 931.090026][T14119] veth0_to_team: entered promiscuous mode [ 931.111108][T13972] team0: Port device team_slave_1 added [ 931.203132][T14128] netlink: 'syz.5.2692': attribute type 2 has an invalid length. [ 931.631907][T13972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 931.631920][T13972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 931.631934][T13972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 931.634526][T13972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 931.634536][T13972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 931.634550][T13972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 931.913755][T13972] hsr_slave_0: entered promiscuous mode [ 931.916616][T13972] hsr_slave_1: entered promiscuous mode [ 931.922272][T13972] debugfs: 'hsr0' already exists in 'hsr' [ 931.922299][T13972] Cannot create hsr debugfs directory [ 932.988592][T14163] veth0_to_team: entered promiscuous mode [ 933.994095][T14178] netlink: 'syz.1.2704': attribute type 4 has an invalid length. [ 934.151025][T14184] netlink: 'syz.0.2706': attribute type 2 has an invalid length. [ 934.887404][ T5888] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 934.988686][T14181] lo speed is unknown, defaulting to 1000 [ 935.057293][ T5888] usb 6-1: Using ep0 maxpacket: 16 [ 935.060068][ T5888] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 935.060095][ T5888] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 935.062254][ T5888] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 935.062280][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.062290][ T5888] usb 6-1: Product: syz [ 935.062297][ T5888] usb 6-1: Manufacturer: syz [ 935.062305][ T5888] usb 6-1: SerialNumber: syz [ 935.071612][ T5888] usb 6-1: config 0 descriptor?? [ 935.085939][ T5888] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 935.085969][ T5888] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 935.729108][ T5888] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 935.729729][ T5888] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 936.333014][ T5888] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 936.335614][ T5888] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 936.336230][ T5888] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 936.951739][ T5888] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 936.952165][ T5888] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 936.964091][ T5888] usb 6-1: USB disconnect, device number 10 [ 937.756974][ T6015] hsr_slave_0: left promiscuous mode [ 937.841038][ T6015] hsr_slave_1: left promiscuous mode [ 937.886677][ T6015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 937.886709][ T6015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 937.961891][ T6015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 937.961911][ T6015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 938.096289][ T6015] veth1_macvtap: left promiscuous mode [ 938.096354][ T6015] veth0_macvtap: left promiscuous mode [ 938.096502][ T6015] veth1_vlan: left promiscuous mode [ 938.096598][ T6015] veth0_vlan: left promiscuous mode [ 940.997958][ T6015] team0 (unregistering): Port device team_slave_1 removed [ 941.249870][ T6015] team0 (unregistering): Port device team_slave_0 removed [ 942.472824][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 943.858637][T14215] pim6reg: entered allmulticast mode [ 945.316004][T13972] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 945.509632][T13972] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 945.656228][T13972] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 945.740132][T13972] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 946.354510][T13972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 946.459582][T13972] 8021q: adding VLAN 0 to HW filter on device team0 [ 946.520507][ T7247] bridge0: port 1(bridge_slave_0) entered blocking state [ 946.520704][ T7247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 946.594500][ T8865] bridge0: port 2(bridge_slave_1) entered blocking state [ 946.599217][ T8865] bridge0: port 2(bridge_slave_1) entered forwarding state [ 948.139481][T13972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 948.374397][T13972] veth0_vlan: entered promiscuous mode [ 948.404455][T13972] veth1_vlan: entered promiscuous mode [ 948.571181][T13972] veth0_macvtap: entered promiscuous mode [ 948.609006][T13972] veth1_macvtap: entered promiscuous mode [ 948.905322][T13972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 949.249332][T13972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 949.612733][ T70] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.612783][ T70] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.612818][ T70] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.612852][ T70] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.749172][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 950.749191][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 951.071530][ T7247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 951.071557][ T7247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 951.669265][T14352] netlink: 'syz.1.2744': attribute type 10 has an invalid length. [ 951.669289][T14352] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2744'. [ 951.867975][T14352] team0: Port device geneve0 added [ 952.345671][T14374] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2752'. [ 955.068887][ T6265] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 955.227369][ T6265] usb 4-1: Using ep0 maxpacket: 16 [ 955.233870][ T6265] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 955.233901][ T6265] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 955.268918][ T6265] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 955.268947][ T6265] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.268967][ T6265] usb 4-1: Product: syz [ 955.268980][ T6265] usb 4-1: Manufacturer: syz [ 955.268994][ T6265] usb 4-1: SerialNumber: syz [ 955.274042][ T6265] usb 4-1: config 0 descriptor?? [ 955.293644][ T6265] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 955.293698][ T6265] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 955.940315][ T6265] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 955.940947][ T6265] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 956.411620][T14399] netlink: 'syz.1.2758': attribute type 4 has an invalid length. [ 956.553906][T14399] lo speed is unknown, defaulting to 1000 [ 956.750517][ T6265] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 956.751652][ T6265] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 956.754685][ T6265] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 956.755561][ T6265] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 956.756332][ T6265] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 956.959210][ T6265] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 956.965261][ T6265] usb 4-1: USB disconnect, device number 19 [ 957.008096][T14404] netlink: 'syz.0.2759': attribute type 10 has an invalid length. [ 957.008116][T14404] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2759'. [ 957.117069][T14404] team0: Port device geneve0 added [ 957.318320][T14417] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2765'. [ 959.838417][T14444] netlink: 'syz.4.2774': attribute type 10 has an invalid length. [ 959.838440][T14444] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2774'. [ 962.411981][T14475] pim6reg: entered allmulticast mode [ 963.927381][ T5806] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 964.114582][ T5806] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 964.114612][ T5806] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.114631][ T5806] usb 4-1: Product: syz [ 964.114645][ T5806] usb 4-1: Manufacturer: syz [ 964.114658][ T5806] usb 4-1: SerialNumber: syz [ 964.192450][ T5806] usb 4-1: config 0 descriptor?? [ 964.404057][ T5806] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 964.847382][ T6265] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 964.998189][ T6265] usb 6-1: no configurations [ 964.998237][ T6265] usb 6-1: can't read configurations, error -22 [ 965.149631][ T6265] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 965.298142][ T6265] usb 6-1: no configurations [ 965.298154][ T6265] usb 6-1: can't read configurations, error -22 [ 965.301399][ T6265] usb usb6-port1: attempt power cycle [ 965.649211][ T6265] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 965.669250][ T6265] usb 6-1: no configurations [ 965.669322][ T6265] usb 6-1: can't read configurations, error -22 [ 965.877407][ T6265] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 965.969923][ T6265] usb 6-1: no configurations [ 965.969947][ T6265] usb 6-1: can't read configurations, error -22 [ 966.024541][ T6265] usb usb6-port1: unable to enumerate USB device [ 966.473248][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 966.473469][ T5806] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 966.528504][ T5806] usb 4-1: USB disconnect, device number 20 [ 968.741825][T14544] pim6reg: entered allmulticast mode [ 970.510476][T14563] netlink: 'syz.5.2813': attribute type 4 has an invalid length. [ 970.760121][T14563] lo speed is unknown, defaulting to 1000 [ 970.997329][ T5888] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 971.147333][ T5888] usb 6-1: Using ep0 maxpacket: 16 [ 971.157402][ T5888] usb 6-1: config 0 has no interfaces? [ 971.178599][ T5888] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 971.178628][ T5888] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 971.178645][ T5888] usb 6-1: Manufacturer: syz [ 971.196814][ T5888] usb 6-1: config 0 descriptor?? [ 971.267437][ T5806] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 971.419187][ T5806] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 971.419218][ T5806] usb 4-1: config 0 interface 0 has no altsetting 0 [ 971.421578][ T5806] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 971.421603][ T5806] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 971.421614][ T5806] usb 4-1: Product: syz [ 971.421621][ T5806] usb 4-1: Manufacturer: syz [ 971.421628][ T5806] usb 4-1: SerialNumber: syz [ 971.424878][ T5806] usb 4-1: config 0 descriptor?? [ 971.542504][ T5806] usb 4-1: selecting invalid altsetting 0 [ 972.501143][ T5806] usb 4-1: USB disconnect, device number 21 [ 973.265792][T14335] udevd[14335]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 973.362263][T14587] netlink: 'syz.0.2825': attribute type 10 has an invalid length. [ 973.362285][T14587] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2825'. [ 973.403410][ T5806] usb 6-1: USB disconnect, device number 15 [ 973.879667][ T5806] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 974.041458][ T5806] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 974.041487][ T5806] usb 6-1: config 0 interface 0 has no altsetting 0 [ 974.043964][ T5806] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 974.043982][ T5806] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 974.043992][ T5806] usb 6-1: Product: syz [ 974.044000][ T5806] usb 6-1: Manufacturer: syz [ 974.044007][ T5806] usb 6-1: SerialNumber: syz [ 974.051282][ T5806] usb 6-1: config 0 descriptor?? [ 974.089862][ T5806] usb 6-1: selecting invalid altsetting 0 [ 974.822401][ T6478] usb 6-1: USB disconnect, device number 16 [ 977.760482][T14635] netlink: 'syz.1.2833': attribute type 4 has an invalid length. [ 977.852827][T14637] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2838'. [ 978.723856][T14635] lo speed is unknown, defaulting to 1000 [ 980.607088][ T6478] usb 6-1: new low-speed USB device number 17 using dummy_hcd [ 980.781668][ T6478] usb 6-1: unable to get BOS descriptor or descriptor too short [ 980.783445][ T6478] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 980.783476][ T6478] usb 6-1: too many endpoints for config 1 interface 0 altsetting 7: 66, using maximum allowed: 30 [ 980.783500][ T6478] usb 6-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 66 [ 980.783514][ T6478] usb 6-1: config 1 interface 0 has no altsetting 0 [ 980.898131][ T6478] usb 6-1: string descriptor 0 read error: -22 [ 980.898232][ T6478] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 980.898245][ T6478] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.910005][ T6478] usb 6-1: bad CDC descriptors [ 982.395958][ T6478] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 982.627979][ T6478] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 982.628006][ T6478] usb 4-1: config 0 has no interfaces? [ 982.634912][ T6478] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 982.634941][ T6478] usb 4-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 982.634960][ T6478] usb 4-1: Product: syz [ 982.635062][ T6478] usb 4-1: Manufacturer: syz [ 982.635076][ T6478] usb 4-1: SerialNumber: syz [ 982.727391][ T6478] usb 4-1: config 0 descriptor?? [ 983.647924][ T6478] usb 6-1: USB disconnect, device number 17 [ 985.639849][ T6265] usb 4-1: USB disconnect, device number 22 [ 986.663080][ T5118] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 986.695414][ T5118] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 986.700855][ T5118] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 986.703099][ T5118] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 986.704205][ T5118] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 986.933838][T14717] lo speed is unknown, defaulting to 1000 [ 987.326650][ T5801] bridge0: port 3(syz_tun) entered disabled state [ 987.649655][ T5801] syz_tun (unregistering): left allmulticast mode [ 987.649674][ T5801] syz_tun (unregistering): left promiscuous mode [ 987.649750][ T5801] bridge0: port 3(syz_tun) entered disabled state [ 988.355758][ T68] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.585418][ T68] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.679661][ T5904] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 988.830776][ T5904] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 988.830808][ T5904] usb 4-1: config 0 interface 0 has no altsetting 0 [ 988.833822][ T5904] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 988.833852][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 988.833872][ T5904] usb 4-1: Product: syz [ 988.833886][ T5904] usb 4-1: Manufacturer: syz [ 988.833900][ T5904] usb 4-1: SerialNumber: syz [ 988.886867][ T5904] usb 4-1: config 0 descriptor?? [ 988.903325][ T5904] usb 4-1: selecting invalid altsetting 0 [ 988.937079][ T5815] Bluetooth: hci3: command tx timeout [ 989.922300][ T68] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.270234][ T9891] usb 4-1: USB disconnect, device number 23 [ 990.298537][T14717] chnl_net:caif_netlink_parms(): no params data found [ 990.557719][ T5815] Bluetooth: hci5: unexpected event 0x09 length: 6 > 3 [ 990.615123][ T68] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.965627][ T5815] Bluetooth: hci3: command tx timeout [ 991.716242][T14717] bridge0: port 1(bridge_slave_0) entered blocking state [ 991.716379][T14717] bridge0: port 1(bridge_slave_0) entered disabled state [ 991.716537][T14717] bridge_slave_0: entered allmulticast mode [ 991.721867][T14717] bridge_slave_0: entered promiscuous mode [ 991.776613][T14717] bridge0: port 2(bridge_slave_1) entered blocking state [ 991.790328][T14717] bridge0: port 2(bridge_slave_1) entered disabled state [ 991.790498][T14717] bridge_slave_1: entered allmulticast mode [ 991.815738][T14717] bridge_slave_1: entered promiscuous mode [ 992.265177][T14717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 992.292171][T14717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 992.327937][ T68] bridge_slave_1: left allmulticast mode [ 992.327972][ T68] bridge_slave_1: left promiscuous mode [ 992.328229][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 992.509304][ T68] bridge_slave_0: left allmulticast mode [ 992.509336][ T68] bridge_slave_0: left promiscuous mode [ 992.509603][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 993.028620][ T5815] Bluetooth: hci3: command tx timeout [ 994.368661][ T68] team0: Port device geneve0 removed [ 995.107683][ T5815] Bluetooth: hci3: command tx timeout [ 995.458053][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 995.517996][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 995.539426][ T68] bond0 (unregistering): Released all slaves [ 996.511088][ T68] bond1 (unregistering): Released all slaves [ 997.381172][ T68] bond2 (unregistering): Released all slaves [ 998.216210][ T68] bond3 (unregistering): Released all slaves [ 998.595623][T14717] team0: Port device team_slave_0 added [ 998.637638][T14717] team0: Port device team_slave_1 added [ 999.154419][T14717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 999.154434][T14717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 999.154454][T14717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 999.237051][T14717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 999.237063][T14717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 999.237078][T14717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 999.992852][T14717] hsr_slave_0: entered promiscuous mode [ 1000.007741][T14717] hsr_slave_1: entered promiscuous mode [ 1000.009017][T14717] debugfs: 'hsr0' already exists in 'hsr' [ 1000.009042][T14717] Cannot create hsr debugfs directory [ 1001.569749][T14847] bond3: entered allmulticast mode [ 1001.570484][T14847] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1001.619313][T14849] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge_slave_0 [ 1002.557364][ T6478] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1002.727479][ T6478] usb 4-1: Using ep0 maxpacket: 16 [ 1002.729995][ T6478] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1002.730026][ T6478] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1002.767643][ T6478] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1002.767672][ T6478] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.767690][ T6478] usb 4-1: Product: syz [ 1002.767704][ T6478] usb 4-1: Manufacturer: syz [ 1002.767716][ T6478] usb 4-1: SerialNumber: syz [ 1002.779615][ T6478] usb 4-1: config 0 descriptor?? [ 1002.804179][ T6478] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1002.804219][ T6478] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1002.811790][ T68] hsr_slave_0: left promiscuous mode [ 1002.946125][ T68] hsr_slave_1: left promiscuous mode [ 1002.947103][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1002.947127][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1003.004780][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1003.004810][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1003.266061][ T68] veth1_macvtap: left promiscuous mode [ 1003.266127][ T68] veth0_macvtap: left promiscuous mode [ 1003.266265][ T68] veth1_vlan: left promiscuous mode [ 1003.276329][ T68] veth0_vlan: left promiscuous mode [ 1003.409312][ T6478] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1003.409963][ T6478] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 1003.913009][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1004.017906][ T6478] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 1004.019766][ T6478] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 1004.021383][ T6478] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 1004.069566][ T6478] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 1004.073779][ T6478] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 1004.101268][ T6478] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 1004.259641][ T68] pim6reg (unregistering): left allmulticast mode [ 1004.306882][ T6478] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 1004.306905][ T6478] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 1004.306919][ T6478] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 1004.306933][ T6478] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 1004.306948][ T6478] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 1004.364066][ T6478] usb 4-1: USB disconnect, device number 24 [ 1007.857912][ T68] team0 (unregistering): Port device team_slave_1 removed [ 1008.137952][ T68] team0 (unregistering): Port device team_slave_0 removed [ 1010.806403][ T5888] lo speed is unknown, defaulting to 1000 [ 1010.806530][ T5888] syz0: Port: 1 Link DOWN [ 1013.740581][T14717] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1013.819108][T14717] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1013.952042][T14717] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1014.215020][T14717] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1014.277593][ T5806] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1014.431743][ T5806] usb 4-1: Using ep0 maxpacket: 16 [ 1014.434187][ T5806] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1014.434220][ T5806] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1014.438670][ T5806] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1014.438699][ T5806] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.438718][ T5806] usb 4-1: Product: syz [ 1014.438731][ T5806] usb 4-1: Manufacturer: syz [ 1014.438744][ T5806] usb 4-1: SerialNumber: syz [ 1014.562672][ T5806] usb 4-1: config 0 descriptor?? [ 1014.674085][ T5806] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1014.674107][ T5806] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1015.194196][ T5806] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1015.194902][ T5806] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 1015.607771][ T5806] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 1015.607785][ T5806] em28xx 4-1:0.0: No AC97 audio processor [ 1015.704771][T14717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1015.909518][T14717] 8021q: adding VLAN 0 to HW filter on device team0 [ 1015.930807][ T6878] bridge0: port 1(bridge_slave_0) entered blocking state [ 1015.930920][ T6878] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1015.990253][ T1314] bridge0: port 2(bridge_slave_1) entered blocking state [ 1015.990348][ T1314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1016.203143][T15013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2947'. [ 1016.355479][ T6478] usb 4-1: USB disconnect, device number 25 [ 1016.356823][ T6478] em28xx 4-1:0.0: Disconnecting em28xx [ 1016.362797][ T6478] em28xx 4-1:0.0: Freeing device [ 1016.726645][T15023] syzkaller0: entered promiscuous mode [ 1017.051523][T14717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1017.236698][T14717] veth0_vlan: entered promiscuous mode [ 1017.280551][T14717] veth1_vlan: entered promiscuous mode [ 1017.328794][T14717] veth0_macvtap: entered promiscuous mode [ 1017.333924][T14717] veth1_macvtap: entered promiscuous mode [ 1017.365208][T14717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1017.435806][T14717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1017.489886][ T6878] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.554294][ T6878] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.582931][ T6878] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.596897][ T6878] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1018.348809][ T1035] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1018.348830][ T1035] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1018.417433][ T5806] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1018.569824][ T5806] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1018.569855][ T5806] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1018.572847][ T5806] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1018.572875][ T5806] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1018.572894][ T5806] usb 6-1: Product: syz [ 1018.572908][ T5806] usb 6-1: Manufacturer: syz [ 1018.572922][ T5806] usb 6-1: SerialNumber: syz [ 1018.580968][ T5806] usb 6-1: config 0 descriptor?? [ 1018.597090][ T7940] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1018.597110][ T7940] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1018.624807][ T5806] usb 6-1: selecting invalid altsetting 0 [ 1019.216028][T15076] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2959'. [ 1019.377120][ T7058] usb 6-1: USB disconnect, device number 18 [ 1019.981256][T15076] bridge_slave_1: left allmulticast mode [ 1019.981283][T15076] bridge_slave_1: left promiscuous mode [ 1019.981630][T15076] bridge0: port 2(bridge_slave_1) entered disabled state [ 1020.113628][T15076] bridge_slave_0: left allmulticast mode [ 1020.113657][T15076] bridge_slave_0: left promiscuous mode [ 1020.113930][T15076] bridge0: port 1(bridge_slave_0) entered disabled state [ 1021.568657][ T5118] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1021.600448][ T5118] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1021.606307][ T5118] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1021.627736][ T5118] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1021.628481][ T5118] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1023.419943][T15127] netlink: 'syz.1.2969': attribute type 4 has an invalid length. [ 1023.595058][T15121] pim6reg: entered allmulticast mode [ 1023.729640][ T5815] Bluetooth: hci4: command tx timeout [ 1024.057489][ T5806] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 1024.257745][ T5806] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1024.257775][ T5806] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.257794][ T5806] usb 4-1: Product: syz [ 1024.257807][ T5806] usb 4-1: Manufacturer: syz [ 1024.257820][ T5806] usb 4-1: SerialNumber: syz [ 1024.264696][ T5806] usb 4-1: config 0 descriptor?? [ 1024.347902][ T1226] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1024.347934][ T1226] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.478256][ T5806] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1024.962758][ T1226] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1024.963105][ T1226] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.630913][ T1226] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1025.630948][ T1226] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.748082][ T5815] Bluetooth: hci4: command tx timeout [ 1026.044434][ T1226] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1026.044465][ T1226] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.139968][T15108] chnl_net:caif_netlink_parms(): no params data found [ 1026.426270][T15144] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2974'. [ 1026.554298][ T5806] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1026.561485][ T5806] usb 4-1: USB disconnect, device number 26 [ 1027.225383][T15108] bridge0: port 1(bridge_slave_0) entered blocking state [ 1027.237553][T15108] bridge0: port 1(bridge_slave_0) entered disabled state [ 1027.239677][T15108] bridge_slave_0: entered allmulticast mode [ 1027.244552][T15108] bridge_slave_0: entered promiscuous mode [ 1027.293724][T15108] bridge0: port 2(bridge_slave_1) entered blocking state [ 1027.293847][T15108] bridge0: port 2(bridge_slave_1) entered disabled state [ 1027.294054][T15108] bridge_slave_1: entered allmulticast mode [ 1027.322026][T15108] bridge_slave_1: entered promiscuous mode [ 1027.827269][ T5815] Bluetooth: hci4: command tx timeout [ 1027.888643][T15108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1028.071008][T15108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1029.907393][ T5815] Bluetooth: hci4: command tx timeout [ 1030.250425][T15198] netlink: 'syz.5.2986': attribute type 4 has an invalid length. [ 1031.461617][ T1226] team0: Port device geneve0 removed [ 1032.468114][ T1226] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1032.548572][ T1226] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1032.571881][ T1226] bond0 (unregistering): Released all slaves [ 1033.520653][ T1226] bond1 (unregistering): Released all slaves [ 1034.390478][ T1226] bond2 (unregistering): Released all slaves [ 1035.241498][ T1226] bond3 (unregistering): Released all slaves [ 1035.493505][T15108] team0: Port device team_slave_0 added [ 1035.532965][T15108] team0: Port device team_slave_1 added [ 1035.793279][T15108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1035.793291][T15108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1035.793306][T15108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1035.848187][T15108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1035.848198][T15108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1035.848213][T15108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1035.952762][T15216] syzkaller0: entered promiscuous mode [ 1036.606812][T15108] hsr_slave_0: entered promiscuous mode [ 1036.614891][T15108] hsr_slave_1: entered promiscuous mode [ 1041.748322][ T1226] hsr_slave_0: left promiscuous mode [ 1041.799129][ T1226] hsr_slave_1: left promiscuous mode [ 1041.799784][ T1226] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1041.799800][ T1226] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1041.824127][ T1226] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1041.824155][ T1226] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1042.094304][ T5118] Bluetooth: hci2: command 0x0406 tx timeout [ 1042.205078][ T1226] veth1_macvtap: left promiscuous mode [ 1042.205141][ T1226] veth0_macvtap: left promiscuous mode [ 1042.205332][ T1226] veth1_vlan: left promiscuous mode [ 1042.205431][ T1226] veth0_vlan: left promiscuous mode [ 1046.597886][ T1226] team0 (unregistering): Port device team_slave_1 removed [ 1046.857828][ T1226] team0 (unregistering): Port device team_slave_0 removed [ 1051.963556][T15108] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1052.076999][T15108] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1052.120213][T15108] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1052.180457][T15108] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1052.727509][T15108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1052.804362][T15108] 8021q: adding VLAN 0 to HW filter on device team0 [ 1052.888303][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 1052.888470][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1053.008491][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1053.008639][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1053.743052][T15385] syzkaller0: entered promiscuous mode [ 1053.945024][T15108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1055.016983][T15108] veth0_vlan: entered promiscuous mode [ 1055.079665][T15108] veth1_vlan: entered promiscuous mode [ 1055.272514][T15108] veth0_macvtap: entered promiscuous mode [ 1055.291254][T15108] veth1_macvtap: entered promiscuous mode [ 1055.331175][T15108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1055.353073][T15108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1055.373278][ T1226] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.373512][ T1226] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.373549][ T1226] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.373582][ T1226] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.808043][ T7247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1055.808067][ T7247] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1056.014555][ T1226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1056.014574][ T1226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1062.231572][ T5815] Bluetooth: hci4: unexpected event 0x09 length: 6 > 3 [ 1062.556342][T15513] netlink: 'syz.1.3054': attribute type 4 has an invalid length. [ 1062.990426][T15524] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3058'. [ 1063.045697][T15524] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3058'. [ 1063.109619][ T7940] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1063.115047][ T7940] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1063.137213][ T7940] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1063.137265][ T7940] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1063.279085][T15529] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3059'. [ 1063.279102][T15529] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3059'. [ 1065.294906][T15542] pim6reg: entered allmulticast mode [ 1065.357333][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1065.677316][ T6478] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1065.849540][ T6478] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1065.849574][ T6478] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1065.867760][ T6478] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1065.867791][ T6478] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1065.867809][ T6478] usb 1-1: Product: syz [ 1065.867823][ T6478] usb 1-1: Manufacturer: syz [ 1065.867835][ T6478] usb 1-1: SerialNumber: syz [ 1065.875146][ T6478] usb 1-1: config 0 descriptor?? [ 1065.924827][ T6478] usb 1-1: selecting invalid altsetting 0 [ 1066.237421][ T5806] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1066.400354][ T6478] usb 1-1: USB disconnect, device number 14 [ 1066.418344][ T5806] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1066.418374][ T5806] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1066.422261][ T5806] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1066.422289][ T5806] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1066.422308][ T5806] usb 6-1: Product: syz [ 1066.422322][ T5806] usb 6-1: Manufacturer: syz [ 1066.422335][ T5806] usb 6-1: SerialNumber: syz [ 1066.566621][ T5806] usb 6-1: config 0 descriptor?? [ 1066.711288][ T5806] usb 6-1: selecting invalid altsetting 0 [ 1067.173799][ T5806] usb 6-1: USB disconnect, device number 19 [ 1067.655019][T15556] udevd[15556]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1069.588818][T15593] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3076'. [ 1069.588843][T15593] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3076'. [ 1070.835492][T15607] netlink: 'syz.5.3079': attribute type 4 has an invalid length. [ 1071.322774][ T6478] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1071.487351][ T6478] usb 6-1: Using ep0 maxpacket: 16 [ 1071.508990][ T6478] usb 6-1: config 0 has no interfaces? [ 1071.511506][ T6478] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1071.511524][ T6478] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1071.511534][ T6478] usb 6-1: Manufacturer: syz [ 1071.514469][ T6478] usb 6-1: config 0 descriptor?? [ 1073.148865][T15636] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3088'. [ 1073.399364][T15636] bridge_slave_1: left allmulticast mode [ 1073.399386][T15636] bridge_slave_1: left promiscuous mode [ 1073.399539][T15636] bridge0: port 2(bridge_slave_1) entered disabled state [ 1073.618416][T15636] bridge_slave_0: left allmulticast mode [ 1073.618446][T15636] bridge_slave_0: left promiscuous mode [ 1073.618750][T15636] bridge0: port 1(bridge_slave_0) entered disabled state [ 1074.837427][ T5904] usb 6-1: USB disconnect, device number 20 [ 1076.473280][T15668] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3099'. [ 1076.511595][ T9622] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1076.511779][ T9622] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1076.527640][ T44] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1076.787509][ T6265] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1077.192986][ T6265] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1080.307545][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1085.710460][ T5118] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1085.736479][ T5118] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1085.746949][ T5118] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1085.762188][ T5118] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1085.764088][ T5118] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1086.825338][ T7058] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 1087.004029][T15765] chnl_net:caif_netlink_parms(): no params data found [ 1087.133065][ T7058] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1087.133090][ T7058] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1087.133113][ T7058] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1087.133125][ T7058] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1087.136956][ T7058] usb 4-1: config 0 descriptor?? [ 1087.827309][ T5118] Bluetooth: hci0: command tx timeout [ 1088.043811][T15765] bridge0: port 1(bridge_slave_0) entered blocking state [ 1088.044455][T15765] bridge0: port 1(bridge_slave_0) entered disabled state [ 1088.045348][T15765] bridge_slave_0: entered allmulticast mode [ 1088.081757][ T7058] usbhid 4-1:0.0: can't add hid device: -71 [ 1088.081892][ T7058] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1088.107591][ T7058] usb 4-1: USB disconnect, device number 27 [ 1088.111661][T15765] bridge_slave_0: entered promiscuous mode [ 1088.115025][T15765] bridge0: port 2(bridge_slave_1) entered blocking state [ 1088.115221][T15765] bridge0: port 2(bridge_slave_1) entered disabled state [ 1088.115401][T15765] bridge_slave_1: entered allmulticast mode [ 1088.162137][T15765] bridge_slave_1: entered promiscuous mode [ 1088.387401][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1088.393867][T15765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1088.419714][T15765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1089.187694][T15800] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3134'. [ 1089.187718][T15800] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3134'. [ 1089.473107][T15765] team0: Port device team_slave_0 added [ 1089.491272][T15765] team0: Port device team_slave_1 added [ 1089.924012][ T5118] Bluetooth: hci0: command tx timeout [ 1089.947988][T15765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1089.948006][T15765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1089.948032][T15765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1089.951469][T15765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1089.951485][T15765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1089.951511][T15765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1090.439577][T15765] hsr_slave_0: entered promiscuous mode [ 1090.440383][T15765] hsr_slave_1: entered promiscuous mode [ 1090.440916][T15765] debugfs: 'hsr0' already exists in 'hsr' [ 1090.440931][T15765] Cannot create hsr debugfs directory [ 1091.987292][ T5118] Bluetooth: hci0: command tx timeout [ 1093.641538][T15765] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1094.077631][ T5118] Bluetooth: hci0: command tx timeout [ 1094.192913][T15765] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1094.731271][T15765] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1095.106745][T15765] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1095.313990][T15870] netlink: 'syz.4.3153': attribute type 4 has an invalid length. [ 1095.970440][ T5887] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1095.994829][T15881] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1096.138301][ T5887] usb 5-1: Using ep0 maxpacket: 16 [ 1096.168665][ T5887] usb 5-1: config 0 has no interfaces? [ 1096.173649][ T5887] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1096.173670][ T5887] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1096.173680][ T5887] usb 5-1: Manufacturer: syz [ 1096.238496][ T5887] usb 5-1: config 0 descriptor?? [ 1096.388633][T15765] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1096.819188][T15765] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1096.973448][T15765] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1097.076055][T15765] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1097.267676][T13291] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1097.417227][T13291] usb 6-1: Using ep0 maxpacket: 16 [ 1097.419128][T13291] usb 6-1: config 8 has an invalid interface number: 223 but max is 0 [ 1097.419155][T13291] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1097.419173][T13291] usb 6-1: config 8 has no interface number 0 [ 1097.419216][T13291] usb 6-1: config 8 interface 223 altsetting 2 bulk endpoint 0xC has invalid maxpacket 32 [ 1097.419230][T13291] usb 6-1: config 8 interface 223 altsetting 2 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 1097.419243][T13291] usb 6-1: config 8 interface 223 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1097.419257][T13291] usb 6-1: config 8 interface 223 has no altsetting 0 [ 1097.421747][T13291] usb 6-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 1097.421829][T13291] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.421848][T13291] usb 6-1: Product: syz [ 1097.421862][T13291] usb 6-1: Manufacturer: syz [ 1097.421875][T13291] usb 6-1: SerialNumber: syz [ 1097.554695][T15898] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1097.776995][T13291] usb 6-1: USB disconnect, device number 21 [ 1097.886023][T15765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1097.945340][T15765] 8021q: adding VLAN 0 to HW filter on device team0 [ 1097.970158][ T1314] bridge0: port 1(bridge_slave_0) entered blocking state [ 1098.001689][ T1314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1098.028700][ T1437] bridge0: port 2(bridge_slave_1) entered blocking state [ 1098.029324][ T1437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1099.688282][ T5887] usb 5-1: USB disconnect, device number 17 [ 1100.077447][T13291] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 1100.236114][T13291] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1100.236145][T13291] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.236165][T13291] usb 1-1: Product: syz [ 1100.236178][T13291] usb 1-1: Manufacturer: syz [ 1100.236191][T13291] usb 1-1: SerialNumber: syz [ 1100.273661][T13291] usb 1-1: config 0 descriptor?? [ 1100.389315][T15765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1100.527455][T13291] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1100.647630][T15765] veth0_vlan: entered promiscuous mode [ 1100.739875][T15765] veth1_vlan: entered promiscuous mode [ 1100.930714][T15765] veth0_macvtap: entered promiscuous mode [ 1101.019016][T15765] veth1_macvtap: entered promiscuous mode [ 1102.341449][T15765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1102.417701][T15765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1102.653764][ T9622] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1102.668385][ T9622] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1102.670275][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1102.670571][ T9622] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1103.041816][ T5978] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 1103.231399][ T5978] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1103.231417][ T5978] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1103.231428][ T5978] usb 6-1: Product: syz [ 1103.231434][ T5978] usb 6-1: Manufacturer: syz [ 1103.231442][ T5978] usb 6-1: SerialNumber: syz [ 1103.256800][ T5978] usb 6-1: config 0 descriptor?? [ 1103.748484][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1103.788955][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1103.788977][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1103.794791][T13291] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1103.841242][T13291] usb 1-1: USB disconnect, device number 15 [ 1103.884407][ T5978] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1104.061551][ T7940] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1104.061572][ T7940] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1106.112645][ T5978] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1106.118012][ T5978] usb 6-1: USB disconnect, device number 22 [ 1106.212046][T15968] syzkaller0: entered promiscuous mode [ 1107.165992][T15991] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3187'. [ 1107.360859][T15991] bridge_slave_1: left allmulticast mode [ 1107.360883][T15991] bridge_slave_1: left promiscuous mode [ 1107.361050][T15991] bridge0: port 2(bridge_slave_1) entered disabled state [ 1107.502820][T15991] bridge_slave_0: left allmulticast mode [ 1107.502860][T15991] bridge_slave_0: left promiscuous mode [ 1107.506502][T15991] bridge0: port 1(bridge_slave_0) entered disabled state [ 1108.951350][T16001] pim6reg: entered allmulticast mode [ 1109.545635][T16020] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3197'. [ 1109.545658][T16020] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3197'. [ 1112.079587][T16044] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3203'. [ 1112.079612][T16044] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3203'. [ 1113.507309][ T5815] Bluetooth: hci3: command 0x0406 tx timeout [ 1119.932533][ T5118] Bluetooth: hci0: unexpected event 0x09 length: 6 > 3 [ 1121.439019][T16178] netlink: 'syz.5.3249': attribute type 4 has an invalid length. [ 1122.502499][T16194] netlink: 'syz.1.3255': attribute type 10 has an invalid length. [ 1122.502514][T16194] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3255'. [ 1122.645579][T16194] team0: Failed to send options change via netlink (err -105) [ 1122.645597][T16194] team0: Port device geneve0 added [ 1125.255126][T16232] netlink: 'syz.0.3267': attribute type 10 has an invalid length. [ 1125.255150][T16232] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3267'. [ 1125.367797][T16232] team0: Failed to send options change via netlink (err -105) [ 1125.367825][T16232] team0: Port device geneve0 added [ 1125.882326][T16237] syzkaller0: entered promiscuous mode [ 1126.867843][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1129.613712][T16275] netlink: 'syz.4.3279': attribute type 10 has an invalid length. [ 1129.613728][T16275] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3279'. [ 1129.757581][T16275] team0: Failed to send options change via netlink (err -105) [ 1129.757610][T16275] team0: Port device geneve0 added [ 1130.807273][ T6926] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1131.743865][ T6926] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1131.743884][ T6926] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1131.746264][T16296] netlink: 'syz.4.3283': attribute type 4 has an invalid length. [ 1131.758637][ T6926] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1131.758664][ T6926] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1131.758682][ T6926] usb 1-1: Product: syz [ 1131.758692][ T6926] usb 1-1: Manufacturer: syz [ 1131.758704][ T6926] usb 1-1: SerialNumber: syz [ 1131.764892][ T6926] usb 1-1: config 0 descriptor?? [ 1131.836595][ T6926] usb 1-1: selecting invalid altsetting 0 [ 1132.347977][T16312] netlink: 'syz.3.3291': attribute type 10 has an invalid length. [ 1132.348001][T16312] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3291'. [ 1132.499538][ T5806] usb 1-1: USB disconnect, device number 16 [ 1132.690478][T16312] team0: Failed to send options change via netlink (err -105) [ 1132.690494][T16312] team0: Port device geneve0 added [ 1133.339833][T16326] binder_alloc: 16325: binder_alloc_buf, no vma [ 1135.107514][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1135.328813][T16335] syzkaller0: entered promiscuous mode [ 1135.688865][T16346] netlink: 'syz.4.3302': attribute type 10 has an invalid length. [ 1135.688888][T16346] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3302'. [ 1135.966782][T16354] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3304'. [ 1137.853269][T16388] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3317'. [ 1138.571978][ T5118] Bluetooth: hci0: unexpected event 0x09 length: 6 > 3 [ 1139.177252][ T6478] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 1140.200749][ T6478] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1140.200780][ T6478] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.200801][ T6478] usb 5-1: Product: syz [ 1140.200815][ T6478] usb 5-1: Manufacturer: syz [ 1140.200828][ T6478] usb 5-1: SerialNumber: syz [ 1140.205116][ T6478] usb 5-1: config 0 descriptor?? [ 1140.434574][ T6478] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1140.513290][T16419] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3327'. [ 1140.513446][T16419] bridge_slave_1: left allmulticast mode [ 1140.513471][T16419] bridge_slave_1: left promiscuous mode [ 1140.513971][T16419] bridge0: port 2(bridge_slave_1) entered disabled state [ 1140.589533][T16419] bridge_slave_0: left allmulticast mode [ 1140.589564][T16419] bridge_slave_0: left promiscuous mode [ 1140.590069][T16419] bridge0: port 1(bridge_slave_0) entered disabled state [ 1141.674002][ T6478] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1142.526087][T16429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3330'. [ 1142.709482][ T6926] usb 5-1: USB disconnect, device number 18 [ 1144.277300][ T5815] Bluetooth: hci4: command 0x0406 tx timeout [ 1144.696065][ T5118] Bluetooth: hci4: unexpected event 0x09 length: 6 > 3 [ 1145.937304][ T6926] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 1146.171868][ T6926] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1146.171893][ T6926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1146.171904][ T6926] usb 1-1: Product: syz [ 1146.171911][ T6926] usb 1-1: Manufacturer: syz [ 1146.171925][ T6926] usb 1-1: SerialNumber: syz [ 1146.174733][ T6926] usb 1-1: config 0 descriptor?? [ 1146.435542][ T6926] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1147.636952][ T6926] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1147.647330][ T5904] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1147.664157][T16495] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3351'. [ 1147.664181][T16495] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3351'. [ 1147.909260][ T5904] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1147.909277][ T5904] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1147.920581][ T5904] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1147.920609][ T5904] usb 5-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1147.920628][ T5904] usb 5-1: Product: syz [ 1147.920641][ T5904] usb 5-1: Manufacturer: syz [ 1147.920654][ T5904] usb 5-1: SerialNumber: syz [ 1147.931795][ T5904] usb 5-1: config 0 descriptor?? [ 1148.695015][ T5806] usb 1-1: USB disconnect, device number 17 [ 1150.393629][T13291] usb 5-1: USB disconnect, device number 19 [ 1152.307257][ T6478] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1152.491480][ T6478] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1152.494025][ T6478] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1152.494053][ T6478] usb 5-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1152.494094][ T6478] usb 5-1: Product: syz [ 1152.494108][ T6478] usb 5-1: Manufacturer: syz [ 1152.494122][ T6478] usb 5-1: SerialNumber: syz [ 1152.499497][ T6478] usb 5-1: config 0 descriptor?? [ 1153.121661][T16586] binder: BINDER_SET_CONTEXT_MGR already set [ 1153.121677][T16586] binder: 16585:16586 ioctl 4018620d 200000000040 returned -16 [ 1153.471052][T16595] netlink: 'syz.0.3386': attribute type 4 has an invalid length. [ 1153.817390][ T6478] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1153.977236][ T6926] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 1153.997191][ T6478] usb 1-1: Using ep0 maxpacket: 16 [ 1154.000656][ T6478] usb 1-1: config 0 has no interfaces? [ 1154.005390][ T6478] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1154.005408][ T6478] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1154.005419][ T6478] usb 1-1: Manufacturer: syz [ 1154.013538][ T6478] usb 1-1: config 0 descriptor?? [ 1154.142048][ T6926] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1154.142078][ T6926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1154.142097][ T6926] usb 2-1: Product: syz [ 1154.142110][ T6926] usb 2-1: Manufacturer: syz [ 1154.142124][ T6926] usb 2-1: SerialNumber: syz [ 1154.225560][ T6926] usb 2-1: config 0 descriptor?? [ 1154.435644][ T6926] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1154.902556][ T6478] usb 5-1: USB disconnect, device number 20 [ 1155.740465][T16616] netlink: 'syz.5.3393': attribute type 4 has an invalid length. [ 1157.312475][ T6926] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1157.367791][ T6926] usb 2-1: USB disconnect, device number 18 [ 1158.293563][ T6926] usb 1-1: USB disconnect, device number 18 [ 1158.857306][ T5806] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1159.027314][ T5806] usb 1-1: Using ep0 maxpacket: 16 [ 1159.030237][ T5806] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1159.038387][ T5806] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1159.038415][ T5806] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1159.038433][ T5806] usb 1-1: Product: syz [ 1159.038446][ T5806] usb 1-1: Manufacturer: syz [ 1159.038459][ T5806] usb 1-1: SerialNumber: syz [ 1159.127930][ T5806] usb 1-1: config 0 descriptor?? [ 1159.417287][ T6926] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1159.591758][ T6926] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1159.594140][ T6926] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1159.594158][ T6926] usb 5-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1159.594168][ T6926] usb 5-1: Product: syz [ 1159.594187][ T6926] usb 5-1: Manufacturer: syz [ 1159.594194][ T6926] usb 5-1: SerialNumber: syz [ 1159.672950][ T6926] usb 5-1: config 0 descriptor?? [ 1161.676009][ T5806] usb 1-1: USB disconnect, device number 19 [ 1161.847247][T16672] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 1162.291504][ T5806] usb 5-1: USB disconnect, device number 21 [ 1162.688429][T16683] netlink: 'syz.1.3410': attribute type 4 has an invalid length. [ 1166.543284][T16736] netlink: 'syz.5.3426': attribute type 10 has an invalid length. [ 1166.543300][T16736] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3426'. [ 1167.077144][ T5118] Bluetooth: hci3: unexpected event 0x09 length: 6 > 3 [ 1167.247761][ T44] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 1167.406320][ T44] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1167.406338][ T44] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1167.406349][ T44] usb 6-1: Product: syz [ 1167.406356][ T44] usb 6-1: Manufacturer: syz [ 1167.406363][ T44] usb 6-1: SerialNumber: syz [ 1167.468053][ T44] usb 6-1: config 0 descriptor?? [ 1167.674426][ T44] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1168.984941][ T44] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1169.016483][ T44] usb 6-1: USB disconnect, device number 23 [ 1170.018021][T16768] netlink: 'syz.0.3437': attribute type 10 has an invalid length. [ 1170.018043][T16768] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3437'. [ 1171.437285][ T44] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 1171.616892][ T44] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1171.616911][ T44] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1171.616921][ T44] usb 6-1: Product: syz [ 1171.616928][ T44] usb 6-1: Manufacturer: syz [ 1171.616935][ T44] usb 6-1: SerialNumber: syz [ 1171.699842][ T44] usb 6-1: config 0 descriptor?? [ 1171.933606][ T44] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1172.384918][T16801] netlink: 'syz.1.3450': attribute type 10 has an invalid length. [ 1172.384941][T16801] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3450'. [ 1173.263386][ T44] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1173.319196][ T44] usb 6-1: USB disconnect, device number 24 [ 1174.577427][ T6926] usb 2-1: new low-speed USB device number 19 using dummy_hcd [ 1174.838820][ T6926] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1174.839931][ T6926] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1174.839970][ T6926] usb 2-1: too many endpoints for config 1 interface 0 altsetting 7: 66, using maximum allowed: 30 [ 1174.839999][ T6926] usb 2-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 66 [ 1174.840012][ T6926] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1174.843022][ T6926] usb 2-1: string descriptor 0 read error: -22 [ 1174.843228][ T6926] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1174.843242][ T6926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1174.882960][ T6926] usb 2-1: bad CDC descriptors [ 1175.488889][ T6926] usb 2-1: USB disconnect, device number 19 [ 1176.447284][T13291] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 1176.622540][T13291] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1176.622566][T13291] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1176.622576][T13291] usb 2-1: Product: syz [ 1176.622659][T13291] usb 2-1: Manufacturer: syz [ 1176.622667][T13291] usb 2-1: SerialNumber: syz [ 1176.626590][T13291] usb 2-1: config 0 descriptor?? [ 1176.840035][T13291] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1178.697338][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 1178.697546][T13291] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1178.737322][T13291] usb 2-1: USB disconnect, device number 20 [ 1178.820179][T16874] netlink: 'syz.5.3477': attribute type 10 has an invalid length. [ 1178.820202][T16874] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3477'. [ 1180.332221][T16902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3483'. [ 1183.650301][T16926] netlink: 'syz.4.3490': attribute type 4 has an invalid length. [ 1183.650990][T16926] netlink: 'syz.4.3490': attribute type 4 has an invalid length. [ 1184.435000][T16931] netlink: 'syz.0.3493': attribute type 4 has an invalid length. [ 1186.767300][ T44] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 1187.101224][ T44] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1187.101253][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1187.101271][ T44] usb 2-1: Product: syz [ 1187.101285][ T44] usb 2-1: Manufacturer: syz [ 1187.101298][ T44] usb 2-1: SerialNumber: syz [ 1187.107556][ T44] usb 2-1: config 0 descriptor?? [ 1187.315901][ T44] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1188.246576][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1189.800904][ T44] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1191.130753][ T6926] usb 2-1: USB disconnect, device number 21 [ 1192.357248][ T6926] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1192.586568][ T6926] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1192.587238][ T44] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1192.610160][ T6926] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1192.610178][ T6926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1192.610188][ T6926] usb 1-1: Product: syz [ 1192.610195][ T6926] usb 1-1: Manufacturer: syz [ 1192.610202][ T6926] usb 1-1: SerialNumber: syz [ 1192.613629][ T6926] usb 1-1: config 0 descriptor?? [ 1192.737258][ T44] usb 6-1: Using ep0 maxpacket: 16 [ 1192.739312][ T44] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1192.739342][ T44] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1192.741979][ T44] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1192.742004][ T44] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1192.742023][ T44] usb 6-1: Product: syz [ 1192.742036][ T44] usb 6-1: Manufacturer: syz [ 1192.742049][ T44] usb 6-1: SerialNumber: syz [ 1192.746963][ T44] usb 6-1: config 0 descriptor?? [ 1192.819079][ T44] em28xx 6-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 1195.369551][ T6478] usb 6-1: USB disconnect, device number 25 [ 1195.947166][ T5118] Bluetooth: hci0: unexpected event 0x09 length: 6 > 3 [ 1197.452522][ T6926] usb 1-1: USB disconnect, device number 20 [ 1197.512940][ T5118] Bluetooth: hci5: unexpected event 0x09 length: 6 > 3 [ 1199.357225][ T9891] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 1199.532495][ T9891] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1199.532525][ T9891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1199.532544][ T9891] usb 5-1: Product: syz [ 1199.532558][ T9891] usb 5-1: Manufacturer: syz [ 1199.532572][ T9891] usb 5-1: SerialNumber: syz [ 1199.542039][ T9891] usb 5-1: config 0 descriptor?? [ 1199.787588][ T9891] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1202.023897][ T9891] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1202.229366][ T9891] usb 5-1: USB disconnect, device number 22 [ 1203.588582][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1204.675923][T17174] netlink: 'syz.5.3574': attribute type 4 has an invalid length. [ 1204.677488][T17174] netlink: 'syz.5.3574': attribute type 4 has an invalid length. [ 1204.922003][ [ 1204.922003][ T12] ------------[ cut here ]------------ [ 1204.922019][ T12] kernel BUG at net/ipv6/route.c:1473! [ 1204.993912][ T12] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 1204.993942][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1204.993963][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1204.993975][ T12] Workqueue: wg-kex-wg2 wg_packet_handshake_send_worker [ 1204.994001][ T12] RIP: 0010:ip6_pol_route+0x117d/0x1180 [ 1204.994023][ T12] Code: 9d f8 e9 f4 fa ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fb ff ff 48 89 df e8 6e 74 9d f8 e9 f6 fa ff ff e8 64 3c 3b f8 90 <0f> 0b 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e [ 1204.994038][ T12] RSP: 0018:ffffc900001172e0 EFLAGS: 00010293 [ 1204.994054][ T12] RAX: ffffffff89846fcc RBX: ffff888126cef000 RCX: ffff88801b6b5ac0 [ 1204.994068][ T12] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1204.994078][ T12] RBP: ffffc900001173f0 R08: ffffe8ffffc4e547 R09: 1ffffd1ffff89ca8 [ 1204.994090][ T12] R10: dffffc0000000000 R11: fffff91ffff89ca9 R12: ffff888023601140 [ 1204.994101][ T12] R13: ffffffff89845fb2 R14: dffffc0000000000 R15: 0000607ed8f5f540 [ 1204.994111][ T12] FS: 0000000000000000(0000) GS:ffff888126cef000(0000) knlGS:0000000000000000 [ 1204.994124][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1204.994135][ T12] CR2: 0000200000019030 CR3: 00000000266ec000 CR4: 00000000003526f0 [ 1204.994151][ T12] Call Trace: [ 1204.994158][ T12] [ 1204.994166][ T12] ? ip6_pol_route+0x162/0x1180 [ 1204.994189][ T12] ? __pfx_ip6_pol_route+0x10/0x10 [ 1204.994211][ T12] ? __lock_acquire+0x6b6/0x2cf0 [ 1204.994240][ T12] fib6_rule_lookup+0x1fc/0x6f0 [ 1204.994264][ T12] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 1204.994287][ T12] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 1204.994310][ T12] ? ip6_route_output_flags+0x2e/0x5d0 [ 1204.994333][ T12] ? ip6_route_output_flags+0x2e/0x5d0 [ 1204.994360][ T12] ip6_route_output_flags+0x364/0x5d0 [ 1204.994382][ T12] ? ip6_route_output_flags+0x2e/0x5d0 [ 1204.994413][ T12] ip6_dst_lookup_tail+0x1ae/0x1510 [ 1204.994439][ T12] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1204.994458][ T12] ? lockdep_hardirqs_on+0x7b/0x110 [ 1204.994474][ T12] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1204.994493][ T12] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 1204.994519][ T12] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1204.994542][ T12] ? rt_spin_unlock+0x150/0x200 [ 1204.994565][ T12] ? rt_spin_unlock+0x161/0x200 [ 1204.994591][ T12] ip6_dst_lookup_flow+0x47/0xe0 [ 1204.994616][ T12] ? __pfx_ip6_dst_lookup_flow+0x10/0x10 [ 1204.994639][ T12] send6+0x4ce/0x8d0 [ 1204.994657][ T12] ? rt_read_lock+0x203/0x490 [ 1204.994678][ T12] ? send6+0x220/0x8d0 [ 1204.994699][ T12] ? __pfx_send6+0x10/0x10 [ 1204.994715][ T12] ? rcu_is_watching+0x15/0xb0 [ 1204.994735][ T12] ? __local_bh_disable_ip+0x3c/0x420 [ 1204.994757][ T12] ? wg_socket_send_skb_to_peer+0x59/0x200 [ 1204.994776][ T12] ? wg_socket_send_skb_to_peer+0x59/0x200 [ 1204.994796][ T12] wg_socket_send_skb_to_peer+0x128/0x200 [ 1204.994818][ T12] wg_packet_handshake_send_worker+0x1db/0x320 [ 1204.994837][ T12] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 1204.994865][ T12] ? process_scheduled_works+0x9ef/0x1770 [ 1204.994885][ T12] ? process_scheduled_works+0x9ef/0x1770 [ 1204.994904][ T12] process_scheduled_works+0xad1/0x1770 [ 1204.994935][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 1204.994975][ T12] ? do_raw_spin_lock+0x121/0x290 [ 1204.995001][ T12] worker_thread+0x8a0/0xda0 [ 1204.995030][ T12] kthread+0x711/0x8a0 [ 1204.995055][ T12] ? __pfx_worker_thread+0x10/0x10 [ 1204.995075][ T12] ? __pfx_kthread+0x10/0x10 [ 1204.995096][ T12] ? rt_spin_unlock+0x150/0x200 [ 1204.995120][ T12] ? rt_spin_unlock+0x161/0x200 [ 1204.995140][ T12] ? __pfx_kthread+0x10/0x10 [ 1204.995162][ T12] ret_from_fork+0x510/0xa50 [ 1204.995183][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 1204.995201][ T12] ? __switch_to+0xc9e/0x1480 [ 1204.995227][ T12] ? __pfx_kthread+0x10/0x10 [ 1204.995249][ T12] ret_from_fork_asm+0x1a/0x30 [ 1204.995281][ T12] [ 1204.995296][ T12] Modules linked in: [ 1204.995337][ T12] ---[ end trace 0000000000000000 ]--- [ 1204.996496][ T12] RIP: 0010:ip6_pol_route+0x117d/0x1180 [ 1204.996605][ T12] Code: 9d f8 e9 f4 fa ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fb ff ff 48 89 df e8 6e 74 9d f8 e9 f6 fa ff ff e8 64 3c 3b f8 90 <0f> 0b 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e [ 1204.996663][ T12] RSP: 0018:ffffc900001172e0 EFLAGS: 00010293 [ 1204.996758][ T12] RAX: ffffffff89846fcc RBX: ffff888126cef000 RCX: ffff88801b6b5ac0 [ 1204.996813][ T12] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1204.996857][ T12] RBP: ffffc900001173f0 R08: ffffe8ffffc4e547 R09: 1ffffd1ffff89ca8 [ 1204.996873][ T12] R10: dffffc0000000000 R11: fffff91ffff89ca9 R12: ffff888023601140 [ 1204.996884][ T12] R13: ffffffff89845fb2 R14: dffffc0000000000 R15: 0000607ed8f5f540 [ 1204.996897][ T12] FS: 0000000000000000(0000) GS:ffff888126cef000(0000) knlGS:0000000000000000 [ 1204.996911][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1204.996922][ T12] CR2: 0000200000019030 CR3: 00000000266ec000 CR4: 00000000003526f0 [ 1204.996948][ T12] Kernel panic - not syncing: Fatal exception in interrupt [ 1204.997527][ T12] Kernel Offset: disabled