last executing test programs: 16m8.057714468s ago: executing program 1 (id=167): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@typedef={0x4, 0x0, 0x0, 0x8, 0x2}, @func_proto, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x4a}, 0x28) 16m7.791926303s ago: executing program 1 (id=170): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:* mw'], 0xa) 16m7.580522674s ago: executing program 1 (id=172): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {0x0}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd2", 0x98}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c53081ff", 0x24}, {&(0x7f0000000ec0)="6e20cbe6a4a132117801a95e6fd3ec5771da8352900bb19979b10fe02dd6f981361f62316da7b3f7abc9fbae1ea2ab5eea4b2ec5", 0x34}], 0x2, &(0x7f0000000f40)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}], 0x18}}, {{&(0x7f0000000f80)=@can, 0x80, &(0x7f00000010c0)=[{&(0x7f0000001000)="3d9162a847e3afc18db28d0be9d1c220b7844d9e236c35781da53eb30cd67912e5b4138fab89f32de1cd2edde4efa562", 0x30}], 0x1}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c77", 0x10}], 0x1}}], 0x4, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 16m7.386113945s ago: executing program 1 (id=173): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29", 0xce}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd2", 0x98}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}, {{&(0x7f0000000f80)=@can, 0x80, &(0x7f00000010c0)=[{&(0x7f0000001000)="3d9162a847e3afc18db28d0be9d1c220b7844d9e236c35781da53eb30cd67912e5b4138fab89f32de1cd2edde4efa562", 0x30}], 0x1}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c77", 0x10}], 0x1}}], 0x4, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 16m6.979000143s ago: executing program 1 (id=178): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x20, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ef}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x3, 0x600}}, 0x20) r1 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r1, &(0x7f0000000b00)=[{{&(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000240)="a905000000007464000100000001000000e5c0", 0x13}, {&(0x7f0000000000)="82d903bfcb8484b98931c6c599ed9cf57c", 0x11}], 0x2}}], 0x1, 0x24000800) 16m6.615437299s ago: executing program 1 (id=181): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00'}, 0x94) clock_gettime(0x0, &(0x7f0000000000)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_deladdrlabel={0x4c, 0x49, 0x400, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x40, 0x0, 0x0, 0x2}, [@IFAL_LABEL={0x8, 0x2, 0x1}, @IFAL_ADDRESS={0x14, 0x1, @remote}, @IFAL_ADDRESS={0xa, 0x1, @mcast1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) socket(0x80000000000000a, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) readv(r1, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES64=0x0], 0x80}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r6, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4d2f02, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0xfffffffffffffdd4, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0xd, 0x7}, {0xffff, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}]}, 0x2c}}, 0x0) 15m51.383916337s ago: executing program 32 (id=181): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00'}, 0x94) clock_gettime(0x0, &(0x7f0000000000)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_deladdrlabel={0x4c, 0x49, 0x400, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x40, 0x0, 0x0, 0x2}, [@IFAL_LABEL={0x8, 0x2, 0x1}, @IFAL_ADDRESS={0x14, 0x1, @remote}, @IFAL_ADDRESS={0xa, 0x1, @mcast1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) socket(0x80000000000000a, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) readv(r1, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES64=0x0], 0x80}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r6, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4d2f02, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0xfffffffffffffdd4, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0xd, 0x7}, {0xffff, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}]}, 0x2c}}, 0x0) 10m1.399109974s ago: executing program 3 (id=1194): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) r4 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) ioctl$FE_GET_INFO(r4, 0x80a86f3d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x29, 0x50, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x594, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) getsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f00000008c0), 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, 0x0) ioctl$SW_SYNC_IOC_INC(r5, 0x40045701, &(0x7f00000002c0)=0x3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a8001600a400014020000300feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) bind$ax25(r6, &(0x7f0000000280)={{0x3, @default, 0x5}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$ax25(r6, &(0x7f0000000180)={{0x3, @bcast, 0x5}, [@bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) 10m0.164955764s ago: executing program 3 (id=1195): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d72", 0x8f}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639", 0xca}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6ea5cd18ff95c871", 0x78}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x90}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c53081ff", 0x24}, {&(0x7f0000000ec0)="6e20cbe6a4a132117801a95e6fd3ec5771da8352900bb19979b10fe02dd6f981361f62316da7b3f7abc9fbae1ea2ab5eea4b2ec5", 0x34}], 0x2, &(0x7f0000000f40)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}], 0x18}}, {{&(0x7f0000000f80)=@can, 0x80, &(0x7f00000010c0)=[{&(0x7f0000001000)="3d9162a847e3afc18db28d0be9d1c220b7844d9e236c35781da53eb30cd67912e5b4138fab89f32de1cd2edde4efa562", 0x30}], 0x1}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c77", 0x10}], 0x1}}], 0x5, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 9m59.542880115s ago: executing program 3 (id=1197): openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x1800, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x44090) fsopen(0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x24, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x8400, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000000c0)=0x6) read$dsp(r1, &(0x7f00000011c0)=""/4117, 0x200021d5) socket$nl_rdma(0x10, 0x3, 0x14) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 9m52.792073821s ago: executing program 3 (id=1208): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46", 0xb5}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYBLOB="74010000", @ANYRES16=r3, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088048010c8054000b80080009000000000008000900"], 0x174}}, 0x10) 9m52.579815639s ago: executing program 3 (id=1210): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x308e, 0x0, 0x0, &(0x7f0000000680), &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r3, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETOWNER(r6, 0x800454d3, 0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff8, @ipv4}, 0x1c) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a2", 0x85}], 0x1}, 0x0) sendmmsg$inet(r2, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000640)=@generic={0x1, 0x5, 0x8000000000000001}) sendto$inet(r2, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000700), 0x9, 0x0) unshare(0x62040200) syz_usb_connect(0x4, 0x4a, &(0x7f00000006c0)=ANY=[@ANYRESDEC=r7], 0x0) 9m42.165468839s ago: executing program 3 (id=1239): syz_open_dev$dvb_dvr(0x0, 0x0, 0x8257f) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = openat$mixer(0xffffffffffffff9c, 0x0, 0x121100, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) socket(0x1a, 0x2, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001f6c0)=""/102400, 0x19000) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x22301, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000080)=0x100) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r0, 0xc0044dff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r3}, 0x0, 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r4}, 0xc) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000a80)={'syz1\x00', {0x5, 0x1, 0x200, 0x1004}, 0x4, [0xd, 0x2, 0x0, 0x0, 0x0, 0x1, 0xffffffff, 0x5, 0x6c, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x6, 0xd127, 0x67c4, 0x0, 0x0, 0x3fffffd, 0xfffffffd, 0x0, 0x3, 0x0, 0x400005, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0xab4, 0x0, 0xfffffffc, 0xfffffff0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1], [0x5, 0x4, 0x1, 0x2, 0x0, 0x6, 0x0, 0x6, 0x0, 0x4, 0x1, 0x1f, 0x1, 0x4, 0x0, 0x0, 0x0, 0x42ac, 0x0, 0x3, 0x8000002, 0x3, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x200000, 0x4, 0x2, 0x0, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6, 0xe43, 0xbb, 0xfffffffd, 0x0, 0x24001, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, 0x10000, 0x0, 0x3, 0x0, 0x0, 0x2, 0x4, 0x2], [0xfffffffe, 0xfffffffd, 0xfffffffd, 0x2, 0x6, 0x8, 0x322d, 0x8, 0x0, 0x0, 0x4, 0x2, 0xb, 0xcc5, 0x8, 0x0, 0x0, 0x2, 0xd38, 0x0, 0x0, 0x9fc7adae, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffe, 0x0, 0x1, 0x3, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1, 0x5, 0x0, 0x0, 0x2000000, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xffffffff, 0x7fff], [0x0, 0x0, 0x40000002, 0x0, 0xab47, 0x0, 0x400526b, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x7652fc9f, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x6, 0xffffffff, 0x400, 0xfffffffd, 0x0, 0x100, 0x81, 0x1, 0xfffffffd, 0xe1a, 0x10004, 0x0, 0xff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0xc, 0x0, 0x0, 0x1000, 0x0, 0x7, 0x0, 0x1]}, 0x45c) ioctl$UI_SET_RELBIT(r5, 0x40045566, 0x8) 9m26.650313244s ago: executing program 33 (id=1239): syz_open_dev$dvb_dvr(0x0, 0x0, 0x8257f) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = openat$mixer(0xffffffffffffff9c, 0x0, 0x121100, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) socket(0x1a, 0x2, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001f6c0)=""/102400, 0x19000) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x22301, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000080)=0x100) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r0, 0xc0044dff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r3}, 0x0, 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r4}, 0xc) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000a80)={'syz1\x00', {0x5, 0x1, 0x200, 0x1004}, 0x4, [0xd, 0x2, 0x0, 0x0, 0x0, 0x1, 0xffffffff, 0x5, 0x6c, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x6, 0xd127, 0x67c4, 0x0, 0x0, 0x3fffffd, 0xfffffffd, 0x0, 0x3, 0x0, 0x400005, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0xab4, 0x0, 0xfffffffc, 0xfffffff0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1], [0x5, 0x4, 0x1, 0x2, 0x0, 0x6, 0x0, 0x6, 0x0, 0x4, 0x1, 0x1f, 0x1, 0x4, 0x0, 0x0, 0x0, 0x42ac, 0x0, 0x3, 0x8000002, 0x3, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x200000, 0x4, 0x2, 0x0, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6, 0xe43, 0xbb, 0xfffffffd, 0x0, 0x24001, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, 0x10000, 0x0, 0x3, 0x0, 0x0, 0x2, 0x4, 0x2], [0xfffffffe, 0xfffffffd, 0xfffffffd, 0x2, 0x6, 0x8, 0x322d, 0x8, 0x0, 0x0, 0x4, 0x2, 0xb, 0xcc5, 0x8, 0x0, 0x0, 0x2, 0xd38, 0x0, 0x0, 0x9fc7adae, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffe, 0x0, 0x1, 0x3, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1, 0x5, 0x0, 0x0, 0x2000000, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xffffffff, 0x7fff], [0x0, 0x0, 0x40000002, 0x0, 0xab47, 0x0, 0x400526b, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x7652fc9f, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x6, 0xffffffff, 0x400, 0xfffffffd, 0x0, 0x100, 0x81, 0x1, 0xfffffffd, 0xe1a, 0x10004, 0x0, 0xff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0xc, 0x0, 0x0, 0x1000, 0x0, 0x7, 0x0, 0x1]}, 0x45c) ioctl$UI_SET_RELBIT(r5, 0x40045566, 0x8) 9m24.022543999s ago: executing program 2 (id=1267): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd2", 0x98}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c53081ff", 0x24}, {&(0x7f0000000ec0)="6e20cbe6a4a132117801a95e6fd3ec5771da8352900bb19979b10fe02dd6f981361f62316da7b3f7abc9fbae1ea2ab5eea4b2ec5", 0x34}], 0x2, &(0x7f0000000f40)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}], 0x18}}, {{&(0x7f0000000f80)=@can, 0x80, &(0x7f00000010c0)=[{&(0x7f0000001000)="3d9162a847e3afc18db28d0be9d1c220b7844d9e236c3578", 0x18}], 0x1}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c77", 0x10}], 0x1}}], 0x4, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 9m22.348307338s ago: executing program 2 (id=1269): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create(0x10002e78) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) syz_emit_ethernet(0xaa, &(0x7f00000000c0)=ANY=[@ANYRES8=r1, @ANYRES64=r0], 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x6a, 0x4, 0x0, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_to_bridge\x00', 0x20}, 0x18) 9m20.781568071s ago: executing program 2 (id=1271): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4004) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='omfs\x00', 0x200000, 0x0) 9m19.153984406s ago: executing program 2 (id=1272): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r4, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f00000002c0)={0x0, 0x0, @pic={0x2e, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x67, 0x58, 0xa0, 0x2, 0x6, 0x7e}}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0xffff1000, 0x1c4213}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) unshare(0x8040600) ioctl$KVM_RUN(r5, 0xae80, 0x0) 9m18.073431523s ago: executing program 2 (id=1276): getpgrp(0x0) timer_gettime(0x0, 0x0) syz_80211_join_ibss(0x0, &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001740)=ANY=[@ANYRES16=0x0, @ANYRES64=0x0, @ANYRES8=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xc, 0xb9, &(0x7f0000000140)=""/185, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @loopback}, 0x10) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB="8a1cef0e51c7adb68f2440c3762b13fa8d5b6b5bf54945e1c088c317c884da495d7fd412b4370206ad7f4269001be177a3483287a124aa0e5c52d64c2f7908e022c43d013dedaa8c94ea041b4ecb901446d2a7", @ANYRESHEX, @ANYBLOB=',\x00']) 9m12.487435416s ago: executing program 2 (id=1285): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') unshare(0x6a040000) socket(0x8, 0x3, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000400), 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000240)) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000300)) 8m57.160851158s ago: executing program 34 (id=1285): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') unshare(0x6a040000) socket(0x8, 0x3, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000400), 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000240)) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000300)) 7m34.891898684s ago: executing program 7 (id=1463): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000340)=ANY=[@ANYBLOB="0014"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000a80)={0x40, 0x15, 0x4, "3b3359b8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000180)={0x40, 0xd, 0x4, "fef890a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0xffffffffffffffff, 0x0) 7m31.591717323s ago: executing program 7 (id=1473): syz_open_dev$loop(0x0, 0x1, 0x122c42) socket$kcm(0x10, 0x6, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0x6}, 0x0) syz_open_dev$video(0x0, 0x101, 0xab02) syz_open_dev$ttys(0xc, 0x2, 0x1) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000bc0)='/proc/diskstats\x00', 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000005ec0)={'ip6_vti0\x00', &(0x7f0000005e40)={'ip6gre0\x00', 0x0, 0x71, 0x2, 0x3, 0xfffffffd, 0x42, @dev={0xfe, 0x80, '\x00', 0x38}, @mcast1, 0x40, 0x80, 0x1, 0x7f}}) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x4d6) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x800) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 7m26.170469875s ago: executing program 7 (id=1484): openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x1800, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x44090) fsopen(0x0, 0x1) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x24, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) write$rfkill(0xffffffffffffffff, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000000c0)=0x6) read$dsp(r1, &(0x7f00000011c0)=""/4117, 0x200021d5) 7m17.753156066s ago: executing program 7 (id=1495): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.dequeue\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) gettid() ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r3 = inotify_init() write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000500)={'syz0\x00', {0x0, 0x0, 0xffff}, 0x0, [0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x2000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x55f8, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0xeaef, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1], [0x0, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5a1, 0x20000], [0x0, 0x0, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2]}, 0x45c) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000000c0)=0x0) read$FUSE(r0, &(0x7f0000000980)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) kcmp(r4, r5, 0x2, r1, r3) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c00000068000100fdfc0000fbdbdf25020000000000000004000b0029d7fe1a7ffb866b9542aa7ec1d2eed32302f03482abb6c6f4895c0c85195f2a9f4a0d860cf264d96e8ee49e4e7f0e15333e9928fd7d2f85adf9b6780436f755fcd526b13f2f3f6a2f81ef8a911c9c1114504c2f1542dd186331076547aa7bd723b895e1ead4527837"], 0x1c}}, 0x0) getsockname$packet(r7, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@ipv4_getnexthop={0x20, 0x6a, 0x605, 0x70fd2c, 0x25dfdbfc, {}, [@NHA_OIF={0x8, 0x5, r8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) 7m16.746792203s ago: executing program 7 (id=1497): socket$inet(0xa, 0x801, 0x84) socket(0x10, 0x3, 0xd1f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x10300, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r2}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000007c0)={0x28, 0x4, r2, 0x0, &(0x7f0000561000/0x1000)=nil, 0x1000, 0x1004000}) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYRESOCT=r2, @ANYRESHEX=r3, @ANYBLOB=',\x00']) 7m15.338394804s ago: executing program 7 (id=1500): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x308e, 0x0, 0x0, &(0x7f0000000680), &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r3, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETOWNER(r6, 0x800454d3, 0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff8, @ipv4}, 0x1c) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a2", 0x85}], 0x1}, 0x0) sendmmsg$inet(r2, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000640)=@generic={0x1, 0x5, 0x8000000000000001}) syz_usb_connect$midi(0x3, 0x31, &(0x7f0000000780)=ANY=[@ANYBLOB="12010002000000103512100040000102030109021f0001010220f7090400000101030051090507020004090509042501001a3634a32ff9a05bf96d864ca72cc2914ae183b52eec777302ba8168b7359a04d5f7df666bcbc0d3db4e3f05d7db1343ef1fa0b61d06a4c37539e5157bb9cf2590e476404096468adb515d5c9ce63c08f972dd4f88147399a7e888f3d9858df2411268da1f1d657e20826fa4260582740a9dc9e075ff51c6f89433adfbca9de55177f6a66b2361519e220bf01cf8a8d3b578f6bce2db3ce5b686ff65b6a025eaa4dff8e8de617f24c8ddbb0caa92c5c544d6"], 0x0) 6m59.582980617s ago: executing program 35 (id=1500): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x308e, 0x0, 0x0, &(0x7f0000000680), &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r3, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETOWNER(r6, 0x800454d3, 0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff8, @ipv4}, 0x1c) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a2", 0x85}], 0x1}, 0x0) sendmmsg$inet(r2, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000640)=@generic={0x1, 0x5, 0x8000000000000001}) syz_usb_connect$midi(0x3, 0x31, &(0x7f0000000780)=ANY=[@ANYBLOB="12010002000000103512100040000102030109021f0001010220f7090400000101030051090507020004090509042501001a3634a32ff9a05bf96d864ca72cc2914ae183b52eec777302ba8168b7359a04d5f7df666bcbc0d3db4e3f05d7db1343ef1fa0b61d06a4c37539e5157bb9cf2590e476404096468adb515d5c9ce63c08f972dd4f88147399a7e888f3d9858df2411268da1f1d657e20826fa4260582740a9dc9e075ff51c6f89433adfbca9de55177f6a66b2361519e220bf01cf8a8d3b578f6bce2db3ce5b686ff65b6a025eaa4dff8e8de617f24c8ddbb0caa92c5c544d6"], 0x0) 3m37.02520674s ago: executing program 6 (id=1822): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd2", 0x98}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}, {{&(0x7f0000000f80)=@can, 0x80, &(0x7f00000010c0)=[{&(0x7f0000001000)="3d9162a847e3afc18db28d0be9d1c220b7844d9e236c35781da53eb30cd67912e5b4138fab89f32de1cd2edde4efa562", 0x30}], 0x1}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c77", 0x10}], 0x1}}], 0x4, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521634", 0xc}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3m36.009991065s ago: executing program 6 (id=1824): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x22020600) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001780)=""/4071, 0xfe7}, {&(0x7f0000000300)=""/78, 0x4e}, {&(0x7f0000000400)=""/133, 0xe8b}], 0x9}, 0x40020000) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{0x0}], 0x1}, 0x0) 3m34.510100219s ago: executing program 6 (id=1829): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000280)={0x40, 0x6, 0x3, "cabe4d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m32.061177986s ago: executing program 6 (id=1831): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') unshare(0x6a040000) r3 = socket(0x8, 0x3, 0x3) ioctl$sock_netrom_SIOCADDRT(r3, 0x6180, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000400), 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000240)) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000300)) r5 = getgid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000003c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@private}}, &(0x7f0000000540)=0xe8) r8 = getpid() ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000600)=0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, &(0x7f0000000740)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x1, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) sendmsg$netlink(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=ANY=[], 0x24}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="30000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32, @ANYBLOB="1c00000000000000010000000100", @ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="000000001c00", @ANYRES32, @ANYRES32=r5, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRES32=r6, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r7, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000fc9994151f25ec9610b621d69a0b9bdb2cbf26433137452bb060b71940b645b0fbf81e89f6216523e910f179d676bab34087834a635574deaf5605baef32e83cad10c0f5861e4808d8d0534aa17c32fb1d471076583a1dba87bba1bce3b24f576e2c32218449dacaa585291ce5a6b965eb386a3b42c319f8a07e48d150a253ee5f77a31cd39791f915", @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYBLOB="000000003400000000000000010000000100", @ANYRES32=r2, @ANYRES32=r10, @ANYRES32=r1, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=r4, @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r0, @ANYBLOB, @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00'], 0x180, 0x840}, 0x20048010) 3m27.872131257s ago: executing program 6 (id=1835): r0 = syz_usb_connect$uac1(0x0, 0xac, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x7, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000000)={0x25, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) connect$unix(r2, &(0x7f0000000640)=@file={0x1}, 0x6e) 3m23.993167557s ago: executing program 6 (id=1841): r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, 0x0, 0x0) unshare(0xe060400) unshare(0x2c060000) rt_sigqueueinfo(0x0, 0x21, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x200000000000000) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, r1, 0x0, 0x0, 'syz1\x00', 0x0}) semget$private(0x0, 0x1, 0xb5ad9a7247a3f9a4) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000c40)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x36}, 0x0, [0x1688, 0x3, 0x0, 0x0, 0xdf3, 0x0, 0x0, 0xffbffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4, 0x80000, 0xf, 0x80000000000000, 0x0, 0x9, 0x0, 0x0, 0x4, 0x7, 0x0, 0x7, 0x7ff, 0xfffffffe, 0x0, 0x40, 0x0, 0x0, 0x100000001, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffc, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffa, 0x0, 0x401, 0x0, 0x8000000000000000, 0x5, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0x80000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffb, 0x0, 0xfffffffffffffffc, 0x80000000000000, 0xfffffffc, 0x1, 0x8, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0x0, 0xde4, 0x7, 0x0, 0x100000000]}) 3m23.900250806s ago: executing program 4 (id=1842): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x900, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(0x0) getpgid(r3) kcmp(r2, r3, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_REQUEST_IOC_REINIT(0xffffffffffffffff, 0x7c81, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) 3m20.607702205s ago: executing program 4 (id=1847): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000880, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r2], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0xc) 3m13.924319312s ago: executing program 4 (id=1851): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000007c0)={0x1c, &(0x7f0000000200)={0x40, 0xf}, 0x0, 0x0}) 3m9.2182938s ago: executing program 4 (id=1857): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x0, 0x0}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000000)) 3m8.35696503s ago: executing program 36 (id=1841): r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, 0x0, 0x0) unshare(0xe060400) unshare(0x2c060000) rt_sigqueueinfo(0x0, 0x21, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x200000000000000) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, r1, 0x0, 0x0, 'syz1\x00', 0x0}) semget$private(0x0, 0x1, 0xb5ad9a7247a3f9a4) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000c40)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x36}, 0x0, [0x1688, 0x3, 0x0, 0x0, 0xdf3, 0x0, 0x0, 0xffbffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4, 0x80000, 0xf, 0x80000000000000, 0x0, 0x9, 0x0, 0x0, 0x4, 0x7, 0x0, 0x7, 0x7ff, 0xfffffffe, 0x0, 0x40, 0x0, 0x0, 0x100000001, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffc, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffa, 0x0, 0x401, 0x0, 0x8000000000000000, 0x5, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0x80000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffb, 0x0, 0xfffffffffffffffc, 0x80000000000000, 0xfffffffc, 0x1, 0x8, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0x0, 0xde4, 0x7, 0x0, 0x100000000]}) 3m8.032834234s ago: executing program 4 (id=1860): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket(0x10, 0x80003, 0x0) write(r2, &(0x7f0000000000)="240000001a005f0214f9f4e6ff0804000a000000fe0000000000aa0008000f00fd000000", 0x24) close_range(r2, 0xffffffffffffffff, 0x0) 2m59.674163336s ago: executing program 4 (id=1869): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000003c0), 0x200, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(:2', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000340)=0x0) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r5, 0x0, 0x4004) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x28, 0xea5, '.\x00'}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) fsetxattr$trusted_overlay_upper(r1, 0x0, &(0x7f0000000300)={0x0, 0xfb, 0x34, 0x3, 0x0, "5e29253e9121f814ade0feb2a4ef0efe", "82d761728dd498b823db379c7ebe5ca241ba99b128425512f7ede679cf37fd"}, 0x34, 0x3) mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r7, &(0x7f0000000400)=""/4096, 0x1000) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0xa, r8}) 2m44.45288357s ago: executing program 37 (id=1869): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000003c0), 0x200, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(:2', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000340)=0x0) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r5, 0x0, 0x4004) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x28, 0xea5, '.\x00'}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) fsetxattr$trusted_overlay_upper(r1, 0x0, &(0x7f0000000300)={0x0, 0xfb, 0x34, 0x3, 0x0, "5e29253e9121f814ade0feb2a4ef0efe", "82d761728dd498b823db379c7ebe5ca241ba99b128425512f7ede679cf37fd"}, 0x34, 0x3) mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r7, &(0x7f0000000400)=""/4096, 0x1000) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0xa, r8}) 20.819979986s ago: executing program 5 (id=2062): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c6945", 0x8d}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2a3f9623478134b943d5fba4f7e0ceed66c93cc8b", 0xe6}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6ea5cd18ff95c871", 0x78}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x90}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c53081ff", 0x24}, {&(0x7f0000000ec0)="6e20cbe6a4a132117801a95e6fd3ec5771da8352900bb19979b10fe02dd6f981361f62316da7b3f7abc9fbae1ea2ab5eea4b2ec5", 0x34}], 0x2, &(0x7f0000000f40)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}], 0x18}}, {{&(0x7f0000000f80)=@can, 0x80, &(0x7f00000010c0)=[{&(0x7f0000001000)="3d9162a847e3afc18db28d0be9d1c220b7844d9e236c35781da53eb30cd67912e5b4138fab89f32de1cd2edde4efa562", 0x30}], 0x1}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c77", 0x10}], 0x1}}], 0x5, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 20.510572568s ago: executing program 5 (id=2065): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) ioctl$SIOCAX25ADDUID(r2, 0x89e1, &(0x7f0000000080)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x1, 0x2b1e}, 0x10000084) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x4000000) unshare(0x28000600) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x50) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1d) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d5, 0x5}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x103000, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x50009405, &(0x7f0000000040)) 14.399567945s ago: executing program 8 (id=2070): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c286dd", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14) 14.329353618s ago: executing program 5 (id=2071): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000003c0), 0x200, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(:2', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, 0x0, 0x0, 0x4004) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x28, 0xea5, '.\x00'}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000001400)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) socket(0x1e, 0x1, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0xa, r5}) 14.080136318s ago: executing program 8 (id=2072): ioctl$DRM_IOCTL_PANTHOR_VM_DESTROY(0xffffffffffffffff, 0xc0086442, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x18}, 0x0) recvmmsg(r4, &(0x7f0000001140), 0x700, 0x2, 0x0) 10.553250318s ago: executing program 5 (id=2074): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VDPA_GET_VQS_COUNT(r0, 0x8004af80, &(0x7f0000000040)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010400ffbe8c5ee17688a20032e80101000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000eaffff00000000000062068f5ee50ce5af9b1c5683ffffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6", 0xb6) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x60004) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = io_uring_setup(0x1ddd, &(0x7f0000000440)={0x0, 0x40000000, 0x0, 0x1, 0x8}) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f0000000740)={&(0x7f0000001000)={[{0x0}]}, 0x1}, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r5, 0x17, &(0x7f0000000300)={0x0}, 0x1) close(0x3) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) 9.940178523s ago: executing program 8 (id=2075): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff0000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 9.599071285s ago: executing program 8 (id=2076): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x20100, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0xfffffffffffffffe) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffe00}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x7c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$kcm(0xa, 0x2, 0x0) rt_sigsuspend(&(0x7f0000000040)={[0x20000001]}, 0x8) ioctl$SIOCSIFHWADDR(r1, 0x8b37, &(0x7f0000000000)={'virt_wifi0\x00', @random="06000000ffff"}) ioctl$BLKGETDISKSEQ(r0, 0x80081280, 0x0) 7.858534375s ago: executing program 0 (id=2077): eventfd2(0x43, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x11, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x437, 0x4, 0x0, {0x0, 0x0, 0x0, r4, 0x50483}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r4, 0x4400, 0x8002}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000002080)={0xc, {"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", 0x94a}}, 0x1006) syz_open_procfs(0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000000)=0x1, 0x4) r7 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r7, 0x9) syz_open_dev$sndctrl(&(0x7f0000000040), 0x3, 0x0) 7.832646306s ago: executing program 8 (id=2078): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001a400)=""/102384, 0x18ff0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@private0, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x9, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x7, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f00000024c0), 0x80000, 0x0) ioctl$LOOP_SET_FD(r6, 0x7b9, r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'geneve1\x00'}) 6.40253048s ago: executing program 0 (id=2079): r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0xe8002) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.088161611s ago: executing program 0 (id=2080): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c286dd", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14) 5.648804062s ago: executing program 0 (id=2081): eventfd2(0x43, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x11, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x437, 0x4, 0x0, {0x0, 0x0, 0x0, r4, 0x50483}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r4, 0x4400, 0x8002}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000002080)={0xc, {"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", 0x94a}}, 0x1006) syz_open_procfs(0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000000)=0x1, 0x4) r7 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r7, 0x9) syz_open_dev$sndctrl(&(0x7f0000000040), 0x3, 0x0) 3.294730453s ago: executing program 5 (id=2082): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) kcmp(r1, r2, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) 1.363623522s ago: executing program 5 (id=2083): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000003c0), 0x200, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(:2', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000340)=0x0) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r5, 0x0, 0x4004) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x28, 0xea5, '.\x00'}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) fsetxattr$trusted_overlay_upper(r1, 0x0, &(0x7f0000000300)={0x0, 0xfb, 0x34, 0x3, 0x0, "5e29253e9121f814ade0feb2a4ef0efe", "82d761728dd498b823db379c7ebe5ca241ba99b128425512f7ede679cf37fd"}, 0x34, 0x3) mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000001400)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r6, &(0x7f0000000400)=""/4096, 0x1000) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0xa, r7}) 1.280671538s ago: executing program 8 (id=2084): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36", 0xb7}, {0x0}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a", 0xab}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd23cc88571f540aa75255a73b8c9cdc2", 0xa7}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x90}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c77", 0x10}], 0x1}}], 0x4, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff08021100"], 0x6f4}}, 0x0) 541.419543ms ago: executing program 0 (id=2085): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd2", 0x98}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2a3f9623478134b943d5fba4f7e0ceed66c93cc8b", 0xe6}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6ea5cd18ff95c871d91454240f370e0c8e2629e58605c4b29017a160709ec76547c92a21d0ec5589e228922b105d0b8b29256620c44d2118334025dedd46db5194f22b349264de22068d3d4db627db4fa827907e5bc02b69c36e94f8149f12116f75bd48aa86d41dfdf52e74b442782f530da1263fd0f699776e9459e33fe5", 0xef}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x90}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db554", 0x12}, {&(0x7f0000000ec0)="6e20cbe6a4a132117801a95e6fd3ec5771da8352900bb19979b10fe02dd6f981361f62316da7b3f7abc9", 0x2a}], 0x2}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c77", 0x10}], 0x1}}], 0x4, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 0s ago: executing program 0 (id=2086): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2a3f962347813", 0xd8}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6ea5cd18ff95c871d91454240f370e0c8e2629e58605c4b29017a160709ec76547c92a21d0ec5589e228922b105d0b8b29256620c44d2118334025dedd46db5194f22b349264de22068d3d4db627db4fa827907e5bc02b69c36e94f8149f12116f75bd48aa86d41dfdf52e74b442782f530da1263fd0f699776e9459e33fe5", 0xef}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x90}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c53081ff", 0x24}, {&(0x7f0000000ec0)="6e20cbe6a4a132117801a95e6fd3ec5771da8352900bb19979b10fe02dd6f981361f62316da7b3f7abc9fbae1ea2ab5eea4b2ec5", 0x34}], 0x2, &(0x7f0000000f40)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}], 0x18}}, {{&(0x7f0000000f80)=@can, 0x80, &(0x7f00000010c0)=[{&(0x7f0000001000)="3d9162a847e3afc18db28d0be9d1c220b7844d9e236c35781da53eb30cd67912e5b4138fab89f32de1cd2edde4efa562", 0x30}], 0x1}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c77", 0x10}], 0x1}}], 0x5, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) kernel console output (not intermixed with test programs): x 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 621.196503][ T31] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 621.437340][ T31] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 621.437553][ T31] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -61 [ 623.400305][T11147] netlink: 240 bytes leftover after parsing attributes in process `syz.6.1450'. [ 623.400332][T11147] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1450'. [ 623.465263][ T10] usb 6-1: USB disconnect, device number 25 [ 624.006120][T11162] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1453'. [ 624.210412][ T10] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 624.370649][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 624.373603][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 624.373649][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 624.373680][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 624.428674][T11169] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 624.439364][ T10] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 624.439397][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.439419][ T10] usb 1-1: Product: syz [ 624.439434][ T10] usb 1-1: Manufacturer: syz [ 624.439450][ T10] usb 1-1: SerialNumber: syz [ 624.545949][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.545997][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.547813][ T1322] lec:lec_start_xmit: lec0:No lecd attached [ 624.600472][ T10] usb 1-1: config 0 descriptor?? [ 624.601329][T11164] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 624.604062][ T10] hub 1-1:0.0: bad descriptor, ignoring hub [ 624.604103][ T10] hub 1-1:0.0: probe with driver hub failed with error -5 [ 624.658329][ T10] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input19 [ 626.499845][T11179] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1458'. [ 626.499875][T11179] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 627.062417][ T5852] usb 1-1: USB disconnect, device number 15 [ 627.062485][ C0] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 627.842925][T11194] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1464'. [ 627.842955][T11194] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1464'. [ 627.940404][ T5852] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 628.100334][ T5852] usb 8-1: Using ep0 maxpacket: 32 [ 628.102725][ T5852] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 628.102754][ T5852] usb 8-1: config 0 has no interface number 0 [ 628.106536][ T5852] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 628.106567][ T5852] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.106588][ T5852] usb 8-1: Product: syz [ 628.106602][ T5852] usb 8-1: Manufacturer: syz [ 628.106616][ T5852] usb 8-1: SerialNumber: syz [ 628.122614][ T5852] usb 8-1: config 0 descriptor?? [ 628.552502][ T5852] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 628.552600][ T5852] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 628.762728][ T5852] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 628.763085][ T5852] smsc95xx 8-1:0.67: probe with driver smsc95xx failed with error -61 [ 630.098255][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5550 ms [ 630.100343][ C1] lec:lec_tx_timeout: lec0 [ 630.488540][T11218] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 630.821363][ T5917] usb 8-1: USB disconnect, device number 6 [ 631.179004][ T5808] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 631.413707][ T36] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 631.500483][ T5808] usb 5-1: Using ep0 maxpacket: 16 [ 631.602138][ T36] usb 7-1: Using ep0 maxpacket: 32 [ 631.974249][ T36] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 631.974280][ T36] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 631.974302][ T36] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 631.974352][ T36] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 631.974375][ T36] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 631.974397][ T36] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 631.974444][ T36] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 631.974469][ T36] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.078468][ T36] usb 7-1: config 0 descriptor?? [ 632.706346][ T36] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 632.830421][ T5917] usb 7-1: USB disconnect, device number 7 [ 632.917573][ T5917] usblp0: removed [ 633.014944][T11223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 633.015280][T11223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 633.056854][ T5808] usb 5-1: unable to get BOS descriptor or descriptor too short [ 633.056912][ T5808] usb 5-1: no configurations [ 633.056920][ T5808] usb 5-1: can't read configurations, error -22 [ 633.104168][T11235] netlink: 240 bytes leftover after parsing attributes in process `syz.5.1475'. [ 633.104186][T11235] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1475'. [ 636.547949][T11251] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 636.548100][T11251] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 637.121475][T11263] 9p: Bad value for 'rfdno' [ 637.594563][ T9] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 637.752235][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 637.754336][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 637.754369][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 637.754399][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 637.757085][ T9] usb 6-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 637.757112][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.757131][ T9] usb 6-1: Product: syz [ 637.757140][ T9] usb 6-1: Manufacturer: syz [ 637.757149][ T9] usb 6-1: SerialNumber: syz [ 637.883992][ T9] usb 6-1: config 0 descriptor?? [ 637.884763][T11265] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 637.889837][ T9] hub 6-1:0.0: bad descriptor, ignoring hub [ 637.889861][ T9] hub 6-1:0.0: probe with driver hub failed with error -5 [ 637.976638][ T9] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input20 [ 639.659253][ T31] usb 6-1: USB disconnect, device number 26 [ 639.661593][ C0] usbtouchscreen 6-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 641.971107][ T5803] Bluetooth: hci1: command 0x0406 tx timeout [ 642.487046][ T5808] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 642.510639][T11289] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 642.788411][ T5808] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 642.788451][ T5808] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 642.788492][ T5808] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 642.788518][ T5808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.893577][ T5808] usb 5-1: config 0 descriptor?? [ 642.912036][ T5808] hub 5-1:0.0: USB hub found [ 644.198733][ T5808] hub 5-1:0.0: 1 port detected [ 645.476651][ T5808] hub 5-1:0.0: activate --> -90 [ 645.477271][ T5917] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 645.477623][ T5808] usb 5-1: USB disconnect, device number 15 [ 645.671798][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 645.876550][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 646.051224][T11311] 9p: Bad value for 'rfdno' [ 646.835958][T11307] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 646.837956][T11307] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 647.253507][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 647.253565][ T9] usb 1-1: no configurations [ 647.253574][ T9] usb 1-1: can't read configurations, error -22 [ 647.578530][T11330] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1500'. [ 647.578559][T11330] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1500'. [ 647.757712][T11329] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1502'. [ 648.080358][ T10] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 649.247902][T11342] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 649.330542][ T5803] Bluetooth: hci5: command 0x0406 tx timeout [ 649.520289][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 649.564038][ T10] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024 [ 649.566927][ T10] usb 8-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 649.566947][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.566959][ T10] usb 8-1: Product: syz [ 649.566968][ T10] usb 8-1: Manufacturer: syz [ 649.566977][ T10] usb 8-1: SerialNumber: syz [ 649.650440][T10477] Bluetooth: hci3: command tx timeout [ 649.671041][T11327] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 651.410488][T10477] Bluetooth: hci5: command 0x0406 tx timeout [ 651.451301][T11081] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 651.830358][T11081] usb 7-1: Using ep0 maxpacket: 32 [ 651.832965][T11081] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 651.832995][T11081] usb 7-1: config 0 has no interface number 0 [ 651.833045][T11081] usb 7-1: config 0 interface 184 has no altsetting 0 [ 651.869213][T11081] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 651.869246][T11081] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.869266][T11081] usb 7-1: Product: syz [ 651.869280][T11081] usb 7-1: Manufacturer: syz [ 651.869289][T11081] usb 7-1: SerialNumber: syz [ 654.049715][T11081] usb 7-1: config 0 descriptor?? [ 654.063854][T11081] usb 7-1: can't set config #0, error -71 [ 654.139103][T11081] usb 7-1: USB disconnect, device number 8 [ 654.724081][T11377] 9p: Bad value for 'rfdno' [ 654.891584][ T10] usb 8-1: selecting invalid altsetting 1 [ 654.980401][T11370] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 654.980572][T11370] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 657.130316][ T31] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 657.183522][ T10] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 657.392837][ T31] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 657.392870][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.415641][ T31] usb 7-1: config 0 descriptor?? [ 657.425979][T11008] udevd[11008]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 657.733762][ T5803] Bluetooth: hci3: link tx timeout [ 657.733951][ T5803] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 657.835172][ T31] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 657.836047][ T31] [drm:udl_init] *ERROR* Selecting channel failed [ 657.925386][ T31] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 657.925416][ T31] [drm] Initialized udl on minor 2 [ 657.937840][ T6464] lec:lec_start_xmit: lec0:No lecd attached [ 657.967553][ T31] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 657.973007][ T31] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 658.003305][ T36] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 658.009283][ T31] usb 7-1: USB disconnect, device number 9 [ 658.020497][ T36] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 658.020751][ T36] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 658.177514][T10477] Bluetooth: hci3: link tx timeout [ 658.177537][T10477] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 659.177688][T11407] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 659.370513][T10477] Bluetooth: hci3: link tx timeout [ 659.370537][T10477] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 659.492682][T10477] Bluetooth: hci3: link tx timeout [ 659.492706][T10477] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 659.822429][T10477] Bluetooth: hci3: command 0x0406 tx timeout [ 659.822471][T10477] Bluetooth: hci3: link tx timeout [ 660.891118][ T10] usb 8-1: USB disconnect, device number 7 [ 661.281454][ T36] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 662.290332][ T36] usb 6-1: Using ep0 maxpacket: 32 [ 662.426654][T11434] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 662.625072][T11436] 9p: Bad value for 'rfdno' [ 662.798047][ T36] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 662.798080][ T36] usb 6-1: config 0 has no interface number 0 [ 662.798155][ T36] usb 6-1: config 0 interface 184 has no altsetting 0 [ 662.838072][ T36] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 662.838107][ T36] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.838127][ T36] usb 6-1: Product: syz [ 662.838141][ T36] usb 6-1: Manufacturer: syz [ 662.838155][ T36] usb 6-1: SerialNumber: syz [ 663.158006][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5220 ms [ 663.158042][ C1] lec:lec_tx_timeout: lec0 [ 663.194411][T11433] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 663.194571][T11433] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 665.373450][ T36] usb 6-1: config 0 descriptor?? [ 665.411285][ T36] usb 6-1: can't set config #0, error -71 [ 665.429503][ T36] usb 6-1: USB disconnect, device number 27 [ 668.423679][ T5803] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 668.530428][ T5803] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 668.551843][ T5803] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 668.553463][ T5803] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 668.554853][ T5803] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 669.459237][T11476] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 670.612531][T10477] Bluetooth: hci4: command tx timeout [ 671.513497][T11486] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 671.513653][T11486] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 671.771686][T11081] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 672.194651][T11081] usb 1-1: config index 0 descriptor too short (expected 65535, got 36) [ 672.194685][T11081] usb 1-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 672.194706][T11081] usb 1-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 672.194726][T11081] usb 1-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 672.194767][T11081] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 672.194793][T11081] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.516878][ T5808] usb 1-1: USB disconnect, device number 18 [ 672.690333][T10477] Bluetooth: hci4: command tx timeout [ 672.880333][ T827] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 674.071055][ T827] usb 5-1: Using ep0 maxpacket: 32 [ 674.073800][ T827] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 674.073829][ T827] usb 5-1: config 0 has no interface number 0 [ 674.073897][ T827] usb 5-1: config 0 interface 184 has no altsetting 0 [ 674.115201][ T827] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 674.115235][ T827] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.115255][ T827] usb 5-1: Product: syz [ 674.115271][ T827] usb 5-1: Manufacturer: syz [ 674.115285][ T827] usb 5-1: SerialNumber: syz [ 674.167042][ T827] usb 5-1: config 0 descriptor?? [ 674.211192][T11507] netlink: 128 bytes leftover after parsing attributes in process `syz.6.1538'. [ 674.211222][T11507] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 674.724323][ T3515] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.770325][T10477] Bluetooth: hci4: command tx timeout [ 675.433093][ T827] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 675.433130][ T827] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 675.433951][ T827] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 675.433979][ T827] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 675.434000][ T827] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 675.434018][ T827] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 675.434362][ T827] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 675.520806][ T827] usb 5-1: USB disconnect, device number 16 [ 677.689190][T11529] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 677.922546][T10477] Bluetooth: hci4: command tx timeout [ 678.722608][ T3515] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.435789][ T3515] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.500391][ T5852] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 679.800320][ T5852] usb 5-1: Using ep0 maxpacket: 16 [ 682.679969][T11556] omfs: Invalid superblock (0) [ 682.721746][ T5852] usb 5-1: unable to get BOS descriptor or descriptor too short [ 682.721845][ T5852] usb 5-1: no configurations [ 682.721860][ T5852] usb 5-1: can't read configurations, error -22 [ 683.325002][ T3515] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.673117][T11463] chnl_net:caif_netlink_parms(): no params data found [ 686.778232][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.778309][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.781753][ T1322] lec:lec_start_xmit: lec0:No lecd attached [ 687.573429][T11575] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 687.578575][T11575] 9p: Bad value for 'rfdno' [ 688.651227][T11583] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nullb0": -EINTR [ 689.172379][T11600] netlink: 'syz.5.1557': attribute type 72 has an invalid length. [ 689.905079][T11603] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 689.990753][T11463] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.990898][T11463] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.991117][T11463] bridge_slave_0: entered allmulticast mode [ 689.994186][T11463] bridge_slave_0: entered promiscuous mode [ 690.057062][T11463] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.057139][T11463] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.057323][T11463] bridge_slave_1: entered allmulticast mode [ 690.093966][T11463] bridge_slave_1: entered promiscuous mode [ 690.450400][ T5992] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 691.117388][ T5992] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 691.117425][ T5992] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 691.117466][ T5992] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 691.117490][ T5992] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.195841][T11463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 691.222378][ T5992] usb 6-1: config 0 descriptor?? [ 691.250748][ T5992] hub 6-1:0.0: USB hub found [ 691.333219][T11463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 691.460098][ T5992] hub 6-1:0.0: 1 port detected [ 691.778081][T11463] team0: Port device team_slave_0 added [ 691.790595][ T3515] bridge_slave_1: left allmulticast mode [ 691.790626][ T3515] bridge_slave_1: left promiscuous mode [ 691.790893][ T3515] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.940356][ T3515] bridge_slave_0: left allmulticast mode [ 691.940390][ T3515] bridge_slave_0: left promiscuous mode [ 691.940733][ T3515] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.050367][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5270 ms [ 692.050402][ C1] lec:lec_tx_timeout: lec0 [ 692.347490][ T36] hub 6-1:0.0: activate --> -90 [ 692.753427][ T36] usb 6-1: USB disconnect, device number 28 [ 692.972391][ T5992] usb 6-1-port1: config error [ 693.218053][ T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 693.380298][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 694.524051][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 694.524109][ T9] usb 1-1: no configurations [ 694.524118][ T9] usb 1-1: can't read configurations, error -22 [ 694.652332][ T3515] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 694.740356][ T10] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 694.746235][ T3515] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 694.796483][ T3515] bond0 (unregistering): Released all slaves [ 694.871621][T11463] team0: Port device team_slave_1 added [ 694.890399][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 695.538865][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 695.538960][ T10] usb 5-1: no configurations [ 695.538973][ T10] usb 5-1: can't read configurations, error -22 [ 695.640641][ T36] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 695.689292][T11463] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 695.689305][T11463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 695.689320][T11463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 695.734085][T11463] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 695.734103][T11463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 695.734129][T11463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 695.865701][ T36] usb 6-1: Using ep0 maxpacket: 16 [ 695.876186][ T36] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 695.876222][ T36] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 695.876269][ T36] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 695.876293][ T36] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.898019][T11661] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.1567'. [ 695.898489][ T36] usb 6-1: config 0 descriptor?? [ 696.524588][ T36] usbhid 6-1:0.0: can't add hid device: -71 [ 696.524730][ T36] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 696.565206][ T36] usb 6-1: USB disconnect, device number 29 [ 698.207002][T11671] capability: warning: `syz.6.1569' uses 32-bit capabilities (legacy support in use) [ 701.282339][T11463] hsr_slave_0: entered promiscuous mode [ 701.298022][T11463] hsr_slave_1: entered promiscuous mode [ 701.299072][T11463] debugfs: 'hsr0' already exists in 'hsr' [ 701.299097][T11463] Cannot create hsr debugfs directory [ 704.043351][T11701] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 704.089134][T11701] 9p: Bad value for 'rfdno' [ 704.195330][ T9] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 704.267810][T11707] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.1578'. [ 705.025911][ T9] usb 1-1: device not accepting address 21, error -71 [ 705.717721][ T3515] hsr_slave_0: left promiscuous mode [ 705.827617][ T3515] hsr_slave_1: left promiscuous mode [ 705.828974][ T3515] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 705.829003][ T3515] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 705.881965][ T5992] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 705.933879][ T3515] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 705.933912][ T3515] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 706.015595][ T3515] veth1_macvtap: left promiscuous mode [ 706.015718][ T3515] veth0_macvtap: left promiscuous mode [ 706.016009][ T3515] veth1_vlan: left promiscuous mode [ 706.018169][ T3515] veth0_vlan: left promiscuous mode [ 706.040473][ T5992] usb 5-1: Using ep0 maxpacket: 16 [ 706.051544][ T5992] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 706.051580][ T5992] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 706.051625][ T5992] usb 5-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 706.051650][ T5992] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.058257][ T5992] usb 5-1: config 0 descriptor?? [ 706.717413][ T5992] usbhid 5-1:0.0: can't add hid device: -71 [ 706.717548][ T5992] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 706.733448][ T5992] usb 5-1: USB disconnect, device number 21 [ 709.130867][ T3515] team0 (unregistering): Port device team_slave_1 removed [ 709.320962][ T3515] team0 (unregistering): Port device team_slave_0 removed [ 709.590474][ T36] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 709.750331][ T36] usb 6-1: Using ep0 maxpacket: 16 [ 710.072446][T11738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 710.086295][T11738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 710.939134][ T36] usb 6-1: unable to get BOS descriptor or descriptor too short [ 710.939225][ T36] usb 6-1: no configurations [ 710.939239][ T36] usb 6-1: can't read configurations, error -22 [ 711.250456][ T5992] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 711.422310][ T5992] usb 1-1: Using ep0 maxpacket: 16 [ 712.516044][T11755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 712.516757][T11755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 712.684359][ T5992] usb 1-1: unable to get BOS descriptor or descriptor too short [ 712.684423][ T5992] usb 1-1: no configurations [ 712.684436][ T5992] usb 1-1: can't read configurations, error -22 [ 712.838586][T11463] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 712.928739][T11463] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 713.071598][T11463] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 713.261695][T11463] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 713.780375][ T5992] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 713.950764][ T5992] usb 1-1: Using ep0 maxpacket: 16 [ 713.959259][ T5992] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 713.959296][ T5992] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 713.959343][ T5992] usb 1-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 713.959368][ T5992] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.015417][ T5992] usb 1-1: config 0 descriptor?? [ 714.777995][ T5992] usbhid 1-1:0.0: can't add hid device: -71 [ 714.778125][ T5992] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 714.976227][ T5992] usb 1-1: USB disconnect, device number 24 [ 715.822801][ T3515] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.670358][ T827] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 717.922713][ T827] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 717.922751][ T827] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 717.922793][ T827] usb 7-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 717.922819][ T827] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.943275][ T827] usb 7-1: config 0 descriptor?? [ 718.319026][ T3515] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.428772][ T827] hid_parser_main: 28 callbacks suppressed [ 718.428791][ T827] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0 [ 718.428811][ T827] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0 [ 718.428856][ T827] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0 [ 718.428871][ T827] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0 [ 718.437674][ T827] playstation 0003:054C:0DF2.0008: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.6-1/input0 [ 718.879425][ T827] playstation 0003:054C:0DF2.0008: Invalid byte count transferred, expected 64 got 0 [ 718.879458][ T827] playstation 0003:054C:0DF2.0008: Failed to retrieve DualSense firmware info: -22 [ 718.879517][ T827] playstation 0003:054C:0DF2.0008: Failed to get firmware info from DualSense [ 718.879535][ T827] playstation 0003:054C:0DF2.0008: Failed to create dualsense. [ 718.897907][ T827] playstation 0003:054C:0DF2.0008: probe with driver playstation failed with error -22 [ 719.100252][ T31] usb 7-1: USB disconnect, device number 10 [ 721.247176][T11843] 9p: Bad value for 'rfdno' [ 723.040333][ T827] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 723.190338][ T827] usb 5-1: Using ep0 maxpacket: 32 [ 723.192269][ T827] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 723.192297][ T827] usb 5-1: config 0 has no interface number 0 [ 723.192337][ T827] usb 5-1: config 0 interface 184 has no altsetting 0 [ 723.195205][ T827] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 723.195229][ T827] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.195241][ T827] usb 5-1: Product: syz [ 723.195250][ T827] usb 5-1: Manufacturer: syz [ 723.195259][ T827] usb 5-1: SerialNumber: syz [ 723.211942][ T827] usb 5-1: config 0 descriptor?? [ 724.127329][T10477] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 724.148756][T10477] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 724.162070][T10477] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 724.178582][T10477] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 724.184110][T10477] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 724.473266][ T827] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 724.473304][ T827] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 724.473884][ T827] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 724.473910][ T827] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 724.473930][ T827] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 724.473948][ T827] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 724.474281][ T827] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 724.534510][ T827] usb 5-1: USB disconnect, device number 22 [ 725.102838][ T36] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 728.612876][ T5803] Bluetooth: hci3: command tx timeout [ 728.660354][ T6464] lec:lec_start_xmit: lec0:No lecd attached [ 728.790341][ T36] usb 6-1: Using ep0 maxpacket: 16 [ 728.817077][ T36] usb 6-1: device descriptor read/all, error -71 [ 729.557848][ T3515] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.010460][ T5803] Bluetooth: hci3: command tx timeout [ 732.149446][T11892] 9p: Bad value for 'rfdno' [ 732.978293][ T3515] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.010901][ T10] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 733.093300][ T5803] Bluetooth: hci3: command tx timeout [ 734.050267][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5390 ms [ 734.050305][ C1] lec:lec_tx_timeout: lec0 [ 735.115207][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 735.115245][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 735.115287][ T10] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 735.115313][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.170619][ T5803] Bluetooth: hci3: command tx timeout [ 735.201577][ T10] usb 5-1: config 0 descriptor?? [ 735.530751][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 735.530836][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 735.630895][ T10] usb 5-1: USB disconnect, device number 23 [ 735.750388][T11913] netlink: 88 bytes leftover after parsing attributes in process `syz.6.1620'. [ 735.750436][T11913] netlink: 108 bytes leftover after parsing attributes in process `syz.6.1620'. [ 736.133354][ T10] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 736.280329][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 736.282536][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 736.282570][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 736.282609][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 736.292885][ T10] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 736.292917][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.292937][ T10] usb 5-1: Product: syz [ 736.292952][ T10] usb 5-1: Manufacturer: syz [ 736.292967][ T10] usb 5-1: SerialNumber: syz [ 736.395555][ T10] usb 5-1: config 0 descriptor?? [ 736.396360][T11912] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 736.399598][ T10] hub 5-1:0.0: bad descriptor, ignoring hub [ 736.399641][ T10] hub 5-1:0.0: probe with driver hub failed with error -5 [ 736.443863][ T10] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input21 [ 737.271890][ T5992] usb 5-1: USB disconnect, device number 24 [ 737.271947][ C0] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 737.280560][ T36] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 737.417094][ T3515] bridge_slave_1: left allmulticast mode [ 737.417126][ T3515] bridge_slave_1: left promiscuous mode [ 737.417389][ T3515] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.442702][ T36] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 737.442739][ T36] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 737.442781][ T36] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 737.442807][ T36] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.448855][ T36] usb 6-1: config 0 descriptor?? [ 737.479178][ T36] hub 6-1:0.0: USB hub found [ 737.534542][ T3515] bridge_slave_0: left allmulticast mode [ 737.534576][ T3515] bridge_slave_0: left promiscuous mode [ 737.535055][ T3515] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.772561][ T36] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 737.990100][ C1] raw-gadget.1 gadget.5: ignoring, device is not running [ 737.993510][ T36] usbhid 6-1:0.0: can't add hid device: -71 [ 737.993645][ T36] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 738.041848][ T36] usb 6-1: USB disconnect, device number 34 [ 738.150290][ T10] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 738.306141][ T10] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 738.306177][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.431055][ T10] usb 5-1: config 0 descriptor?? [ 738.497778][T11938] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1624'. [ 738.633482][T11941] random: crng reseeded on system resumption [ 738.652677][ T10] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 738.711257][ T3515] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 740.015654][ T10] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 740.015683][ T10] [drm] Initialized udl on minor 2 [ 740.184486][ T10] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 740.185043][ T10] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 740.186279][ T9] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 740.188506][ T9] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 740.188777][ T9] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 740.230459][ T10] usb 5-1: USB disconnect, device number 25 [ 740.500903][ T3515] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 740.564860][ T3515] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 740.582300][ T3515] bond0 (unregistering): Released all slaves [ 740.588231][ T3515] bond1 (unregistering): Released all slaves [ 740.599505][ T3515] bond2 (unregistering): Released all slaves [ 740.693812][T11936] 8021q: adding VLAN 0 to HW filter on device bond1 [ 744.553383][ T3515] IPVS: stopping master sync thread 10330 ... [ 745.491281][T11968] 9p: Bad value for 'rfdno' [ 745.867055][T11852] chnl_net:caif_netlink_parms(): no params data found [ 746.468749][T11981] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1633'. [ 746.468819][T11981] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1633'. [ 747.424447][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.424527][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.428308][ T1322] lec:lec_start_xmit: lec0:No lecd attached [ 747.560393][ T3515] dummy0: left promiscuous mode [ 747.610299][ T3515] team0: left promiscuous mode [ 747.610318][ T3515] team_slave_0: left promiscuous mode [ 747.610559][ T3515] team_slave_1: left promiscuous mode [ 747.931838][ T3515] hsr_slave_0: left promiscuous mode [ 747.993503][ T3515] hsr_slave_1: left promiscuous mode [ 747.994238][ T3515] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 747.994256][ T3515] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 748.044240][ T3515] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 748.044262][ T3515] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 748.148207][ T3515] veth1_macvtap: left promiscuous mode [ 748.148276][ T3515] veth0_macvtap: left promiscuous mode [ 748.148439][ T3515] veth1_vlan: left promiscuous mode [ 748.148546][ T3515] veth0_vlan: left promiscuous mode [ 751.281088][ T3515] team0 (unregistering): Port device team_slave_1 removed [ 751.618619][T12027] overlayfs: overlapping lowerdir path [ 752.612816][T12017] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 752.612969][T12017] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 752.796886][ T3515] team0 (unregistering): Port device team_slave_0 removed [ 753.062794][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5640 ms [ 753.062834][ C1] lec:lec_tx_timeout: lec0 [ 755.282001][T11852] bridge0: port 1(bridge_slave_0) entered blocking state [ 755.282145][T11852] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.282458][T11852] bridge_slave_0: entered allmulticast mode [ 755.289035][T11852] bridge_slave_0: entered promiscuous mode [ 755.471718][T11852] bridge0: port 2(bridge_slave_1) entered blocking state [ 755.471843][T11852] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.472073][T11852] bridge_slave_1: entered allmulticast mode [ 755.491281][T11852] bridge_slave_1: entered promiscuous mode [ 755.942906][T11852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 755.975923][T11852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 756.417072][T11852] team0: Port device team_slave_0 added [ 756.430341][ T5882] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 756.568551][T11852] team0: Port device team_slave_1 added [ 756.570614][ T5882] usb 7-1: device descriptor read/64, error -71 [ 756.860566][T11852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 756.860586][T11852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 756.860615][T11852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 756.863232][T11852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 756.863246][T11852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 756.863274][T11852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 757.238332][T12070] overlayfs: overlapping lowerdir path [ 757.283389][ T5882] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 757.441361][T12072] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 759.040275][ T5882] usb 7-1: device descriptor read/64, error -71 [ 759.331609][ T5882] usb usb7-port1: attempt power cycle [ 759.640963][T11852] hsr_slave_0: entered promiscuous mode [ 760.122692][T11852] hsr_slave_1: entered promiscuous mode [ 760.123748][T11852] debugfs: 'hsr0' already exists in 'hsr' [ 760.123773][T11852] Cannot create hsr debugfs directory [ 760.171518][T12082] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1652'. [ 761.462835][T12097] overlayfs: overlapping lowerdir path [ 761.772071][T12099] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 765.104041][T12113] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1660'. [ 765.104128][T12113] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1660'. [ 765.551781][ T5992] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 765.724336][ T5992] usb 6-1: device descriptor read/64, error -71 [ 765.990578][ T5992] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 766.358941][ T5992] usb 6-1: device descriptor read/64, error -71 [ 766.478243][ T5992] usb usb6-port1: attempt power cycle [ 767.144637][ T5992] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 767.161122][ T5992] usb 6-1: device descriptor read/8, error -71 [ 768.681755][ T5992] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 768.854418][ T5992] usb 6-1: device descriptor read/8, error -71 [ 769.216338][ T5992] usb usb6-port1: unable to enumerate USB device [ 769.308973][T12160] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1670'. [ 769.309040][T12160] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1670'. [ 771.833742][T12176] overlayfs: overlapping lowerdir path [ 772.119925][T12178] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 774.155599][T12191] netlink: 724 bytes leftover after parsing attributes in process `syz.5.1677'. [ 774.630457][ T827] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 774.780290][ T827] usb 7-1: Using ep0 maxpacket: 32 [ 774.793753][ T827] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 774.793782][ T827] usb 7-1: config 0 has no interface number 0 [ 774.800744][ T827] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 774.800774][ T827] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.800792][ T827] usb 7-1: Product: syz [ 774.800806][ T827] usb 7-1: Manufacturer: syz [ 774.800819][ T827] usb 7-1: SerialNumber: syz [ 774.817360][ T827] usb 7-1: config 0 descriptor?? [ 775.373433][ T827] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 775.373470][ T827] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 776.934754][ T9] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 777.039224][ T3515] bridge_slave_1: left allmulticast mode [ 777.039324][ T3515] bridge_slave_1: left promiscuous mode [ 777.039862][ T3515] bridge0: port 2(bridge_slave_1) entered disabled state [ 777.060946][ T9] usb 6-1: device descriptor read/64, error -71 [ 778.649781][ T9] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 778.655246][ T827] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 778.655613][ T827] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 778.709513][ T827] usb 7-1: USB disconnect, device number 14 [ 778.830305][ T9] usb 6-1: device descriptor read/64, error -71 [ 778.893218][ T3515] bridge_slave_0: left allmulticast mode [ 778.893253][ T3515] bridge_slave_0: left promiscuous mode [ 778.895524][ T3515] bridge0: port 1(bridge_slave_0) entered disabled state [ 778.941045][ T9] usb usb6-port1: attempt power cycle [ 779.290317][ T9] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 779.311105][ T9] usb 6-1: device descriptor read/8, error -71 [ 779.551176][ T9] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 779.571177][ T9] usb 6-1: device descriptor read/8, error -71 [ 779.695632][ T9] usb usb6-port1: unable to enumerate USB device [ 780.504169][T12263] netlink: 'syz.0.1690': attribute type 72 has an invalid length. [ 781.004985][ T3515] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 783.104214][ T3515] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 787.122751][T12282] overlayfs: overlapping lowerdir path [ 787.250261][ T3515] bond0 (unregistering): Released all slaves [ 787.783488][T12279] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 790.090316][T12234] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 790.240249][T12234] usb 6-1: Using ep0 maxpacket: 16 [ 790.242065][T12234] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 790.242083][T12234] usb 6-1: config 0 has no interfaces? [ 790.242102][T12234] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 790.242116][T12234] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.289697][T12234] usb 6-1: config 0 descriptor?? [ 790.329262][T10477] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 790.345395][T10477] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 790.353672][T10477] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 790.409475][T10477] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 790.427424][T10477] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 790.470298][ T5992] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 790.740302][ T5992] usb 1-1: Using ep0 maxpacket: 16 [ 791.494304][ T3515] hsr_slave_0: left promiscuous mode [ 791.589638][T12312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 791.591425][T12312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 791.653345][ T3515] hsr_slave_1: left promiscuous mode [ 791.667864][ T3515] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 791.711156][ T3515] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 792.027561][ T5992] usb 1-1: unable to get BOS descriptor or descriptor too short [ 792.027630][ T5992] usb 1-1: no configurations [ 792.027638][ T5992] usb 1-1: can't read configurations, error -22 [ 792.450288][T10477] Bluetooth: hci4: command tx timeout [ 793.620946][T12234] usb 6-1: USB disconnect, device number 43 [ 795.144275][T10477] Bluetooth: hci4: command tx timeout [ 796.622271][ T3515] team0 (unregistering): Port device team_slave_1 removed [ 796.733176][ T3515] team0 (unregistering): Port device team_slave_0 removed [ 797.172310][T10477] Bluetooth: hci4: command tx timeout [ 797.899981][ T6464] lec:lec_start_xmit: lec0:No lecd attached [ 798.971235][T12360] netlink: 240 bytes leftover after parsing attributes in process `syz.6.1714'. [ 798.971262][T12360] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1714'. [ 799.186835][T12302] chnl_net:caif_netlink_parms(): no params data found [ 799.266075][T10477] Bluetooth: hci4: command tx timeout [ 799.540267][ T9] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 800.770256][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 800.781834][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 800.781860][ T9] usb 1-1: config 0 has no interfaces? [ 800.781889][ T9] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 800.781911][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.786965][ T9] usb 1-1: config 0 descriptor?? [ 801.196524][T12377] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 801.480633][T12394] netlink: 'syz.4.1708': attribute type 72 has an invalid length. [ 801.577890][T12302] bridge0: port 1(bridge_slave_0) entered blocking state [ 801.629762][T12302] bridge0: port 1(bridge_slave_0) entered disabled state [ 801.630034][T12302] bridge_slave_0: entered allmulticast mode [ 801.632970][T12302] bridge_slave_0: entered promiscuous mode [ 801.664400][T12302] bridge0: port 2(bridge_slave_1) entered blocking state [ 801.664545][T12302] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.664841][T12302] bridge_slave_1: entered allmulticast mode [ 801.667881][T12302] bridge_slave_1: entered promiscuous mode [ 802.225364][ T827] usb 1-1: USB disconnect, device number 27 [ 802.364010][T12406] netlink: 240 bytes leftover after parsing attributes in process `syz.5.1725'. [ 802.364038][T12406] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1725'. [ 802.526485][T12302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 802.670326][T12302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 802.938830][T12302] team0: Port device team_slave_0 added [ 802.972383][T12302] team0: Port device team_slave_1 added [ 803.010185][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5120 ms [ 803.010221][ C1] lec:lec_tx_timeout: lec0 [ 803.050280][ T36] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 803.200429][ T36] usb 7-1: Using ep0 maxpacket: 16 [ 804.256869][ T36] usb 7-1: unable to get BOS descriptor or descriptor too short [ 804.256927][ T36] usb 7-1: no configurations [ 804.256935][ T36] usb 7-1: can't read configurations, error -22 [ 804.541575][ T3515] bridge_slave_1: left allmulticast mode [ 804.541606][ T3515] bridge_slave_1: left promiscuous mode [ 804.541906][ T3515] bridge0: port 2(bridge_slave_1) entered disabled state [ 805.740818][ T3515] bridge_slave_0: left allmulticast mode [ 805.740852][ T3515] bridge_slave_0: left promiscuous mode [ 805.741247][ T3515] bridge0: port 1(bridge_slave_0) entered disabled state [ 805.922897][T12438] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1732'. [ 806.286685][T12440] netlink: 'syz.5.1733': attribute type 72 has an invalid length. [ 806.352375][T12449] netlink: 240 bytes leftover after parsing attributes in process `syz.6.1736'. [ 806.352400][T12449] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1736'. [ 807.451375][ T3515] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 808.039042][ T3515] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 808.441799][ T3515] bond0 (unregistering): Released all slaves [ 808.481939][T12302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 808.481959][T12302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 808.481989][T12302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 808.637673][T12302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 808.637694][T12302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 808.637725][T12302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 808.869412][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.875329][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.883328][ T1322] lec:lec_start_xmit: lec0:No lecd attached [ 809.041624][T12302] hsr_slave_0: entered promiscuous mode [ 809.048088][T12302] hsr_slave_1: entered promiscuous mode [ 809.054127][T12302] debugfs: 'hsr0' already exists in 'hsr' [ 809.054153][T12302] Cannot create hsr debugfs directory [ 809.160252][ T5808] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 810.750211][ T5808] usb 7-1: Using ep0 maxpacket: 16 [ 811.681999][ T3515] hsr_slave_0: left promiscuous mode [ 811.725878][ T3515] hsr_slave_1: left promiscuous mode [ 811.727522][ T3515] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 811.814840][ T3515] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 811.864490][T12481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 811.866061][T12481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 814.181667][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5300 ms [ 814.181704][ C1] lec:lec_tx_timeout: lec0 [ 815.159102][T12492] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 815.169291][T12492] 9p: Bad value for 'rfdno' [ 816.732530][ T5808] usb 7-1: unable to get BOS descriptor or descriptor too short [ 816.732600][ T5808] usb 7-1: no configurations [ 816.732608][ T5808] usb 7-1: can't read configurations, error -22 [ 816.872563][T12501] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1748'. [ 816.894086][ T5808] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 817.040258][ T5808] usb 7-1: device descriptor read/64, error -32 [ 817.057177][ T3515] team0 (unregistering): Port device team_slave_1 removed [ 817.070254][T12234] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 817.111403][ T3515] team0 (unregistering): Port device team_slave_0 removed [ 817.150482][ T5808] usb usb7-port1: attempt power cycle [ 817.220649][T12234] usb 5-1: Using ep0 maxpacket: 16 [ 817.760280][ T5808] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 817.782382][ T5808] usb 7-1: device descriptor read/8, error -32 [ 818.030053][T12234] usb 5-1: unable to get BOS descriptor or descriptor too short [ 818.043453][T12234] usb 5-1: no configurations [ 818.043475][T12234] usb 5-1: can't read configurations, error -22 [ 818.092287][T12508] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.1750'. [ 820.577720][T12302] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 821.280261][T12302] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 821.606585][T12302] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 821.746828][T12302] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 822.919872][T12561] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.1763'. [ 823.257472][T12571] overlayfs: overlapping lowerdir path [ 823.534855][T12573] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 826.801604][T12302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 826.841111][T12302] 8021q: adding VLAN 0 to HW filter on device team0 [ 826.871113][ T1506] bridge0: port 1(bridge_slave_0) entered blocking state [ 826.871267][ T1506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 826.967259][ T1120] bridge0: port 2(bridge_slave_1) entered blocking state [ 826.972310][ T1120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 831.194078][T12633] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.1777'. [ 831.993388][T12644] overlayfs: overlapping lowerdir path [ 832.269513][T12646] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 833.903196][T12302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 835.380135][T12671] overlayfs: overlapping lowerdir path [ 835.661596][T12673] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 837.734519][T12302] veth0_vlan: entered promiscuous mode [ 837.974531][T12302] veth1_vlan: entered promiscuous mode [ 838.063971][ T5882] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 838.942238][T12685] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 839.250560][ T5882] usb 7-1: Using ep0 maxpacket: 32 [ 839.252965][ T5882] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 839.252993][ T5882] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 839.253014][ T5882] usb 7-1: config 0 has no interface number 0 [ 839.253062][ T5882] usb 7-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 839.253086][ T5882] usb 7-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 839.256185][ T5882] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 839.256216][ T5882] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.256238][ T5882] usb 7-1: Product: syz [ 839.256254][ T5882] usb 7-1: Manufacturer: syz [ 839.256269][ T5882] usb 7-1: SerialNumber: syz [ 839.286488][ T5882] usb 7-1: config 0 descriptor?? [ 839.342770][ T5882] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 839.343045][ T5882] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -22 [ 839.502896][T12302] veth0_macvtap: entered promiscuous mode [ 839.527112][T12302] veth1_macvtap: entered promiscuous mode [ 839.615386][T12302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 839.690368][ T9] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 839.812988][T12302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 840.730331][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 840.732834][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 840.732869][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 840.732899][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 840.736371][ T9] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 840.736400][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.736422][ T9] usb 5-1: Product: syz [ 840.736438][ T9] usb 5-1: Manufacturer: syz [ 840.736453][ T9] usb 5-1: SerialNumber: syz [ 840.797416][ T1120] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.823923][ T1120] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.830756][ T1120] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.870288][ T68] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.872033][ T9] usb 5-1: config 0 descriptor?? [ 840.872899][T12689] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 840.907210][ T9] hub 5-1:0.0: bad descriptor, ignoring hub [ 840.907256][ T9] hub 5-1:0.0: probe with driver hub failed with error -5 [ 840.930493][ T5992] usb 7-1: USB disconnect, device number 21 [ 840.967467][ T9] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input22 [ 841.389059][ C0] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 841.418687][ T5917] usb 5-1: USB disconnect, device number 28 [ 843.440252][ T9] IPVS: starting estimator thread 0... [ 843.530608][T12713] IPVS: using max 14 ests per chain, 33600 per kthread [ 843.863794][ T6810] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 843.863817][ T6810] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 843.990864][ T173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 843.990889][ T173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 851.310283][ T9925] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 851.460389][ T9925] usb 7-1: Using ep0 maxpacket: 32 [ 851.463782][ T9925] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 851.463818][ T9925] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 851.463847][ T9925] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 851.507484][ T9925] usb 7-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 851.507506][ T9925] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.507518][ T9925] usb 7-1: Product: syz [ 851.507527][ T9925] usb 7-1: Manufacturer: syz [ 851.507536][ T9925] usb 7-1: SerialNumber: syz [ 851.603313][ T9925] usb 7-1: config 0 descriptor?? [ 851.604161][T12784] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 851.631654][ T9925] hub 7-1:0.0: bad descriptor, ignoring hub [ 851.631699][ T9925] hub 7-1:0.0: probe with driver hub failed with error -5 [ 851.675516][ T9925] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input23 [ 852.115176][ T9925] usb 7-1: USB disconnect, device number 22 [ 852.115268][ C0] usbtouchscreen 7-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 852.585955][T12807] overlayfs: overlapping lowerdir path [ 860.510711][T12832] syzkaller1: entered promiscuous mode [ 860.510740][T12832] syzkaller1: entered allmulticast mode [ 861.127436][ T9925] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 861.290620][ T9925] usb 7-1: Using ep0 maxpacket: 32 [ 861.298124][ T9925] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 861.298156][ T9925] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 861.298178][ T9925] usb 7-1: config 0 has no interface number 0 [ 861.298218][ T9925] usb 7-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 861.298232][ T9925] usb 7-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 861.355785][ T9925] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 861.355818][ T9925] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.355839][ T9925] usb 7-1: Product: syz [ 861.355855][ T9925] usb 7-1: Manufacturer: syz [ 861.355870][ T9925] usb 7-1: SerialNumber: syz [ 861.412658][ T9925] usb 7-1: config 0 descriptor?? [ 861.428112][ T9925] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 861.443796][ T9925] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -22 [ 863.466563][T12869] overlayfs: overlapping lowerdir path [ 863.744329][T12871] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 864.460586][ T9] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 864.466891][ T5808] usb 7-1: USB disconnect, device number 23 [ 865.432742][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 865.493068][ T9] usb 6-1: device descriptor read/all, error -71 [ 865.573521][ T5992] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 866.309001][T12891] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1823'. [ 866.309213][T12891] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1823'. [ 866.632133][ T5992] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 866.632180][ T5992] usb 9-1: can't read configurations, error -71 [ 867.027063][T12898] 8021q: adding VLAN 0 to HW filter on device bond1 [ 867.030344][ T9] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 867.071099][T12900] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 867.460221][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 867.463892][ T9] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024 [ 867.467582][ T9] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 867.467624][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.467644][ T9] usb 6-1: Product: syz [ 867.467660][ T9] usb 6-1: Manufacturer: syz [ 867.467676][ T9] usb 6-1: SerialNumber: syz [ 867.481274][T12891] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 868.073448][ T6464] lec:lec_start_xmit: lec0:No lecd attached [ 868.460552][ T5917] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 868.625582][ T5917] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 868.625617][ T5917] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.742319][ T5917] usb 7-1: config 0 descriptor?? [ 868.850408][ T36] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 868.995780][ T5917] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 868.996634][ C0] raw-gadget.1 gadget.6: ignoring, device is not running [ 868.997079][ T5917] [drm:udl_init] *ERROR* Selecting channel failed [ 869.000392][ T36] usb 9-1: Using ep0 maxpacket: 16 [ 869.684549][ T5917] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 869.684581][ T5917] [drm] Initialized udl on minor 2 [ 869.753819][ T5917] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 869.757435][ T5917] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 869.800687][ T5917] usb 7-1: USB disconnect, device number 24 [ 869.855372][ T9925] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 870.309628][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.309708][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.782490][ T36] usb 9-1: unable to get BOS descriptor or descriptor too short [ 870.782598][ T36] usb 9-1: no configurations [ 870.782613][ T36] usb 9-1: can't read configurations, error -22 [ 872.398568][T12929] overlayfs: overlapping lowerdir path [ 872.596757][T12931] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 873.090166][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 873.090208][ C1] lec:lec_tx_timeout: lec0 [ 873.090446][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 873.409931][ T9] usb 6-1: selecting invalid altsetting 1 [ 874.553896][ T9] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 875.117428][ T5882] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 875.447140][T12380] udevd[12380]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 875.520310][ T5882] usb 1-1: Using ep0 maxpacket: 16 [ 876.278095][ T5917] usb 6-1: USB disconnect, device number 46 [ 876.338924][T12949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 876.380812][T12949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 876.501274][ T5852] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 876.651464][ T5852] usb 9-1: Using ep0 maxpacket: 32 [ 876.653960][ T5852] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 876.654055][ T5852] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 876.654087][ T5852] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 876.657125][ T5852] usb 9-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 876.657220][ T5852] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.657242][ T5852] usb 9-1: Product: syz [ 876.657257][ T5852] usb 9-1: Manufacturer: syz [ 876.657273][ T5852] usb 9-1: SerialNumber: syz [ 876.753146][ T5852] usb 9-1: config 0 descriptor?? [ 876.769891][T12950] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22 [ 876.783001][ T5852] hub 9-1:0.0: bad descriptor, ignoring hub [ 876.783028][ T5852] hub 9-1:0.0: probe with driver hub failed with error -5 [ 876.873417][ T5852] input: syz syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input24 [ 877.054349][ T5852] usb 9-1: USB disconnect, device number 6 [ 877.054441][ C1] usbtouchscreen 9-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 878.100239][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 878.100373][ C1] lec:lec_tx_timeout: lec0 [ 878.472257][ T5882] usb 1-1: unable to get BOS descriptor or descriptor too short [ 878.472351][ T5882] usb 1-1: no configurations [ 878.472364][ T5882] usb 1-1: can't read configurations, error -22 [ 883.270940][T12997] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 883.916546][T13000] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 886.771941][T12990] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 887.485026][T13005] trusted_key: encrypted_key: keylen parameter is missing [ 887.485751][T13005] netlink: 84 bytes leftover after parsing attributes in process `syz.8.1848'. [ 890.010167][ T5889] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 890.272443][ T5889] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 890.272482][ T5889] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 890.272496][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.312633][ T5889] usb 5-1: config 0 descriptor?? [ 891.271240][ T5889] pwc: Askey VC010 type 2 USB webcam detected. [ 891.519781][ T5889] pwc: recv_control_msg error -32 req 02 val 2b00 [ 891.548010][ T5889] pwc: recv_control_msg error -32 req 02 val 2700 [ 891.570281][ T5889] pwc: recv_control_msg error -32 req 02 val 2c00 [ 891.571045][ T5889] pwc: recv_control_msg error -32 req 04 val 1000 [ 891.772859][ T5889] pwc: recv_control_msg error -71 req 04 val 1400 [ 891.773455][ T5889] pwc: recv_control_msg error -71 req 02 val 2000 [ 891.773975][ T5889] pwc: recv_control_msg error -71 req 02 val 2100 [ 891.774695][ T5889] pwc: recv_control_msg error -71 req 04 val 1500 [ 891.777628][ T5889] pwc: recv_control_msg error -71 req 02 val 2500 [ 891.778063][ T5889] pwc: recv_control_msg error -71 req 02 val 2400 [ 891.778495][ T5889] pwc: recv_control_msg error -71 req 02 val 2600 [ 891.778842][ T5889] pwc: recv_control_msg error -71 req 02 val 2900 [ 891.779227][ T5889] pwc: recv_control_msg error -71 req 02 val 2800 [ 891.880340][ T5889] pwc: recv_control_msg error -71 req 04 val 1100 [ 891.883062][ T5889] pwc: recv_control_msg error -71 req 04 val 1200 [ 891.891774][ T9] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 891.961022][ T5889] pwc: Registered as video103. [ 891.976138][ T5889] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input25 [ 892.030988][ T5889] usb 5-1: USB disconnect, device number 29 [ 892.053147][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 892.989120][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 892.989219][ T9] usb 1-1: no configurations [ 892.989233][ T9] usb 1-1: can't read configurations, error -22 [ 895.810934][ T5803] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 895.850475][ T5803] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 895.873910][ T5803] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 895.918548][ T5803] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 895.939467][ T5803] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 898.330220][T10477] Bluetooth: hci3: command tx timeout [ 900.380186][T10477] Bluetooth: hci3: command tx timeout [ 900.995039][T13105] overlayfs: overlapping lowerdir path [ 901.146650][T13106] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 902.450268][ T5803] Bluetooth: hci3: command tx timeout [ 904.530156][ T5803] Bluetooth: hci3: command tx timeout [ 904.560300][T11081] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 904.750183][T11081] usb 9-1: Using ep0 maxpacket: 32 [ 904.758496][T11081] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 904.758528][T11081] usb 9-1: config 0 has no interface number 0 [ 904.785963][T13120] overlayfs: overlapping lowerdir path [ 904.802108][T11081] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 904.802142][T11081] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.802164][T11081] usb 9-1: Product: syz [ 904.802179][T11081] usb 9-1: Manufacturer: syz [ 904.802195][T11081] usb 9-1: SerialNumber: syz [ 904.847788][T13121] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 904.915036][T11081] usb 9-1: config 0 descriptor?? [ 905.822224][T11081] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 905.822260][T11081] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 905.918246][T11081] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 905.918618][T11081] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -32 [ 907.653291][ T9] usb 9-1: USB disconnect, device number 7 [ 910.074500][ T173] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.175912][T13057] chnl_net:caif_netlink_parms(): no params data found [ 911.767733][ T173] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.889188][T13057] bridge0: port 1(bridge_slave_0) entered blocking state [ 911.889460][T13057] bridge0: port 1(bridge_slave_0) entered disabled state [ 911.889685][T13057] bridge_slave_0: entered allmulticast mode [ 911.931045][T13057] bridge_slave_0: entered promiscuous mode [ 911.935085][T13057] bridge0: port 2(bridge_slave_1) entered blocking state [ 911.935279][T13057] bridge0: port 2(bridge_slave_1) entered disabled state [ 911.935495][T13057] bridge_slave_1: entered allmulticast mode [ 911.938734][T13057] bridge_slave_1: entered promiscuous mode [ 912.848941][ T173] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.024405][T13057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 913.043786][T13057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 913.425005][T13169] trusted_key: encrypted_key: keylen parameter is missing [ 913.425811][T13169] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1882'. [ 913.493246][ T5803] Bluetooth: hci4: command 0x0406 tx timeout [ 913.603440][ T173] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.909707][T13057] team0: Port device team_slave_0 added [ 913.947140][T13057] team0: Port device team_slave_1 added [ 914.077289][T13057] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 914.077309][T13057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 914.077334][T13057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 914.228304][T13057] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 914.228325][T13057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 914.228363][T13057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 914.450528][ T9925] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 914.600338][ T9925] usb 9-1: Using ep0 maxpacket: 32 [ 914.602837][ T9925] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 914.602865][ T9925] usb 9-1: config 0 has no interface number 0 [ 914.604881][ T9925] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 914.604900][ T9925] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.604912][ T9925] usb 9-1: Product: syz [ 914.604920][ T9925] usb 9-1: Manufacturer: syz [ 914.604929][ T9925] usb 9-1: SerialNumber: syz [ 914.609822][ T9925] usb 9-1: config 0 descriptor?? [ 914.706054][T13057] hsr_slave_0: entered promiscuous mode [ 914.713516][T13057] hsr_slave_1: entered promiscuous mode [ 914.726679][T13057] debugfs: 'hsr0' already exists in 'hsr' [ 914.727066][T13057] Cannot create hsr debugfs directory [ 915.059032][ T9925] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 915.059067][ T9925] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 915.823203][ T173] bridge_slave_1: left allmulticast mode [ 915.823235][ T173] bridge_slave_1: left promiscuous mode [ 916.734376][ T173] bridge0: port 2(bridge_slave_1) entered disabled state [ 916.879192][ T173] bridge_slave_0: left allmulticast mode [ 916.879227][ T173] bridge_slave_0: left promiscuous mode [ 916.879523][ T173] bridge0: port 1(bridge_slave_0) entered disabled state [ 917.477276][ T9925] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 917.477624][ T9925] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -61 [ 918.487657][ T5803] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 918.503767][ T5803] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 918.519060][ T5803] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 918.527321][ T5803] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 918.528217][ T5803] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 918.798993][ T5889] usb 9-1: USB disconnect, device number 8 [ 920.708060][T10477] Bluetooth: hci1: command tx timeout [ 923.775394][T10477] Bluetooth: hci1: command tx timeout [ 924.632570][T13216] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 925.243136][T13209] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 925.243290][T13209] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 925.990205][T10477] Bluetooth: hci1: command tx timeout [ 926.162381][ T173] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 926.211054][ T173] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 926.282406][ T173] bond0 (unregistering): Released all slaves [ 926.288248][ T173] bond1 (unregistering): Released all slaves [ 926.674736][T13225] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1897'. [ 928.060493][T10477] Bluetooth: hci1: command tx timeout [ 931.730638][ T173] hsr_slave_0: left promiscuous mode [ 932.309568][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.309649][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.313679][ T1322] lec:lec_start_xmit: lec0:No lecd attached [ 932.430215][ T173] hsr_slave_1: left promiscuous mode [ 932.431422][ T173] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 932.431449][ T173] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 932.559120][ T173] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 932.559152][ T173] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 932.642426][ T173] veth1_macvtap: left promiscuous mode [ 932.642544][ T173] veth0_macvtap: left promiscuous mode [ 932.642824][ T173] veth1_vlan: left promiscuous mode [ 932.643018][ T173] veth0_vlan: left promiscuous mode [ 933.393280][ T5882] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 934.638556][ T5882] usb 6-1: Using ep0 maxpacket: 16 [ 934.654004][ T5882] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 934.654041][ T5882] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 934.654088][ T5882] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 934.654112][ T5882] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.704313][ T5882] usb 6-1: config 0 descriptor?? [ 934.958930][T13285] overlayfs: overlapping lowerdir path [ 935.244185][T13287] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 936.018912][ T5882] kye 0003:0458:5019.0009: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 936.019549][ T5882] kye 0003:0458:5019.0009: unknown main item tag 0x2 [ 936.019586][ T5882] kye 0003:0458:5019.0009: unknown main item tag 0x0 [ 936.019612][ T5882] kye 0003:0458:5019.0009: unknown main item tag 0x0 [ 936.019638][ T5882] kye 0003:0458:5019.0009: unknown main item tag 0x0 [ 936.019664][ T5882] kye 0003:0458:5019.0009: unknown main item tag 0x0 [ 936.019690][ T5882] kye 0003:0458:5019.0009: unknown main item tag 0x0 [ 936.019716][ T5882] kye 0003:0458:5019.0009: unknown main item tag 0x0 [ 936.019741][ T5882] kye 0003:0458:5019.0009: unknown main item tag 0x0 [ 936.019768][ T5882] kye 0003:0458:5019.0009: unknown main item tag 0x0 [ 936.019794][ T5882] kye 0003:0458:5019.0009: unknown main item tag 0x0 [ 936.119494][ T5882] kye 0003:0458:5019.0009: hidraw0: USB HID vff.fc Device [HID 0458:5019] on usb-dummy_hcd.5-1/input0 [ 936.119544][ T5882] kye 0003:0458:5019.0009: tablet-enabling feature report not found [ 936.119560][ T5882] kye 0003:0458:5019.0009: tablet enabling failed [ 936.248424][ T5882] usb 6-1: USB disconnect, device number 47 [ 936.268409][T13289] fido_id[13289]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5019.0009/report_descriptor': No such device [ 937.094323][ T173] team0 (unregistering): Port device team_slave_1 removed [ 937.150876][ T173] team0 (unregistering): Port device team_slave_0 removed [ 938.044707][T13057] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 938.137896][T13057] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 938.143256][ T9925] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 938.276248][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5960 ms [ 938.276287][ C1] lec:lec_tx_timeout: lec0 [ 938.278121][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 938.350335][ T9925] usb 1-1: Using ep0 maxpacket: 16 [ 939.280579][T13057] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 939.808830][T13057] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 940.081383][ T5992] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 940.128204][T13188] chnl_net:caif_netlink_parms(): no params data found [ 940.250251][ T5992] usb 9-1: Using ep0 maxpacket: 16 [ 941.567886][ T5992] usb 9-1: unable to get BOS descriptor or descriptor too short [ 941.567964][ T5992] usb 9-1: no configurations [ 941.567973][ T5992] usb 9-1: can't read configurations, error -22 [ 941.592172][ T9925] usb 1-1: unable to get BOS descriptor or descriptor too short [ 941.592266][ T9925] usb 1-1: no configurations [ 941.592280][ T9925] usb 1-1: can't read configurations, error -22 [ 941.679775][T13338] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1918'. [ 941.842862][ T173] IPVS: stop unused estimator thread 0... [ 942.293429][T13188] bridge0: port 1(bridge_slave_0) entered blocking state [ 942.293562][T13188] bridge0: port 1(bridge_slave_0) entered disabled state [ 942.293814][T13188] bridge_slave_0: entered allmulticast mode [ 942.300570][T13188] bridge_slave_0: entered promiscuous mode [ 942.330784][T13188] bridge0: port 2(bridge_slave_1) entered blocking state [ 942.330946][T13188] bridge0: port 2(bridge_slave_1) entered disabled state [ 942.331212][T13188] bridge_slave_1: entered allmulticast mode [ 942.356127][T13188] bridge_slave_1: entered promiscuous mode [ 942.644618][T13188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 942.668623][T13188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 943.074121][T13366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1924'. [ 943.074151][T13366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1924'. [ 943.226466][T13188] team0: Port device team_slave_0 added [ 943.283192][T13188] team0: Port device team_slave_1 added [ 943.549780][ T173] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.750240][ T5992] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 943.960391][ T5992] usb 1-1: Using ep0 maxpacket: 16 [ 944.728616][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6450 ms [ 944.728708][ C1] lec:lec_tx_timeout: lec0 [ 944.754540][ T5992] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024 [ 944.825680][ T5992] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 944.825716][ T5992] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.825737][ T5992] usb 1-1: Product: syz [ 944.825751][ T5992] usb 1-1: Manufacturer: syz [ 944.825767][ T5992] usb 1-1: SerialNumber: syz [ 944.850907][T13366] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 945.001622][T13374] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1927'. [ 945.893399][ T173] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 945.973472][T13188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 945.973485][T13188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 945.973502][T13188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 946.075858][T13188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 946.075873][T13188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 946.075891][T13188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 946.200261][ T5889] usb 6-1: new full-speed USB device number 48 using dummy_hcd [ 946.375559][ T5889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 946.375636][ T5889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 946.375662][ T5889] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 946.375676][ T5889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.446484][ T5889] usb 6-1: config 0 descriptor?? [ 946.473054][ T173] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.486302][ T5889] hub 6-1:0.0: USB hub found [ 946.685754][ T5889] hub 6-1:0.0: 1 port detected [ 946.908261][ T173] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.985678][T13188] hsr_slave_0: entered promiscuous mode [ 946.987907][T13188] hsr_slave_1: entered promiscuous mode [ 946.989160][T13188] debugfs: 'hsr0' already exists in 'hsr' [ 946.989188][T13188] Cannot create hsr debugfs directory [ 947.604997][ T9] usb 6-1: USB disconnect, device number 48 [ 947.770380][ T5917] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 947.924806][ T5917] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 947.924843][ T5917] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 947.924882][ T5917] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 947.924896][ T5917] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.015367][ T5917] usb 9-1: config 0 descriptor?? [ 948.037316][ T5917] hub 9-1:0.0: USB hub found [ 948.246083][ T5917] hub 9-1:0.0: config failed, can't read hub descriptor (err -90) [ 948.462699][ T5917] usbhid 9-1:0.0: can't add hid device: -71 [ 948.462835][ T5917] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 948.522036][ T5917] usb 9-1: USB disconnect, device number 11 [ 948.557484][T13057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 949.345392][ T173] bridge_slave_1: left allmulticast mode [ 949.345813][ T173] bridge_slave_1: left promiscuous mode [ 949.355108][ T173] bridge0: port 2(bridge_slave_1) entered disabled state [ 949.465770][ T173] bridge_slave_0: left allmulticast mode [ 949.465804][ T173] bridge_slave_0: left promiscuous mode [ 949.466251][ T173] bridge0: port 1(bridge_slave_0) entered disabled state [ 949.805927][T13412] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1937'. [ 949.853919][ T5992] usb 1-1: selecting invalid altsetting 1 [ 950.783669][ T5992] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 950.802049][ T5992] usb 1-1: USB disconnect, device number 34 [ 950.915475][T12380] udevd[12380]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 951.500308][ T173] bond0 (unregistering): left promiscuous mode [ 951.500336][ T173] bond_slave_0: left promiscuous mode [ 951.500696][ T173] bond_slave_1: left promiscuous mode [ 951.542867][ T173] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 951.600845][ T173] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 951.643087][ T173] bond0 (unregistering): Released all slaves [ 952.087199][ T173] IPVS: stopping master sync thread 10005 ... [ 952.429538][T13057] 8021q: adding VLAN 0 to HW filter on device team0 [ 952.430309][T11081] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 952.583548][T11081] usb 1-1: Using ep0 maxpacket: 16 [ 952.676977][T11081] usb 1-1: unable to get BOS descriptor or descriptor too short [ 952.677044][T11081] usb 1-1: no configurations [ 952.677051][T11081] usb 1-1: can't read configurations, error -22 [ 952.976143][ T163] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.002705][ T163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 953.020998][ T5852] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 953.214133][ T5852] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 953.214169][ T5852] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 953.214196][ T5852] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 953.214210][ T5852] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.219460][ T5852] usb 9-1: config 0 descriptor?? [ 953.299974][ T5852] hub 9-1:0.0: USB hub found [ 953.475632][ T5852] hub 9-1:0.0: config failed, can't read hub descriptor (err -22) [ 953.485326][ T5852] usbhid 9-1:0.0: can't add hid device: -71 [ 953.485462][ T5852] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 953.518157][ T5852] usb 9-1: USB disconnect, device number 12 [ 953.669339][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.669583][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 955.974166][ T173] team0: left promiscuous mode [ 955.974193][ T173] team_slave_0: left promiscuous mode [ 955.974460][ T173] team_slave_1: left promiscuous mode [ 956.106867][ T5803] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 956.111677][ T5803] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 956.126929][ T5803] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 956.144657][ T5803] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 956.145950][ T5803] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 956.289271][ T173] hsr_slave_0: left promiscuous mode [ 956.317130][ T173] hsr_slave_1: left promiscuous mode [ 956.318274][ T173] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 956.318300][ T173] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 956.368304][ T173] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 956.368334][ T173] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 956.502225][ T173] veth1_macvtap: left promiscuous mode [ 956.502344][ T173] veth0_macvtap: left promiscuous mode [ 956.502643][ T173] veth1_vlan: left promiscuous mode [ 956.502844][ T173] veth0_vlan: left promiscuous mode [ 956.550364][ T5852] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 956.700252][ T5852] usb 9-1: Using ep0 maxpacket: 16 [ 957.414668][T13471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 957.429421][T13471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 957.718326][ T5852] usb 9-1: unable to get BOS descriptor or descriptor too short [ 957.718384][ T5852] usb 9-1: no configurations [ 957.718392][ T5852] usb 9-1: can't read configurations, error -22 [ 958.210453][T10477] Bluetooth: hci0: command tx timeout [ 958.333428][ T173] team0 (unregistering): Port device team_slave_1 removed [ 959.976090][ T173] team0 (unregistering): Port device team_slave_0 removed [ 960.317578][T10477] Bluetooth: hci0: command tx timeout [ 960.865211][T13466] syzkaller1: entered promiscuous mode [ 960.865242][T13466] syzkaller1: entered allmulticast mode [ 961.855669][T13493] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1962'. [ 962.370475][T10477] Bluetooth: hci0: command tx timeout [ 963.006498][T13500] syzkaller1: entered promiscuous mode [ 963.006537][T13500] syzkaller1: entered allmulticast mode [ 964.450199][T10477] Bluetooth: hci0: command tx timeout [ 965.203338][T13516] overlayfs: overlapping lowerdir path [ 965.489457][T13518] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 966.243949][T13188] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 969.317466][T13188] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 969.367720][T13188] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 969.458229][T13188] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 970.279147][ T5808] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 972.840410][ T5808] usb 6-1: Using ep0 maxpacket: 16 [ 973.713026][T13454] chnl_net:caif_netlink_parms(): no params data found [ 975.967593][ T5808] usb 6-1: device descriptor read/all, error -71 [ 977.595970][T13454] bridge0: port 1(bridge_slave_0) entered blocking state [ 978.699557][T13454] bridge0: port 1(bridge_slave_0) entered disabled state [ 978.699828][T13454] bridge_slave_0: entered allmulticast mode [ 978.718781][T13454] bridge_slave_0: entered promiscuous mode [ 979.400258][T11081] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 979.578907][ T5803] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 979.591511][T11081] usb 9-1: Using ep0 maxpacket: 16 [ 979.602588][ T5803] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 979.614972][ T5803] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 979.621513][ T5803] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 979.623871][ T5803] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 980.406011][T13454] bridge0: port 2(bridge_slave_1) entered blocking state [ 980.406654][T13454] bridge0: port 2(bridge_slave_1) entered disabled state [ 980.407592][T13454] bridge_slave_1: entered allmulticast mode [ 980.415634][T13454] bridge_slave_1: entered promiscuous mode [ 980.693448][T13594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 980.693832][T13594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 980.719142][T11081] usb 9-1: unable to get BOS descriptor or descriptor too short [ 980.719225][T11081] usb 9-1: no configurations [ 980.719237][T11081] usb 9-1: can't read configurations, error -22 [ 980.940540][T13454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 980.977806][T13454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 981.389180][T13454] team0: Port device team_slave_0 added [ 981.535057][T13611] overlayfs: overlapping lowerdir path [ 981.820556][T13613] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 983.421821][ T5803] Bluetooth: hci3: command tx timeout [ 985.506778][ T5803] Bluetooth: hci3: command tx timeout [ 987.716746][ T5803] Bluetooth: hci3: command tx timeout [ 992.775471][ T5803] Bluetooth: hci3: command tx timeout [ 992.977213][T13454] team0: Port device team_slave_1 added [ 993.193033][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.193115][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.196805][ T1322] lec:lec_start_xmit: lec0:No lecd attached [ 994.111245][T13454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 994.111294][T13454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 994.111321][T13454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 994.217178][T13454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 994.217230][T13454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 994.217293][T13454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 994.293291][T13684] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 995.251709][ T173] bridge_slave_1: left allmulticast mode [ 995.251742][ T173] bridge_slave_1: left promiscuous mode [ 995.252012][ T173] bridge0: port 2(bridge_slave_1) entered disabled state [ 996.606329][ T173] bridge_slave_0: left allmulticast mode [ 996.606359][ T173] bridge_slave_0: left promiscuous mode [ 996.606539][ T173] bridge0: port 1(bridge_slave_0) entered disabled state [ 997.682498][T13701] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1993'. [ 997.682529][T13701] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1993'. [ 997.991447][ T173] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 998.075998][ T173] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 998.090234][ T5808] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 998.111936][ T173] bond0 (unregistering): Released all slaves [ 998.210091][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 998.210129][ C1] lec:lec_tx_timeout: lec0 [ 998.240201][ T5808] usb 6-1: Using ep0 maxpacket: 16 [ 998.246713][ T5808] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024 [ 998.253228][ T5808] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 998.253277][ T5808] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.253297][ T5808] usb 6-1: Product: syz [ 998.253336][ T5808] usb 6-1: Manufacturer: syz [ 998.253354][ T5808] usb 6-1: SerialNumber: syz [ 998.260753][T13702] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1000.720445][ T173] hsr_slave_0: left promiscuous mode [ 1000.776241][ T173] hsr_slave_1: left promiscuous mode [ 1000.786134][ T173] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1000.811532][ T173] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1002.281571][ T173] team0 (unregistering): Port device team_slave_1 removed [ 1002.392734][ T173] team0 (unregistering): Port device team_slave_0 removed [ 1003.360220][ T5808] usb 6-1: selecting invalid altsetting 1 [ 1003.569532][ T5808] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1003.619695][ T5808] usb 6-1: USB disconnect, device number 51 [ 1003.808822][T12380] udevd[12380]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1003.971681][T13454] hsr_slave_0: entered promiscuous mode [ 1003.972627][T13454] hsr_slave_1: entered promiscuous mode [ 1005.211800][T13600] chnl_net:caif_netlink_parms(): no params data found [ 1007.368167][T13742] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1010.061405][T13748] overlayfs: overlapping lowerdir path [ 1010.236776][T13752] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1015.152812][T11081] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1015.333653][T11081] usb 6-1: Using ep0 maxpacket: 16 [ 1015.336067][T11081] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1015.336098][T11081] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1015.376062][T11081] usb 6-1: config 0 descriptor?? [ 1015.389352][T13600] bridge0: port 1(bridge_slave_0) entered blocking state [ 1015.389496][T13600] bridge0: port 1(bridge_slave_0) entered disabled state [ 1015.389768][T13600] bridge_slave_0: entered allmulticast mode [ 1015.392557][T13600] bridge_slave_0: entered promiscuous mode [ 1015.424432][T11081] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1015.607051][T13600] bridge0: port 2(bridge_slave_1) entered blocking state [ 1015.607196][T13600] bridge0: port 2(bridge_slave_1) entered disabled state [ 1015.607469][T13600] bridge_slave_1: entered allmulticast mode [ 1015.633951][T13600] bridge_slave_1: entered promiscuous mode [ 1015.888972][T13600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1016.133447][T13600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1016.195204][T10477] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1016.208898][T10477] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1016.222241][T10477] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1016.229330][T10477] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1016.248228][T10477] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1018.516205][ T5803] Bluetooth: hci1: command tx timeout [ 1018.555326][ T9925] usb 6-1: USB disconnect, device number 52 [ 1018.652484][T13600] team0: Port device team_slave_0 added [ 1018.670281][ T5808] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1018.702093][ T6464] lec:lec_start_xmit: lec0:No lecd attached [ 1018.820237][ T5808] usb 1-1: Using ep0 maxpacket: 32 [ 1018.822912][ T5808] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 1018.822941][ T5808] usb 1-1: config 0 has no interface number 0 [ 1018.828776][ T5808] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1018.828808][ T5808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.828830][ T5808] usb 1-1: Product: syz [ 1018.828845][ T5808] usb 1-1: Manufacturer: syz [ 1018.828861][ T5808] usb 1-1: SerialNumber: syz [ 1018.837483][ T5808] usb 1-1: config 0 descriptor?? [ 1018.880132][T11081] usb 9-1: new full-speed USB device number 17 using dummy_hcd [ 1018.900247][ T9925] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1018.908584][T13600] team0: Port device team_slave_1 added [ 1019.022217][T11081] usb 9-1: device descriptor read/64, error -71 [ 1019.050190][ T9925] usb 6-1: Using ep0 maxpacket: 32 [ 1019.072680][ T9925] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1019.072710][ T9925] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1019.095433][ T9925] usb 6-1: config 0 descriptor?? [ 1019.116190][ T9925] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1019.256231][T13600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1019.256251][T13600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1019.256278][T13600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1019.261831][T11081] usb 9-1: new full-speed USB device number 18 using dummy_hcd [ 1019.308513][T13600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1019.308531][T13600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1019.308560][T13600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1019.322983][ T5808] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1019.323016][ T5808] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1019.430376][T11081] usb 9-1: device descriptor read/64, error -71 [ 1019.551017][T11081] usb usb9-port1: attempt power cycle [ 1019.591731][ T5808] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1019.592278][ T5808] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 1019.628541][ T5808] usb 1-1: USB disconnect, device number 37 [ 1019.776843][ T9925] gspca_sunplus: reg_r err -32 [ 1019.776956][ T9925] sunplus 6-1:0.0: probe with driver sunplus failed with error -32 [ 1019.930357][T11081] usb 9-1: new full-speed USB device number 19 using dummy_hcd [ 1019.961739][T11081] usb 9-1: device descriptor read/8, error -71 [ 1020.123690][T13600] hsr_slave_0: entered promiscuous mode [ 1020.124663][T13600] hsr_slave_1: entered promiscuous mode [ 1020.125274][T13600] debugfs: 'hsr0' already exists in 'hsr' [ 1020.125293][T13600] Cannot create hsr debugfs directory [ 1020.204285][T11081] usb 9-1: new full-speed USB device number 20 using dummy_hcd [ 1020.221982][T11081] usb 9-1: device descriptor read/8, error -71 [ 1020.346856][T11081] usb usb9-port1: unable to enumerate USB device [ 1020.531129][ T5803] Bluetooth: hci1: command tx timeout [ 1021.798466][ T5852] usb 6-1: USB disconnect, device number 53 [ 1023.974968][T13786] chnl_net:caif_netlink_parms(): no params data found [ 1023.975698][ T5803] Bluetooth: hci1: command tx timeout [ 1024.060486][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5360 ms [ 1024.060532][ C1] lec:lec_tx_timeout: lec0 [ 1024.335570][ T173] bridge_slave_1: left allmulticast mode [ 1024.335595][ T173] bridge_slave_1: left promiscuous mode [ 1024.335758][ T173] bridge0: port 2(bridge_slave_1) entered disabled state [ 1024.401352][ T173] bridge_slave_0: left allmulticast mode [ 1024.401426][ T173] bridge_slave_0: left promiscuous mode [ 1024.401617][ T173] bridge0: port 1(bridge_slave_0) entered disabled state [ 1025.511946][ T173] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1025.754041][ T173] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1025.987275][T13853] overlayfs: overlapping lowerdir path [ 1026.279783][T13856] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1027.015745][ T5803] Bluetooth: hci1: command tx timeout [ 1027.742171][ T173] bond0 (unregistering): Released all slaves [ 1029.232929][ T5808] usb 9-1: new low-speed USB device number 21 using dummy_hcd [ 1029.394916][ T5808] usb 9-1: config index 0 descriptor too short (expected 1307, got 27) [ 1029.395033][ T5808] usb 9-1: config 0 has an invalid interface number: 0 but max is -1 [ 1029.395047][ T5808] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1029.395071][ T5808] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1029.395100][ T5808] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1029.395114][ T5808] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1029.395127][ T5808] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1029.399060][ T5808] usb 9-1: string descriptor 0 read error: -22 [ 1029.399172][ T5808] usb 9-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1029.399188][ T5808] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.504614][ T5808] usb 9-1: config 0 descriptor?? [ 1029.507030][ T5808] hub 9-1:0.0: bad descriptor, ignoring hub [ 1029.507054][ T5808] hub 9-1:0.0: probe with driver hub failed with error -5 [ 1029.539537][ T5808] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input26 [ 1029.620730][ T173] hsr_slave_0: left promiscuous mode [ 1029.666763][ T173] hsr_slave_1: left promiscuous mode [ 1029.681484][ T173] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1029.750851][ T173] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1032.212340][ T5852] usb 9-1: USB disconnect, device number 21 [ 1032.796842][ T173] team0 (unregistering): Port device team_slave_1 removed [ 1034.390528][T13876] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1034.391369][T13876] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1034.676695][ T173] team0 (unregistering): Port device team_slave_0 removed [ 1036.333761][T13786] bridge0: port 1(bridge_slave_0) entered blocking state [ 1036.333908][T13786] bridge0: port 1(bridge_slave_0) entered disabled state [ 1036.334286][T13786] bridge_slave_0: entered allmulticast mode [ 1036.344691][T13786] bridge_slave_0: entered promiscuous mode [ 1036.357012][T13786] bridge0: port 2(bridge_slave_1) entered blocking state [ 1036.357150][T13786] bridge0: port 2(bridge_slave_1) entered disabled state [ 1036.357395][T13786] bridge_slave_1: entered allmulticast mode [ 1036.391740][T13786] bridge_slave_1: entered promiscuous mode [ 1036.734807][T13786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1036.752780][T13786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1039.762740][T13907] overlayfs: overlapping lowerdir path [ 1039.866410][T13907] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1039.913506][T13786] team0: Port device team_slave_0 added [ 1039.947220][T13786] team0: Port device team_slave_1 added [ 1040.371278][T10477] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1040.374688][T10477] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1040.377929][T10477] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1040.379678][T10477] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1040.381380][T10477] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1041.431209][T13786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1041.431228][T13786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1041.431278][T13786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1041.571754][T13786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1041.571773][T13786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1041.571803][T13786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1043.510197][ T9925] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1043.650468][T13786] hsr_slave_0: entered promiscuous mode [ 1043.652191][T13786] hsr_slave_1: entered promiscuous mode [ 1043.653243][T13786] debugfs: 'hsr0' already exists in 'hsr' [ 1043.653270][T13786] Cannot create hsr debugfs directory [ 1043.723914][ T9925] usb 6-1: Using ep0 maxpacket: 32 [ 1043.744306][ T9925] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 1043.744337][ T9925] usb 6-1: config 0 has no interface number 0 [ 1043.748237][ T9925] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1043.748269][ T9925] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.748291][ T9925] usb 6-1: Product: syz [ 1043.748305][ T9925] usb 6-1: Manufacturer: syz [ 1043.748319][ T9925] usb 6-1: SerialNumber: syz [ 1043.814269][ T9925] usb 6-1: config 0 descriptor?? [ 1047.503599][ T5803] Bluetooth: hci0: command tx timeout [ 1047.547964][ T9925] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 1047.548292][ T9925] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 1047.665701][ T9925] usb 6-1: USB disconnect, device number 54 [ 1051.001925][ T5803] Bluetooth: hci0: command tx timeout [ 1051.492144][ T173] bridge_slave_1: left allmulticast mode [ 1051.492167][ T173] bridge_slave_1: left promiscuous mode [ 1051.492347][ T173] bridge0: port 2(bridge_slave_1) entered disabled state [ 1051.698024][ T173] bridge_slave_0: left allmulticast mode [ 1051.698059][ T173] bridge_slave_0: left promiscuous mode [ 1051.698359][ T173] bridge0: port 1(bridge_slave_0) entered disabled state [ 1052.852759][ T173] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1054.709623][ T5803] Bluetooth: hci0: command tx timeout [ 1054.746731][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.746780][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.748684][ T1322] lec:lec_start_xmit: lec0:No lecd attached [ 1055.110713][ T173] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1055.213504][ T173] bond0 (unregistering): Released all slaves [ 1056.943463][ T5803] Bluetooth: hci0: command tx timeout [ 1057.823060][ T173] hsr_slave_0: left promiscuous mode [ 1057.877091][ T173] hsr_slave_1: left promiscuous mode [ 1057.878185][ T173] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1057.946137][ T173] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1058.200275][ T5808] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1058.340334][ T5992] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1058.350161][ T5808] usb 6-1: Using ep0 maxpacket: 32 [ 1058.353539][ T5808] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1058.355991][ T5808] usb 6-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1058.356016][ T5808] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1058.356034][ T5808] usb 6-1: Product: syz [ 1058.356047][ T5808] usb 6-1: Manufacturer: syz [ 1058.356060][ T5808] usb 6-1: SerialNumber: syz [ 1058.371885][ T5808] usb 6-1: config 0 descriptor?? [ 1058.374827][ T5808] hub 6-1:0.0: bad descriptor, ignoring hub [ 1058.374861][ T5808] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1058.510278][ T5992] usb 1-1: Using ep0 maxpacket: 16 [ 1058.631776][T14084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1058.632483][T14084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1058.677898][ T5992] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1058.677995][ T5992] usb 1-1: no configurations [ 1058.678009][ T5992] usb 1-1: can't read configurations, error -22 [ 1058.752369][ T5808] usb 6-1: USB disconnect, device number 55 [ 1058.920890][ T173] team0 (unregistering): Port device team_slave_1 removed [ 1058.983834][ T173] team0 (unregistering): Port device team_slave_0 removed [ 1060.574536][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5830 ms [ 1060.574600][ C1] lec:lec_tx_timeout: lec0 [ 1062.008088][ T9] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 1062.217229][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1062.217280][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1062.217316][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1062.217331][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1062.234955][ T9] usb 1-1: config 0 descriptor?? [ 1062.260905][ T9] hub 1-1:0.0: bad descriptor, ignoring hub [ 1062.260945][ T9] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1062.378667][ T9] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1062.564075][ T5808] usb 1-1: USB disconnect, device number 40 [ 1063.502891][T13786] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1064.689435][T13786] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1064.912572][T13935] chnl_net:caif_netlink_parms(): no params data found [ 1064.968944][T13786] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1065.296200][T14122] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2068'. [ 1065.296230][T14122] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1066.188470][T13786] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1067.970336][ T9925] usb 1-1: new low-speed USB device number 41 using dummy_hcd [ 1068.130324][ T9925] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 1068.130358][ T9925] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 1068.130380][ T9925] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1068.130524][ T9925] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1068.130569][ T9925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1068.130594][ T9925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1068.130616][ T9925] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1068.143111][ T9925] usb 1-1: string descriptor 0 read error: -22 [ 1068.143232][ T9925] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1068.143247][ T9925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1068.242409][ T9925] usb 1-1: config 0 descriptor?? [ 1068.248613][ T9925] hub 1-1:0.0: bad descriptor, ignoring hub [ 1068.248656][ T9925] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1068.278157][ T9925] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input27 [ 1069.118940][T14152] overlayfs: overlapping lowerdir path [ 1069.374457][T14154] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1070.920142][ T5889] usb 1-1: USB disconnect, device number 41 [ 1071.126562][T13935] bridge0: port 1(bridge_slave_0) entered blocking state [ 1071.126706][T13935] bridge0: port 1(bridge_slave_0) entered disabled state [ 1071.127333][T13935] bridge_slave_0: entered allmulticast mode [ 1071.165335][T13935] bridge_slave_0: entered promiscuous mode [ 1071.193619][T13935] bridge0: port 2(bridge_slave_1) entered blocking state [ 1071.193776][T13935] bridge0: port 2(bridge_slave_1) entered disabled state [ 1071.194025][T13935] bridge_slave_1: entered allmulticast mode [ 1071.220668][T13935] bridge_slave_1: entered promiscuous mode [ 1071.425135][T13935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1071.487367][T13935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1071.642705][T13935] team0: Port device team_slave_0 added [ 1071.665529][T13935] team0: Port device team_slave_1 added [ 1072.306332][T13935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1072.306357][T13935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1072.306388][T13935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1072.385511][T13935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1072.385531][T13935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1072.385559][T13935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1072.430405][ T5889] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1072.754794][ T5889] usb 1-1: Using ep0 maxpacket: 32 [ 1072.769414][ T5889] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 1072.769445][ T5889] usb 1-1: config 0 has no interface number 0 [ 1072.769498][ T5889] usb 1-1: config 0 interface 184 has no altsetting 0 [ 1072.784892][ T5889] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1072.784925][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.784946][ T5889] usb 1-1: Product: syz [ 1072.784960][ T5889] usb 1-1: Manufacturer: syz [ 1072.784976][ T5889] usb 1-1: SerialNumber: syz [ 1072.829161][ T5889] usb 1-1: config 0 descriptor?? [ 1072.875705][T13935] hsr_slave_0: entered promiscuous mode [ 1072.877291][T13935] hsr_slave_1: entered promiscuous mode [ 1073.154390][T13786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1074.613676][ T5889] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 1074.613712][ T5889] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1074.614283][ T5889] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1074.614311][ T5889] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1074.614331][ T5889] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1074.614350][ T5889] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1074.614707][ T5889] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 1074.750972][ T5889] usb 1-1: USB disconnect, device number 42 [ 1076.467933][ T173] bridge_slave_1: left allmulticast mode [ 1076.467964][ T173] bridge_slave_1: left promiscuous mode [ 1076.468258][ T173] bridge0: port 2(bridge_slave_1) entered disabled state [ 1076.489317][T10477] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1076.521381][T10477] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1076.537008][T10477] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1076.547483][T10477] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1076.552155][T10477] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1076.668651][ T173] bridge_slave_0: left allmulticast mode [ 1076.668684][ T173] bridge_slave_0: left promiscuous mode [ 1076.668966][ T173] bridge0: port 1(bridge_slave_0) entered disabled state [ 1078.972615][T10477] Bluetooth: hci3: command tx timeout [ 1079.661737][ T173] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1081.014192][T10477] Bluetooth: hci3: command tx timeout [ 1081.213906][ T173] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1081.405131][ T173] bond0 (unregistering): Released all slaves [ 1082.607896][ T173] hsr_slave_0: left promiscuous mode [ 1082.646099][ T173] hsr_slave_1: left promiscuous mode [ 1082.647479][ T173] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1082.687854][ T173] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1083.091947][T10477] Bluetooth: hci3: command tx timeout [ 1083.437952][T14279] overlayfs: overlapping lowerdir path [ 1083.720751][T14282] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1084.850797][ T5992] ------------[ cut here ]------------ [ 1084.850813][ T5992] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 1084.850829][ T5992] WARNING: drivers/gpu/drm/drm_vblank.c:1320 at drm_crtc_wait_one_vblank+0x357/0x500, CPU#1: kworker/1:7/5992 [ 1084.850877][ T5992] Modules linked in: [ 1084.850901][ T5992] CPU: 1 UID: 0 PID: 5992 Comm: kworker/1:7 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1084.850931][ T5992] Tainted: [L]=SOFTLOCKUP [ 1084.850938][ T5992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1084.850953][ T5992] Workqueue: events drm_fb_helper_damage_work [ 1084.850984][ T5992] RIP: 0010:drm_crtc_wait_one_vblank+0x4b6/0x500 [ 1084.851014][ T5992] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 ea b9 d3 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 48 8b 3c 24 44 89 f6 e8 e9 f4 ff ff b8 92 ff ff ff [ 1084.851033][ T5992] RSP: 0018:ffffc900050ff8c0 EFLAGS: 00010246 [ 1084.851052][ T5992] RAX: 1ffff11004aac200 RBX: ffffffff8f7558b0 RCX: 0000000000000000 [ 1084.851069][ T5992] RDX: ffffffff8bbf6340 RSI: ffffffff8bc121e0 RDI: ffffffff8f7558b0 [ 1084.851085][ T5992] RBP: ffffc900050ff9a8 R08: 0000000000000000 R09: 0000000000000000 [ 1084.851099][ T5992] R10: dffffc0000000000 R11: fffffbfff1ed4e37 R12: ffffffff8bc121e0 [ 1084.851115][ T5992] R13: ffff888025561000 R14: 0000000000000000 R15: ffffffff8bbf6340 [ 1084.851131][ T5992] FS: 0000000000000000(0000) GS:ffff888126435000(0000) knlGS:0000000000000000 [ 1084.851149][ T5992] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1084.851164][ T5992] CR2: 00007f528453c7e8 CR3: 0000000058102000 CR4: 00000000003526f0 [ 1084.851184][ T5992] Call Trace: [ 1084.851193][ T5992] [ 1084.851208][ T5992] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 1084.851260][ T5992] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1084.851299][ T5992] ? rt_spin_unlock+0x160/0x200 [ 1084.851438][ T5992] ? drm_vblank_get+0x147/0x260 [ 1084.851469][ T5992] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 1084.851508][ T5992] drm_fb_helper_damage_work+0x131/0x6f0 [ 1084.851550][ T5992] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 1084.851582][ T5992] ? process_scheduled_works+0xad2/0x18c0 [ 1084.851615][ T5992] ? process_scheduled_works+0xa8d/0x18c0 [ 1084.851645][ T5992] ? process_scheduled_works+0xa8d/0x18c0 [ 1084.851678][ T5992] process_scheduled_works+0xb6e/0x18c0 [ 1084.851749][ T5992] ? __pfx_process_scheduled_works+0x10/0x10 [ 1084.851789][ T5992] ? assign_work+0x3d5/0x5e0 [ 1084.851827][ T5992] worker_thread+0xa53/0xfc0 [ 1084.851893][ T5992] kthread+0x388/0x470 [ 1084.851918][ T5992] ? __pfx_worker_thread+0x10/0x10 [ 1084.851948][ T5992] ? __pfx_kthread+0x10/0x10 [ 1084.851973][ T5992] ret_from_fork+0x51e/0xb90 [ 1084.852010][ T5992] ? __pfx_ret_from_fork+0x10/0x10 [ 1084.852039][ T5992] ? __switch_to+0xc7d/0x1450 [ 1084.852073][ T5992] ? __pfx_kthread+0x10/0x10 [ 1084.852099][ T5992] ret_from_fork_asm+0x1a/0x30 [ 1084.852144][ T5992] [ 1084.852156][ T5992] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1084.852174][ T5992] CPU: 1 UID: 0 PID: 5992 Comm: kworker/1:7 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1084.852202][ T5992] Tainted: [L]=SOFTLOCKUP [ 1084.852210][ T5992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1084.852223][ T5992] Workqueue: events drm_fb_helper_damage_work [ 1084.852250][ T5992] Call Trace: [ 1084.852259][ T5992] [ 1084.852268][ T5992] vpanic+0x56c/0xa60 [ 1084.852302][ T5992] ? __pfx__printk+0x10/0x10 [ 1084.852327][ T5992] ? __pfx_vpanic+0x10/0x10 [ 1084.852357][ T5992] ? is_bpf_text_address+0x292/0x2b0 [ 1084.852389][ T5992] ? is_bpf_text_address+0x26/0x2b0 [ 1084.852429][ T5992] panic+0xc5/0xd0 [ 1084.852460][ T5992] ? __pfx_panic+0x10/0x10 [ 1084.852511][ T5992] ? ret_from_fork_asm+0x1a/0x30 [ 1084.852540][ T5992] __warn+0x315/0x4f0 [ 1084.852571][ T5992] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 1084.852603][ T5992] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 1084.852634][ T5992] __report_bug+0x29a/0x540 [ 1084.852689][ T5992] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 1084.852719][ T5992] ? __pfx___report_bug+0x10/0x10 [ 1084.852768][ T5992] report_bug_entry+0x19a/0x290 [ 1084.852793][ T5992] ? drm_crtc_wait_one_vblank+0x4b6/0x500 [ 1084.852821][ T5992] ? drm_crtc_wait_one_vblank+0x4bb/0x500 [ 1084.852849][ T5992] handle_bug+0xce/0x200 [ 1084.852917][ T5992] exc_invalid_op+0x1a/0x50 [ 1084.852945][ T5992] asm_exc_invalid_op+0x1a/0x20 [ 1084.852967][ T5992] RIP: 0010:drm_crtc_wait_one_vblank+0x4b6/0x500 [ 1084.852996][ T5992] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 ea b9 d3 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 48 8b 3c 24 44 89 f6 e8 e9 f4 ff ff b8 92 ff ff ff [ 1084.853013][ T5992] RSP: 0018:ffffc900050ff8c0 EFLAGS: 00010246 [ 1084.853031][ T5992] RAX: 1ffff11004aac200 RBX: ffffffff8f7558b0 RCX: 0000000000000000 [ 1084.853047][ T5992] RDX: ffffffff8bbf6340 RSI: ffffffff8bc121e0 RDI: ffffffff8f7558b0 [ 1084.853063][ T5992] RBP: ffffc900050ff9a8 R08: 0000000000000000 R09: 0000000000000000 [ 1084.853077][ T5992] R10: dffffc0000000000 R11: fffffbfff1ed4e37 R12: ffffffff8bc121e0 [ 1084.853093][ T5992] R13: ffff888025561000 R14: 0000000000000000 R15: ffffffff8bbf6340 [ 1084.853134][ T5992] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 1084.853166][ T5992] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1084.853202][ T5992] ? rt_spin_unlock+0x160/0x200 [ 1084.853235][ T5992] ? drm_vblank_get+0x147/0x260 [ 1084.853267][ T5992] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 1084.853295][ T5992] drm_fb_helper_damage_work+0x131/0x6f0 [ 1084.853337][ T5992] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 1084.853368][ T5992] ? process_scheduled_works+0xad2/0x18c0 [ 1084.853399][ T5992] ? process_scheduled_works+0xa8d/0x18c0 [ 1084.853428][ T5992] ? process_scheduled_works+0xa8d/0x18c0 [ 1084.853461][ T5992] process_scheduled_works+0xb6e/0x18c0 [ 1084.853538][ T5992] ? __pfx_process_scheduled_works+0x10/0x10 [ 1084.853577][ T5992] ? assign_work+0x3d5/0x5e0 [ 1084.853614][ T5992] worker_thread+0xa53/0xfc0 [ 1084.853680][ T5992] kthread+0x388/0x470 [ 1084.853704][ T5992] ? __pfx_worker_thread+0x10/0x10 [ 1084.853733][ T5992] ? __pfx_kthread+0x10/0x10 [ 1084.853759][ T5992] ret_from_fork+0x51e/0xb90 [ 1084.853794][ T5992] ? __pfx_ret_from_fork+0x10/0x10 [ 1084.853823][ T5992] ? __switch_to+0xc7d/0x1450 [ 1084.853856][ T5992] ? __pfx_kthread+0x10/0x10 [ 1084.853881][ T5992] ret_from_fork_asm+0x1a/0x30 [ 1084.853923][ T5992] [ 1084.854079][ T5992] Kernel Offset: disabled