forked to background, child pid 3175 no interfaces have a carri[ 21.890762][ T3176] 8021q: adding VLAN 0 to HW filter on device bond0 er [ 21.901478][ T3176] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.57' (ECDSA) to the list of known hosts. 2022/03/22 19:36:04 fuzzer started 2022/03/22 19:36:04 dialing manager at 10.128.0.169:36315 syzkaller login: [ 40.455772][ T3595] cgroup: Unknown subsys name 'net' [ 40.558914][ T3595] cgroup: Unknown subsys name 'rlimit' 2022/03/22 19:36:05 syscalls: 3347 2022/03/22 19:36:05 code coverage: enabled 2022/03/22 19:36:05 comparison tracing: enabled 2022/03/22 19:36:05 extra coverage: enabled 2022/03/22 19:36:05 delay kcov mmap: mmap returned an invalid pointer 2022/03/22 19:36:05 setuid sandbox: enabled 2022/03/22 19:36:05 namespace sandbox: enabled 2022/03/22 19:36:05 Android sandbox: /sys/fs/selinux/policy does not exist 2022/03/22 19:36:05 fault injection: enabled 2022/03/22 19:36:05 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2022/03/22 19:36:05 net packet injection: enabled 2022/03/22 19:36:05 net device setup: enabled 2022/03/22 19:36:05 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/03/22 19:36:05 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/03/22 19:36:05 USB emulation: enabled 2022/03/22 19:36:05 hci packet injection: enabled 2022/03/22 19:36:05 wifi device emulation: enabled 2022/03/22 19:36:05 802.15.4 emulation: enabled 2022/03/22 19:36:05 fetching corpus: 0, signal 0/2000 (executing program) 2022/03/22 19:36:05 fetching corpus: 50, signal 41114/44787 (executing program) 2022/03/22 19:36:05 fetching corpus: 100, signal 50486/55866 (executing program) 2022/03/22 19:36:05 fetching corpus: 150, signal 64704/71639 (executing program) 2022/03/22 19:36:05 fetching corpus: 200, signal 75494/83904 (executing program) 2022/03/22 19:36:05 fetching corpus: 250, signal 83556/93430 (executing program) 2022/03/22 19:36:05 fetching corpus: 300, signal 90874/102169 (executing program) 2022/03/22 19:36:05 fetching corpus: 350, signal 97127/109810 (executing program) 2022/03/22 19:36:05 fetching corpus: 400, signal 101178/115283 (executing program) 2022/03/22 19:36:05 fetching corpus: 450, signal 105433/120894 (executing program) 2022/03/22 19:36:05 fetching corpus: 500, signal 110963/127725 (executing program) 2022/03/22 19:36:05 fetching corpus: 550, signal 113973/132090 (executing program) 2022/03/22 19:36:06 fetching corpus: 600, signal 118325/137739 (executing program) 2022/03/22 19:36:06 fetching corpus: 650, signal 124052/144597 (executing program) 2022/03/22 19:36:06 fetching corpus: 700, signal 128335/150047 (executing program) 2022/03/22 19:36:06 fetching corpus: 750, signal 132606/155471 (executing program) 2022/03/22 19:36:06 fetching corpus: 800, signal 135190/159329 (executing program) 2022/03/22 19:36:06 fetching corpus: 850, signal 139034/164325 (executing program) 2022/03/22 19:36:06 fetching corpus: 900, signal 142278/168741 (executing program) 2022/03/22 19:36:06 fetching corpus: 950, signal 144573/172218 (executing program) 2022/03/22 19:36:06 fetching corpus: 1000, signal 148457/177144 (executing program) 2022/03/22 19:36:06 fetching corpus: 1050, signal 150732/180591 (executing program) 2022/03/22 19:36:06 fetching corpus: 1100, signal 153738/184672 (executing program) 2022/03/22 19:36:06 fetching corpus: 1150, signal 157070/189044 (executing program) 2022/03/22 19:36:07 fetching corpus: 1200, signal 159541/192562 (executing program) 2022/03/22 19:36:07 fetching corpus: 1250, signal 161688/195833 (executing program) 2022/03/22 19:36:07 fetching corpus: 1300, signal 164251/199398 (executing program) 2022/03/22 19:36:07 fetching corpus: 1350, signal 166996/203134 (executing program) 2022/03/22 19:36:07 fetching corpus: 1400, signal 168974/206164 (executing program) 2022/03/22 19:36:07 fetching corpus: 1450, signal 170670/208903 (executing program) 2022/03/22 19:36:07 fetching corpus: 1500, signal 172726/211952 (executing program) 2022/03/22 19:36:07 fetching corpus: 1550, signal 174267/214550 (executing program) 2022/03/22 19:36:07 fetching corpus: 1600, signal 177010/218160 (executing program) 2022/03/22 19:36:07 fetching corpus: 1650, signal 180381/222270 (executing program) 2022/03/22 19:36:07 fetching corpus: 1700, signal 183046/225729 (executing program) 2022/03/22 19:36:08 fetching corpus: 1750, signal 184632/228282 (executing program) 2022/03/22 19:36:08 fetching corpus: 1800, signal 187411/231790 (executing program) 2022/03/22 19:36:08 fetching corpus: 1850, signal 189144/234374 (executing program) 2022/03/22 19:36:08 fetching corpus: 1900, signal 190747/236858 (executing program) 2022/03/22 19:36:08 fetching corpus: 1950, signal 192939/239862 (executing program) 2022/03/22 19:36:08 fetching corpus: 2000, signal 194672/242449 (executing program) 2022/03/22 19:36:08 fetching corpus: 2050, signal 196266/244940 (executing program) 2022/03/22 19:36:08 fetching corpus: 2100, signal 197755/247296 (executing program) 2022/03/22 19:36:08 fetching corpus: 2150, signal 200037/250297 (executing program) 2022/03/22 19:36:08 fetching corpus: 2200, signal 202149/253153 (executing program) 2022/03/22 19:36:08 fetching corpus: 2250, signal 203436/255295 (executing program) 2022/03/22 19:36:08 fetching corpus: 2300, signal 205362/257972 (executing program) 2022/03/22 19:36:09 fetching corpus: 2350, signal 206891/260286 (executing program) 2022/03/22 19:36:09 fetching corpus: 2400, signal 208914/262975 (executing program) 2022/03/22 19:36:09 fetching corpus: 2450, signal 211086/265758 (executing program) 2022/03/22 19:36:09 fetching corpus: 2500, signal 212545/267971 (executing program) 2022/03/22 19:36:09 fetching corpus: 2550, signal 214144/270314 (executing program) 2022/03/22 19:36:09 fetching corpus: 2600, signal 215533/272502 (executing program) 2022/03/22 19:36:09 fetching corpus: 2650, signal 217379/275001 (executing program) 2022/03/22 19:36:09 fetching corpus: 2700, signal 218765/277138 (executing program) 2022/03/22 19:36:09 fetching corpus: 2750, signal 221149/280024 (executing program) 2022/03/22 19:36:09 fetching corpus: 2800, signal 222642/282180 (executing program) 2022/03/22 19:36:09 fetching corpus: 2850, signal 224331/284476 (executing program) 2022/03/22 19:36:09 fetching corpus: 2900, signal 225440/286376 (executing program) 2022/03/22 19:36:10 fetching corpus: 2950, signal 227285/288752 (executing program) 2022/03/22 19:36:10 fetching corpus: 3000, signal 229075/291059 (executing program) 2022/03/22 19:36:10 fetching corpus: 3050, signal 230601/293238 (executing program) 2022/03/22 19:36:10 fetching corpus: 3100, signal 232226/295443 (executing program) 2022/03/22 19:36:10 fetching corpus: 3150, signal 233301/297176 (executing program) 2022/03/22 19:36:10 fetching corpus: 3200, signal 234866/299248 (executing program) 2022/03/22 19:36:10 fetching corpus: 3250, signal 235987/301050 (executing program) 2022/03/22 19:36:10 fetching corpus: 3300, signal 237121/302830 (executing program) 2022/03/22 19:36:10 fetching corpus: 3350, signal 238208/304596 (executing program) 2022/03/22 19:36:10 fetching corpus: 3400, signal 239844/306700 (executing program) 2022/03/22 19:36:10 fetching corpus: 3450, signal 241019/308479 (executing program) 2022/03/22 19:36:10 fetching corpus: 3500, signal 242571/310535 (executing program) 2022/03/22 19:36:11 fetching corpus: 3550, signal 243809/312382 (executing program) 2022/03/22 19:36:11 fetching corpus: 3600, signal 244863/314113 (executing program) 2022/03/22 19:36:11 fetching corpus: 3650, signal 246482/316173 (executing program) 2022/03/22 19:36:11 fetching corpus: 3698, signal 247887/318016 (executing program) 2022/03/22 19:36:11 fetching corpus: 3748, signal 249777/320206 (executing program) 2022/03/22 19:36:11 fetching corpus: 3798, signal 250643/321714 (executing program) 2022/03/22 19:36:11 fetching corpus: 3848, signal 251705/323352 (executing program) 2022/03/22 19:36:11 fetching corpus: 3897, signal 252815/324988 (executing program) 2022/03/22 19:36:11 fetching corpus: 3947, signal 254425/326940 (executing program) 2022/03/22 19:36:11 fetching corpus: 3997, signal 255484/328545 (executing program) 2022/03/22 19:36:11 fetching corpus: 4046, signal 257055/330393 (executing program) 2022/03/22 19:36:11 fetching corpus: 4096, signal 258057/331932 (executing program) 2022/03/22 19:36:12 fetching corpus: 4146, signal 259504/333716 (executing program) 2022/03/22 19:36:12 fetching corpus: 4196, signal 260476/335224 (executing program) 2022/03/22 19:36:12 fetching corpus: 4246, signal 261492/336726 (executing program) 2022/03/22 19:36:12 fetching corpus: 4296, signal 262631/338306 (executing program) 2022/03/22 19:36:12 fetching corpus: 4346, signal 263798/339873 (executing program) 2022/03/22 19:36:12 fetching corpus: 4396, signal 264450/341114 (executing program) 2022/03/22 19:36:12 fetching corpus: 4446, signal 265380/342556 (executing program) 2022/03/22 19:36:12 fetching corpus: 4496, signal 266884/344340 (executing program) 2022/03/22 19:36:12 fetching corpus: 4546, signal 267790/345716 (executing program) 2022/03/22 19:36:12 fetching corpus: 4596, signal 268447/346959 (executing program) 2022/03/22 19:36:12 fetching corpus: 4646, signal 269313/348312 (executing program) 2022/03/22 19:36:13 fetching corpus: 4696, signal 270323/349741 (executing program) 2022/03/22 19:36:13 fetching corpus: 4746, signal 271434/351214 (executing program) 2022/03/22 19:36:13 fetching corpus: 4796, signal 272493/352698 (executing program) 2022/03/22 19:36:13 fetching corpus: 4846, signal 273228/353924 (executing program) 2022/03/22 19:36:13 fetching corpus: 4896, signal 274163/355236 (executing program) 2022/03/22 19:36:13 fetching corpus: 4946, signal 275687/356935 (executing program) 2022/03/22 19:36:13 fetching corpus: 4996, signal 277254/358672 (executing program) 2022/03/22 19:36:13 fetching corpus: 5046, signal 278406/360151 (executing program) 2022/03/22 19:36:13 fetching corpus: 5096, signal 279286/361472 (executing program) 2022/03/22 19:36:13 fetching corpus: 5146, signal 279912/362630 (executing program) 2022/03/22 19:36:13 fetching corpus: 5196, signal 281061/364112 (executing program) 2022/03/22 19:36:14 fetching corpus: 5246, signal 281919/365380 (executing program) 2022/03/22 19:36:14 fetching corpus: 5296, signal 282543/366510 (executing program) 2022/03/22 19:36:14 fetching corpus: 5346, signal 283553/367793 (executing program) 2022/03/22 19:36:14 fetching corpus: 5396, signal 284548/369101 (executing program) 2022/03/22 19:36:14 fetching corpus: 5446, signal 285534/370364 (executing program) 2022/03/22 19:36:14 fetching corpus: 5496, signal 286417/371566 (executing program) 2022/03/22 19:36:14 fetching corpus: 5546, signal 287393/372821 (executing program) 2022/03/22 19:36:14 fetching corpus: 5596, signal 288022/373850 (executing program) 2022/03/22 19:36:14 fetching corpus: 5646, signal 288787/375006 (executing program) 2022/03/22 19:36:14 fetching corpus: 5696, signal 289924/376324 (executing program) 2022/03/22 19:36:14 fetching corpus: 5746, signal 290718/377487 (executing program) 2022/03/22 19:36:14 fetching corpus: 5796, signal 291359/378527 (executing program) 2022/03/22 19:36:15 fetching corpus: 5846, signal 291827/379511 (executing program) 2022/03/22 19:36:15 fetching corpus: 5896, signal 292594/380625 (executing program) 2022/03/22 19:36:15 fetching corpus: 5946, signal 293565/381852 (executing program) 2022/03/22 19:36:15 fetching corpus: 5996, signal 294068/382822 (executing program) 2022/03/22 19:36:15 fetching corpus: 6046, signal 295087/384025 (executing program) 2022/03/22 19:36:15 fetching corpus: 6096, signal 296010/385194 (executing program) 2022/03/22 19:36:15 fetching corpus: 6146, signal 296639/386257 (executing program) 2022/03/22 19:36:15 fetching corpus: 6196, signal 297514/387390 (executing program) 2022/03/22 19:36:15 fetching corpus: 6246, signal 298244/388446 (executing program) 2022/03/22 19:36:15 fetching corpus: 6296, signal 299175/389622 (executing program) 2022/03/22 19:36:15 fetching corpus: 6346, signal 300060/390744 (executing program) 2022/03/22 19:36:15 fetching corpus: 6396, signal 300875/391761 (executing program) 2022/03/22 19:36:16 fetching corpus: 6446, signal 301777/392826 (executing program) 2022/03/22 19:36:16 fetching corpus: 6496, signal 302436/393833 (executing program) 2022/03/22 19:36:16 fetching corpus: 6546, signal 302988/394752 (executing program) 2022/03/22 19:36:16 fetching corpus: 6596, signal 303684/395695 (executing program) 2022/03/22 19:36:16 fetching corpus: 6646, signal 304451/396701 (executing program) 2022/03/22 19:36:16 fetching corpus: 6696, signal 305296/397790 (executing program) 2022/03/22 19:36:16 fetching corpus: 6746, signal 306054/398764 (executing program) 2022/03/22 19:36:16 fetching corpus: 6796, signal 306845/399772 (executing program) 2022/03/22 19:36:16 fetching corpus: 6846, signal 307536/400760 (executing program) 2022/03/22 19:36:16 fetching corpus: 6896, signal 308296/401762 (executing program) 2022/03/22 19:36:16 fetching corpus: 6946, signal 309064/402720 (executing program) 2022/03/22 19:36:16 fetching corpus: 6996, signal 311462/404321 (executing program) 2022/03/22 19:36:17 fetching corpus: 7046, signal 312271/405304 (executing program) 2022/03/22 19:36:17 fetching corpus: 7096, signal 312875/406202 (executing program) 2022/03/22 19:36:17 fetching corpus: 7146, signal 313543/407085 (executing program) 2022/03/22 19:36:17 fetching corpus: 7196, signal 314280/407974 (executing program) 2022/03/22 19:36:17 fetching corpus: 7246, signal 314966/408830 (executing program) 2022/03/22 19:36:17 fetching corpus: 7296, signal 315862/409804 (executing program) 2022/03/22 19:36:17 fetching corpus: 7346, signal 316883/410811 (executing program) 2022/03/22 19:36:17 fetching corpus: 7396, signal 317625/411679 (executing program) 2022/03/22 19:36:17 fetching corpus: 7446, signal 318325/412541 (executing program) 2022/03/22 19:36:17 fetching corpus: 7496, signal 319331/413483 (executing program) 2022/03/22 19:36:17 fetching corpus: 7546, signal 320028/414363 (executing program) 2022/03/22 19:36:17 fetching corpus: 7596, signal 320576/415154 (executing program) 2022/03/22 19:36:17 fetching corpus: 7646, signal 321259/416031 (executing program) 2022/03/22 19:36:18 fetching corpus: 7696, signal 321823/416852 (executing program) 2022/03/22 19:36:18 fetching corpus: 7746, signal 322472/417690 (executing program) 2022/03/22 19:36:18 fetching corpus: 7796, signal 323026/418526 (executing program) 2022/03/22 19:36:18 fetching corpus: 7846, signal 323749/419350 (executing program) 2022/03/22 19:36:18 fetching corpus: 7894, signal 324287/420114 (executing program) 2022/03/22 19:36:18 fetching corpus: 7944, signal 325195/421031 (executing program) 2022/03/22 19:36:18 fetching corpus: 7994, signal 325712/421765 (executing program) 2022/03/22 19:36:18 fetching corpus: 8044, signal 326417/422592 (executing program) 2022/03/22 19:36:18 fetching corpus: 8094, signal 326971/423358 (executing program) 2022/03/22 19:36:18 fetching corpus: 8144, signal 327399/424046 (executing program) 2022/03/22 19:36:19 fetching corpus: 8194, signal 328111/424838 (executing program) 2022/03/22 19:36:19 fetching corpus: 8244, signal 328689/425551 (executing program) 2022/03/22 19:36:19 fetching corpus: 8294, signal 329240/426278 (executing program) 2022/03/22 19:36:19 fetching corpus: 8344, signal 329930/427046 (executing program) 2022/03/22 19:36:19 fetching corpus: 8394, signal 330487/427803 (executing program) 2022/03/22 19:36:19 fetching corpus: 8444, signal 331096/428556 (executing program) 2022/03/22 19:36:19 fetching corpus: 8494, signal 331704/429270 (executing program) 2022/03/22 19:36:19 fetching corpus: 8544, signal 332103/429902 (executing program) 2022/03/22 19:36:19 fetching corpus: 8594, signal 332733/430593 (executing program) 2022/03/22 19:36:19 fetching corpus: 8644, signal 333370/431308 (executing program) 2022/03/22 19:36:19 fetching corpus: 8694, signal 333782/431981 (executing program) 2022/03/22 19:36:19 fetching corpus: 8744, signal 334445/432731 (executing program) 2022/03/22 19:36:20 fetching corpus: 8794, signal 334971/433427 (executing program) 2022/03/22 19:36:20 fetching corpus: 8844, signal 335733/434152 (executing program) 2022/03/22 19:36:20 fetching corpus: 8894, signal 336247/434819 (executing program) 2022/03/22 19:36:20 fetching corpus: 8944, signal 336670/435454 (executing program) 2022/03/22 19:36:20 fetching corpus: 8994, signal 337312/436149 (executing program) 2022/03/22 19:36:20 fetching corpus: 9044, signal 337876/436852 (executing program) 2022/03/22 19:36:20 fetching corpus: 9094, signal 338544/437561 (executing program) 2022/03/22 19:36:20 fetching corpus: 9144, signal 339156/438228 (executing program) 2022/03/22 19:36:20 fetching corpus: 9194, signal 339830/438916 (executing program) 2022/03/22 19:36:20 fetching corpus: 9244, signal 340534/439585 (executing program) 2022/03/22 19:36:20 fetching corpus: 9293, signal 341025/440214 (executing program) 2022/03/22 19:36:20 fetching corpus: 9343, signal 341764/440876 (executing program) 2022/03/22 19:36:20 fetching corpus: 9393, signal 342279/441517 (executing program) 2022/03/22 19:36:21 fetching corpus: 9443, signal 342679/442100 (executing program) 2022/03/22 19:36:21 fetching corpus: 9493, signal 343121/442701 (executing program) 2022/03/22 19:36:21 fetching corpus: 9543, signal 343844/443326 (executing program) 2022/03/22 19:36:21 fetching corpus: 9593, signal 344627/443958 (executing program) 2022/03/22 19:36:21 fetching corpus: 9643, signal 345027/444517 (executing program) 2022/03/22 19:36:21 fetching corpus: 9693, signal 345766/445153 (executing program) 2022/03/22 19:36:21 fetching corpus: 9743, signal 346290/445711 (executing program) 2022/03/22 19:36:21 fetching corpus: 9793, signal 347296/446386 (executing program) 2022/03/22 19:36:21 fetching corpus: 9843, signal 347704/446956 (executing program) 2022/03/22 19:36:21 fetching corpus: 9893, signal 348099/447545 (executing program) 2022/03/22 19:36:21 fetching corpus: 9943, signal 348647/448095 (executing program) 2022/03/22 19:36:22 fetching corpus: 9993, signal 349209/448645 (executing program) 2022/03/22 19:36:22 fetching corpus: 10043, signal 349659/449186 (executing program) 2022/03/22 19:36:22 fetching corpus: 10093, signal 350206/449733 (executing program) 2022/03/22 19:36:22 fetching corpus: 10143, signal 350753/450292 (executing program) 2022/03/22 19:36:22 fetching corpus: 10193, signal 351235/450810 (executing program) 2022/03/22 19:36:22 fetching corpus: 10243, signal 351686/451330 (executing program) 2022/03/22 19:36:22 fetching corpus: 10293, signal 352416/451894 (executing program) 2022/03/22 19:36:22 fetching corpus: 10343, signal 352974/452452 (executing program) 2022/03/22 19:36:22 fetching corpus: 10393, signal 353405/452964 (executing program) 2022/03/22 19:36:22 fetching corpus: 10443, signal 353925/453497 (executing program) 2022/03/22 19:36:22 fetching corpus: 10493, signal 354289/454034 (executing program) 2022/03/22 19:36:23 fetching corpus: 10543, signal 354786/454582 (executing program) 2022/03/22 19:36:23 fetching corpus: 10593, signal 355439/455083 (executing program) 2022/03/22 19:36:23 fetching corpus: 10643, signal 355930/455624 (executing program) 2022/03/22 19:36:23 fetching corpus: 10693, signal 356354/456139 (executing program) 2022/03/22 19:36:23 fetching corpus: 10743, signal 356736/456628 (executing program) 2022/03/22 19:36:23 fetching corpus: 10793, signal 357133/457132 (executing program) 2022/03/22 19:36:23 fetching corpus: 10843, signal 357608/457614 (executing program) 2022/03/22 19:36:23 fetching corpus: 10893, signal 358278/458111 (executing program) 2022/03/22 19:36:23 fetching corpus: 10943, signal 358729/458576 (executing program) 2022/03/22 19:36:23 fetching corpus: 10993, signal 359082/459055 (executing program) 2022/03/22 19:36:23 fetching corpus: 11043, signal 359753/459540 (executing program) 2022/03/22 19:36:24 fetching corpus: 11093, signal 360229/459988 (executing program) 2022/03/22 19:36:24 fetching corpus: 11143, signal 360915/460477 (executing program) 2022/03/22 19:36:24 fetching corpus: 11193, signal 361282/460935 (executing program) 2022/03/22 19:36:24 fetching corpus: 11243, signal 361898/461411 (executing program) 2022/03/22 19:36:24 fetching corpus: 11293, signal 362282/461860 (executing program) 2022/03/22 19:36:24 fetching corpus: 11343, signal 362811/462298 (executing program) 2022/03/22 19:36:24 fetching corpus: 11393, signal 363340/462753 (executing program) 2022/03/22 19:36:24 fetching corpus: 11443, signal 364235/463189 (executing program) 2022/03/22 19:36:24 fetching corpus: 11493, signal 364841/463613 (executing program) 2022/03/22 19:36:24 fetching corpus: 11543, signal 365426/464065 (executing program) 2022/03/22 19:36:24 fetching corpus: 11593, signal 366121/464065 (executing program) 2022/03/22 19:36:24 fetching corpus: 11643, signal 366679/464065 (executing program) 2022/03/22 19:36:25 fetching corpus: 11693, signal 367177/464067 (executing program) 2022/03/22 19:36:25 fetching corpus: 11743, signal 367637/464067 (executing program) 2022/03/22 19:36:25 fetching corpus: 11793, signal 367991/464067 (executing program) 2022/03/22 19:36:25 fetching corpus: 11843, signal 368482/464067 (executing program) 2022/03/22 19:36:25 fetching corpus: 11893, signal 368894/464067 (executing program) 2022/03/22 19:36:25 fetching corpus: 11943, signal 369343/464067 (executing program) 2022/03/22 19:36:25 fetching corpus: 11992, signal 369676/464067 (executing program) 2022/03/22 19:36:25 fetching corpus: 12042, signal 370083/464067 (executing program) 2022/03/22 19:36:25 fetching corpus: 12092, signal 370600/464067 (executing program) 2022/03/22 19:36:25 fetching corpus: 12142, signal 370945/464067 (executing program) 2022/03/22 19:36:25 fetching corpus: 12192, signal 371378/464068 (executing program) 2022/03/22 19:36:25 fetching corpus: 12242, signal 372071/464068 (executing program) 2022/03/22 19:36:25 fetching corpus: 12292, signal 372395/464068 (executing program) 2022/03/22 19:36:26 fetching corpus: 12342, signal 372774/464068 (executing program) 2022/03/22 19:36:26 fetching corpus: 12392, signal 373252/464068 (executing program) 2022/03/22 19:36:26 fetching corpus: 12442, signal 373865/464068 (executing program) 2022/03/22 19:36:26 fetching corpus: 12492, signal 374200/464068 (executing program) 2022/03/22 19:36:26 fetching corpus: 12542, signal 374636/464068 (executing program) 2022/03/22 19:36:26 fetching corpus: 12592, signal 375335/464068 (executing program) 2022/03/22 19:36:26 fetching corpus: 12642, signal 375686/464068 (executing program) 2022/03/22 19:36:26 fetching corpus: 12692, signal 376202/464068 (executing program) 2022/03/22 19:36:26 fetching corpus: 12742, signal 376511/464068 (executing program) 2022/03/22 19:36:26 fetching corpus: 12792, signal 377153/464068 (executing program) 2022/03/22 19:36:26 fetching corpus: 12842, signal 377643/464068 (executing program) 2022/03/22 19:36:26 fetching corpus: 12892, signal 378061/464068 (executing program) 2022/03/22 19:36:26 fetching corpus: 12942, signal 378535/464072 (executing program) 2022/03/22 19:36:27 fetching corpus: 12992, signal 378951/464072 (executing program) 2022/03/22 19:36:27 fetching corpus: 13042, signal 379409/464072 (executing program) 2022/03/22 19:36:27 fetching corpus: 13092, signal 379863/464072 (executing program) 2022/03/22 19:36:27 fetching corpus: 13142, signal 380251/464072 (executing program) 2022/03/22 19:36:27 fetching corpus: 13192, signal 380637/464072 (executing program) 2022/03/22 19:36:27 fetching corpus: 13242, signal 380985/464072 (executing program) 2022/03/22 19:36:27 fetching corpus: 13292, signal 381467/464072 (executing program) 2022/03/22 19:36:27 fetching corpus: 13342, signal 381878/464072 (executing program) 2022/03/22 19:36:27 fetching corpus: 13392, signal 382394/464072 (executing program) 2022/03/22 19:36:27 fetching corpus: 13442, signal 382882/464072 (executing program) 2022/03/22 19:36:27 fetching corpus: 13492, signal 383228/464072 (executing program) 2022/03/22 19:36:28 fetching corpus: 13542, signal 383614/464072 (executing program) 2022/03/22 19:36:28 fetching corpus: 13592, signal 384071/464072 (executing program) 2022/03/22 19:36:28 fetching corpus: 13642, signal 384427/464072 (executing program) 2022/03/22 19:36:28 fetching corpus: 13692, signal 385046/464072 (executing program) 2022/03/22 19:36:28 fetching corpus: 13742, signal 385347/464072 (executing program) 2022/03/22 19:36:28 fetching corpus: 13792, signal 385719/464074 (executing program) 2022/03/22 19:36:28 fetching corpus: 13842, signal 385976/464074 (executing program) 2022/03/22 19:36:28 fetching corpus: 13892, signal 386328/464074 (executing program) 2022/03/22 19:36:28 fetching corpus: 13942, signal 386881/464074 (executing program) 2022/03/22 19:36:28 fetching corpus: 13992, signal 387329/464074 (executing program) 2022/03/22 19:36:28 fetching corpus: 14042, signal 387828/464074 (executing program) 2022/03/22 19:36:28 fetching corpus: 14092, signal 388108/464074 (executing program) 2022/03/22 19:36:28 fetching corpus: 14142, signal 388582/464074 (executing program) 2022/03/22 19:36:29 fetching corpus: 14192, signal 388933/464074 (executing program) 2022/03/22 19:36:29 fetching corpus: 14242, signal 389328/464079 (executing program) 2022/03/22 19:36:29 fetching corpus: 14292, signal 389783/464079 (executing program) 2022/03/22 19:36:29 fetching corpus: 14342, signal 390085/464079 (executing program) 2022/03/22 19:36:29 fetching corpus: 14392, signal 390397/464079 (executing program) 2022/03/22 19:36:29 fetching corpus: 14442, signal 390703/464079 (executing program) 2022/03/22 19:36:29 fetching corpus: 14492, signal 391122/464079 (executing program) 2022/03/22 19:36:29 fetching corpus: 14542, signal 391458/464079 (executing program) 2022/03/22 19:36:29 fetching corpus: 14592, signal 391808/464084 (executing program) 2022/03/22 19:36:29 fetching corpus: 14642, signal 392209/464084 (executing program) 2022/03/22 19:36:29 fetching corpus: 14692, signal 392767/464084 (executing program) 2022/03/22 19:36:29 fetching corpus: 14742, signal 393030/464084 (executing program) 2022/03/22 19:36:30 fetching corpus: 14792, signal 393398/464084 (executing program) 2022/03/22 19:36:30 fetching corpus: 14842, signal 393792/464084 (executing program) 2022/03/22 19:36:30 fetching corpus: 14892, signal 394144/464084 (executing program) 2022/03/22 19:36:30 fetching corpus: 14942, signal 394549/464084 (executing program) 2022/03/22 19:36:30 fetching corpus: 14992, signal 395125/464084 (executing program) 2022/03/22 19:36:30 fetching corpus: 15042, signal 395454/464084 (executing program) 2022/03/22 19:36:30 fetching corpus: 15092, signal 395776/464084 (executing program) 2022/03/22 19:36:30 fetching corpus: 15142, signal 396139/464084 (executing program) 2022/03/22 19:36:30 fetching corpus: 15192, signal 396549/464084 (executing program) 2022/03/22 19:36:30 fetching corpus: 15242, signal 396858/464084 (executing program) 2022/03/22 19:36:30 fetching corpus: 15292, signal 397117/464084 (executing program) 2022/03/22 19:36:30 fetching corpus: 15342, signal 397462/464084 (executing program) 2022/03/22 19:36:31 fetching corpus: 15392, signal 397817/464084 (executing program) 2022/03/22 19:36:31 fetching corpus: 15442, signal 398133/464084 (executing program) 2022/03/22 19:36:31 fetching corpus: 15492, signal 398433/464084 (executing program) 2022/03/22 19:36:31 fetching corpus: 15542, signal 398902/464084 (executing program) 2022/03/22 19:36:31 fetching corpus: 15592, signal 399441/464084 (executing program) 2022/03/22 19:36:31 fetching corpus: 15642, signal 399872/464084 (executing program) 2022/03/22 19:36:31 fetching corpus: 15692, signal 400242/464084 (executing program) 2022/03/22 19:36:31 fetching corpus: 15742, signal 400641/464084 (executing program) 2022/03/22 19:36:31 fetching corpus: 15792, signal 401239/464084 (executing program) 2022/03/22 19:36:31 fetching corpus: 15842, signal 401487/464084 (executing program) 2022/03/22 19:36:31 fetching corpus: 15892, signal 401768/464084 (executing program) 2022/03/22 19:36:31 fetching corpus: 15942, signal 402015/464084 (executing program) 2022/03/22 19:36:31 fetching corpus: 15992, signal 402324/464084 (executing program) 2022/03/22 19:36:32 fetching corpus: 16042, signal 402710/464084 (executing program) 2022/03/22 19:36:32 fetching corpus: 16092, signal 403079/464084 (executing program) 2022/03/22 19:36:32 fetching corpus: 16142, signal 403592/464084 (executing program) 2022/03/22 19:36:32 fetching corpus: 16192, signal 403955/464084 (executing program) 2022/03/22 19:36:32 fetching corpus: 16242, signal 404266/464090 (executing program) 2022/03/22 19:36:32 fetching corpus: 16292, signal 404519/464090 (executing program) 2022/03/22 19:36:32 fetching corpus: 16342, signal 404795/464092 (executing program) 2022/03/22 19:36:32 fetching corpus: 16392, signal 405199/464105 (executing program) 2022/03/22 19:36:32 fetching corpus: 16442, signal 405440/464105 (executing program) 2022/03/22 19:36:32 fetching corpus: 16492, signal 405707/464105 (executing program) 2022/03/22 19:36:33 fetching corpus: 16542, signal 406050/464105 (executing program) 2022/03/22 19:36:33 fetching corpus: 16592, signal 406315/464110 (executing program) 2022/03/22 19:36:33 fetching corpus: 16642, signal 406870/464110 (executing program) 2022/03/22 19:36:33 fetching corpus: 16692, signal 407181/464110 (executing program) 2022/03/22 19:36:33 fetching corpus: 16742, signal 407526/464110 (executing program) 2022/03/22 19:36:33 fetching corpus: 16792, signal 407870/464110 (executing program) 2022/03/22 19:36:33 fetching corpus: 16842, signal 408389/464110 (executing program) 2022/03/22 19:36:33 fetching corpus: 16892, signal 408735/464110 (executing program) 2022/03/22 19:36:33 fetching corpus: 16942, signal 409174/464110 (executing program) 2022/03/22 19:36:33 fetching corpus: 16992, signal 409598/464110 (executing program) 2022/03/22 19:36:33 fetching corpus: 17042, signal 409868/464110 (executing program) 2022/03/22 19:36:33 fetching corpus: 17092, signal 410230/464111 (executing program) 2022/03/22 19:36:33 fetching corpus: 17142, signal 410736/464111 (executing program) 2022/03/22 19:36:34 fetching corpus: 17192, signal 411050/464111 (executing program) 2022/03/22 19:36:34 fetching corpus: 17242, signal 411394/464111 (executing program) 2022/03/22 19:36:34 fetching corpus: 17292, signal 411798/464111 (executing program) 2022/03/22 19:36:34 fetching corpus: 17342, signal 412123/464111 (executing program) 2022/03/22 19:36:34 fetching corpus: 17392, signal 412373/464111 (executing program) 2022/03/22 19:36:34 fetching corpus: 17442, signal 412676/464111 (executing program) 2022/03/22 19:36:34 fetching corpus: 17492, signal 413009/464111 (executing program) 2022/03/22 19:36:34 fetching corpus: 17542, signal 413415/464111 (executing program) 2022/03/22 19:36:34 fetching corpus: 17592, signal 413817/464111 (executing program) 2022/03/22 19:36:34 fetching corpus: 17642, signal 414420/464111 (executing program) 2022/03/22 19:36:34 fetching corpus: 17692, signal 414730/464111 (executing program) 2022/03/22 19:36:34 fetching corpus: 17742, signal 415202/464111 (executing program) 2022/03/22 19:36:34 fetching corpus: 17792, signal 415574/464111 (executing program) 2022/03/22 19:36:35 fetching corpus: 17842, signal 415832/464111 (executing program) 2022/03/22 19:36:35 fetching corpus: 17892, signal 416165/464111 (executing program) 2022/03/22 19:36:35 fetching corpus: 17942, signal 416551/464111 (executing program) 2022/03/22 19:36:35 fetching corpus: 17992, signal 416953/464111 (executing program) 2022/03/22 19:36:35 fetching corpus: 18042, signal 417172/464111 (executing program) 2022/03/22 19:36:35 fetching corpus: 18092, signal 417445/464111 (executing program) [ 71.026176][ T1224] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.032496][ T1224] ieee802154 phy1 wpan1: encryption failed: -22 2022/03/22 19:36:35 fetching corpus: 18142, signal 417929/464111 (executing program) 2022/03/22 19:36:35 fetching corpus: 18192, signal 418199/464117 (executing program) 2022/03/22 19:36:35 fetching corpus: 18242, signal 418522/464117 (executing program) 2022/03/22 19:36:35 fetching corpus: 18292, signal 418912/464117 (executing program) 2022/03/22 19:36:35 fetching corpus: 18342, signal 419293/464117 (executing program) 2022/03/22 19:36:35 fetching corpus: 18392, signal 419693/464120 (executing program) 2022/03/22 19:36:36 fetching corpus: 18442, signal 419956/464120 (executing program) 2022/03/22 19:36:36 fetching corpus: 18492, signal 420228/464120 (executing program) 2022/03/22 19:36:36 fetching corpus: 18542, signal 420563/464120 (executing program) 2022/03/22 19:36:36 fetching corpus: 18592, signal 420794/464120 (executing program) 2022/03/22 19:36:36 fetching corpus: 18642, signal 421121/464120 (executing program) 2022/03/22 19:36:36 fetching corpus: 18692, signal 421364/464120 (executing program) 2022/03/22 19:36:36 fetching corpus: 18742, signal 421907/464120 (executing program) 2022/03/22 19:36:36 fetching corpus: 18792, signal 422291/464120 (executing program) 2022/03/22 19:36:36 fetching corpus: 18842, signal 422579/464120 (executing program) 2022/03/22 19:36:36 fetching corpus: 18892, signal 422924/464120 (executing program) 2022/03/22 19:36:36 fetching corpus: 18942, signal 423248/464120 (executing program) 2022/03/22 19:36:36 fetching corpus: 18992, signal 423521/464120 (executing program) 2022/03/22 19:36:36 fetching corpus: 19042, signal 423687/464120 (executing program) 2022/03/22 19:36:37 fetching corpus: 19092, signal 423932/464120 (executing program) 2022/03/22 19:36:37 fetching corpus: 19142, signal 424183/464120 (executing program) 2022/03/22 19:36:37 fetching corpus: 19192, signal 424445/464120 (executing program) 2022/03/22 19:36:37 fetching corpus: 19242, signal 424713/464120 (executing program) 2022/03/22 19:36:37 fetching corpus: 19292, signal 425112/464120 (executing program) 2022/03/22 19:36:37 fetching corpus: 19342, signal 425388/464120 (executing program) 2022/03/22 19:36:37 fetching corpus: 19392, signal 425600/464120 (executing program) 2022/03/22 19:36:37 fetching corpus: 19442, signal 425928/464120 (executing program) 2022/03/22 19:36:37 fetching corpus: 19492, signal 426123/464120 (executing program) 2022/03/22 19:36:37 fetching corpus: 19542, signal 426493/464120 (executing program) 2022/03/22 19:36:37 fetching corpus: 19592, signal 426809/464120 (executing program) 2022/03/22 19:36:37 fetching corpus: 19642, signal 427134/464120 (executing program) 2022/03/22 19:36:37 fetching corpus: 19692, signal 427406/464120 (executing program) 2022/03/22 19:36:38 fetching corpus: 19742, signal 427643/464120 (executing program) 2022/03/22 19:36:38 fetching corpus: 19792, signal 427911/464120 (executing program) 2022/03/22 19:36:38 fetching corpus: 19842, signal 428181/464120 (executing program) 2022/03/22 19:36:38 fetching corpus: 19892, signal 428419/464120 (executing program) 2022/03/22 19:36:38 fetching corpus: 19942, signal 428608/464120 (executing program) 2022/03/22 19:36:38 fetching corpus: 19992, signal 429009/464120 (executing program) 2022/03/22 19:36:38 fetching corpus: 20042, signal 429436/464121 (executing program) 2022/03/22 19:36:38 fetching corpus: 20092, signal 429707/464128 (executing program) 2022/03/22 19:36:38 fetching corpus: 20142, signal 429968/464128 (executing program) 2022/03/22 19:36:38 fetching corpus: 20192, signal 430245/464128 (executing program) 2022/03/22 19:36:38 fetching corpus: 20242, signal 430553/464128 (executing program) 2022/03/22 19:36:38 fetching corpus: 20292, signal 430938/464128 (executing program) 2022/03/22 19:36:39 fetching corpus: 20342, signal 431180/464128 (executing program) 2022/03/22 19:36:39 fetching corpus: 20392, signal 431493/464128 (executing program) 2022/03/22 19:36:39 fetching corpus: 20442, signal 431785/464128 (executing program) 2022/03/22 19:36:39 fetching corpus: 20492, signal 432061/464128 (executing program) 2022/03/22 19:36:39 fetching corpus: 20542, signal 432356/464128 (executing program) 2022/03/22 19:36:39 fetching corpus: 20592, signal 432493/464128 (executing program) 2022/03/22 19:36:39 fetching corpus: 20642, signal 432747/464128 (executing program) 2022/03/22 19:36:39 fetching corpus: 20692, signal 433080/464128 (executing program) 2022/03/22 19:36:39 fetching corpus: 20742, signal 433435/464128 (executing program) 2022/03/22 19:36:39 fetching corpus: 20792, signal 433642/464128 (executing program) 2022/03/22 19:36:39 fetching corpus: 20842, signal 433899/464137 (executing program) 2022/03/22 19:36:39 fetching corpus: 20892, signal 434146/464137 (executing program) 2022/03/22 19:36:40 fetching corpus: 20942, signal 434361/464137 (executing program) 2022/03/22 19:36:40 fetching corpus: 20992, signal 434694/464137 (executing program) 2022/03/22 19:36:40 fetching corpus: 21042, signal 435184/464137 (executing program) 2022/03/22 19:36:40 fetching corpus: 21092, signal 435366/464137 (executing program) 2022/03/22 19:36:40 fetching corpus: 21142, signal 435673/464137 (executing program) 2022/03/22 19:36:40 fetching corpus: 21192, signal 435933/464137 (executing program) [ 76.145511][ T24] cfg80211: failed to load regulatory.db 2022/03/22 19:36:40 fetching corpus: 21242, signal 436234/464137 (executing program) 2022/03/22 19:36:40 fetching corpus: 21292, signal 436623/464137 (executing program) 2022/03/22 19:36:40 fetching corpus: 21342, signal 436855/464137 (executing program) 2022/03/22 19:36:40 fetching corpus: 21392, signal 437074/464137 (executing program) 2022/03/22 19:36:41 fetching corpus: 21442, signal 437312/464137 (executing program) 2022/03/22 19:36:41 fetching corpus: 21492, signal 437563/464137 (executing program) 2022/03/22 19:36:41 fetching corpus: 21542, signal 437852/464137 (executing program) 2022/03/22 19:36:41 fetching corpus: 21592, signal 438078/464137 (executing program) 2022/03/22 19:36:41 fetching corpus: 21642, signal 438388/464137 (executing program) 2022/03/22 19:36:41 fetching corpus: 21692, signal 438667/464137 (executing program) 2022/03/22 19:36:41 fetching corpus: 21742, signal 438923/464137 (executing program) 2022/03/22 19:36:41 fetching corpus: 21792, signal 439228/464137 (executing program) 2022/03/22 19:36:41 fetching corpus: 21842, signal 439570/464137 (executing program) 2022/03/22 19:36:41 fetching corpus: 21892, signal 439936/464137 (executing program) 2022/03/22 19:36:41 fetching corpus: 21942, signal 440306/464137 (executing program) 2022/03/22 19:36:41 fetching corpus: 21992, signal 440792/464137 (executing program) 2022/03/22 19:36:42 fetching corpus: 22042, signal 441100/464137 (executing program) 2022/03/22 19:36:42 fetching corpus: 22092, signal 441400/464137 (executing program) 2022/03/22 19:36:42 fetching corpus: 22142, signal 441677/464137 (executing program) 2022/03/22 19:36:42 fetching corpus: 22192, signal 441921/464137 (executing program) 2022/03/22 19:36:42 fetching corpus: 22242, signal 442195/464137 (executing program) 2022/03/22 19:36:42 fetching corpus: 22292, signal 442498/464137 (executing program) 2022/03/22 19:36:42 fetching corpus: 22342, signal 442684/464137 (executing program) 2022/03/22 19:36:42 fetching corpus: 22392, signal 442935/464137 (executing program) 2022/03/22 19:36:42 fetching corpus: 22442, signal 443196/464137 (executing program) 2022/03/22 19:36:42 fetching corpus: 22492, signal 443415/464137 (executing program) 2022/03/22 19:36:42 fetching corpus: 22542, signal 443654/464137 (executing program) 2022/03/22 19:36:42 fetching corpus: 22592, signal 444230/464137 (executing program) 2022/03/22 19:36:42 fetching corpus: 22642, signal 444525/464137 (executing program) 2022/03/22 19:36:43 fetching corpus: 22692, signal 444686/464137 (executing program) 2022/03/22 19:36:43 fetching corpus: 22742, signal 444929/464137 (executing program) 2022/03/22 19:36:43 fetching corpus: 22792, signal 445214/464137 (executing program) 2022/03/22 19:36:43 fetching corpus: 22842, signal 445486/464137 (executing program) 2022/03/22 19:36:43 fetching corpus: 22892, signal 445716/464137 (executing program) 2022/03/22 19:36:43 fetching corpus: 22942, signal 446074/464137 (executing program) 2022/03/22 19:36:43 fetching corpus: 22992, signal 446257/464137 (executing program) 2022/03/22 19:36:43 fetching corpus: 23042, signal 446496/464137 (executing program) 2022/03/22 19:36:43 fetching corpus: 23092, signal 446801/464137 (executing program) 2022/03/22 19:36:43 fetching corpus: 23142, signal 447059/464137 (executing program) 2022/03/22 19:36:43 fetching corpus: 23192, signal 447378/464137 (executing program) 2022/03/22 19:36:43 fetching corpus: 23242, signal 447806/464144 (executing program) 2022/03/22 19:36:44 fetching corpus: 23292, signal 448024/464144 (executing program) 2022/03/22 19:36:44 fetching corpus: 23342, signal 448304/464144 (executing program) 2022/03/22 19:36:44 fetching corpus: 23392, signal 448569/464144 (executing program) 2022/03/22 19:36:44 fetching corpus: 23442, signal 448957/464145 (executing program) 2022/03/22 19:36:44 fetching corpus: 23492, signal 449153/464145 (executing program) 2022/03/22 19:36:44 fetching corpus: 23542, signal 449348/464147 (executing program) 2022/03/22 19:36:44 fetching corpus: 23592, signal 449592/464147 (executing program) 2022/03/22 19:36:44 fetching corpus: 23642, signal 449815/464147 (executing program) 2022/03/22 19:36:44 fetching corpus: 23692, signal 450059/464147 (executing program) 2022/03/22 19:36:44 fetching corpus: 23742, signal 450239/464147 (executing program) 2022/03/22 19:36:44 fetching corpus: 23792, signal 450504/464147 (executing program) 2022/03/22 19:36:45 fetching corpus: 23842, signal 450746/464147 (executing program) 2022/03/22 19:36:45 fetching corpus: 23892, signal 450948/464147 (executing program) 2022/03/22 19:36:45 fetching corpus: 23942, signal 451192/464147 (executing program) 2022/03/22 19:36:45 fetching corpus: 23992, signal 451402/464147 (executing program) 2022/03/22 19:36:45 fetching corpus: 24042, signal 451602/464147 (executing program) 2022/03/22 19:36:45 fetching corpus: 24092, signal 451810/464147 (executing program) 2022/03/22 19:36:45 fetching corpus: 24142, signal 452121/464147 (executing program) 2022/03/22 19:36:45 fetching corpus: 24192, signal 452315/464147 (executing program) 2022/03/22 19:36:45 fetching corpus: 24242, signal 452540/464147 (executing program) 2022/03/22 19:36:45 fetching corpus: 24292, signal 452701/464147 (executing program) 2022/03/22 19:36:45 fetching corpus: 24342, signal 452889/464147 (executing program) 2022/03/22 19:36:45 fetching corpus: 24392, signal 453162/464147 (executing program) 2022/03/22 19:36:45 fetching corpus: 24442, signal 453387/464147 (executing program) 2022/03/22 19:36:45 fetching corpus: 24492, signal 453681/464147 (executing program) 2022/03/22 19:36:46 fetching corpus: 24542, signal 453914/464147 (executing program) 2022/03/22 19:36:46 fetching corpus: 24592, signal 454144/464147 (executing program) 2022/03/22 19:36:46 fetching corpus: 24642, signal 454384/464147 (executing program) 2022/03/22 19:36:46 fetching corpus: 24692, signal 454626/464147 (executing program) 2022/03/22 19:36:46 fetching corpus: 24742, signal 454892/464147 (executing program) 2022/03/22 19:36:46 fetching corpus: 24792, signal 455158/464147 (executing program) 2022/03/22 19:36:46 fetching corpus: 24842, signal 455382/464147 (executing program) 2022/03/22 19:36:46 fetching corpus: 24892, signal 455603/464147 (executing program) 2022/03/22 19:36:46 fetching corpus: 24942, signal 455915/464147 (executing program) 2022/03/22 19:36:46 fetching corpus: 24992, signal 456135/464150 (executing program) 2022/03/22 19:36:46 fetching corpus: 25042, signal 456406/464150 (executing program) 2022/03/22 19:36:47 fetching corpus: 25092, signal 456647/464150 (executing program) 2022/03/22 19:36:47 fetching corpus: 25142, signal 456997/464151 (executing program) 2022/03/22 19:36:47 fetching corpus: 25192, signal 457235/464151 (executing program) 2022/03/22 19:36:47 fetching corpus: 25242, signal 457546/464151 (executing program) 2022/03/22 19:36:47 fetching corpus: 25292, signal 457967/464151 (executing program) 2022/03/22 19:36:47 fetching corpus: 25342, signal 458286/464151 (executing program) 2022/03/22 19:36:47 fetching corpus: 25392, signal 458539/464153 (executing program) 2022/03/22 19:36:47 fetching corpus: 25442, signal 458758/464153 (executing program) 2022/03/22 19:36:47 fetching corpus: 25492, signal 459033/464153 (executing program) 2022/03/22 19:36:47 fetching corpus: 25542, signal 459213/464161 (executing program) 2022/03/22 19:36:47 fetching corpus: 25592, signal 459465/464161 (executing program) 2022/03/22 19:36:47 fetching corpus: 25642, signal 459675/464161 (executing program) 2022/03/22 19:36:47 fetching corpus: 25692, signal 459913/464161 (executing program) 2022/03/22 19:36:48 fetching corpus: 25708, signal 460008/464161 (executing program) 2022/03/22 19:36:48 fetching corpus: 25708, signal 460008/464161 (executing program) 2022/03/22 19:36:49 starting 6 fuzzer processes 19:36:49 executing program 0: r0 = fsopen(&(0x7f0000002140)='virtiofs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 19:36:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) 19:36:49 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000440)='/sys/fs/bpf', 0x0, 0x0) openat$incfs(r0, &(0x7f0000000100)='.pending_reads\x00', 0x200000, 0x0) 19:36:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="d37aa90100000000140012800b0001006970766c616e00000400028008000500", @ANYRES32], 0x44}}, 0x0) 19:36:49 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1c, 0x0, &(0x7f0000000200)) 19:36:49 executing program 4: r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='source', &(0x7f0000000000)=':0,%-%\xf5\xcc\xd7\bf\xcd\n\xb9\xc7\x9d\xb2a\n\xd7\xef\xc5\x112i\x88\n\x13\n\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb|&,\xe9\xa3\'\x91>C\x1b\x15\x87\xeb\xfe\x1c\x9d\\C\xfeI\'\xae\x8fKHq\x89\x83\xbb\x9dC\xd6Hy\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc%://\x00\x00\x00\x00\x85^\x00\x0f\bu\x01\xab\x8c\x95?\x90\x8d_r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe4r\x93\xb3\xd3J \x06\x03\xae', 0xfeffffff00000000) [ 86.787347][ T3617] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.794483][ T3617] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.801735][ T3617] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.809173][ T3617] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.817185][ T3617] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.824380][ T3617] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.878756][ T3620] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.895709][ T3620] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.902832][ T3620] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.903063][ T3619] chnl_net:caif_netlink_parms(): no params data found [ 86.917028][ T3620] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.924260][ T3620] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.931704][ T3620] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.975668][ T3626] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.982663][ T3626] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 86.990123][ T3626] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 86.993099][ T3629] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.997972][ T3626] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 87.004590][ T3631] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.011586][ T3626] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 87.018710][ T3631] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.032587][ T3631] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 87.032739][ T3626] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 87.039784][ T3631] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.047320][ T3626] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 87.069957][ T3619] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.085205][ T3619] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.093077][ T3619] device bridge_slave_0 entered promiscuous mode [ 87.102384][ T3619] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.109895][ T3619] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.117542][ T3619] device bridge_slave_1 entered promiscuous mode [ 87.151996][ T3619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.163937][ T3619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.209130][ T3619] team0: Port device team_slave_0 added [ 87.217174][ T3619] team0: Port device team_slave_1 added [ 87.268573][ T3619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.275615][ T3619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.301767][ T3619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.332521][ T3619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.339505][ T3619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.365534][ T3619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.397365][ T3632] chnl_net:caif_netlink_parms(): no params data found [ 87.411711][ T3619] device hsr_slave_0 entered promiscuous mode [ 87.418861][ T3619] device hsr_slave_1 entered promiscuous mode [ 87.433218][ T3624] chnl_net:caif_netlink_parms(): no params data found [ 87.458360][ T3633] chnl_net:caif_netlink_parms(): no params data found [ 87.530550][ T3624] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.537802][ T3624] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.545671][ T3624] device bridge_slave_0 entered promiscuous mode [ 87.563802][ T3632] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.570965][ T3632] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.578560][ T3632] device bridge_slave_0 entered promiscuous mode [ 87.585937][ T3624] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.592996][ T3624] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.600692][ T3624] device bridge_slave_1 entered promiscuous mode [ 87.624540][ T3632] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.632316][ T3632] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.639913][ T3632] device bridge_slave_1 entered promiscuous mode [ 87.656157][ T3633] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.663226][ T3633] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.670986][ T3633] device bridge_slave_0 entered promiscuous mode [ 87.685794][ T3624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.695067][ T3633] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.702415][ T3633] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.710697][ T3633] device bridge_slave_1 entered promiscuous mode [ 87.725829][ T3632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.736357][ T3624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.752650][ T3632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.775897][ T3633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.805625][ T3624] team0: Port device team_slave_0 added [ 87.812368][ T3633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.827130][ T3632] team0: Port device team_slave_0 added [ 87.836441][ T3632] team0: Port device team_slave_1 added [ 87.842734][ T3624] team0: Port device team_slave_1 added [ 87.858120][ T3633] team0: Port device team_slave_0 added [ 87.884162][ T3633] team0: Port device team_slave_1 added [ 87.895899][ T3632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.902822][ T3632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.928929][ T3632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.940156][ T3624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.948074][ T3624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.974113][ T3624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.997656][ T3632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.004598][ T3632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.030855][ T3632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.041903][ T3624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.049070][ T3624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.075766][ T3624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.086878][ T3633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.093814][ T3633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.119788][ T3633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.130772][ T3619] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.139096][ T3619] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.148331][ T3619] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.157120][ T3633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.164048][ T3633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.190113][ T3633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.211291][ T3619] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.226913][ T3632] device hsr_slave_0 entered promiscuous mode [ 88.233479][ T3632] device hsr_slave_1 entered promiscuous mode [ 88.240206][ T3632] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.247989][ T3632] Cannot create hsr debugfs directory [ 88.269343][ T3624] device hsr_slave_0 entered promiscuous mode [ 88.276013][ T3624] device hsr_slave_1 entered promiscuous mode [ 88.282315][ T3624] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.290175][ T3624] Cannot create hsr debugfs directory [ 88.306110][ T3633] device hsr_slave_0 entered promiscuous mode [ 88.312612][ T3633] device hsr_slave_1 entered promiscuous mode [ 88.318944][ T3633] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.326689][ T3633] Cannot create hsr debugfs directory [ 88.485536][ T3619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.503457][ T3632] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.513041][ T3632] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.523955][ T3619] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.532826][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.540564][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.548451][ T3632] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.558781][ T3632] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.573855][ T3624] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.582986][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.591690][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.600205][ T141] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.607366][ T141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.620567][ T3624] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.645181][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.653038][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.661710][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.670222][ T21] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.677372][ T21] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.685013][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 88.693379][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 88.702591][ T3624] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.715529][ T3633] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 88.724636][ T3633] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 88.733702][ T3633] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 88.741881][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 88.751264][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 88.763518][ T3619] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 88.774117][ T3619] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.786390][ T3624] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.803312][ T3633] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 88.812850][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 88.820763][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 88.830627][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 88.839050][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 88.847345][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.855607][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 88.863688][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 88.865431][ T141] Bluetooth: hci0: command 0x0409 tx timeout [ 88.883420][ T3619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.899144][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 88.907052][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 88.914390][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.945310][ T5] Bluetooth: hci1: command 0x0409 tx timeout [ 88.946476][ T3617] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 88.961027][ T3632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.001075][ T3632] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.027760][ T47] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 89.053136][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.072614][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.092870][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.100616][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.107877][ T24] Bluetooth: hci4: command 0x0409 tx timeout [ 89.124199][ T3647] Bluetooth: hci5: command 0x0409 tx timeout [ 89.141285][ T3619] device veth0_vlan entered promiscuous mode [ 89.153856][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 89.162496][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.171366][ T3647] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.178457][ T3647] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.186162][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 89.194633][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.203169][ T3647] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.210254][ T3647] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.218126][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 89.227118][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 89.235805][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 89.243972][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.253465][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 89.261459][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.269222][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.281991][ T3624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.294655][ T3619] device veth1_vlan entered promiscuous mode [ 89.315302][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 89.323343][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 89.333376][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 89.342862][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 89.351622][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 89.360283][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 89.368791][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 89.377188][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.385629][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 89.393902][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.402336][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 89.416640][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 89.437931][ T3633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.453079][ T3619] device veth0_macvtap entered promiscuous mode [ 89.463423][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.472055][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.481164][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.490211][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.501062][ T3624] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.513978][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 89.523134][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 89.532753][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.542044][ T3652] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.549142][ T3652] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.560321][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 89.574561][ T3633] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.582785][ T3619] device veth1_macvtap entered promiscuous mode [ 89.601893][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 89.610807][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.618537][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.626877][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 89.635457][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.643823][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.650914][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.658821][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 89.676018][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.683515][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.699013][ T3632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.713713][ T3619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.736037][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 89.744516][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.754502][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.761590][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.769475][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 89.778162][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.786902][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.793986][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.801822][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.810371][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.819150][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 89.827923][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 89.837842][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 89.846575][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 89.855017][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 89.863652][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 89.872342][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 89.893268][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 89.902010][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.913652][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 89.921896][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.937682][ T3619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.948041][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 89.956418][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 89.964139][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 89.972088][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 89.980646][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 89.989173][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 89.997585][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.005904][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.014914][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.026830][ T3619] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.035866][ T3619] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.044559][ T3619] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.053405][ T3619] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.073806][ T3624] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 90.085972][ T3624] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.099462][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.107149][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 90.115761][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.123860][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 90.132162][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.140645][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 90.160475][ T3632] device veth0_vlan entered promiscuous mode [ 90.167199][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 90.176210][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 90.184520][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 90.192993][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 90.201359][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 90.208915][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 90.224577][ T3633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.238233][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 90.246518][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 90.257114][ T3632] device veth1_vlan entered promiscuous mode [ 90.269930][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 90.277930][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 90.286102][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 90.301828][ T3632] device veth0_macvtap entered promiscuous mode [ 90.312346][ T3624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.323339][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 90.331189][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 90.339553][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.347981][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 90.356596][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 90.365305][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 90.374849][ T3632] device veth1_macvtap entered promiscuous mode [ 90.411245][ T3632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 90.421946][ T3632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.433010][ T3632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.444775][ T3633] device veth0_vlan entered promiscuous mode [ 90.455671][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 90.463398][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.472975][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.481729][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 90.489974][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 90.503044][ T3632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 90.514874][ T3632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.525813][ T3632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.538775][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 90.546679][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 90.554146][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 90.563590][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 90.572380][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.581507][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.597587][ T10] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.598566][ T3624] device veth0_vlan entered promiscuous mode [ 90.609918][ T10] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.614661][ T3632] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.628374][ T3632] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.637445][ T3632] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.646881][ T3632] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.658173][ T3633] device veth1_vlan entered promiscuous mode [ 90.667873][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 90.676626][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 90.686526][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 90.697427][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.712294][ T3624] device veth1_vlan entered promiscuous mode [ 90.739800][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 90.748863][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 90.758479][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 90.767125][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 90.779764][ T10] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.788419][ T10] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.809210][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 90.819802][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.828222][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 90.837977][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.846445][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 90.854968][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.880332][ T3624] device veth0_macvtap entered promiscuous mode [ 90.889241][ T3624] device veth1_macvtap entered promiscuous mode [ 90.902219][ T3633] device veth0_macvtap entered promiscuous mode [ 90.906643][ T10] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.935384][ T3624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 90.947872][ T10] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.955514][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 90.957997][ T3624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.972671][ T3624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 90.983222][ T3624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.994118][ T3624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.003474][ T3624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 19:36:55 executing program 0: r0 = fsopen(&(0x7f0000002140)='virtiofs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) [ 91.035378][ T13] Bluetooth: hci1: command 0x041b tx timeout [ 91.044631][ T3624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.057065][ T3624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 91.068190][ T3624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 19:36:55 executing program 0: r0 = fsopen(&(0x7f0000002140)='virtiofs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) [ 91.079562][ T3624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.089122][ T3633] device veth1_macvtap entered promiscuous mode [ 91.100928][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 91.106032][ T7] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.110006][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 91.127267][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready 19:36:55 executing program 0: r0 = fsopen(&(0x7f0000002140)='virtiofs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 19:36:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000140)={0x0, {{0x2, 0x0, @loopback}}, {{0x2, 0x0, @loopback}}}, 0x104) [ 91.138521][ T7] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.147828][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 91.156310][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.172131][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 91.182345][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 91.195610][ T13] Bluetooth: hci5: command 0x041b tx timeout [ 91.197228][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.203476][ T13] Bluetooth: hci4: command 0x041b tx timeout [ 91.210485][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.224148][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.237378][ T3624] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.246201][ T3624] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.254866][ T3624] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.264596][ T3624] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 19:36:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000140)={0x0, {{0x2, 0x0, @loopback}}, {{0x2, 0x0, @loopback}}}, 0x104) [ 91.290852][ T3633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 91.307570][ T3633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.317673][ T3633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 91.328224][ T3633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 19:36:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000140)={0x0, {{0x2, 0x0, @loopback}}, {{0x2, 0x0, @loopback}}}, 0x104) [ 91.338340][ T3633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 91.349126][ T3633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.350211][ T3633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.371893][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 91.380514][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 91.406620][ T3633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 91.420510][ T3633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.431421][ T3633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 91.442687][ T3633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 19:36:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000140)={0x0, {{0x2, 0x0, @loopback}}, {{0x2, 0x0, @loopback}}}, 0x104) [ 91.452677][ T3633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 91.463997][ T3633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.474957][ T3633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.494010][ T3633] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.516604][ T3633] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.526260][ T3633] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.534960][ T3633] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.544818][ T3670] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 91.555999][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.564568][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.617891][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.636537][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.641957][ T10] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.652709][ T10] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.667522][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.676543][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.702569][ T7] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.727078][ T7] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.737648][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.751638][ T10] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.760025][ T10] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.768792][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 19:36:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) [ 93.025938][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 93.106629][ T13] Bluetooth: hci1: command 0x040f tx timeout [ 93.265573][ T13] Bluetooth: hci4: command 0x040f tx timeout [ 93.271622][ T13] Bluetooth: hci5: command 0x040f tx timeout [ 93.905184][ T47] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 94.145494][ T3617] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 95.105865][ T1779] Bluetooth: hci0: command 0x0419 tx timeout [ 95.185886][ T1779] Bluetooth: hci1: command 0x0419 tx timeout [ 95.345465][ T1779] Bluetooth: hci5: command 0x0419 tx timeout [ 95.351515][ T1779] Bluetooth: hci4: command 0x0419 tx timeout [ 96.161563][ T47] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 96.168902][ T47] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 96.176088][ T47] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 96.183552][ T47] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 96.190839][ T47] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 96.197957][ T47] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.255402][ T3682] chnl_net:caif_netlink_parms(): no params data found [ 96.293215][ T3682] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.300388][ T3682] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.308840][ T3682] device bridge_slave_0 entered promiscuous mode [ 96.316958][ T3682] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.324028][ T3682] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.332918][ T3682] device bridge_slave_1 entered promiscuous mode [ 96.349839][ T3682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.360371][ T3682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.377870][ T3682] team0: Port device team_slave_0 added [ 96.386998][ T3682] team0: Port device team_slave_1 added [ 96.410537][ T3682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.417532][ T3682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.445375][ T3682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.456722][ T3682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.463645][ T3682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.490764][ T3682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.512447][ T3682] device hsr_slave_0 entered promiscuous mode [ 96.518934][ T3682] device hsr_slave_1 entered promiscuous mode [ 96.525561][ T3682] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.533104][ T3682] Cannot create hsr debugfs directory [ 96.587582][ T3682] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.596350][ T3682] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.604488][ T3682] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.612907][ T3682] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.629103][ T3682] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.636195][ T3682] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.643460][ T3682] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.650544][ T3682] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.682746][ T3682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.695254][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.702932][ T141] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.711352][ T141] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.719666][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 96.730044][ T3682] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.739120][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 96.747609][ T141] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.754650][ T141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.764941][ T1779] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 96.774069][ T1779] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.781123][ T1779] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.799564][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 96.808283][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 96.821835][ T3682] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 96.832502][ T3682] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.844280][ T1779] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 96.852530][ T1779] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 96.860888][ T1779] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 96.869795][ T1779] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 96.883106][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 96.891272][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 96.902998][ T3682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.917059][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 96.933735][ T3682] device veth0_vlan entered promiscuous mode [ 96.940745][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 96.949326][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 96.957288][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 96.968705][ T3682] device veth1_vlan entered promiscuous mode [ 96.982532][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 96.990313][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 96.998684][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 97.010818][ T3682] device veth0_macvtap entered promiscuous mode [ 97.019117][ T3682] device veth1_macvtap entered promiscuous mode [ 97.033221][ T3682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 97.043923][ T3682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.053908][ T3682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 97.064729][ T3682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.074732][ T3682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 97.085214][ T3682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.095005][ T3682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 97.106212][ T3682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.117911][ T3682] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.127274][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 97.136609][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 97.145770][ T3682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 97.156354][ T3682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.166418][ T3682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 97.176986][ T3682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.187325][ T3682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 97.197963][ T3682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.208160][ T3682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 97.218714][ T3682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.231505][ T3682] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.240166][ T1779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 97.250293][ T3682] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.259189][ T3682] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.269060][ T3682] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.277992][ T3682] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.311982][ T2428] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.325313][ T2428] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.338742][ T1779] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 97.346793][ T7] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.354607][ T7] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 19:37:01 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000440)='/sys/fs/bpf', 0x0, 0x0) openat$incfs(r0, &(0x7f0000000100)='.pending_reads\x00', 0x200000, 0x0) 19:37:01 executing program 2: unshare(0x48000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xfffffffffffffff3, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f00003a2000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/1, 0x201000, 0x1000}, 0x20) pipe(0x0) 19:37:01 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0xef6f) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xf0f041}) [ 97.362322][ T1779] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 97.468508][ T3695] vivid-000: disconnect [ 97.472969][ T3691] vivid-000: reconnect [ 98.225630][ T1779] Bluetooth: hci2: command 0x0409 tx timeout [ 98.465274][ T3617] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 100.305285][ T3646] Bluetooth: hci2: command 0x041b tx timeout [ 100.707026][ T3616] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 100.714186][ T3616] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 100.721586][ T3616] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 100.729074][ T3616] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 100.736450][ T3616] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 100.744030][ T3616] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 100.799571][ T3699] chnl_net:caif_netlink_parms(): no params data found [ 100.829140][ T3699] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.837159][ T3699] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.844722][ T3699] device bridge_slave_0 entered promiscuous mode [ 100.852728][ T3699] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.860058][ T3699] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.867923][ T3699] device bridge_slave_1 entered promiscuous mode [ 100.884586][ T3699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.896130][ T3699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.913493][ T3699] team0: Port device team_slave_0 added [ 100.920349][ T3699] team0: Port device team_slave_1 added [ 100.933459][ T3699] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.941773][ T3699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.968219][ T3699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.979985][ T3699] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.987218][ T3699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.013554][ T3699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.035464][ T3699] device hsr_slave_0 entered promiscuous mode [ 101.041860][ T3699] device hsr_slave_1 entered promiscuous mode [ 101.049733][ T3699] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.057432][ T3699] Cannot create hsr debugfs directory [ 101.108793][ T3699] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 101.118890][ T3699] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 101.127349][ T3699] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 101.136066][ T3699] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 101.151116][ T3699] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.158212][ T3699] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.165561][ T3699] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.172612][ T3699] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.205924][ T3699] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.217350][ T1779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 101.225020][ T1779] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.233468][ T1779] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.241726][ T1779] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 101.252349][ T3699] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.261554][ T1779] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 101.269904][ T1779] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.276987][ T1779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.307378][ T3699] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 101.319143][ T3699] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 101.331269][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 101.340779][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.347862][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.357851][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 101.366161][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 101.374278][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 101.382834][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 101.393945][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 101.401944][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 101.414392][ T1779] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 101.423051][ T1779] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 101.433204][ T3699] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.446811][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 101.462085][ T1779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 101.470337][ T1779] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 101.478232][ T1779] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 101.488351][ T3699] device veth0_vlan entered promiscuous mode [ 101.498265][ T3699] device veth1_vlan entered promiscuous mode [ 101.513633][ T1779] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 101.521728][ T1779] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 101.530055][ T1779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 101.540728][ T3699] device veth0_macvtap entered promiscuous mode [ 101.550256][ T3699] device veth1_macvtap entered promiscuous mode [ 101.561704][ T3699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 101.573175][ T3699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.583063][ T3699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 101.594533][ T3699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.604644][ T3699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 101.616973][ T3699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.626962][ T3699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 101.637417][ T3699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.647305][ T3699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 101.657752][ T3699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.668882][ T3699] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.677322][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 101.686814][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 101.697117][ T3699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 101.707685][ T3699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.717893][ T3699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 101.728602][ T3699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.738551][ T3699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 101.749887][ T3699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.761082][ T3699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 101.771725][ T3699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.782780][ T3699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 101.793634][ T3699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.806315][ T3699] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.816102][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 101.826412][ T3699] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.835371][ T3699] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.844085][ T3699] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.852801][ T3699] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.887157][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.895000][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.907240][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 101.921885][ T7] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 19:37:06 executing program 4: r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='source', &(0x7f0000000000)=':0,%-%\xf5\xcc\xd7\bf\xcd\n\xb9\xc7\x9d\xb2a\n\xd7\xef\xc5\x112i\x88\n\x13\n\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb|&,\xe9\xa3\'\x91>C\x1b\x15\x87\xeb\xfe\x1c\x9d\\C\xfeI\'\xae\x8fKHq\x89\x83\xbb\x9dC\xd6Hy\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc%://\x00\x00\x00\x00\x85^\x00\x0f\bu\x01\xab\x8c\x95?\x90\x8d_r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe4r\x93\xb3\xd3J \x06\x03\xae', 0xfeffffff00000000) 19:37:06 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1c, 0x0, &(0x7f0000000200)) 19:37:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) 19:37:06 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000440)='/sys/fs/bpf', 0x0, 0x0) openat$incfs(r0, &(0x7f0000000100)='.pending_reads\x00', 0x200000, 0x0) 19:37:06 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0xef6f) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xf0f041}) 19:37:06 executing program 2: unshare(0x48000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xfffffffffffffff3, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f00003a2000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/1, 0x201000, 0x1000}, 0x20) pipe(0x0) [ 101.930416][ T7] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.938084][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 19:37:06 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1c, 0x0, &(0x7f0000000200)) 19:37:06 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000440)='/sys/fs/bpf', 0x0, 0x0) openat$incfs(r0, &(0x7f0000000100)='.pending_reads\x00', 0x200000, 0x0) 19:37:06 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0xef6f) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xf0f041}) 19:37:06 executing program 4: r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='source', &(0x7f0000000000)=':0,%-%\xf5\xcc\xd7\bf\xcd\n\xb9\xc7\x9d\xb2a\n\xd7\xef\xc5\x112i\x88\n\x13\n\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb|&,\xe9\xa3\'\x91>C\x1b\x15\x87\xeb\xfe\x1c\x9d\\C\xfeI\'\xae\x8fKHq\x89\x83\xbb\x9dC\xd6Hy\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc%://\x00\x00\x00\x00\x85^\x00\x0f\bu\x01\xab\x8c\x95?\x90\x8d_r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe4r\x93\xb3\xd3J \x06\x03\xae', 0xfeffffff00000000) 19:37:06 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1c, 0x0, &(0x7f0000000200)) [ 102.047483][ T3719] vivid-000: disconnect [ 102.059000][ T3708] vivid-000: reconnect 19:37:06 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0xef6f) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xf0f041}) 19:37:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) 19:37:06 executing program 4: r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='source', &(0x7f0000000000)=':0,%-%\xf5\xcc\xd7\bf\xcd\n\xb9\xc7\x9d\xb2a\n\xd7\xef\xc5\x112i\x88\n\x13\n\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb|&,\xe9\xa3\'\x91>C\x1b\x15\x87\xeb\xfe\x1c\x9d\\C\xfeI\'\xae\x8fKHq\x89\x83\xbb\x9dC\xd6Hy\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc%://\x00\x00\x00\x00\x85^\x00\x0f\bu\x01\xab\x8c\x95?\x90\x8d_r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe4r\x93\xb3\xd3J \x06\x03\xae', 0xfeffffff00000000) 19:37:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) 19:37:06 executing program 4: syz_usb_connect(0x0, 0x837, &(0x7f0000000540)=ANY=[@ANYBLOB="1201b04193824440a41b02008031010203010902"], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x5, &(0x7f0000000080)=@string={0x5, 0x3, "33fa63"}}, {0x2, &(0x7f0000000180)=@string={0x2}}]}) 19:37:06 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0xef6f) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xf0f041}) [ 102.202400][ T3736] vivid-002: disconnect [ 102.213813][ T3727] vivid-002: reconnect [ 102.220357][ T3739] vivid-000: disconnect [ 102.228835][ T3730] vivid-000: reconnect [ 102.382448][ T3745] vivid-002: disconnect [ 102.389026][ T3647] Bluetooth: hci2: command 0x040f tx timeout [ 102.398124][ T3742] vivid-002: reconnect 19:37:06 executing program 2: unshare(0x48000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xfffffffffffffff3, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f00003a2000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/1, 0x201000, 0x1000}, 0x20) pipe(0x0) 19:37:06 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0xef6f) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xf0f041}) 19:37:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) 19:37:07 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x79, 0x0, 0x0) 19:37:07 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0xef6f) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xf0f041}) [ 102.585224][ T3648] usb 5-1: new high-speed USB device number 2 using dummy_hcd 19:37:07 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x79, 0x0, 0x0) 19:37:07 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x79, 0x0, 0x0) 19:37:07 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x79, 0x0, 0x0) [ 102.681401][ T3760] vivid-000: disconnect [ 102.688259][ T3761] vivid-002: disconnect [ 102.692162][ T3747] vivid-000: reconnect [ 102.698896][ T3750] vivid-002: reconnect 19:37:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x1000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) 19:37:07 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000200), &(0x7f0000000280)=@v3, 0x18, 0x0) [ 102.785404][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 102.796579][ T3767] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 102.987572][ T3648] usb 5-1: unable to get BOS descriptor or descriptor too short [ 103.075319][ T3648] usb 5-1: config 0 has no interfaces? [ 103.235286][ T3648] usb 5-1: New USB device found, idVendor=1ba4, idProduct=0002, bcdDevice=31.80 [ 103.244411][ T3648] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.253551][ T3648] usb 5-1: Product: syz [ 103.258514][ T3648] usb 5-1: SerialNumber: syz [ 103.264687][ T3648] usb 5-1: config 0 descriptor?? [ 103.511180][ T3649] usb 5-1: USB disconnect, device number 2 19:37:08 executing program 4: openat$ptp0(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) 19:37:08 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000002940)=ANY=[@ANYBLOB="12010000d84bf120300927020000000000010902120001070000000904"], 0x0) 19:37:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) 19:37:08 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000200), &(0x7f0000000280)=@v3, 0x18, 0x0) 19:37:08 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r0, 0x114, 0xa, &(0x7f0000000180), 0x4) 19:37:08 executing program 2: unshare(0x48000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xfffffffffffffff3, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f00003a2000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/1, 0x201000, 0x1000}, 0x20) pipe(0x0) 19:37:08 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000200), &(0x7f0000000280)=@v3, 0x18, 0x0) 19:37:08 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r0, 0x114, 0xa, &(0x7f0000000180), 0x4) 19:37:08 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r7], 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r4, 0xc089}}, 0x20}}, 0x0) 19:37:08 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000200), &(0x7f0000000280)=@v3, 0x18, 0x0) 19:37:08 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r0, 0x114, 0xa, &(0x7f0000000180), 0x4) 19:37:08 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_getaddrlabel={0x74, 0x4a, 0x10, 0x70bd2b, 0x25dfdbff, {0xa, 0x0, 0x1, 0x0, 0x0, 0x10001}, [@IFAL_ADDRESS={0x14, 0x1, @private2}, @IFAL_ADDRESS={0x14, 0x1, @remote}, @IFAL_LABEL={0x8, 0x2, 0x1}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}, @IFAL_ADDRESS={0x14, 0x1, @remote}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000010}, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000001340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001300)={&(0x7f00000001c0)=@allocspi={0x1140, 0x16, 0x1, 0x70bd27, 0x25dfdbfd, {{{@in=@dev={0xac, 0x14, 0x14, 0x21}, @in=@broadcast, 0x4e21, 0x20, 0x4e21, 0x9, 0x2, 0x0, 0x0, 0x33, r1}, {@in=@dev, 0x0, 0x32}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0x7, 0x7fffffff, 0xff92, 0x536c, 0xffffffff, 0x400, 0x70, 0xc000000000000000}, {0x9, 0xdc, 0xcf, 0x8843}, {0x4, 0x3f, 0x3}, 0x70bd25, 0x0, 0x2, 0x3, 0x9, 0x2}, 0x2, 0x4}, [@algo_crypt={0x1048, 0x2, {{'ctr-serpent-avx\x00'}, 0x8000, "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"}}]}, 0x1140}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000001380), 0x4) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000013c0)) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000001400), 0x4) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001540)={&(0x7f0000001480)={0x84, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0x2b, 0xa8, @random="b00595e0a60fbbbb0bf7baa1a2fece64a32b1fcdaebb08f4f2b3c5059de247514cb394eb5f4ff7"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x84}, 0x1, 0x0, 0x0, 0x44}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000015c0)={0x10000, 0x6, 0x3}) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001700)={&(0x7f0000001640)={0xa0, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}]}, 0xa0}}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)=@ipv4_delrule={0x38, 0x21, 0x300, 0x70bd2b, 0x25dfdbfb, {0x2, 0x10, 0x10, 0x7, 0x0, 0x0, 0x0, 0x1, 0x10012}, [@FRA_FLOW={0x8, 0xb, 0xfff}, @FRA_SRC={0x8, 0x2, @rand_addr=0x64010102}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x33a21f18b48c390f) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000001880)='.pending_reads\x00', 0x105180, 0x100) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001980)={'ip6tnl0\x00', &(0x7f0000001900)={'ip6tnl0\x00', r1, 0x4, 0x7f, 0x1f, 0x9, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x8000, 0x8700, 0xece9, 0x2}}) sendmsg$nl_xfrm(r2, &(0x7f0000001bc0)={&(0x7f00000018c0), 0xc, &(0x7f0000001b80)={&(0x7f00000019c0)=@flushpolicy={0x194, 0x1d, 0x400, 0x70bd26, 0x25dfdbfe, "", [@offload={0xc, 0x1c, {0x0, 0x3}}, @sa={0xe4, 0x6, {{@in6=@mcast1, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e23, 0x800, 0x4e22, 0x1ff, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@mcast1, 0x4d2, 0x3c}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0xffffffffffffff32, 0x4, 0x81, 0x8, 0x8, 0x3, 0xb56c, 0x7}, {0x400, 0x6, 0x6, 0xa764}, {0x2, 0x5, 0x40}, 0x70bd29, 0x3506, 0xa, 0x2, 0x9, 0x87}}, @algo_crypt={0x4e, 0x2, {{'cbc-twofish-avx\x00'}, 0x30, "126628faa3e9"}}, @address_filter={0x28, 0x1a, {@in=@empty, @in6=@mcast1, 0x2, 0x27, 0x8}}, @lastused={0xc, 0xf, 0x2}, @XFRMA_IF_ID={0x8, 0x1f, r3}, @replay_thresh={0x8, 0xb, 0x3}]}, 0x194}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000001c00)='.log\x00', 0x0, 0x2933c2f1a0e3e482) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r4, &(0x7f0000001d80)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001c80)={0x84, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x1) syz_open_dev$loop(&(0x7f0000001dc0), 0xd, 0x4000) r5 = openat$incfs(r2, &(0x7f0000001e00)='.pending_reads\x00', 0x800, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000001e80), r4) sendmsg$DEVLINK_CMD_SB_GET(r5, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001f00)={&(0x7f0000001ec0)={0x38, r6, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000) [ 104.159522][ T3789] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 19:37:08 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, 0x5, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8041}, 0x800) [ 104.208056][ T3789] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 104.264989][ T3796] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 104.335427][ T1779] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 104.465284][ T141] Bluetooth: hci2: command 0x0419 tx timeout [ 104.595153][ T1779] usb 6-1: Using ep0 maxpacket: 32 [ 104.725253][ T1779] usb 6-1: New USB device found, idVendor=0930, idProduct=0227, bcdDevice= 0.00 [ 104.734376][ T1779] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.865292][ T141] Bluetooth: hci3: command 0x041b tx timeout [ 104.985965][ T1779] Bluetooth: Can't get state to change to load ram patch err [ 104.993364][ T1779] Bluetooth: Loading patch file failed [ 104.999274][ T1779] ath3k: probe of 6-1:7.0 failed with error -71 [ 105.012349][ T1779] usb 6-1: USB disconnect, device number 2 19:37:09 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r0, 0x114, 0xa, &(0x7f0000000180), 0x4) 19:37:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r7], 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r4, 0xc089}}, 0x20}}, 0x0) 19:37:09 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r7], 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r4, 0xc089}}, 0x20}}, 0x0) 19:37:09 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_getaddrlabel={0x74, 0x4a, 0x10, 0x70bd2b, 0x25dfdbff, {0xa, 0x0, 0x1, 0x0, 0x0, 0x10001}, [@IFAL_ADDRESS={0x14, 0x1, @private2}, @IFAL_ADDRESS={0x14, 0x1, @remote}, @IFAL_LABEL={0x8, 0x2, 0x1}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}, @IFAL_ADDRESS={0x14, 0x1, @remote}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000010}, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000001340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001300)={&(0x7f00000001c0)=@allocspi={0x1140, 0x16, 0x1, 0x70bd27, 0x25dfdbfd, {{{@in=@dev={0xac, 0x14, 0x14, 0x21}, @in=@broadcast, 0x4e21, 0x20, 0x4e21, 0x9, 0x2, 0x0, 0x0, 0x33, r1}, {@in=@dev, 0x0, 0x32}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0x7, 0x7fffffff, 0xff92, 0x536c, 0xffffffff, 0x400, 0x70, 0xc000000000000000}, {0x9, 0xdc, 0xcf, 0x8843}, {0x4, 0x3f, 0x3}, 0x70bd25, 0x0, 0x2, 0x3, 0x9, 0x2}, 0x2, 0x4}, [@algo_crypt={0x1048, 0x2, {{'ctr-serpent-avx\x00'}, 0x8000, "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"}}]}, 0x1140}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000001380), 0x4) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000013c0)) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000001400), 0x4) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001540)={&(0x7f0000001480)={0x84, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0x2b, 0xa8, @random="b00595e0a60fbbbb0bf7baa1a2fece64a32b1fcdaebb08f4f2b3c5059de247514cb394eb5f4ff7"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x84}, 0x1, 0x0, 0x0, 0x44}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000015c0)={0x10000, 0x6, 0x3}) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001700)={&(0x7f0000001640)={0xa0, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}]}, 0xa0}}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)=@ipv4_delrule={0x38, 0x21, 0x300, 0x70bd2b, 0x25dfdbfb, {0x2, 0x10, 0x10, 0x7, 0x0, 0x0, 0x0, 0x1, 0x10012}, [@FRA_FLOW={0x8, 0xb, 0xfff}, @FRA_SRC={0x8, 0x2, @rand_addr=0x64010102}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x33a21f18b48c390f) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000001880)='.pending_reads\x00', 0x105180, 0x100) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001980)={'ip6tnl0\x00', &(0x7f0000001900)={'ip6tnl0\x00', r1, 0x4, 0x7f, 0x1f, 0x9, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x8000, 0x8700, 0xece9, 0x2}}) sendmsg$nl_xfrm(r2, &(0x7f0000001bc0)={&(0x7f00000018c0), 0xc, &(0x7f0000001b80)={&(0x7f00000019c0)=@flushpolicy={0x194, 0x1d, 0x400, 0x70bd26, 0x25dfdbfe, "", [@offload={0xc, 0x1c, {0x0, 0x3}}, @sa={0xe4, 0x6, {{@in6=@mcast1, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e23, 0x800, 0x4e22, 0x1ff, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@mcast1, 0x4d2, 0x3c}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0xffffffffffffff32, 0x4, 0x81, 0x8, 0x8, 0x3, 0xb56c, 0x7}, {0x400, 0x6, 0x6, 0xa764}, {0x2, 0x5, 0x40}, 0x70bd29, 0x3506, 0xa, 0x2, 0x9, 0x87}}, @algo_crypt={0x4e, 0x2, {{'cbc-twofish-avx\x00'}, 0x30, "126628faa3e9"}}, @address_filter={0x28, 0x1a, {@in=@empty, @in6=@mcast1, 0x2, 0x27, 0x8}}, @lastused={0xc, 0xf, 0x2}, @XFRMA_IF_ID={0x8, 0x1f, r3}, @replay_thresh={0x8, 0xb, 0x3}]}, 0x194}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000001c00)='.log\x00', 0x0, 0x2933c2f1a0e3e482) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r4, &(0x7f0000001d80)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001c80)={0x84, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x1) syz_open_dev$loop(&(0x7f0000001dc0), 0xd, 0x4000) r5 = openat$incfs(r2, &(0x7f0000001e00)='.pending_reads\x00', 0x800, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000001e80), r4) sendmsg$DEVLINK_CMD_SB_GET(r5, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001f00)={&(0x7f0000001ec0)={0x38, r6, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000) 19:37:09 executing program 2: r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="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", 0xfc) 19:37:09 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000002940)=ANY=[@ANYBLOB="12010000d84bf120300927020000000000010902120001070000000904"], 0x0) 19:37:09 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000002c0), 0x0, 0x0) fremovexattr(r0, &(0x7f0000000000)=@known='system.posix_acl_access\x00') [ 105.514862][ T3803] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 105.521785][ T3809] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 105.538370][ T3806] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 19:37:09 executing program 2: r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="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", 0xfc) 19:37:09 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_getaddrlabel={0x74, 0x4a, 0x10, 0x70bd2b, 0x25dfdbff, {0xa, 0x0, 0x1, 0x0, 0x0, 0x10001}, [@IFAL_ADDRESS={0x14, 0x1, @private2}, @IFAL_ADDRESS={0x14, 0x1, @remote}, @IFAL_LABEL={0x8, 0x2, 0x1}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}, @IFAL_ADDRESS={0x14, 0x1, @remote}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000010}, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000001340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001300)={&(0x7f00000001c0)=@allocspi={0x1140, 0x16, 0x1, 0x70bd27, 0x25dfdbfd, {{{@in=@dev={0xac, 0x14, 0x14, 0x21}, @in=@broadcast, 0x4e21, 0x20, 0x4e21, 0x9, 0x2, 0x0, 0x0, 0x33, r1}, {@in=@dev, 0x0, 0x32}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0x7, 0x7fffffff, 0xff92, 0x536c, 0xffffffff, 0x400, 0x70, 0xc000000000000000}, {0x9, 0xdc, 0xcf, 0x8843}, {0x4, 0x3f, 0x3}, 0x70bd25, 0x0, 0x2, 0x3, 0x9, 0x2}, 0x2, 0x4}, [@algo_crypt={0x1048, 0x2, {{'ctr-serpent-avx\x00'}, 0x8000, "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"}}]}, 0x1140}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000001380), 0x4) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000013c0)) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000001400), 0x4) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001540)={&(0x7f0000001480)={0x84, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0x2b, 0xa8, @random="b00595e0a60fbbbb0bf7baa1a2fece64a32b1fcdaebb08f4f2b3c5059de247514cb394eb5f4ff7"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x84}, 0x1, 0x0, 0x0, 0x44}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000015c0)={0x10000, 0x6, 0x3}) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001700)={&(0x7f0000001640)={0xa0, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}]}, 0xa0}}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)=@ipv4_delrule={0x38, 0x21, 0x300, 0x70bd2b, 0x25dfdbfb, {0x2, 0x10, 0x10, 0x7, 0x0, 0x0, 0x0, 0x1, 0x10012}, [@FRA_FLOW={0x8, 0xb, 0xfff}, @FRA_SRC={0x8, 0x2, @rand_addr=0x64010102}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x33a21f18b48c390f) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000001880)='.pending_reads\x00', 0x105180, 0x100) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001980)={'ip6tnl0\x00', &(0x7f0000001900)={'ip6tnl0\x00', r1, 0x4, 0x7f, 0x1f, 0x9, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x8000, 0x8700, 0xece9, 0x2}}) sendmsg$nl_xfrm(r2, &(0x7f0000001bc0)={&(0x7f00000018c0), 0xc, &(0x7f0000001b80)={&(0x7f00000019c0)=@flushpolicy={0x194, 0x1d, 0x400, 0x70bd26, 0x25dfdbfe, "", [@offload={0xc, 0x1c, {0x0, 0x3}}, @sa={0xe4, 0x6, {{@in6=@mcast1, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e23, 0x800, 0x4e22, 0x1ff, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@mcast1, 0x4d2, 0x3c}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0xffffffffffffff32, 0x4, 0x81, 0x8, 0x8, 0x3, 0xb56c, 0x7}, {0x400, 0x6, 0x6, 0xa764}, {0x2, 0x5, 0x40}, 0x70bd29, 0x3506, 0xa, 0x2, 0x9, 0x87}}, @algo_crypt={0x4e, 0x2, {{'cbc-twofish-avx\x00'}, 0x30, "126628faa3e9"}}, @address_filter={0x28, 0x1a, {@in=@empty, @in6=@mcast1, 0x2, 0x27, 0x8}}, @lastused={0xc, 0xf, 0x2}, @XFRMA_IF_ID={0x8, 0x1f, r3}, @replay_thresh={0x8, 0xb, 0x3}]}, 0x194}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000001c00)='.log\x00', 0x0, 0x2933c2f1a0e3e482) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r4, &(0x7f0000001d80)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001c80)={0x84, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x1) syz_open_dev$loop(&(0x7f0000001dc0), 0xd, 0x4000) r5 = openat$incfs(r2, &(0x7f0000001e00)='.pending_reads\x00', 0x800, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000001e80), r4) sendmsg$DEVLINK_CMD_SB_GET(r5, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001f00)={&(0x7f0000001ec0)={0x38, r6, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000) [ 105.566844][ T3808] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 19:37:10 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000002c0), 0x0, 0x0) fremovexattr(r0, &(0x7f0000000000)=@known='system.posix_acl_access\x00') 19:37:10 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r7], 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r4, 0xc089}}, 0x20}}, 0x0) 19:37:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r7], 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r4, 0xc089}}, 0x20}}, 0x0) [ 105.630280][ T3816] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 105.632719][ T3817] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 19:37:10 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000002c0), 0x0, 0x0) fremovexattr(r0, &(0x7f0000000000)=@known='system.posix_acl_access\x00') 19:37:10 executing program 2: r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="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", 0xfc) 19:37:10 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000002c0), 0x0, 0x0) fremovexattr(r0, &(0x7f0000000000)=@known='system.posix_acl_access\x00') [ 105.715321][ T3822] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 105.744254][ T3825] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 19:37:10 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_getaddrlabel={0x74, 0x4a, 0x10, 0x70bd2b, 0x25dfdbff, {0xa, 0x0, 0x1, 0x0, 0x0, 0x10001}, [@IFAL_ADDRESS={0x14, 0x1, @private2}, @IFAL_ADDRESS={0x14, 0x1, @remote}, @IFAL_LABEL={0x8, 0x2, 0x1}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}, @IFAL_ADDRESS={0x14, 0x1, @remote}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000010}, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000001340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001300)={&(0x7f00000001c0)=@allocspi={0x1140, 0x16, 0x1, 0x70bd27, 0x25dfdbfd, {{{@in=@dev={0xac, 0x14, 0x14, 0x21}, @in=@broadcast, 0x4e21, 0x20, 0x4e21, 0x9, 0x2, 0x0, 0x0, 0x33, r1}, {@in=@dev, 0x0, 0x32}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0x7, 0x7fffffff, 0xff92, 0x536c, 0xffffffff, 0x400, 0x70, 0xc000000000000000}, {0x9, 0xdc, 0xcf, 0x8843}, {0x4, 0x3f, 0x3}, 0x70bd25, 0x0, 0x2, 0x3, 0x9, 0x2}, 0x2, 0x4}, [@algo_crypt={0x1048, 0x2, {{'ctr-serpent-avx\x00'}, 0x8000, "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"}}]}, 0x1140}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000001380), 0x4) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000013c0)) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000001400), 0x4) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001540)={&(0x7f0000001480)={0x84, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0x2b, 0xa8, @random="b00595e0a60fbbbb0bf7baa1a2fece64a32b1fcdaebb08f4f2b3c5059de247514cb394eb5f4ff7"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x84}, 0x1, 0x0, 0x0, 0x44}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000015c0)={0x10000, 0x6, 0x3}) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001700)={&(0x7f0000001640)={0xa0, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}]}, 0xa0}}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)=@ipv4_delrule={0x38, 0x21, 0x300, 0x70bd2b, 0x25dfdbfb, {0x2, 0x10, 0x10, 0x7, 0x0, 0x0, 0x0, 0x1, 0x10012}, [@FRA_FLOW={0x8, 0xb, 0xfff}, @FRA_SRC={0x8, 0x2, @rand_addr=0x64010102}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x33a21f18b48c390f) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000001880)='.pending_reads\x00', 0x105180, 0x100) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001980)={'ip6tnl0\x00', &(0x7f0000001900)={'ip6tnl0\x00', r1, 0x4, 0x7f, 0x1f, 0x9, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x8000, 0x8700, 0xece9, 0x2}}) sendmsg$nl_xfrm(r2, &(0x7f0000001bc0)={&(0x7f00000018c0), 0xc, &(0x7f0000001b80)={&(0x7f00000019c0)=@flushpolicy={0x194, 0x1d, 0x400, 0x70bd26, 0x25dfdbfe, "", [@offload={0xc, 0x1c, {0x0, 0x3}}, @sa={0xe4, 0x6, {{@in6=@mcast1, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e23, 0x800, 0x4e22, 0x1ff, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@mcast1, 0x4d2, 0x3c}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0xffffffffffffff32, 0x4, 0x81, 0x8, 0x8, 0x3, 0xb56c, 0x7}, {0x400, 0x6, 0x6, 0xa764}, {0x2, 0x5, 0x40}, 0x70bd29, 0x3506, 0xa, 0x2, 0x9, 0x87}}, @algo_crypt={0x4e, 0x2, {{'cbc-twofish-avx\x00'}, 0x30, "126628faa3e9"}}, @address_filter={0x28, 0x1a, {@in=@empty, @in6=@mcast1, 0x2, 0x27, 0x8}}, @lastused={0xc, 0xf, 0x2}, @XFRMA_IF_ID={0x8, 0x1f, r3}, @replay_thresh={0x8, 0xb, 0x3}]}, 0x194}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000001c00)='.log\x00', 0x0, 0x2933c2f1a0e3e482) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r4, &(0x7f0000001d80)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001c80)={0x84, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x1) syz_open_dev$loop(&(0x7f0000001dc0), 0xd, 0x4000) r5 = openat$incfs(r2, &(0x7f0000001e00)='.pending_reads\x00', 0x800, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000001e80), r4) sendmsg$DEVLINK_CMD_SB_GET(r5, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001f00)={&(0x7f0000001ec0)={0x38, r6, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000) [ 105.764623][ T3828] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 19:37:10 executing program 2: r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="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", 0xfc) [ 105.807747][ T3649] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 105.816103][ T3832] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 105.854343][ T3835] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 106.075199][ T3649] usb 6-1: Using ep0 maxpacket: 32 [ 106.195298][ T3649] usb 6-1: New USB device found, idVendor=0930, idProduct=0227, bcdDevice= 0.00 [ 106.204443][ T3649] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.475252][ T3649] Bluetooth: Can't get state to change to load ram patch err [ 106.482725][ T3649] Bluetooth: Loading patch file failed [ 106.488372][ T3649] ath3k: probe of 6-1:7.0 failed with error -71 [ 106.498213][ T3649] usb 6-1: USB disconnect, device number 3 19:37:11 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000002940)=ANY=[@ANYBLOB="12010000d84bf120300927020000000000010902120001070000000904"], 0x0) 19:37:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r7], 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r4, 0xc089}}, 0x20}}, 0x0) 19:37:11 executing program 2: openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) socket(0x848000000015, 0x805, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 19:37:11 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000001e00), &(0x7f0000001e40)=0x18) 19:37:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r7], 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r4, 0xc089}}, 0x20}}, 0x0) 19:37:11 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x78, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c}]}}}]}, 0x78}}, 0x0) [ 106.946912][ T141] Bluetooth: hci3: command 0x040f tx timeout 19:37:11 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000001e00), &(0x7f0000001e40)=0x18) 19:37:11 executing program 2: openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) socket(0x848000000015, 0x805, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 19:37:11 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x78, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c}]}}}]}, 0x78}}, 0x0) [ 107.015406][ T3844] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 19:37:11 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000001e00), &(0x7f0000001e40)=0x18) 19:37:11 executing program 2: openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) socket(0x848000000015, 0x805, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 19:37:11 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x78, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c}]}}}]}, 0x78}}, 0x0) [ 107.335234][ T141] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 107.615240][ T141] usb 6-1: Using ep0 maxpacket: 32 [ 107.736186][ T141] usb 6-1: New USB device found, idVendor=0930, idProduct=0227, bcdDevice= 0.00 [ 107.746494][ T141] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.025204][ T141] Bluetooth: Can't get state to change to load ram patch err [ 108.032595][ T141] Bluetooth: Loading patch file failed [ 108.038202][ T141] ath3k: probe of 6-1:7.0 failed with error -71 [ 108.051694][ T141] usb 6-1: USB disconnect, device number 4 19:37:12 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000002940)=ANY=[@ANYBLOB="12010000d84bf120300927020000000000010902120001070000000904"], 0x0) 19:37:12 executing program 1: ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000100)="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") r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250500000000000019090902241700fa0074980904e4ff11070103000905010200ffe00000090582"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(r0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) dup2(r2, r1) 19:37:12 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000f70d1810d804300a4fac0000000109021b0001000000000904000001a06647000905810220"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_ep_write(r1, 0x0, 0x39, &(0x7f0000001480)="b939d1132d020000000000000042ceaa5407a1916ab6387f6963e8be9acf32077278f9104d2ce3314d5d45de6ced73babff66084832ef05f31") 19:37:12 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x78, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c}]}}}]}, 0x78}}, 0x0) 19:37:12 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000001e00), &(0x7f0000001e40)=0x18) 19:37:12 executing program 2: openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) socket(0x848000000015, 0x805, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 19:37:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x29, 0x8, 0x24, 0xfffffffc, 0xa, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x100, 0x80, 0x8, 0x6}}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000000c0)={@private1, 0xf, r1}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000100)={0x2, 'gretap0\x00', {0x5}, 0x101}) unshare(0x48000400) socket$inet_udplite(0x2, 0x2, 0x88) 19:37:13 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x1, 0x1c8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x218) 19:37:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x4, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x0]}]}]}]}, 0x2c}}, 0x0) 19:37:13 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x1, 0x1c8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x218) 19:37:13 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x1, 0x1c8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x218) 19:37:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x4, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x0]}]}]}]}, 0x2c}}, 0x0) [ 108.825265][ T3649] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 108.835210][ T3646] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 108.855302][ T3647] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 109.025349][ T3648] Bluetooth: hci3: command 0x0419 tx timeout [ 109.066285][ T3649] usb 5-1: Using ep0 maxpacket: 16 [ 109.075209][ T3646] usb 2-1: Using ep0 maxpacket: 8 [ 109.095220][ T3647] usb 6-1: Using ep0 maxpacket: 32 [ 109.115370][ T3646] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 109.185238][ T3649] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 109.195406][ T3646] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 109.203654][ T3646] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 109.212195][ T3649] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ac.4f [ 109.221478][ T3647] usb 6-1: New USB device found, idVendor=0930, idProduct=0227, bcdDevice= 0.00 [ 109.230750][ T3649] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.238807][ T3646] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 109.247883][ T3647] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.257431][ T3649] usb 5-1: config 0 descriptor?? [ 109.262456][ T3646] usb 2-1: config 250 has no interface number 0 [ 109.270443][ T3646] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 109.282163][ T3646] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 109.282758][ T3867] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 109.293281][ T3646] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 57398, setting to 1024 [ 109.313286][ T3646] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 109.324682][ T3646] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 109.338391][ T3646] usb 2-1: config 250 interface 228 has no altsetting 0 [ 109.359164][ T3649] mcba_usb 5-1:0.0 can0: failed tx_urb -2 [ 109.364937][ T3649] mcba_usb 5-1:0.0 can0: Failed to send cmd (169) [ 109.371619][ T3649] mcba_usb 5-1:0.0 can0: failed tx_urb -2 [ 109.378004][ T3649] mcba_usb 5-1:0.0 can0: Failed to send cmd (169) [ 109.384441][ T3649] mcba_usb 5-1:0.0: Microchip CAN BUS Analyzer connected [ 109.426106][ T3646] usb 2-1: config index 1 descriptor too short (expected 5924, got 36) [ 109.434387][ T3646] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 109.455184][ T3646] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 109.464257][ T3646] usb 2-1: config 250 has no interface number 0 [ 109.476140][ T3646] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 109.488168][ T3646] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 109.499234][ T3646] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 57398, setting to 1024 [ 109.511198][ T3646] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 109.524109][ T3646] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 109.539333][ T3647] Bluetooth: Can't get state to change to load ram patch err [ 109.552387][ T3647] Bluetooth: Loading patch file failed [ 109.561196][ T3647] ath3k: probe of 6-1:7.0 failed with error -71 [ 109.568314][ T3646] usb 2-1: config 250 interface 228 has no altsetting 0 [ 109.576690][ T3647] usb 6-1: USB disconnect, device number 5 [ 109.599480][ T13] usb 5-1: USB disconnect, device number 3 [ 109.617560][ T13] mcba_usb 5-1:0.0 can0: device disconnected [ 109.676787][ T3646] usb 2-1: config index 2 descriptor too short (expected 5924, got 36) [ 109.705839][ T3646] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 109.714333][ T3646] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 109.745995][ T3646] usb 2-1: config 250 has no interface number 0 [ 109.752293][ T3646] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 109.767132][ T3646] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 109.777829][ T3646] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 57398, setting to 1024 [ 109.803419][ T3646] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 109.816321][ T3646] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 109.831698][ T3646] usb 2-1: config 250 interface 228 has no altsetting 0 [ 109.915785][ T3646] usb 2-1: config index 3 descriptor too short (expected 5924, got 36) [ 109.926095][ T3646] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 109.934656][ T3646] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 109.946916][ T3646] usb 2-1: config 250 has no interface number 0 [ 109.953310][ T3646] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 109.965602][ T3646] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 109.976449][ T3646] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 57398, setting to 1024 [ 109.988481][ T3646] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 109.999989][ T3646] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 110.014409][ T3646] usb 2-1: config 250 interface 228 has no altsetting 0 19:37:14 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x1, 0x1c8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x218) [ 110.095299][ T3646] usb 2-1: config index 4 descriptor too short (expected 5924, got 36) [ 110.109164][ T3646] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 110.132809][ T3646] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 110.142315][ T3646] usb 2-1: config 250 has no interface number 0 [ 110.148984][ T13] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 110.159079][ T3646] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 110.171436][ T3646] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 110.182265][ T3646] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 57398, setting to 1024 [ 110.194333][ T3646] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 110.204918][ T3646] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 110.218925][ T3646] usb 2-1: config 250 interface 228 has no altsetting 0 [ 110.306367][ T3646] usb 2-1: config index 5 descriptor too short (expected 5924, got 36) [ 110.315017][ T3646] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 110.323766][ T3646] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 110.332855][ T3646] usb 2-1: config 250 has no interface number 0 [ 110.339224][ T3646] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 110.350805][ T3646] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 110.361252][ T3646] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 57398, setting to 1024 [ 110.372970][ T3646] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 110.383522][ T3646] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 110.397179][ T3646] usb 2-1: config 250 interface 228 has no altsetting 0 [ 110.475277][ T3646] usb 2-1: config index 6 descriptor too short (expected 5924, got 36) [ 110.483668][ T3646] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 110.493437][ T3646] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 110.502604][ T3646] usb 2-1: config 250 has no interface number 0 [ 110.510158][ T3646] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 110.522264][ T3646] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 110.532841][ T3646] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 57398, setting to 1024 [ 110.544652][ T3646] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 110.556185][ T13] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ac.4f [ 110.566479][ T3646] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 110.580126][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.590185][ T13] usb 5-1: config 0 descriptor?? [ 110.595292][ T3646] usb 2-1: config 250 interface 228 has no altsetting 0 [ 110.637867][ T13] mcba_usb 5-1:0.0 can0: failed tx_urb -2 [ 110.643625][ T13] mcba_usb 5-1:0.0 can0: Failed to send cmd (169) [ 110.651464][ T13] mcba_usb 5-1:0.0 can0: failed tx_urb -2 [ 110.657270][ T13] mcba_usb 5-1:0.0 can0: Failed to send cmd (169) [ 110.663704][ T13] mcba_usb 5-1:0.0: Microchip CAN BUS Analyzer connected [ 110.687119][ T3646] usb 2-1: config index 7 descriptor too short (expected 5924, got 36) [ 110.698827][ T3646] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 110.712205][ T3646] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 110.722534][ T3646] usb 2-1: config 250 has no interface number 0 [ 110.731632][ T3646] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 110.743464][ T3646] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 110.756288][ T3646] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 57398, setting to 1024 [ 110.768900][ T3646] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 110.781222][ T3646] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 110.798412][ T3646] usb 2-1: config 250 interface 228 has no altsetting 0 [ 110.855132][ C0] mcba_usb 5-1:0.0 can0: Unsupported msg (0xB9) [ 110.861594][ C0] mcba_usb 5-1:0.0 can0: Unsupported msg (0x91) [ 110.885384][ T3646] usb 2-1: New USB device found, idVendor=0525, idProduct=0000, bcdDevice= 0.00 [ 110.894450][ T3646] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=25 [ 110.903523][ T3646] usb 2-1: SerialNumber: syz [ 110.925403][ T3869] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 110.932283][ T3869] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 110.944135][ T3176] mcba_usb 5-1:0.0 can0: bit-timing not yet defined [ 110.946416][ T3646] hub 2-1:250.228: bad descriptor, ignoring hub [ 110.957152][ T3646] hub: probe of 2-1:250.228 failed with error -5 [ 111.043490][ T21] usb 5-1: USB disconnect, device number 4 [ 111.056548][ T21] mcba_usb 5-1:0.0 can0: device disconnected [ 111.157161][ T3646] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 2 if 228 alt 255 proto 3 vid 0x0525 pid 0x0000 [ 111.505155][ C1] usblp0: nonzero read bulk status received: -71 [ 111.624289][ T13] usb 2-1: USB disconnect, device number 2 [ 111.825316][ T3869] usblp0: removed 19:37:16 executing program 1: ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000100)="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") r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250500000000000019090902241700fa0074980904e4ff11070103000905010200ffe00000090582"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(r0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) dup2(r2, r1) 19:37:16 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x29, 0x8, 0x24, 0xfffffffc, 0xa, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x100, 0x80, 0x8, 0x6}}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000000c0)={@private1, 0xf, r1}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000100)={0x2, 'gretap0\x00', {0x5}, 0x101}) unshare(0x48000400) socket$inet_udplite(0x2, 0x2, 0x88) 19:37:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x4, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x0]}]}]}]}, 0x2c}}, 0x0) 19:37:16 executing program 5: sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f0000002140)={0x14}, 0x14}}, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x7, &(0x7f0000000040), 0xffa1) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0xbf14b0) 19:37:16 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f0000000080)={'veth0_to_batadv\x00', &(0x7f0000000000)=@ethtool_dump={0x0, 0xf}}) 19:37:16 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000f70d1810d804300a4fac0000000109021b0001000000000904000001a06647000905810220"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_ep_write(r1, 0x0, 0x39, &(0x7f0000001480)="b939d1132d020000000000000042ceaa5407a1916ab6387f6963e8be9acf32077278f9104d2ce3314d5d45de6ced73babff66084832ef05f31") 19:37:16 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f0000000080)={'veth0_to_batadv\x00', &(0x7f0000000000)=@ethtool_dump={0x0, 0xf}}) 19:37:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x4, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x0]}]}]}]}, 0x2c}}, 0x0) 19:37:16 executing program 2: ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000100)="45cb5dd83985c4ec9fc7b8f4e1cc8ee16ad26b73600d9a3f1fb4204917c0d235a0f85362bddf84a7ebf4a4fa9a7bc54d480a9c0e84e30b1ced98feea665e5684501587bbd377c4a5712449e49a11b49422b532912465c1f48ccaea30eca12f0254471e652c055feff8274dc65c9d14468c41d47a5a830ef82c9be3e571d71a8ee20aeca5accbc78e0147c6ef9a49bf2863933f24b130e16ab1bae27b925577b8323f4fbda4c17909e6392ee9d754c3fd2a69aba138c7eed89eff61e90efdca3bf3903de39ae1908ec20de91393358d49c2f782aa58cb0574a52d02440e6c1e28938aadc68fdac6e876717f9cc981c3be8636e0fb42961b81a981dc7b539057ba") r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250500000000000019090902241700fa0074980904e4ff11070103000905010200ffe00000090582"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(r0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) dup2(r2, r1) 19:37:16 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f0000000080)={'veth0_to_batadv\x00', &(0x7f0000000000)=@ethtool_dump={0x0, 0xf}}) 19:37:16 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x29, 0x8, 0x24, 0xfffffffc, 0xa, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x100, 0x80, 0x8, 0x6}}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000000c0)={@private1, 0xf, r1}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000100)={0x2, 'gretap0\x00', {0x5}, 0x101}) unshare(0x48000400) socket$inet_udplite(0x2, 0x2, 0x88) 19:37:16 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f0000000080)={'veth0_to_batadv\x00', &(0x7f0000000000)=@ethtool_dump={0x0, 0xf}}) [ 112.625468][ T3648] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 112.645262][ T141] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 112.805188][ T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 112.905228][ T141] usb 2-1: Using ep0 maxpacket: 8 [ 112.910327][ T3648] usb 5-1: Using ep0 maxpacket: 16 [ 112.946903][ T141] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 113.037954][ T141] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 113.046378][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 113.051631][ T141] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 113.062527][ T3648] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 113.072586][ T141] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 113.082408][ T3648] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ac.4f [ 113.091691][ T24] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 113.099476][ T141] usb 2-1: config 250 has no interface number 0 [ 113.106225][ T3648] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.114691][ T141] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 113.127237][ T3648] usb 5-1: config 0 descriptor?? [ 113.132330][ T141] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 113.143073][ T141] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 57398, setting to 1024 [ 113.155004][ T3976] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 113.155115][ T141] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 113.176584][ T3648] mcba_usb 5-1:0.0 can0: failed tx_urb -2 [ 113.183078][ T3648] mcba_usb 5-1:0.0 can0: Failed to send cmd (169) [ 113.190215][ T24] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 113.201073][ T3648] mcba_usb 5-1:0.0 can0: failed tx_urb -2 [ 113.207088][ T141] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 113.222955][ T24] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 113.231729][ T3648] mcba_usb 5-1:0.0 can0: Failed to send cmd (169) [ 113.240465][ T24] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 113.249720][ T3648] mcba_usb 5-1:0.0: Microchip CAN BUS Analyzer connected [ 113.259601][ T141] usb 2-1: config 250 interface 228 has no altsetting 0 [ 113.267820][ T24] usb 3-1: config 250 has no interface number 0 [ 113.274114][ T24] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 113.287988][ T24] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 113.298778][ T24] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 57398, setting to 1024 [ 113.310805][ T24] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 113.321634][ T24] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 113.354323][ T24] usb 3-1: config 250 interface 228 has no altsetting 0 [ 113.385370][ T141] usb 2-1: config index 1 descriptor too short (expected 5924, got 36) [ 113.393657][ T141] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 113.407452][ T141] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 113.416854][ T141] usb 2-1: config 250 has no interface number 0 [ 113.423149][ T141] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 113.435257][ T3646] usb 5-1: USB disconnect, device number 5 [ 113.442742][ T3646] mcba_usb 5-1:0.0 can0: device disconnected [ 113.451077][ T141] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 113.461886][ T24] usb 3-1: config index 1 descriptor too short (expected 5924, got 36) [ 113.476778][ T24] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 113.490264][ T141] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 57398, setting to 1024 [ 113.502293][ T24] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 113.514558][ T141] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 113.527593][ T24] usb 3-1: config 250 has no interface number 0 [ 113.533872][ T24] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 113.547580][ T141] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 113.561237][ T24] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 113.573843][ T141] usb 2-1: config 250 interface 228 has no altsetting 0 [ 113.581053][ T24] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 57398, setting to 1024 [ 113.595964][ T24] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 113.607975][ T24] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 113.623223][ T24] usb 3-1: config 250 interface 228 has no altsetting 0 [ 113.707187][ T141] usb 2-1: config index 2 descriptor too short (expected 5924, got 36) [ 113.716242][ T141] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 113.724806][ T141] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 113.734909][ T24] usb 3-1: config index 2 descriptor too short (expected 5924, got 36) [ 113.743481][ T141] usb 2-1: config 250 has no interface number 0 [ 113.750451][ T24] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 113.760790][ T141] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 113.773019][ T24] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 113.784150][ T141] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 113.796326][ T24] usb 3-1: config 250 has no interface number 0 [ 113.802723][ T24] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 113.816484][ T141] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 57398, setting to 1024 [ 113.828758][ T24] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 113.841228][ T141] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 113.852585][ T24] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 57398, setting to 1024 [ 113.866712][ T141] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 113.880785][ T24] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 113.893436][ T141] usb 2-1: config 250 interface 228 has no altsetting 0 [ 113.902113][ T24] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 113.919498][ T24] usb 3-1: config 250 interface 228 has no altsetting 0 [ 114.015374][ T24] usb 3-1: config index 3 descriptor too short (expected 5924, got 36) [ 114.023716][ T141] usb 2-1: config index 3 descriptor too short (expected 5924, got 36) [ 114.032029][ T141] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 114.041343][ T24] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 114.045276][ T3646] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 114.050104][ T24] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 114.066407][ T141] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 114.075488][ T141] usb 2-1: config 250 has no interface number 0 [ 114.081844][ T141] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 114.093539][ T24] usb 3-1: config 250 has no interface number 0 [ 114.100156][ T24] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 114.111909][ T141] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 114.122353][ T24] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 114.132796][ T141] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 57398, setting to 1024 [ 114.144468][ T24] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 57398, setting to 1024 [ 114.156146][ T141] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 114.166677][ T24] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 114.177226][ T141] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 114.190727][ T24] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 114.204737][ T141] usb 2-1: config 250 interface 228 has no altsetting 0 [ 114.211782][ T24] usb 3-1: config 250 interface 228 has no altsetting 0 [ 114.315244][ T24] usb 3-1: config index 4 descriptor too short (expected 5924, got 36) [ 114.323526][ T24] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 114.332111][ T141] usb 2-1: config index 4 descriptor too short (expected 5924, got 36) [ 114.342349][ T141] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 114.350919][ T141] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 114.360140][ T24] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 114.369293][ T24] usb 3-1: config 250 has no interface number 0 [ 114.375638][ T141] usb 2-1: config 250 has no interface number 0 [ 114.381986][ T24] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 114.394672][ T141] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 114.406676][ T141] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 114.417064][ T3646] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ac.4f [ 114.417244][ T24] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 114.430598][ T3646] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.436623][ T141] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 57398, setting to 1024 [ 114.436669][ T141] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 114.466958][ T24] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 57398, setting to 1024 [ 114.474598][ T3646] usb 5-1: config 0 descriptor?? [ 114.478729][ T24] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 114.494338][ T141] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 114.510536][ T24] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 114.524326][ T141] usb 2-1: config 250 interface 228 has no altsetting 0 [ 114.528293][ T3646] mcba_usb 5-1:0.0 can0: failed tx_urb -2 [ 114.533510][ T24] usb 3-1: config 250 interface 228 has no altsetting 0 [ 114.546414][ T3646] mcba_usb 5-1:0.0 can0: Failed to send cmd (169) [ 114.552901][ T3646] mcba_usb 5-1:0.0 can0: failed tx_urb -2 [ 114.558742][ T3646] mcba_usb 5-1:0.0 can0: Failed to send cmd (169) [ 114.565635][ T3646] mcba_usb 5-1:0.0: Microchip CAN BUS Analyzer connected [ 114.617611][ T141] usb 2-1: config index 5 descriptor too short (expected 5924, got 36) [ 114.625949][ T24] usb 3-1: config index 5 descriptor too short (expected 5924, got 36) [ 114.634212][ T24] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 114.645949][ T141] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 114.654544][ T24] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 114.664951][ T141] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 114.674416][ T24] usb 3-1: config 250 has no interface number 0 [ 114.683050][ T141] usb 2-1: config 250 has no interface number 0 [ 114.689599][ T141] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 114.703545][ T24] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 114.718868][ T141] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 114.729570][ T24] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 114.742388][ T141] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 57398, setting to 1024 [ 114.754429][ T24] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 57398, setting to 1024 [ 114.768473][ T141] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 114.779354][ T24] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 114.785224][ C0] mcba_usb 5-1:0.0 can0: Unsupported msg (0xB9) [ 114.792279][ T141] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 114.796105][ C0] mcba_usb 5-1:0.0 can0: Unsupported msg (0x91) [ 114.817716][ T24] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 114.831787][ T24] usb 3-1: config 250 interface 228 has no altsetting 0 [ 114.839163][ T141] usb 2-1: config 250 interface 228 has no altsetting 0 [ 114.884445][ T3176] mcba_usb 5-1:0.0 can0: bit-timing not yet defined [ 114.925301][ T24] usb 3-1: config index 6 descriptor too short (expected 5924, got 36) [ 114.933572][ T24] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 114.942104][ T24] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 114.952256][ T141] usb 2-1: config index 6 descriptor too short (expected 5924, got 36) [ 114.960610][ T24] usb 3-1: config 250 has no interface number 0 [ 114.966919][ T141] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 114.975414][ T24] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 114.988401][ T141] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 114.997538][ T24] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 115.008055][ T141] usb 2-1: config 250 has no interface number 0 [ 115.014343][ T141] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 115.026431][ T24] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 57398, setting to 1024 [ 115.038187][ T141] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 115.048763][ T24] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 115.059427][ T141] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 57398, setting to 1024 [ 115.071140][ T24] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 115.085611][ T141] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 115.096320][ T24] usb 3-1: config 250 interface 228 has no altsetting 0 [ 115.103351][ T141] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 115.116913][ T141] usb 2-1: config 250 interface 228 has no altsetting 0 [ 115.125900][ T3648] usb 5-1: USB disconnect, device number 6 [ 115.131966][ T3648] mcba_usb 5-1:0.0 can0: device disconnected [ 115.177003][ T24] usb 3-1: config index 7 descriptor too short (expected 5924, got 36) [ 115.194362][ T24] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 115.203375][ T141] usb 2-1: config index 7 descriptor too short (expected 5924, got 36) [ 115.212375][ T24] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 115.221814][ T141] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 115.231300][ T24] usb 3-1: config 250 has no interface number 0 [ 115.238506][ T141] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 115.248070][ T24] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 115.259943][ T141] usb 2-1: config 250 has no interface number 0 [ 115.266501][ T141] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 115.278589][ T24] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 115.289429][ T24] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 57398, setting to 1024 [ 115.301385][ T141] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 115.312163][ T141] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 57398, setting to 1024 [ 115.324129][ T24] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 115.335632][ T24] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 115.349556][ T141] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 115.362873][ T141] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 19:37:19 executing program 1: ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000100)="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") r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250500000000000019090902241700fa0074980904e4ff11070103000905010200ffe00000090582"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(r0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) dup2(r2, r1) 19:37:19 executing program 0: mq_open(&(0x7f0000000300)=':\\\x00', 0x40, 0x0, &(0x7f0000000340)={0xfff, 0xffffffff, 0xfe, 0xffffffffffffff8f}) 19:37:19 executing program 5: sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f0000002140)={0x14}, 0x14}}, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x7, &(0x7f0000000040), 0xffa1) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0xbf14b0) 19:37:19 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x29, 0x8, 0x24, 0xfffffffc, 0xa, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x100, 0x80, 0x8, 0x6}}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000000c0)={@private1, 0xf, r1}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000100)={0x2, 'gretap0\x00', {0x5}, 0x101}) unshare(0x48000400) socket$inet_udplite(0x2, 0x2, 0x88) 19:37:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET={0x20, 0x2, 0x0, 0x1, {0x1c, 0x1, 0x0, 0x1, [{0x5}, {0x8}, {0x8}]}}]}, @IFLA_GROUP={0x8}]}, 0x4c}}, 0x0) [ 115.386564][ T24] usb 3-1: config 250 interface 228 has no altsetting 0 [ 115.393911][ T141] usb 2-1: config 250 interface 228 has no altsetting 0 [ 115.475587][ T141] usb 2-1: string descriptor 0 read error: -71 [ 115.481989][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=0000, bcdDevice= 0.00 [ 115.492381][ T141] usb 2-1: New USB device found, idVendor=0525, idProduct=0000, bcdDevice= 0.00 [ 115.512534][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=25 [ 115.557392][ T141] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=25 [ 115.568982][ T24] usb 3-1: SerialNumber: syz 19:37:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET={0x20, 0x2, 0x0, 0x1, {0x1c, 0x1, 0x0, 0x1, [{0x5}, {0x8}, {0x8}]}}]}, @IFLA_GROUP={0x8}]}, 0x4c}}, 0x0) 19:37:20 executing program 2: ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000100)="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") r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250500000000000019090902241700fa0074980904e4ff11070103000905010200ffe00000090582"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(r0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) dup2(r2, r1) 19:37:20 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000f70d1810d804300a4fac0000000109021b0001000000000904000001a06647000905810220"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_ep_write(r1, 0x0, 0x39, &(0x7f0000001480)="b939d1132d020000000000000042ceaa5407a1916ab6387f6963e8be9acf32077278f9104d2ce3314d5d45de6ced73babff66084832ef05f31") 19:37:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET={0x20, 0x2, 0x0, 0x1, {0x1c, 0x1, 0x0, 0x1, [{0x5}, {0x8}, {0x8}]}}]}, @IFLA_GROUP={0x8}]}, 0x4c}}, 0x0) [ 115.605304][ T141] usb 2-1: can't set config #250, error -71 [ 115.611629][ T24] usb 3-1: can't set config #250, error -71 [ 115.639440][ T24] usb 3-1: USB disconnect, device number 2 [ 115.647887][ T141] usb 2-1: USB disconnect, device number 3 19:37:20 executing program 3: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f00004bb000/0x1000)=nil) shmat(r0, &(0x7f00004da000/0x3000)=nil, 0x7000) 19:37:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET={0x20, 0x2, 0x0, 0x1, {0x1c, 0x1, 0x0, 0x1, [{0x5}, {0x8}, {0x8}]}}]}, @IFLA_GROUP={0x8}]}, 0x4c}}, 0x0) 19:37:20 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_io_uring_setup(0x6772, &(0x7f0000001300), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x90e, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x39000, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000180)=0xeb1b) syz_open_dev$video(0x0, 0x0, 0x0) [ 115.925232][ T13] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 116.065231][ T141] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 116.072792][ T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 116.165246][ T13] usb 5-1: Using ep0 maxpacket: 16 [ 116.285270][ T13] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 116.297795][ T13] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ac.4f [ 116.307490][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.319173][ T13] usb 5-1: config 0 descriptor?? [ 116.337665][ T4093] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 116.345137][ T141] usb 2-1: Using ep0 maxpacket: 8 [ 116.350267][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 116.362315][ T13] mcba_usb 5-1:0.0 can0: failed tx_urb -2 [ 116.368419][ T13] mcba_usb 5-1:0.0 can0: Failed to send cmd (169) [ 116.375011][ T13] mcba_usb 5-1:0.0 can0: failed tx_urb -2 [ 116.383900][ T13] mcba_usb 5-1:0.0 can0: Failed to send cmd (169) [ 116.391732][ T13] mcba_usb 5-1:0.0: Microchip CAN BUS Analyzer connected [ 116.405328][ T141] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 116.413225][ T24] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 116.507242][ T24] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 116.515731][ T141] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 116.524048][ T141] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 116.535272][ T24] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 116.543847][ T141] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 116.556151][ T24] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 116.568442][ T141] usb 2-1: config 250 has no interface number 0 [ 116.574809][ T24] usb 3-1: config 250 has no interface number 0 [ 116.582429][ T141] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 116.595528][ T24] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 116.609131][ T141] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 116.620817][ T3646] usb 5-1: USB disconnect, device number 7 [ 116.628413][ T3646] mcba_usb 5-1:0.0 can0: device disconnected [ 116.629081][ T24] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 116.683256][ T141] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 57398, setting to 1024 [ 116.705688][ T24] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 57398, setting to 1024 [ 116.725645][ T141] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 116.739205][ T24] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 116.749940][ T141] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 116.765697][ T24] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 116.779444][ T141] usb 2-1: config 250 interface 228 has no altsetting 0 [ 116.786739][ T24] usb 3-1: config 250 interface 228 has no altsetting 0 [ 116.885391][ T141] usb 2-1: config index 1 descriptor too short (expected 5924, got 36) [ 116.893888][ T24] usb 3-1: config index 1 descriptor too short (expected 5924, got 36) [ 116.902468][ T141] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 116.913386][ T24] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 116.922510][ T141] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 116.933911][ T24] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 116.943252][ T141] usb 2-1: config 250 has no interface number 0 [ 116.951938][ T24] usb 3-1: config 250 has no interface number 0 [ 116.958497][ T141] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 116.973492][ T24] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 116.987503][ T24] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 116.998593][ T141] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 117.011453][ T141] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 57398, setting to 1024 [ 117.023659][ T24] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 57398, setting to 1024 [ 117.035716][ T141] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 117.046580][ T24] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 117.057405][ T141] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 117.071441][ T24] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 117.085164][ T24] usb 3-1: config 250 interface 228 has no altsetting 0 [ 117.092168][ T141] usb 2-1: config 250 interface 228 has no altsetting 0 [ 117.195285][ T3646] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 117.195577][ T24] usb 3-1: config index 2 descriptor too short (expected 5924, got 36) [ 117.211133][ T141] usb 2-1: config index 2 descriptor too short (expected 5924, got 36) [ 117.219458][ T141] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 117.227914][ T24] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 117.236399][ T141] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 117.245486][ T24] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 117.254506][ T24] usb 3-1: config 250 has no interface number 0 [ 117.260788][ T141] usb 2-1: config 250 has no interface number 0 [ 117.267100][ T141] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 117.279533][ T24] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 117.291140][ T141] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 117.301583][ T24] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 117.312067][ T141] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 57398, setting to 1024 [ 117.324915][ T24] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 57398, setting to 1024 [ 117.337799][ T141] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 117.348345][ T24] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 117.358957][ T141] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 117.372459][ T24] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 117.386345][ T141] usb 2-1: config 250 interface 228 has no altsetting 0 [ 117.393346][ T24] usb 3-1: config 250 interface 228 has no altsetting 0 [ 117.465187][ T141] usb 2-1: config index 3 descriptor too short (expected 5924, got 36) [ 117.473464][ T141] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 117.482425][ T24] usb 3-1: config index 3 descriptor too short (expected 5924, got 36) [ 117.490806][ T141] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 117.499904][ T24] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 117.508435][ T141] usb 2-1: config 250 has no interface number 0 [ 117.514705][ T141] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 117.526314][ T24] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 117.535399][ T24] usb 3-1: config 250 has no interface number 0 [ 117.541676][ T24] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 117.553299][ T141] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 117.563786][ T24] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 117.565856][ T3646] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ac.4f [ 117.574278][ T141] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 57398, setting to 1024 [ 117.595678][ T3646] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.597285][ T24] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 57398, setting to 1024 [ 117.605014][ T3646] usb 5-1: config 0 descriptor?? [ 117.619270][ T141] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 117.631691][ T24] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 117.643044][ T141] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 117.658536][ T24] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 117.660379][ T3646] mcba_usb 5-1:0.0 can0: failed tx_urb -2 [ 117.672267][ T141] usb 2-1: config 250 interface 228 has no altsetting 0 [ 117.672331][ T24] usb 3-1: config 250 interface 228 has no altsetting 0 [ 117.692379][ T3646] mcba_usb 5-1:0.0 can0: Failed to send cmd (169) [ 117.698908][ T3646] mcba_usb 5-1:0.0 can0: failed tx_urb -2 [ 117.704640][ T3646] mcba_usb 5-1:0.0 can0: Failed to send cmd (169) [ 117.711218][ T3646] mcba_usb 5-1:0.0: Microchip CAN BUS Analyzer connected [ 117.756187][ T141] usb 2-1: config index 4 descriptor too short (expected 5924, got 36) [ 117.764468][ T141] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 117.773067][ T24] usb 3-1: config index 4 descriptor too short (expected 5924, got 36) [ 117.781951][ T24] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 117.792095][ T141] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 117.801361][ T24] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 117.812514][ T141] usb 2-1: config 250 has no interface number 0 [ 117.818991][ T24] usb 3-1: config 250 has no interface number 0 [ 117.827770][ T141] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 117.839567][ T24] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 117.853359][ T141] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 117.863987][ T24] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 117.876604][ T141] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 57398, setting to 1024 [ 117.889660][ T24] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 57398, setting to 1024 [ 117.903105][ T141] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 117.914295][ T24] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 117.915133][ C0] mcba_usb 5-1:0.0 can0: Unsupported msg (0xB9) [ 117.926658][ T141] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 117.931049][ C0] mcba_usb 5-1:0.0 can0: Unsupported msg (0x91) [ 117.944691][ T24] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 117.966570][ T141] usb 2-1: config 250 interface 228 has no altsetting 0 [ 117.973562][ T24] usb 3-1: config 250 interface 228 has no altsetting 0 [ 118.053067][ T3176] mcba_usb 5-1:0.0 can0: bit-timing not yet defined [ 118.067162][ T141] usb 2-1: config index 5 descriptor too short (expected 5924, got 36) [ 118.075464][ T24] usb 3-1: config index 5 descriptor too short (expected 5924, got 36) [ 118.083700][ T24] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 118.094492][ T141] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 118.103004][ T24] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 118.113609][ T141] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 118.119234][ T3646] usb 5-1: USB disconnect, device number 8 [ 118.124492][ T24] usb 3-1: config 250 has no interface number 0 [ 118.129763][ T3646] mcba_usb 5-1:0.0 can0: device disconnected [ 118.134820][ T24] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 118.152711][ T141] usb 2-1: config 250 has no interface number 0 [ 118.159011][ T141] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 118.170743][ T141] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 118.181225][ T24] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 118.191702][ T141] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 57398, setting to 1024 [ 118.206751][ T24] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 57398, setting to 1024 [ 118.218457][ T141] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 118.229120][ T24] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 118.239668][ T141] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 118.253198][ T24] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 118.266750][ T141] usb 2-1: config 250 interface 228 has no altsetting 0 [ 118.273739][ T24] usb 3-1: config 250 interface 228 has no altsetting 0 [ 118.345378][ T141] usb 2-1: config index 6 descriptor too short (expected 5924, got 36) [ 118.353694][ T141] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 118.363167][ T141] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 118.372452][ T24] usb 3-1: config index 6 descriptor too short (expected 5924, got 36) [ 118.380870][ T141] usb 2-1: config 250 has no interface number 0 19:37:22 executing program 1: ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000100)="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") r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250500000000000019090902241700fa0074980904e4ff11070103000905010200ffe00000090582"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(r0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) dup2(r2, r1) 19:37:22 executing program 3: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f00004bb000/0x1000)=nil) shmat(r0, &(0x7f00004da000/0x3000)=nil, 0x7000) 19:37:22 executing program 5: sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f0000002140)={0x14}, 0x14}}, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x7, &(0x7f0000000040), 0xffa1) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0xbf14b0) 19:37:22 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_io_uring_setup(0x6772, &(0x7f0000001300), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x90e, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x39000, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000180)=0xeb1b) syz_open_dev$video(0x0, 0x0, 0x0) [ 118.388766][ T24] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 118.397340][ T141] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 118.409423][ T24] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 118.418750][ T141] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 118.429331][ T24] usb 3-1: config 250 has no interface number 0 [ 118.450251][ T24] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 118.481525][ T141] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 57398, setting to 1024 19:37:22 executing program 3: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f00004bb000/0x1000)=nil) shmat(r0, &(0x7f00004da000/0x3000)=nil, 0x7000) [ 118.514151][ T24] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 118.532849][ T141] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 118.555665][ T24] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 57398, setting to 1024 [ 118.567588][ T141] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 118.581284][ T24] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 118.592002][ T141] usb 2-1: config 250 interface 228 has no altsetting 0 19:37:23 executing program 2: ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000100)="45cb5dd83985c4ec9fc7b8f4e1cc8ee16ad26b73600d9a3f1fb4204917c0d235a0f85362bddf84a7ebf4a4fa9a7bc54d480a9c0e84e30b1ced98feea665e5684501587bbd377c4a5712449e49a11b49422b532912465c1f48ccaea30eca12f0254471e652c055feff8274dc65c9d14468c41d47a5a830ef82c9be3e571d71a8ee20aeca5accbc78e0147c6ef9a49bf2863933f24b130e16ab1bae27b925577b8323f4fbda4c17909e6392ee9d754c3fd2a69aba138c7eed89eff61e90efdca3bf3903de39ae1908ec20de91393358d49c2f782aa58cb0574a52d02440e6c1e28938aadc68fdac6e876717f9cc981c3be8636e0fb42961b81a981dc7b539057ba") r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250500000000000019090902241700fa0074980904e4ff11070103000905010200ffe00000090582"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(r0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) dup2(r2, r1) [ 118.609948][ T24] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 19:37:23 executing program 3: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f00004bb000/0x1000)=nil) shmat(r0, &(0x7f00004da000/0x3000)=nil, 0x7000) 19:37:23 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000f70d1810d804300a4fac0000000109021b0001000000000904000001a06647000905810220"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_ep_write(r1, 0x0, 0x39, &(0x7f0000001480)="b939d1132d020000000000000042ceaa5407a1916ab6387f6963e8be9acf32077278f9104d2ce3314d5d45de6ced73babff66084832ef05f31") [ 118.669380][ T24] usb 3-1: config 250 interface 228 has no altsetting 0 [ 118.695232][ T141] usb 2-1: unable to read config index 7 descriptor/start: -71 [ 118.703289][ T141] usb 2-1: can't read configurations, error -71 [ 118.745163][ T24] usb 3-1: unable to read config index 7 descriptor/start: -71 [ 118.762671][ T24] usb 3-1: can't read configurations, error -71 19:37:23 executing program 5: sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f0000002140)={0x14}, 0x14}}, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x7, &(0x7f0000000040), 0xffa1) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0xbf14b0) 19:37:23 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_io_uring_setup(0x6772, &(0x7f0000001300), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x90e, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x39000, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000180)=0xeb1b) syz_open_dev$video(0x0, 0x0, 0x0) 19:37:23 executing program 5: syz_open_dev$vcsu(&(0x7f0000000e80), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, 0x0, 0x0) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000002440)={&(0x7f0000000040), 0x10, 0x0, 0x0, 0x0, 0x0, 0x20004850}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, 0x0, 0x40001) syz_clone(0xa0080200, 0x0, 0x0, 0x0, &(0x7f0000004300), &(0x7f0000004340)) 19:37:23 executing program 5: syz_open_dev$vcsu(&(0x7f0000000e80), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, 0x0, 0x0) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000002440)={&(0x7f0000000040), 0x10, 0x0, 0x0, 0x0, 0x0, 0x20004850}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, 0x0, 0x40001) syz_clone(0xa0080200, 0x0, 0x0, 0x0, &(0x7f0000004300), &(0x7f0000004340)) [ 119.055254][ T3650] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 119.075447][ T141] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 119.146281][ T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 119.306932][ T3650] usb 5-1: Using ep0 maxpacket: 16 [ 119.325228][ T141] usb 2-1: Using ep0 maxpacket: 8 [ 119.376837][ T141] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 119.415228][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 119.435292][ T3650] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 119.445258][ T3650] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ac.4f [ 119.454323][ T3650] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.462500][ T24] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 119.470244][ T141] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 119.482089][ T3650] usb 5-1: config 0 descriptor?? [ 119.487211][ T141] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 119.495794][ T141] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 119.504861][ T141] usb 2-1: config 250 has no interface number 0 [ 119.511241][ T141] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 119.511608][ T4205] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 119.522855][ T141] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 119.543489][ T3650] mcba_usb 5-1:0.0 can0: failed tx_urb -2 [ 119.549317][ T3650] mcba_usb 5-1:0.0 can0: Failed to send cmd (169) [ 119.556397][ T3650] mcba_usb 5-1:0.0 can0: failed tx_urb -2 [ 119.562232][ T3650] mcba_usb 5-1:0.0 can0: Failed to send cmd (169) [ 119.568734][ T141] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 57398, setting to 1024 [ 119.580495][ T24] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 119.588834][ T3650] mcba_usb 5-1:0.0: Microchip CAN BUS Analyzer connected [ 119.595935][ T141] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 119.606524][ T24] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 119.625017][ T24] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 119.635624][ T141] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 119.655905][ T24] usb 3-1: config 250 has no interface number 0 [ 119.662269][ T141] usb 2-1: config 250 interface 228 has no altsetting 0 [ 119.670308][ T24] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 119.682164][ T24] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 119.692733][ T24] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 57398, setting to 1024 [ 119.704672][ T24] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 119.715629][ T24] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 119.752497][ T24] usb 3-1: config 250 interface 228 has no altsetting 0 [ 119.784084][ T141] usb 2-1: config index 1 descriptor too short (expected 5924, got 36) [ 119.803152][ T3646] usb 5-1: USB disconnect, device number 9 [ 119.805159][ T141] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 119.809722][ T3646] mcba_usb 5-1:0.0 can0: device disconnected [ 119.820748][ T141] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 119.832622][ T141] usb 2-1: config 250 has no interface number 0 [ 119.842243][ T141] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 119.854610][ T141] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 119.867790][ T141] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 57398, setting to 1024 [ 119.887326][ T24] usb 3-1: config index 1 descriptor too short (expected 5924, got 36) [ 119.895839][ T24] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 119.904272][ T24] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 119.916063][ T141] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 119.928044][ T141] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 119.943469][ T24] usb 3-1: config 250 has no interface number 0 [ 119.951209][ T24] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 119.963294][ T141] usb 2-1: config 250 interface 228 has no altsetting 0 [ 119.970531][ T24] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 119.981130][ T24] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 57398, setting to 1024 [ 119.993093][ T24] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 120.003952][ T24] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 120.018587][ T24] usb 3-1: config 250 interface 228 has no altsetting 0 [ 120.055495][ T141] usb 2-1: config index 2 descriptor too short (expected 5924, got 36) [ 120.063774][ T141] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 120.073087][ T141] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 120.083312][ T141] usb 2-1: config 250 has no interface number 0 [ 120.091129][ T141] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 120.104080][ T141] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 120.116151][ T141] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 57398, setting to 1024 [ 120.129150][ T24] usb 3-1: config index 2 descriptor too short (expected 5924, got 36) [ 120.138498][ T141] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 120.151955][ T24] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 120.161600][ T24] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 120.171848][ T141] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 120.187824][ T24] usb 3-1: config 250 has no interface number 0 [ 120.194116][ T24] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 120.207967][ T141] usb 2-1: config 250 interface 228 has no altsetting 0 [ 120.214973][ T24] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 120.228808][ T24] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 57398, setting to 1024 [ 120.240737][ T24] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 120.254771][ T24] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 120.270650][ T24] usb 3-1: config 250 interface 228 has no altsetting 0 [ 120.295772][ T141] usb 2-1: config index 3 descriptor too short (expected 5924, got 36) [ 120.304058][ T141] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 120.314256][ T141] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 120.323665][ T141] usb 2-1: config 250 has no interface number 0 [ 120.330375][ T141] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 120.342232][ T141] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 120.352983][ T141] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 57398, setting to 1024 [ 120.364737][ T24] usb 3-1: config index 3 descriptor too short (expected 5924, got 36) [ 120.373026][ T141] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 120.376500][ T3646] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 120.383614][ T24] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 120.399632][ T141] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 120.413164][ T24] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 120.422306][ T141] usb 2-1: config 250 interface 228 has no altsetting 0 [ 120.429315][ T24] usb 3-1: config 250 has no interface number 0 [ 120.435630][ T24] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 120.447261][ T24] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 120.458229][ T24] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 57398, setting to 1024 [ 120.470039][ T24] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 120.480705][ T24] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 120.494204][ T24] usb 3-1: config 250 interface 228 has no altsetting 0 [ 120.515277][ T141] usb 2-1: config index 4 descriptor too short (expected 5924, got 36) [ 120.523579][ T141] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 120.533290][ T141] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 120.542472][ T141] usb 2-1: config 250 has no interface number 0 [ 120.548829][ T141] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 120.561016][ T141] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 120.571485][ T141] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 57398, setting to 1024 [ 120.583244][ T24] usb 3-1: config index 4 descriptor too short (expected 5924, got 36) [ 120.591657][ T141] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 120.602224][ T24] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 120.610702][ T141] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 120.624236][ T24] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 120.633290][ T24] usb 3-1: config 250 has no interface number 0 [ 120.639571][ T141] usb 2-1: config 250 interface 228 has no altsetting 0 [ 120.646563][ T24] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 120.658570][ T24] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 120.669174][ T24] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 57398, setting to 1024 [ 120.680944][ T24] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 120.691506][ T24] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 120.705392][ T24] usb 3-1: config 250 interface 228 has no altsetting 0 [ 120.745225][ T3646] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ac.4f [ 120.745415][ T141] usb 2-1: config index 5 descriptor too short (expected 5924, got 36) [ 120.754414][ T3646] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.765505][ T141] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 120.779499][ T141] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 120.781562][ T3646] usb 5-1: config 0 descriptor?? [ 120.788587][ T141] usb 2-1: config 250 has no interface number 0 [ 120.788619][ T141] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 120.788650][ T141] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 120.788677][ T141] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 57398, setting to 1024 [ 120.788708][ T141] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 120.844543][ T24] usb 3-1: config index 5 descriptor too short (expected 5924, got 36) [ 120.854876][ T24] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 120.855996][ T3646] mcba_usb 5-1:0.0 can0: failed tx_urb -2 [ 120.864250][ T24] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 120.870027][ T3646] mcba_usb 5-1:0.0 can0: Failed to send cmd (169) [ 120.881062][ T24] usb 3-1: config 250 has no interface number 0 [ 120.885545][ T3646] mcba_usb 5-1:0.0 can0: failed tx_urb -2 [ 120.891359][ T24] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 120.897691][ T3646] mcba_usb 5-1:0.0 can0: Failed to send cmd (169) [ 120.910843][ T141] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 120.915897][ T3646] mcba_usb 5-1:0.0: Microchip CAN BUS Analyzer connected [ 120.928855][ T24] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 120.928886][ T24] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 57398, setting to 1024 [ 120.928918][ T24] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 120.974636][ T141] usb 2-1: config 250 interface 228 has no altsetting 0 [ 120.981723][ T24] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 120.997484][ T24] usb 3-1: config 250 interface 228 has no altsetting 0 [ 121.056864][ T141] usb 2-1: config index 6 descriptor too short (expected 5924, got 36) [ 121.066511][ T141] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 121.075022][ T141] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 121.075130][ C0] mcba_usb 5-1:0.0 can0: Unsupported msg (0xB9) [ 121.090324][ C0] mcba_usb 5-1:0.0 can0: Unsupported msg (0x91) [ 121.097222][ T24] usb 3-1: config index 6 descriptor too short (expected 5924, got 36) [ 121.107566][ T141] usb 2-1: config 250 has no interface number 0 [ 121.113906][ T24] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 121.122640][ T141] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 121.136894][ T24] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 121.146453][ T141] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 121.158708][ T24] usb 3-1: config 250 has no interface number 0 [ 121.165452][ T24] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 121.178882][ T141] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 57398, setting to 1024 [ 121.191949][ T24] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 121.204201][ T141] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 121.215299][ T24] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 57398, setting to 1024 [ 121.228824][ T141] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 121.242739][ T24] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 121.252357][ T3176] mcba_usb 5-1:0.0 can0: bit-timing not yet defined [ 121.254972][ T141] usb 2-1: config 250 interface 228 has no altsetting 0 [ 121.267780][ T24] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 121.281327][ T24] usb 3-1: config 250 interface 228 has no altsetting 0 [ 121.291058][ T13] usb 5-1: USB disconnect, device number 10 [ 121.297587][ T13] mcba_usb 5-1:0.0 can0: device disconnected [ 121.367260][ T24] usb 3-1: config index 7 descriptor too short (expected 5924, got 36) [ 121.376143][ T141] usb 2-1: config index 7 descriptor too short (expected 5924, got 36) [ 121.384798][ T141] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 121.395825][ T24] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 121.404327][ T141] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 121.414850][ T24] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 121.424640][ T141] usb 2-1: config 250 has no interface number 0 [ 121.431096][ T24] usb 3-1: config 250 has no interface number 0 [ 121.437467][ T141] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 121.449177][ T24] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 121.461523][ T141] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 121.474264][ T24] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 121.486820][ T141] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 57398, setting to 1024 [ 121.498592][ T24] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 57398, setting to 1024 19:37:25 executing program 1: seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000540)) 19:37:25 executing program 5: syz_open_dev$vcsu(&(0x7f0000000e80), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, 0x0, 0x0) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000002440)={&(0x7f0000000040), 0x10, 0x0, 0x0, 0x0, 0x0, 0x20004850}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, 0x0, 0x40001) syz_clone(0xa0080200, 0x0, 0x0, 0x0, &(0x7f0000004300), &(0x7f0000004340)) 19:37:25 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_io_uring_setup(0x6772, &(0x7f0000001300), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x90e, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x39000, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000180)=0xeb1b) syz_open_dev$video(0x0, 0x0, 0x0) 19:37:25 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_io_uring_setup(0x6772, &(0x7f0000001300), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x90e, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x39000, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000180)=0xeb1b) syz_open_dev$video(0x0, 0x0, 0x0) [ 121.518861][ T141] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 121.569413][ T24] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 121.583644][ T141] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 19:37:26 executing program 1: seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000540)) [ 121.610457][ T24] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 19:37:26 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000100001acd0000000000000000000000a20000000000a1fffffff0000000000000a0000000900010073797a300000000020000000020a3598a51135c39f9100000a0000000900010073797a300000000014000000110001"], 0x68}}, 0x0) [ 121.666486][ T141] usb 2-1: config 250 interface 228 has no altsetting 0 [ 121.673555][ T24] usb 3-1: config 250 interface 228 has no altsetting 0 [ 121.705256][ T141] usb 2-1: string descriptor 0 read error: -71 19:37:26 executing program 1: seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000540)) [ 121.712597][ T141] usb 2-1: New USB device found, idVendor=0525, idProduct=0000, bcdDevice= 0.00 [ 121.724605][ T141] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=25 [ 121.738863][ T24] usb 3-1: string descriptor 0 read error: -71 [ 121.745061][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=0000, bcdDevice= 0.00 [ 121.758387][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=25 [ 121.795342][ T24] usb 3-1: can't set config #250, error -71 [ 121.801671][ T141] usb 2-1: can't set config #250, error -71 [ 121.812003][ T141] usb 2-1: USB disconnect, device number 5 19:37:26 executing program 5: syz_open_dev$vcsu(&(0x7f0000000e80), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, 0x0, 0x0) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000002440)={&(0x7f0000000040), 0x10, 0x0, 0x0, 0x0, 0x0, 0x20004850}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, 0x0, 0x40001) syz_clone(0xa0080200, 0x0, 0x0, 0x0, &(0x7f0000004300), &(0x7f0000004340)) 19:37:26 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000100001acd0000000000000000000000a20000000000a1fffffff0000000000000a0000000900010073797a300000000020000000020a3598a51135c39f9100000a0000000900010073797a300000000014000000110001"], 0x68}}, 0x0) 19:37:26 executing program 1: seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000540)) [ 121.819040][ T24] usb 3-1: USB disconnect, device number 4 19:37:26 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000100001acd0000000000000000000000a20000000000a1fffffff0000000000000a0000000900010073797a300000000020000000020a3598a51135c39f9100000a0000000900010073797a300000000014000000110001"], 0x68}}, 0x0) 19:37:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x0) 19:37:26 executing program 1: r0 = syz_io_uring_setup(0x3eda, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@can, 0x80, 0x0, 0x13}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x9, 0x0, 0x700) 19:37:26 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000100001acd0000000000000000000000a20000000000a1fffffff0000000000000a0000000900010073797a300000000020000000020a3598a51135c39f9100000a0000000900010073797a300000000014000000110001"], 0x68}}, 0x0) [ 121.937166][ T4325] __nla_validate_parse: 1 callbacks suppressed [ 121.937184][ T4325] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 19:37:26 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_io_uring_setup(0x6772, &(0x7f0000001300), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x90e, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x39000, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000180)=0xeb1b) syz_open_dev$video(0x0, 0x0, 0x0) 19:37:26 executing program 5: r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000140)="bf07360c46ae0890ac7db917666f2f8fc8a20568093e9965d4b7e5627cf32fd951536a5e72a0095d3db7a26bea8177bc2881354ff46b8e2492aad7e84435c8c6badc667896a724429827c2cca8adbea3b613bcaaa15619149a122361fcdc5fff9198a4c579a83ccd5fe148cdf5236aa09cf947be5e324180dbabecd9a9e5e4e9d130d76cfe46895deecf386cc514dfaa57495851cd511fbe5c386d00875d35eb9ca6ea37b738358db4c3a5b08013213b0417630a09b5ee6115c42cb1ec6f2c35c980f8131daa8de6c82a45d5b16411dacc598137b6346180bdd7d45e118d3e0533", 0xe1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r0, r0}, 0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={'hmac(sha1)\x00'}}) 19:37:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x0) 19:37:26 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x9}) 19:37:26 executing program 1: r0 = syz_io_uring_setup(0x3eda, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@can, 0x80, 0x0, 0x13}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x9, 0x0, 0x700) 19:37:26 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_io_uring_setup(0x6772, &(0x7f0000001300), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x90e, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x39000, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000180)=0xeb1b) syz_open_dev$video(0x0, 0x0, 0x0) 19:37:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x0) [ 122.448103][ T4336] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 122.454376][ T4338] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO 19:37:26 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x9}) 19:37:26 executing program 1: r0 = syz_io_uring_setup(0x3eda, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@can, 0x80, 0x0, 0x13}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x9, 0x0, 0x700) 19:37:27 executing program 1: r0 = syz_io_uring_setup(0x3eda, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@can, 0x80, 0x0, 0x13}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x9, 0x0, 0x700) [ 122.567121][ T4346] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 122.582491][ T4347] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 19:37:27 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x9}) 19:37:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x0) [ 122.667719][ T4354] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 122.692767][ T4356] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 19:37:27 executing program 1: futex(&(0x7f0000000580), 0x4, 0x0, &(0x7f00000005c0)={0x0, 0x989680}, &(0x7f0000000600), 0x0) 19:37:27 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x9}) 19:37:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000ff3000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000000)=0x2) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 123.355560][ T4363] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO 19:37:27 executing program 0: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/76, 0xff0d}], 0x1, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x0, &(0x7f0000000280)) 19:37:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x9}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x34}}, 0x0) 19:37:27 executing program 1: futex(&(0x7f0000000580), 0x4, 0x0, &(0x7f00000005c0)={0x0, 0x989680}, &(0x7f0000000600), 0x0) 19:37:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @link_local}]}}}]}, 0x40}}, 0x0) 19:37:27 executing program 1: futex(&(0x7f0000000580), 0x4, 0x0, &(0x7f00000005c0)={0x0, 0x989680}, &(0x7f0000000600), 0x0) 19:37:27 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000002cc0)=[{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000000580)="eb", 0x1}], 0x1, &(0x7f0000002ac0)=[@sndrcv={0x2c, 0x84, 0x1, {0x0, 0x0, 0x200}}], 0x2c}], 0x1, 0x0) 19:37:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @link_local}]}}}]}, 0x40}}, 0x0) [ 123.459869][ T4368] bpf: Bad value for 'mode' 19:37:27 executing program 0: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/76, 0xff0d}], 0x1, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x0, &(0x7f0000000280)) 19:37:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x9}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x34}}, 0x0) 19:37:27 executing program 1: futex(&(0x7f0000000580), 0x4, 0x0, &(0x7f00000005c0)={0x0, 0x989680}, &(0x7f0000000600), 0x0) 19:37:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000ff3000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000000)=0x2) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:37:27 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000002cc0)=[{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000000580)="eb", 0x1}], 0x1, &(0x7f0000002ac0)=[@sndrcv={0x2c, 0x84, 0x1, {0x0, 0x0, 0x200}}], 0x2c}], 0x1, 0x0) 19:37:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @link_local}]}}}]}, 0x40}}, 0x0) 19:37:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000ff3000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000000)=0x2) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:37:27 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000002cc0)=[{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000000580)="eb", 0x1}], 0x1, &(0x7f0000002ac0)=[@sndrcv={0x2c, 0x84, 0x1, {0x0, 0x0, 0x200}}], 0x2c}], 0x1, 0x0) [ 123.575794][ T4381] bpf: Bad value for 'mode' 19:37:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x9}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x34}}, 0x0) 19:37:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @link_local}]}}}]}, 0x40}}, 0x0) 19:37:28 executing program 0: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/76, 0xff0d}], 0x1, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x0, &(0x7f0000000280)) 19:37:28 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000002cc0)=[{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000000580)="eb", 0x1}], 0x1, &(0x7f0000002ac0)=[@sndrcv={0x2c, 0x84, 0x1, {0x0, 0x0, 0x200}}], 0x2c}], 0x1, 0x0) 19:37:28 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000002940), &(0x7f0000002980)=0x4) 19:37:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x9}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x34}}, 0x0) 19:37:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x0, 0x0, {0xa}, [@IFLA_IFNAME={0x14, 0x3, 'team_slave_0\x00'}]}, 0x34}}, 0x0) [ 123.704084][ T4401] bpf: Bad value for 'mode' 19:37:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000ff3000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000000)=0x2) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:37:28 executing program 0: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/76, 0xff0d}], 0x1, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x0, &(0x7f0000000280)) 19:37:28 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000002940), &(0x7f0000002980)=0x4) 19:37:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000ff3000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000000)=0x2) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:37:28 executing program 5: syz_clone(0xa0000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000200)="43b6edc3d140a3a448d9fa1f6d3c8a26da0dc54e17b39e87a92d3d5c8a0e222ef34842e66c2d4e2524a761b2f982caacdd76b7a8f76ed41f018bfbafb669423713aeae5e") openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000003c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={r0, 0x20, 0x0, 0x0, 0x0}, 0x20) syz_clone(0x40008400, &(0x7f0000000500)="1be38d980c9f79fd6edb7d7b64782b0c429bc4e0dc378b1cd9a5889265322e4413250828bdb83087b72247bcce876df55e0ba85d8c", 0x35, &(0x7f0000000540), 0x0, &(0x7f00000005c0)="1e392e6b3ab4b5e5acc284a1aa8631462e421274178af5e5cb1843e422d902f43edba93a85e3ffd5af1a4e56868c302de360beddde28776ee66c0dbd61745233d90feea0de5f13f2e77b20282d77b999b3e8b66593d9c213be5ae4235ab19fa4701de2fee266d0f234fff50ef7125e8963b02cd17159e7e253fc488fad3e00b6b9") 19:37:28 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/58, 0x3a}], 0xaf, 0x600, 0x0) [ 123.809180][ T4414] bpf: Bad value for 'mode' 19:37:28 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000002940), &(0x7f0000002980)=0x4) 19:37:28 executing program 0: r0 = socket$inet(0x2, 0x2, 0x2000000088) bind(r0, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x7c) setsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000000)=0x1, 0x4) sendto$inet(r0, &(0x7f0000000200)='X', 0x1, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) recvmsg(r0, &(0x7f0000000240)={0x0, 0x36, 0x0}, 0x0) 19:37:28 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000002940), &(0x7f0000002980)=0x4) 19:37:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000ff3000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000000)=0x2) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:37:28 executing program 0: r0 = socket$inet(0x2, 0x2, 0x2000000088) bind(r0, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x7c) setsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000000)=0x1, 0x4) sendto$inet(r0, &(0x7f0000000200)='X', 0x1, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) recvmsg(r0, &(0x7f0000000240)={0x0, 0x36, 0x0}, 0x0) [ 123.953486][ T4412] team0: Port device team_slave_0 removed 19:37:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x0, 0x0, {0xa}, [@IFLA_IFNAME={0x14, 0x3, 'team_slave_0\x00'}]}, 0x34}}, 0x0) 19:37:28 executing program 2: r0 = socket$inet(0x2, 0x2, 0x2000000088) bind(r0, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x7c) setsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000000)=0x1, 0x4) sendto$inet(r0, &(0x7f0000000200)='X', 0x1, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) recvmsg(r0, &(0x7f0000000240)={0x0, 0x36, 0x0}, 0x0) 19:37:28 executing program 0: r0 = socket$inet(0x2, 0x2, 0x2000000088) bind(r0, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x7c) setsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000000)=0x1, 0x4) sendto$inet(r0, &(0x7f0000000200)='X', 0x1, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) recvmsg(r0, &(0x7f0000000240)={0x0, 0x36, 0x0}, 0x0) 19:37:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000ff3000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000000)=0x2) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:37:28 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @immediate={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4, 0x2}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}], {0x14, 0x10}}, 0xac}}, 0x0) 19:37:28 executing program 5: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r0, 0x40046104, &(0x7f00000006c0)) 19:37:28 executing program 2: r0 = socket$inet(0x2, 0x2, 0x2000000088) bind(r0, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x7c) setsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000000)=0x1, 0x4) sendto$inet(r0, &(0x7f0000000200)='X', 0x1, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) recvmsg(r0, &(0x7f0000000240)={0x0, 0x36, 0x0}, 0x0) 19:37:28 executing program 0: r0 = socket$inet(0x2, 0x2, 0x2000000088) bind(r0, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x7c) setsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000000)=0x1, 0x4) sendto$inet(r0, &(0x7f0000000200)='X', 0x1, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) recvmsg(r0, &(0x7f0000000240)={0x0, 0x36, 0x0}, 0x0) 19:37:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x0, 0x0, {0xa}, [@IFLA_IFNAME={0x14, 0x3, 'team_slave_0\x00'}]}, 0x34}}, 0x0) 19:37:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x0, 0x0, {0xa}, [@IFLA_IFNAME={0x14, 0x3, 'team_slave_0\x00'}]}, 0x34}}, 0x0) 19:37:28 executing program 0: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@mpls_getroute={0x19, 0x1a, 0x101}, 0x1c}}, 0x0) 19:37:28 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @immediate={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4, 0x2}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}], {0x14, 0x10}}, 0xac}}, 0x0) 19:37:28 executing program 2: r0 = socket$inet(0x2, 0x2, 0x2000000088) bind(r0, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x7c) setsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000000)=0x1, 0x4) sendto$inet(r0, &(0x7f0000000200)='X', 0x1, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) recvmsg(r0, &(0x7f0000000240)={0x0, 0x36, 0x0}, 0x0) 19:37:28 executing program 5: madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = socket$inet6_udp(0xa, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_clone(0xa81401df, 0x0, 0x0, 0x0, 0x0, 0x0) 19:37:28 executing program 4: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = fcntl$dupfd(r1, 0x0, r0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0xffffff7f00000000}}, 0x0) 19:37:28 executing program 0: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@mpls_getroute={0x19, 0x1a, 0x101}, 0x1c}}, 0x0) 19:37:28 executing program 5: madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = socket$inet6_udp(0xa, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_clone(0xa81401df, 0x0, 0x0, 0x0, 0x0, 0x0) 19:37:28 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @immediate={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4, 0x2}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}], {0x14, 0x10}}, 0xac}}, 0x0) 19:37:28 executing program 4: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc0f8565c, &(0x7f0000000080)={0x0, 0xffffffe1, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}}) 19:37:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000193c0)=ANY=[@ANYBLOB="3c7c0000290021080700000000000000040000000800170048f2a4b010", @ANYRES32=0x0, @ANYBLOB="4815dda8da1c9f6384b574218bcb0a0396684bda307abc86801a108b3cc7369f2df9aba25d753af9e698405bf54088e77c8625524dda5de5986c177d04067e67059aff20bc97c15de3f4687c087bc910c1a61a48b9e5631be94434364605b6ba003019e57895eb1a69"], 0x1c}, 0x1, 0xffffff7f0e000000}, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000019080), &(0x7f00000190c0)=0x30) r1 = socket(0x15, 0x80005, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'bridge0\x00', {}, 0x1}) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = socket(0xf, 0x3, 0xfffffffc) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000019340)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0xc0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x0, "000000000000000000000000000500"}}}]}, 0x48}}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='timers\x00') read$FUSE(r4, &(0x7f0000000100)={0x2020}, 0x2020) getsockopt(r1, 0x200000000114, 0x271b, &(0x7f0000000080)=""/102379, &(0x7f0000000000)=0x18feb) read$FUSE(r4, &(0x7f0000000100)={0x2020}, 0x2020) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000019280)={0x0, {0x2, 0x4e21, @local}, {0x2, 0x4e24, @rand_addr=0x64010100}, {0x2, 0x4e23, @private=0xa010101}, 0x188, 0x0, 0x0, 0x0, 0xf2, &(0x7f0000019240), 0x100000000, 0x4}) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x66) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00$\x00\v\f\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00', @ANYRES32=r6, @ANYBLOB="00000000ffffff0900000000090001007072696f00cb0000180002000000000000000000000000000000000000050000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000019200)={&(0x7f0000019100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000191c0)={&(0x7f0000019140)=@getchain={0x54, 0x66, 0x200, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xffe0, 0xe}, {0xe, 0x7}, {0x6}}, [{0x8, 0xb, 0xc23}, {0x8, 0xb, 0x401}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x1ff}, {0x8, 0xb, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x20048000}, 0x4000004) 19:37:28 executing program 2: ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000000)={{0x6, 0x7}, {0x9}, 0x2, 0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xa, &(0x7f0000000140)=@raw=[@cb_func={0x18, 0xc, 0x4, 0x0, 0x2}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, @jmp={0x5, 0x0, 0x9, 0x4, 0x4, 0xfffffffffffffff4, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @jmp={0x5, 0x0, 0x8, 0x7, 0x0, 0x20, 0xfffffffffffffff0}], &(0x7f00000001c0)='syzkaller\x00', 0x88df, 0x57, &(0x7f0000000200)=""/87, 0x41000, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0x5, 0x5, 0x33}, 0x10}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000100)='svcrdma_qp_error\x00', r0}, 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000400)={0x0, r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='svc_handle_xprt\x00', r0}, 0x10) inotify_rm_watch(0xffffffffffffffff, 0x0) r2 = add_key$fscrypt_v1(&(0x7f00000004c0), &(0x7f0000000500)={'fscrypt:', @desc4}, &(0x7f0000000540)={0x0, "4e7e5d1afb87456b16aa6bb94aaf65fe1fdea5975c2015d9fe4ae45ae4b1ea18c49163482020c8d69d549b8357ef1c544b70926f15813aec96dfdb916c1a09e5", 0x1d}, 0x48, 0xfffffffffffffffb) keyctl$link(0x8, 0x0, r2) r3 = syz_open_procfs(0x0, &(0x7f00000005c0)='gid_map\x00') r4 = inotify_init1(0x80000) ioctl$INOTIFY_IOC_SETNEXTWD(r4, 0x40044900, 0x7ff) keyctl$setperm(0x5, r2, 0x8000000) ioctl$VFIO_SET_IOMMU(r3, 0x3b66, 0x6) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00') read$FUSE(r3, &(0x7f0000000640)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_POLL(r5, &(0x7f0000002680)={0x18, 0xfffffffffffffff5, r6, {0x2}}, 0x18) keyctl$get_security(0x11, 0x0, &(0x7f00000027c0)=""/96, 0x60) 19:37:28 executing program 0: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@mpls_getroute={0x19, 0x1a, 0x101}, 0x1c}}, 0x0) 19:37:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000193c0)=ANY=[@ANYBLOB="3c7c0000290021080700000000000000040000000800170048f2a4b010", @ANYRES32=0x0, @ANYBLOB="4815dda8da1c9f6384b574218bcb0a0396684bda307abc86801a108b3cc7369f2df9aba25d753af9e698405bf54088e77c8625524dda5de5986c177d04067e67059aff20bc97c15de3f4687c087bc910c1a61a48b9e5631be94434364605b6ba003019e57895eb1a69"], 0x1c}, 0x1, 0xffffff7f0e000000}, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000019080), &(0x7f00000190c0)=0x30) r1 = socket(0x15, 0x80005, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'bridge0\x00', {}, 0x1}) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = socket(0xf, 0x3, 0xfffffffc) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000019340)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0xc0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x0, "000000000000000000000000000500"}}}]}, 0x48}}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='timers\x00') read$FUSE(r4, &(0x7f0000000100)={0x2020}, 0x2020) getsockopt(r1, 0x200000000114, 0x271b, &(0x7f0000000080)=""/102379, &(0x7f0000000000)=0x18feb) read$FUSE(r4, &(0x7f0000000100)={0x2020}, 0x2020) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000019280)={0x0, {0x2, 0x4e21, @local}, {0x2, 0x4e24, @rand_addr=0x64010100}, {0x2, 0x4e23, @private=0xa010101}, 0x188, 0x0, 0x0, 0x0, 0xf2, &(0x7f0000019240), 0x100000000, 0x4}) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x66) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00$\x00\v\f\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00', @ANYRES32=r6, @ANYBLOB="00000000ffffff0900000000090001007072696f00cb0000180002000000000000000000000000000000000000050000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000019200)={&(0x7f0000019100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000191c0)={&(0x7f0000019140)=@getchain={0x54, 0x66, 0x200, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xffe0, 0xe}, {0xe, 0x7}, {0x6}}, [{0x8, 0xb, 0xc23}, {0x8, 0xb, 0x401}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x1ff}, {0x8, 0xb, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x20048000}, 0x4000004) 19:37:28 executing program 2: ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000000)={{0x6, 0x7}, {0x9}, 0x2, 0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xa, &(0x7f0000000140)=@raw=[@cb_func={0x18, 0xc, 0x4, 0x0, 0x2}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, @jmp={0x5, 0x0, 0x9, 0x4, 0x4, 0xfffffffffffffff4, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @jmp={0x5, 0x0, 0x8, 0x7, 0x0, 0x20, 0xfffffffffffffff0}], &(0x7f00000001c0)='syzkaller\x00', 0x88df, 0x57, &(0x7f0000000200)=""/87, 0x41000, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0x5, 0x5, 0x33}, 0x10}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000100)='svcrdma_qp_error\x00', r0}, 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000400)={0x0, r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='svc_handle_xprt\x00', r0}, 0x10) inotify_rm_watch(0xffffffffffffffff, 0x0) r2 = add_key$fscrypt_v1(&(0x7f00000004c0), &(0x7f0000000500)={'fscrypt:', @desc4}, &(0x7f0000000540)={0x0, "4e7e5d1afb87456b16aa6bb94aaf65fe1fdea5975c2015d9fe4ae45ae4b1ea18c49163482020c8d69d549b8357ef1c544b70926f15813aec96dfdb916c1a09e5", 0x1d}, 0x48, 0xfffffffffffffffb) keyctl$link(0x8, 0x0, r2) r3 = syz_open_procfs(0x0, &(0x7f00000005c0)='gid_map\x00') r4 = inotify_init1(0x80000) ioctl$INOTIFY_IOC_SETNEXTWD(r4, 0x40044900, 0x7ff) keyctl$setperm(0x5, r2, 0x8000000) ioctl$VFIO_SET_IOMMU(r3, 0x3b66, 0x6) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00') read$FUSE(r3, &(0x7f0000000640)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_POLL(r5, &(0x7f0000002680)={0x18, 0xfffffffffffffff5, r6, {0x2}}, 0x18) keyctl$get_security(0x11, 0x0, &(0x7f00000027c0)=""/96, 0x60) 19:37:28 executing program 4: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc0f8565c, &(0x7f0000000080)={0x0, 0xffffffe1, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}}) 19:37:28 executing program 5: madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = socket$inet6_udp(0xa, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_clone(0xa81401df, 0x0, 0x0, 0x0, 0x0, 0x0) 19:37:28 executing program 0: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@mpls_getroute={0x19, 0x1a, 0x101}, 0x1c}}, 0x0) 19:37:28 executing program 4: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc0f8565c, &(0x7f0000000080)={0x0, 0xffffffe1, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}}) 19:37:28 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @immediate={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4, 0x2}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}], {0x14, 0x10}}, 0xac}}, 0x0) 19:37:29 executing program 2: ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000000)={{0x6, 0x7}, {0x9}, 0x2, 0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xa, &(0x7f0000000140)=@raw=[@cb_func={0x18, 0xc, 0x4, 0x0, 0x2}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, @jmp={0x5, 0x0, 0x9, 0x4, 0x4, 0xfffffffffffffff4, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @jmp={0x5, 0x0, 0x8, 0x7, 0x0, 0x20, 0xfffffffffffffff0}], &(0x7f00000001c0)='syzkaller\x00', 0x88df, 0x57, &(0x7f0000000200)=""/87, 0x41000, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0x5, 0x5, 0x33}, 0x10}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000100)='svcrdma_qp_error\x00', r0}, 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000400)={0x0, r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='svc_handle_xprt\x00', r0}, 0x10) inotify_rm_watch(0xffffffffffffffff, 0x0) r2 = add_key$fscrypt_v1(&(0x7f00000004c0), &(0x7f0000000500)={'fscrypt:', @desc4}, &(0x7f0000000540)={0x0, "4e7e5d1afb87456b16aa6bb94aaf65fe1fdea5975c2015d9fe4ae45ae4b1ea18c49163482020c8d69d549b8357ef1c544b70926f15813aec96dfdb916c1a09e5", 0x1d}, 0x48, 0xfffffffffffffffb) keyctl$link(0x8, 0x0, r2) r3 = syz_open_procfs(0x0, &(0x7f00000005c0)='gid_map\x00') r4 = inotify_init1(0x80000) ioctl$INOTIFY_IOC_SETNEXTWD(r4, 0x40044900, 0x7ff) keyctl$setperm(0x5, r2, 0x8000000) ioctl$VFIO_SET_IOMMU(r3, 0x3b66, 0x6) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00') read$FUSE(r3, &(0x7f0000000640)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_POLL(r5, &(0x7f0000002680)={0x18, 0xfffffffffffffff5, r6, {0x2}}, 0x18) keyctl$get_security(0x11, 0x0, &(0x7f00000027c0)=""/96, 0x60) 19:37:29 executing program 5: madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = socket$inet6_udp(0xa, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_clone(0xa81401df, 0x0, 0x0, 0x0, 0x0, 0x0) 19:37:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000193c0)=ANY=[@ANYBLOB="3c7c0000290021080700000000000000040000000800170048f2a4b010", @ANYRES32=0x0, @ANYBLOB="4815dda8da1c9f6384b574218bcb0a0396684bda307abc86801a108b3cc7369f2df9aba25d753af9e698405bf54088e77c8625524dda5de5986c177d04067e67059aff20bc97c15de3f4687c087bc910c1a61a48b9e5631be94434364605b6ba003019e57895eb1a69"], 0x1c}, 0x1, 0xffffff7f0e000000}, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000019080), &(0x7f00000190c0)=0x30) r1 = socket(0x15, 0x80005, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'bridge0\x00', {}, 0x1}) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = socket(0xf, 0x3, 0xfffffffc) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000019340)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0xc0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x0, "000000000000000000000000000500"}}}]}, 0x48}}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='timers\x00') read$FUSE(r4, &(0x7f0000000100)={0x2020}, 0x2020) getsockopt(r1, 0x200000000114, 0x271b, &(0x7f0000000080)=""/102379, &(0x7f0000000000)=0x18feb) read$FUSE(r4, &(0x7f0000000100)={0x2020}, 0x2020) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000019280)={0x0, {0x2, 0x4e21, @local}, {0x2, 0x4e24, @rand_addr=0x64010100}, {0x2, 0x4e23, @private=0xa010101}, 0x188, 0x0, 0x0, 0x0, 0xf2, &(0x7f0000019240), 0x100000000, 0x4}) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x66) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00$\x00\v\f\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00', @ANYRES32=r6, @ANYBLOB="00000000ffffff0900000000090001007072696f00cb0000180002000000000000000000000000000000000000050000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000019200)={&(0x7f0000019100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000191c0)={&(0x7f0000019140)=@getchain={0x54, 0x66, 0x200, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xffe0, 0xe}, {0xe, 0x7}, {0x6}}, [{0x8, 0xb, 0xc23}, {0x8, 0xb, 0x401}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x1ff}, {0x8, 0xb, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x20048000}, 0x4000004) 19:37:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000193c0)=ANY=[@ANYBLOB="3c7c0000290021080700000000000000040000000800170048f2a4b010", @ANYRES32=0x0, @ANYBLOB="4815dda8da1c9f6384b574218bcb0a0396684bda307abc86801a108b3cc7369f2df9aba25d753af9e698405bf54088e77c8625524dda5de5986c177d04067e67059aff20bc97c15de3f4687c087bc910c1a61a48b9e5631be94434364605b6ba003019e57895eb1a69"], 0x1c}, 0x1, 0xffffff7f0e000000}, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000019080), &(0x7f00000190c0)=0x30) r1 = socket(0x15, 0x80005, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'bridge0\x00', {}, 0x1}) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = socket(0xf, 0x3, 0xfffffffc) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000019340)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0xc0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x0, "000000000000000000000000000500"}}}]}, 0x48}}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='timers\x00') read$FUSE(r4, &(0x7f0000000100)={0x2020}, 0x2020) getsockopt(r1, 0x200000000114, 0x271b, &(0x7f0000000080)=""/102379, &(0x7f0000000000)=0x18feb) read$FUSE(r4, &(0x7f0000000100)={0x2020}, 0x2020) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000019280)={0x0, {0x2, 0x4e21, @local}, {0x2, 0x4e24, @rand_addr=0x64010100}, {0x2, 0x4e23, @private=0xa010101}, 0x188, 0x0, 0x0, 0x0, 0xf2, &(0x7f0000019240), 0x100000000, 0x4}) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x66) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00$\x00\v\f\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00', @ANYRES32=r6, @ANYBLOB="00000000ffffff0900000000090001007072696f00cb0000180002000000000000000000000000000000000000050000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000019200)={&(0x7f0000019100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000191c0)={&(0x7f0000019140)=@getchain={0x54, 0x66, 0x200, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xffe0, 0xe}, {0xe, 0x7}, {0x6}}, [{0x8, 0xb, 0xc23}, {0x8, 0xb, 0x401}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x1ff}, {0x8, 0xb, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x20048000}, 0x4000004) 19:37:29 executing program 4: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc0f8565c, &(0x7f0000000080)={0x0, 0xffffffe1, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}}) 19:37:29 executing program 2: ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000000)={{0x6, 0x7}, {0x9}, 0x2, 0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xa, &(0x7f0000000140)=@raw=[@cb_func={0x18, 0xc, 0x4, 0x0, 0x2}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, @jmp={0x5, 0x0, 0x9, 0x4, 0x4, 0xfffffffffffffff4, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @jmp={0x5, 0x0, 0x8, 0x7, 0x0, 0x20, 0xfffffffffffffff0}], &(0x7f00000001c0)='syzkaller\x00', 0x88df, 0x57, &(0x7f0000000200)=""/87, 0x41000, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0x5, 0x5, 0x33}, 0x10}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000100)='svcrdma_qp_error\x00', r0}, 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000400)={0x0, r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='svc_handle_xprt\x00', r0}, 0x10) inotify_rm_watch(0xffffffffffffffff, 0x0) r2 = add_key$fscrypt_v1(&(0x7f00000004c0), &(0x7f0000000500)={'fscrypt:', @desc4}, &(0x7f0000000540)={0x0, "4e7e5d1afb87456b16aa6bb94aaf65fe1fdea5975c2015d9fe4ae45ae4b1ea18c49163482020c8d69d549b8357ef1c544b70926f15813aec96dfdb916c1a09e5", 0x1d}, 0x48, 0xfffffffffffffffb) keyctl$link(0x8, 0x0, r2) r3 = syz_open_procfs(0x0, &(0x7f00000005c0)='gid_map\x00') r4 = inotify_init1(0x80000) ioctl$INOTIFY_IOC_SETNEXTWD(r4, 0x40044900, 0x7ff) keyctl$setperm(0x5, r2, 0x8000000) ioctl$VFIO_SET_IOMMU(r3, 0x3b66, 0x6) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00') read$FUSE(r3, &(0x7f0000000640)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_POLL(r5, &(0x7f0000002680)={0x18, 0xfffffffffffffff5, r6, {0x2}}, 0x18) keyctl$get_security(0x11, 0x0, &(0x7f00000027c0)=""/96, 0x60) 19:37:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000193c0)=ANY=[@ANYBLOB="3c7c0000290021080700000000000000040000000800170048f2a4b010", @ANYRES32=0x0, @ANYBLOB="4815dda8da1c9f6384b574218bcb0a0396684bda307abc86801a108b3cc7369f2df9aba25d753af9e698405bf54088e77c8625524dda5de5986c177d04067e67059aff20bc97c15de3f4687c087bc910c1a61a48b9e5631be94434364605b6ba003019e57895eb1a69"], 0x1c}, 0x1, 0xffffff7f0e000000}, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000019080), &(0x7f00000190c0)=0x30) r1 = socket(0x15, 0x80005, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'bridge0\x00', {}, 0x1}) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = socket(0xf, 0x3, 0xfffffffc) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000019340)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0xc0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x0, "000000000000000000000000000500"}}}]}, 0x48}}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='timers\x00') read$FUSE(r4, &(0x7f0000000100)={0x2020}, 0x2020) getsockopt(r1, 0x200000000114, 0x271b, &(0x7f0000000080)=""/102379, &(0x7f0000000000)=0x18feb) read$FUSE(r4, &(0x7f0000000100)={0x2020}, 0x2020) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000019280)={0x0, {0x2, 0x4e21, @local}, {0x2, 0x4e24, @rand_addr=0x64010100}, {0x2, 0x4e23, @private=0xa010101}, 0x188, 0x0, 0x0, 0x0, 0xf2, &(0x7f0000019240), 0x100000000, 0x4}) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x66) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00$\x00\v\f\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00', @ANYRES32=r6, @ANYBLOB="00000000ffffff0900000000090001007072696f00cb0000180002000000000000000000000000000000000000050000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000019200)={&(0x7f0000019100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000191c0)={&(0x7f0000019140)=@getchain={0x54, 0x66, 0x200, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xffe0, 0xe}, {0xe, 0x7}, {0x6}}, [{0x8, 0xb, 0xc23}, {0x8, 0xb, 0x401}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x1ff}, {0x8, 0xb, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x20048000}, 0x4000004) 19:37:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) 19:37:29 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x8, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0xa}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 19:37:29 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000800000000000000000000a28000000000a09000000000000000000000000000900010073797a3000000000080002400000000214000000110001"], 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000180)={0x2c, 0x4, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, 0x2c}}, 0x0) 19:37:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000193c0)=ANY=[@ANYBLOB="3c7c0000290021080700000000000000040000000800170048f2a4b010", @ANYRES32=0x0, @ANYBLOB="4815dda8da1c9f6384b574218bcb0a0396684bda307abc86801a108b3cc7369f2df9aba25d753af9e698405bf54088e77c8625524dda5de5986c177d04067e67059aff20bc97c15de3f4687c087bc910c1a61a48b9e5631be94434364605b6ba003019e57895eb1a69"], 0x1c}, 0x1, 0xffffff7f0e000000}, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000019080), &(0x7f00000190c0)=0x30) r1 = socket(0x15, 0x80005, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'bridge0\x00', {}, 0x1}) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = socket(0xf, 0x3, 0xfffffffc) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000019340)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0xc0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x0, "000000000000000000000000000500"}}}]}, 0x48}}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='timers\x00') read$FUSE(r4, &(0x7f0000000100)={0x2020}, 0x2020) getsockopt(r1, 0x200000000114, 0x271b, &(0x7f0000000080)=""/102379, &(0x7f0000000000)=0x18feb) read$FUSE(r4, &(0x7f0000000100)={0x2020}, 0x2020) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000019280)={0x0, {0x2, 0x4e21, @local}, {0x2, 0x4e24, @rand_addr=0x64010100}, {0x2, 0x4e23, @private=0xa010101}, 0x188, 0x0, 0x0, 0x0, 0xf2, &(0x7f0000019240), 0x100000000, 0x4}) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x66) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00$\x00\v\f\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00', @ANYRES32=r6, @ANYBLOB="00000000ffffff0900000000090001007072696f00cb0000180002000000000000000000000000000000000000050000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000019200)={&(0x7f0000019100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000191c0)={&(0x7f0000019140)=@getchain={0x54, 0x66, 0x200, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xffe0, 0xe}, {0xe, 0x7}, {0x6}}, [{0x8, 0xb, 0xc23}, {0x8, 0xb, 0x401}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x1ff}, {0x8, 0xb, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x20048000}, 0x4000004) 19:37:29 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x8, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0xa}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 19:37:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) 19:37:29 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000800000000000000000000a28000000000a09000000000000000000000000000900010073797a3000000000080002400000000214000000110001"], 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000180)={0x2c, 0x4, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, 0x2c}}, 0x0) 19:37:29 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$peeksig(0x10, r0, 0x0, 0x0) ptrace$setregset(0x4205, r0, 0x2, &(0x7f0000000100)={0x0}) 19:37:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getlink={0x3c, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x7ff}, @IFLA_ALT_IFNAME={0x14, 0x35, 'vlan1\x00'}]}, 0x3c}}, 0x0) 19:37:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000193c0)=ANY=[@ANYBLOB="3c7c0000290021080700000000000000040000000800170048f2a4b010", @ANYRES32=0x0, @ANYBLOB="4815dda8da1c9f6384b574218bcb0a0396684bda307abc86801a108b3cc7369f2df9aba25d753af9e698405bf54088e77c8625524dda5de5986c177d04067e67059aff20bc97c15de3f4687c087bc910c1a61a48b9e5631be94434364605b6ba003019e57895eb1a69"], 0x1c}, 0x1, 0xffffff7f0e000000}, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000019080), &(0x7f00000190c0)=0x30) r1 = socket(0x15, 0x80005, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'bridge0\x00', {}, 0x1}) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = socket(0xf, 0x3, 0xfffffffc) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000019340)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0xc0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x0, "000000000000000000000000000500"}}}]}, 0x48}}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='timers\x00') read$FUSE(r4, &(0x7f0000000100)={0x2020}, 0x2020) getsockopt(r1, 0x200000000114, 0x271b, &(0x7f0000000080)=""/102379, &(0x7f0000000000)=0x18feb) read$FUSE(r4, &(0x7f0000000100)={0x2020}, 0x2020) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000019280)={0x0, {0x2, 0x4e21, @local}, {0x2, 0x4e24, @rand_addr=0x64010100}, {0x2, 0x4e23, @private=0xa010101}, 0x188, 0x0, 0x0, 0x0, 0xf2, &(0x7f0000019240), 0x100000000, 0x4}) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x66) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00$\x00\v\f\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00', @ANYRES32=r6, @ANYBLOB="00000000ffffff0900000000090001007072696f00cb0000180002000000000000000000000000000000000000050000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000019200)={&(0x7f0000019100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000191c0)={&(0x7f0000019140)=@getchain={0x54, 0x66, 0x200, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xffe0, 0xe}, {0xe, 0x7}, {0x6}}, [{0x8, 0xb, 0xc23}, {0x8, 0xb, 0x401}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x1ff}, {0x8, 0xb, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x20048000}, 0x4000004) 19:37:29 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x8, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0xa}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 19:37:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getlink={0x3c, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x7ff}, @IFLA_ALT_IFNAME={0x14, 0x35, 'vlan1\x00'}]}, 0x3c}}, 0x0) 19:37:29 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000000000)="bc", 0x1, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000080)="020000000980ffff", 0x8) 19:37:29 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000800000000000000000000a28000000000a09000000000000000000000000000900010073797a3000000000080002400000000214000000110001"], 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000180)={0x2c, 0x4, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, 0x2c}}, 0x0) 19:37:29 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x8, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0xa}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 19:37:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) 19:37:29 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x89a0, 0x0) 19:37:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getlink={0x3c, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x7ff}, @IFLA_ALT_IFNAME={0x14, 0x35, 'vlan1\x00'}]}, 0x3c}}, 0x0) 19:37:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) 19:37:29 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000800000000000000000000a28000000000a09000000000000000000000000000900010073797a3000000000080002400000000214000000110001"], 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000180)={0x2c, 0x4, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, 0x2c}}, 0x0) 19:37:29 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) 19:37:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}]}, 0x34}}, 0x0) 19:37:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getlink={0x3c, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x7ff}, @IFLA_ALT_IFNAME={0x14, 0x35, 'vlan1\x00'}]}, 0x3c}}, 0x0) 19:37:29 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) 19:37:30 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000000000)="bc", 0x1, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000080)="020000000980ffff", 0x8) 19:37:30 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000440)=[{&(0x7f0000000180)='1', 0x1}], 0x1) 19:37:30 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_DREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x81}]}}}]}], {0x14, 0x10}}, 0xb8}}, 0x0) 19:37:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}]}, 0x34}}, 0x0) 19:37:30 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000000)=0x10006, 0xfffffffffffffd91) syz_clone(0x40002000, &(0x7f0000000140)="5e796dfccbfa3929cd04cc082a339ef7b55266d1c62653d6b70d7b008873bdcc386c33085285b30efa4c027e2d429da257406283daa1cb14376c15d5be442e4c350750eaadd305a46a75d513c3db5d8b01744a3036841eb526a8e26f22066fdf8c662ee5e1dd0944927cb2cfe56a297a1370e9f41b852a29bc7c0dc3ee8a683fef71a5e8c77d721a32ff6479af8ceb89468a30b0ee0d6b7734a6551c85b783636fb61752e858ea7808a21a6327eda6047f858f8e9f8a7b2ad9ef73d21970c8a3525f13b92e012eb2638e9faa191e87766cb857e2aa6e4dfb3a1e1def30d66442f5fdf5b47aabba7562699afd5f", 0xed, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000240)="ab5b5becfd0d29f9f33657d66a3efbc977f0701d23047c2d0b5afd759b0c62dec663400863718550978c19a889d778581888") pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000040)=0x9) 19:37:30 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) 19:37:30 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) 19:37:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}]}, 0x34}}, 0x0) 19:37:30 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000440)=[{&(0x7f0000000180)='1', 0x1}], 0x1) 19:37:30 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_DREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x81}]}}}]}], {0x14, 0x10}}, 0xb8}}, 0x0) 19:37:30 executing program 4: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x227d, 0xa19, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x45, 0x0, 0x1, [{0x0, 0x0}]}) 19:37:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}]}, 0x34}}, 0x0) [ 126.285347][ T141] usb 5-1: new high-speed USB device number 11 using dummy_hcd 19:37:31 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000000000)="bc", 0x1, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000080)="020000000980ffff", 0x8) 19:37:31 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_DREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x81}]}}}]}], {0x14, 0x10}}, 0xb8}}, 0x0) 19:37:31 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000000)=0x10006, 0xfffffffffffffd91) syz_clone(0x40002000, &(0x7f0000000140)="5e796dfccbfa3929cd04cc082a339ef7b55266d1c62653d6b70d7b008873bdcc386c33085285b30efa4c027e2d429da257406283daa1cb14376c15d5be442e4c350750eaadd305a46a75d513c3db5d8b01744a3036841eb526a8e26f22066fdf8c662ee5e1dd0944927cb2cfe56a297a1370e9f41b852a29bc7c0dc3ee8a683fef71a5e8c77d721a32ff6479af8ceb89468a30b0ee0d6b7734a6551c85b783636fb61752e858ea7808a21a6327eda6047f858f8e9f8a7b2ad9ef73d21970c8a3525f13b92e012eb2638e9faa191e87766cb857e2aa6e4dfb3a1e1def30d66442f5fdf5b47aabba7562699afd5f", 0xed, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000240)="ab5b5becfd0d29f9f33657d66a3efbc977f0701d23047c2d0b5afd759b0c62dec663400863718550978c19a889d778581888") pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000040)=0x9) 19:37:31 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="240000005e0007041dfffd9d6fa2010001000000010000001b0000e5f1fffffff7fffe7e", 0x24}], 0x1}, 0x0) 19:37:31 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000440)=[{&(0x7f0000000180)='1', 0x1}], 0x1) [ 126.695196][ T141] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 19:37:31 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="240000005e0007041dfffd9d6fa2010001000000010000001b0000e5f1fffffff7fffe7e", 0x24}], 0x1}, 0x0) 19:37:31 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="240000005e0007041dfffd9d6fa2010001000000010000001b0000e5f1fffffff7fffe7e", 0x24}], 0x1}, 0x0) 19:37:31 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_DREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x81}]}}}]}], {0x14, 0x10}}, 0xb8}}, 0x0) 19:37:31 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="240000005e0007041dfffd9d6fa2010001000000010000001b0000e5f1fffffff7fffe7e", 0x24}], 0x1}, 0x0) 19:37:31 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000440)=[{&(0x7f0000000180)='1', 0x1}], 0x1) [ 126.965304][ T141] usb 5-1: string descriptor 0 read error: -22 [ 126.971553][ T141] usb 5-1: New USB device found, idVendor=227d, idProduct=0a19, bcdDevice= 0.40 [ 126.984340][ T141] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.057076][ T141] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 127.259385][ T141] usb 5-1: USB disconnect, device number 11 19:37:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newtaction={0x4c, 0x12, 0x319, 0x0, 0x0, {}, [{0x4}, {0x34, 0x1, [@m_vlan={0x30, 0x0, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x1d}, {0xc}}}]}]}, 0x4c}}, 0x0) 19:37:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_getanyicast={0x14, 0x3e, 0x200, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x24008010) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x503, 0x3, 0x0, {0x0, 0xcf, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @dev}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x50}}, 0x0) 19:37:32 executing program 1: prctl$PR_SCHED_CORE(0x27, 0x0, 0x0, 0x0, 0x0) 19:37:32 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000000)=0x10006, 0xfffffffffffffd91) syz_clone(0x40002000, &(0x7f0000000140)="5e796dfccbfa3929cd04cc082a339ef7b55266d1c62653d6b70d7b008873bdcc386c33085285b30efa4c027e2d429da257406283daa1cb14376c15d5be442e4c350750eaadd305a46a75d513c3db5d8b01744a3036841eb526a8e26f22066fdf8c662ee5e1dd0944927cb2cfe56a297a1370e9f41b852a29bc7c0dc3ee8a683fef71a5e8c77d721a32ff6479af8ceb89468a30b0ee0d6b7734a6551c85b783636fb61752e858ea7808a21a6327eda6047f858f8e9f8a7b2ad9ef73d21970c8a3525f13b92e012eb2638e9faa191e87766cb857e2aa6e4dfb3a1e1def30d66442f5fdf5b47aabba7562699afd5f", 0xed, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000240)="ab5b5becfd0d29f9f33657d66a3efbc977f0701d23047c2d0b5afd759b0c62dec663400863718550978c19a889d778581888") pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000040)=0x9) 19:37:32 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000000000)="bc", 0x1, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000080)="020000000980ffff", 0x8) 19:37:32 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x63, 0x9b, 0x5b, 0x40, 0x93a, 0x2601, 0x90e4, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1e, 0x74, 0x6f}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 19:37:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r1, 0xffffffffffffffff}, 0x14}}, 0x0) 19:37:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r1, 0xffffffffffffffff}, 0x14}}, 0x0) 19:37:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newtaction={0x4c, 0x12, 0x319, 0x0, 0x0, {}, [{0x4}, {0x34, 0x1, [@m_vlan={0x30, 0x0, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x1d}, {0xc}}}]}]}, 0x4c}}, 0x0) [ 127.812186][ T4630] Zero length message leads to an empty skb [ 127.821428][ T4632] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 127.848892][ T4632] netlink: 'syz-executor.4': attribute type 29 has an invalid length. 19:37:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r1, 0xffffffffffffffff}, 0x14}}, 0x0) 19:37:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r1, 0xffffffffffffffff}, 0x14}}, 0x0) 19:37:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newtaction={0x4c, 0x12, 0x319, 0x0, 0x0, {}, [{0x4}, {0x34, 0x1, [@m_vlan={0x30, 0x0, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x1d}, {0xc}}}]}]}, 0x4c}}, 0x0) 19:37:32 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000000)=0x10006, 0xfffffffffffffd91) syz_clone(0x40002000, &(0x7f0000000140)="5e796dfccbfa3929cd04cc082a339ef7b55266d1c62653d6b70d7b008873bdcc386c33085285b30efa4c027e2d429da257406283daa1cb14376c15d5be442e4c350750eaadd305a46a75d513c3db5d8b01744a3036841eb526a8e26f22066fdf8c662ee5e1dd0944927cb2cfe56a297a1370e9f41b852a29bc7c0dc3ee8a683fef71a5e8c77d721a32ff6479af8ceb89468a30b0ee0d6b7734a6551c85b783636fb61752e858ea7808a21a6327eda6047f858f8e9f8a7b2ad9ef73d21970c8a3525f13b92e012eb2638e9faa191e87766cb857e2aa6e4dfb3a1e1def30d66442f5fdf5b47aabba7562699afd5f", 0xed, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000240)="ab5b5becfd0d29f9f33657d66a3efbc977f0701d23047c2d0b5afd759b0c62dec663400863718550978c19a889d778581888") pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000040)=0x9) [ 127.921048][ T4642] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 127.942750][ T4642] netlink: 'syz-executor.4': attribute type 29 has an invalid length. 19:37:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_getanyicast={0x14, 0x3e, 0x200, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x24008010) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x503, 0x3, 0x0, {0x0, 0xcf, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @dev}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x50}}, 0x0) [ 127.992839][ T4647] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 128.023925][ T4647] netlink: 'syz-executor.4': attribute type 29 has an invalid length. 19:37:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_getanyicast={0x14, 0x3e, 0x200, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x24008010) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x503, 0x3, 0x0, {0x0, 0xcf, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @dev}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x50}}, 0x0) 19:37:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newtaction={0x4c, 0x12, 0x319, 0x0, 0x0, {}, [{0x4}, {0x34, 0x1, [@m_vlan={0x30, 0x0, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x1d}, {0xc}}}]}]}, 0x4c}}, 0x0) [ 128.055535][ T3647] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 128.105036][ T4657] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 128.126180][ T4657] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 128.415250][ T3647] usb 6-1: New USB device found, idVendor=093a, idProduct=2601, bcdDevice=90.e4 [ 128.424474][ T3647] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.433915][ T3647] usb 6-1: config 0 descriptor?? [ 128.477092][ T3647] gspca_main: pac7311-2.14.0 probing 093a:2601 19:37:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_getanyicast={0x14, 0x3e, 0x200, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x24008010) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x503, 0x3, 0x0, {0x0, 0xcf, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @dev}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x50}}, 0x0) [ 128.915251][ T3647] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -71 [ 128.923130][ T3647] pac7311: probe of 6-1:0.0 failed with error -71 [ 128.931750][ T3647] usb 6-1: USB disconnect, device number 6 19:37:33 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x63, 0x9b, 0x5b, 0x40, 0x93a, 0x2601, 0x90e4, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1e, 0x74, 0x6f}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 19:37:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_getanyicast={0x14, 0x3e, 0x200, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x24008010) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x503, 0x3, 0x0, {0x0, 0xcf, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @dev}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x50}}, 0x0) 19:37:33 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_getanyicast={0x14, 0x3e, 0x200, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x24008010) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x503, 0x3, 0x0, {0x0, 0xcf, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @dev}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x50}}, 0x0) 19:37:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4188aea7, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x0, 0x7}]}) 19:37:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e40)=ANY=[@ANYBLOB="340000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000014001a80100004800c000180"], 0x34}}, 0x0) 19:37:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_getanyicast={0x14, 0x3e, 0x200, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x24008010) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x503, 0x3, 0x0, {0x0, 0xcf, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @dev}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x50}}, 0x0) [ 129.420522][ T4665] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 19:37:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e40)=ANY=[@ANYBLOB="340000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000014001a80100004800c000180"], 0x34}}, 0x0) 19:37:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4188aea7, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x0, 0x7}]}) [ 129.571240][ T4675] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 19:37:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e40)=ANY=[@ANYBLOB="340000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000014001a80100004800c000180"], 0x34}}, 0x0) 19:37:34 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a504bd40eb030200b1ba0000000109021b0001000000000904000001b504b100090581"], 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x400, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000100)=""/239) 19:37:34 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_getanyicast={0x14, 0x3e, 0x200, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x24008010) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x503, 0x3, 0x0, {0x0, 0xcf, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @dev}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x50}}, 0x0) 19:37:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_getanyicast={0x14, 0x3e, 0x200, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x24008010) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x503, 0x3, 0x0, {0x0, 0xcf, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @dev}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x50}}, 0x0) [ 129.722000][ T4680] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 129.745279][ T3648] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 130.015187][ T3647] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 130.125237][ T3648] usb 6-1: New USB device found, idVendor=093a, idProduct=2601, bcdDevice=90.e4 [ 130.134604][ T3648] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.147322][ T3648] usb 6-1: config 0 descriptor?? [ 130.187635][ T3648] gspca_main: pac7311-2.14.0 probing 093a:2601 [ 130.375296][ T3647] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.385522][ T3647] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.b1 [ 130.394622][ T3647] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.403578][ T3647] usb 2-1: config 0 descriptor?? [ 130.505154][ T3647] rc_core: IR keymap rc-hauppauge not found [ 130.511118][ T3647] Registered IR keymap rc-empty [ 130.517645][ T3647] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 130.528363][ T3647] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input5 [ 130.625268][ T3648] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -71 [ 130.633140][ T3648] pac7311: probe of 6-1:0.0 failed with error -71 [ 130.641458][ T3648] usb 6-1: USB disconnect, device number 7 [ 130.653444][ T3646] usb 2-1: USB disconnect, device number 6 19:37:35 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x63, 0x9b, 0x5b, 0x40, 0x93a, 0x2601, 0x90e4, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1e, 0x74, 0x6f}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 19:37:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e40)=ANY=[@ANYBLOB="340000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000014001a80100004800c000180"], 0x34}}, 0x0) 19:37:35 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_getanyicast={0x14, 0x3e, 0x200, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x24008010) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x503, 0x3, 0x0, {0x0, 0xcf, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @dev}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x50}}, 0x0) 19:37:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4188aea7, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x0, 0x7}]}) 19:37:35 executing program 0: r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000200)='./control\x00', 0x0) close(r0) r1 = inotify_init1(0x0) fcntl$setstatus(r1, 0x4, 0x2c00) r2 = gettid() fcntl$setown(r0, 0x8, r2) fcntl$setsig(r0, 0xa, 0xe) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffa]}, 0x0, 0x0, 0x8) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') 19:37:35 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a504bd40eb030200b1ba0000000109021b0001000000000904000001b504b100090581"], 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x400, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000100)=""/239) [ 131.168980][ T4696] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 19:37:35 executing program 2: r0 = syz_io_uring_setup(0x370d, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = timerfd_create(0x0, 0x800) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x10}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@can, 0x80, 0x0, 0x13}}], 0x1, 0x0) timerfd_settime(r3, 0x0, &(0x7f0000000000)={{0x77359400}, {0x0, 0x3938700}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0xf4f4d000) 19:37:35 executing program 0: r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000200)='./control\x00', 0x0) close(r0) r1 = inotify_init1(0x0) fcntl$setstatus(r1, 0x4, 0x2c00) r2 = gettid() fcntl$setown(r0, 0x8, r2) fcntl$setsig(r0, 0xa, 0xe) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffa]}, 0x0, 0x0, 0x8) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') 19:37:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4188aea7, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x0, 0x7}]}) 19:37:35 executing program 2: r0 = syz_io_uring_setup(0x370d, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = timerfd_create(0x0, 0x800) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x10}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@can, 0x80, 0x0, 0x13}}], 0x1, 0x0) timerfd_settime(r3, 0x0, &(0x7f0000000000)={{0x77359400}, {0x0, 0x3938700}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0xf4f4d000) 19:37:35 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x30, 0x0, 0x0, 0x7ffd}, {0x6}]}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x406f408, 0x0) 19:37:35 executing program 0: r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000200)='./control\x00', 0x0) close(r0) r1 = inotify_init1(0x0) fcntl$setstatus(r1, 0x4, 0x2c00) r2 = gettid() fcntl$setown(r0, 0x8, r2) fcntl$setsig(r0, 0xa, 0xe) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffa]}, 0x0, 0x0, 0x8) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') [ 131.446979][ T3650] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 131.485344][ T3647] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 131.826104][ T3650] usb 6-1: New USB device found, idVendor=093a, idProduct=2601, bcdDevice=90.e4 [ 131.835441][ T3650] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.844626][ T3650] usb 6-1: config 0 descriptor?? [ 131.855282][ T3647] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.865517][ T3647] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.b1 [ 131.874606][ T3647] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.883881][ T3647] usb 2-1: config 0 descriptor?? [ 131.897146][ T3650] gspca_main: pac7311-2.14.0 probing 093a:2601 [ 131.975350][ T3647] rc_core: IR keymap rc-hauppauge not found [ 131.981266][ T3647] Registered IR keymap rc-empty [ 131.986925][ T3647] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 131.997687][ T3647] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input6 [ 132.148000][ T3648] usb 2-1: USB disconnect, device number 7 [ 132.325210][ T3650] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -71 [ 132.333647][ T3650] pac7311: probe of 6-1:0.0 failed with error -71 [ 132.341927][ T3650] usb 6-1: USB disconnect, device number 8 [ 132.466536][ T1224] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.472841][ T1224] ieee802154 phy1 wpan1: encryption failed: -22 19:37:37 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x63, 0x9b, 0x5b, 0x40, 0x93a, 0x2601, 0x90e4, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1e, 0x74, 0x6f}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 19:37:37 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x5, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6}]}) 19:37:37 executing program 2: r0 = syz_io_uring_setup(0x370d, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = timerfd_create(0x0, 0x800) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x10}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@can, 0x80, 0x0, 0x13}}], 0x1, 0x0) timerfd_settime(r3, 0x0, &(0x7f0000000000)={{0x77359400}, {0x0, 0x3938700}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0xf4f4d000) 19:37:37 executing program 0: r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000200)='./control\x00', 0x0) close(r0) r1 = inotify_init1(0x0) fcntl$setstatus(r1, 0x4, 0x2c00) r2 = gettid() fcntl$setown(r0, 0x8, r2) fcntl$setsig(r0, 0xa, 0xe) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffa]}, 0x0, 0x0, 0x8) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') 19:37:37 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x30, 0x0, 0x0, 0x7ffd}, {0x6}]}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x406f408, 0x0) 19:37:37 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a504bd40eb030200b1ba0000000109021b0001000000000904000001b504b100090581"], 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x400, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000100)=""/239) [ 132.881707][ T27] audit: type=1326 audit(1647977857.263:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=4721 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6f2f549 code=0x0 19:37:37 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x5, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6}]}) 19:37:37 executing program 2: r0 = syz_io_uring_setup(0x370d, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = timerfd_create(0x0, 0x800) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x10}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@can, 0x80, 0x0, 0x13}}], 0x1, 0x0) timerfd_settime(r3, 0x0, &(0x7f0000000000)={{0x77359400}, {0x0, 0x3938700}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0xf4f4d000) 19:37:37 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x5, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6}]}) [ 132.930244][ T27] audit: type=1326 audit(1647977857.313:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=4721 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=40000003 syscall=6 compat=1 ip=0xf6f2f549 code=0x0 [ 133.016528][ T27] audit: type=1326 audit(1647977857.403:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=4737 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6f2f549 code=0x0 19:37:37 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x5, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6}]}) 19:37:37 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x5, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6}]}) [ 133.066729][ T27] audit: type=1326 audit(1647977857.443:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=4737 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=40000003 syscall=6 compat=1 ip=0xf6f2f549 code=0x0 [ 133.127429][ T27] audit: type=1326 audit(1647977857.453:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=4739 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6e81549 code=0x0 [ 133.151792][ T3648] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 133.175310][ T27] audit: type=1326 audit(1647977857.453:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=4739 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6e81549 code=0x0 [ 133.202559][ T3650] usb 6-1: new high-speed USB device number 9 using dummy_hcd 19:37:37 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x5, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6}]}) [ 133.210248][ T27] audit: type=1326 audit(1647977857.553:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=4744 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6e81549 code=0x0 [ 133.242746][ T27] audit: type=1326 audit(1647977857.613:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=4742 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6f2f549 code=0x0 [ 133.297699][ T27] audit: type=1326 audit(1647977857.613:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=4744 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=6 compat=1 ip=0xf6e81549 code=0x0 [ 133.326363][ T27] audit: type=1326 audit(1647977857.673:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=4742 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=40000003 syscall=6 compat=1 ip=0xf6f2f549 code=0x0 [ 133.635239][ T3648] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.645012][ T3648] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.b1 [ 133.654165][ T3650] usb 6-1: New USB device found, idVendor=093a, idProduct=2601, bcdDevice=90.e4 [ 133.667358][ T3650] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.678142][ T3650] usb 6-1: config 0 descriptor?? [ 133.683168][ T3648] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.692683][ T3648] usb 2-1: config 0 descriptor?? [ 133.748241][ T3650] gspca_main: pac7311-2.14.0 probing 093a:2601 [ 133.816543][ T3648] rc_core: IR keymap rc-hauppauge not found [ 133.822463][ T3648] Registered IR keymap rc-empty [ 133.828469][ T3648] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 133.839348][ T3648] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input7 [ 133.981193][ T3648] usb 2-1: USB disconnect, device number 8 [ 134.187027][ T3650] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -71 [ 134.194953][ T3650] pac7311: probe of 6-1:0.0 failed with error -71 [ 134.210998][ T3650] usb 6-1: USB disconnect, device number 9 19:37:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d00009f7531cbff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d001900001400060076657468115f746f5f7465616d0000000400cc0008000500070000001400044073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) read(r3, &(0x7f00000001c0)=""/88, 0x58) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r4, 0x701, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) 19:37:39 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x5, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6}]}) 19:37:39 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x30, 0x0, 0x0, 0x7ffd}, {0x6}]}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x406f408, 0x0) 19:37:39 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a504bd40eb030200b1ba0000000109021b0001000000000904000001b504b100090581"], 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x400, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000100)=""/239) 19:37:39 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4000000010001fff00d2b444b700000000000000", @ANYRES32=0x0, @ANYBLOB="7fff000000000000180012800e0001007769726567756172640000000400028008000a007d"], 0x40}, 0x1, 0x8}, 0x0) [ 134.743999][ T4752] netlink: 'syz-executor.0': attribute type 11 has an invalid length. 19:37:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x1c4}]}) 19:37:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d00009f7531cbff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d001900001400060076657468115f746f5f7465616d0000000400cc0008000500070000001400044073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) read(r3, &(0x7f00000001c0)=""/88, 0x58) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r4, 0x701, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) [ 134.855799][ T4761] device wireguard0 entered promiscuous mode [ 134.953352][ T4768] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 135.005159][ T3646] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 135.365388][ T3646] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.377323][ T3646] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.b1 [ 135.386744][ T3646] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.405609][ T3646] usb 2-1: config 0 descriptor?? [ 135.495251][ T3646] rc_core: IR keymap rc-hauppauge not found [ 135.502349][ T3646] Registered IR keymap rc-empty [ 135.510344][ T3646] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 135.522062][ T3646] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input8 [ 135.696356][ T3646] usb 2-1: USB disconnect, device number 9 [ 193.906075][ T1224] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.912384][ T1224] ieee802154 phy1 wpan1: encryption failed: -22 [ 211.345117][ T3648] Bluetooth: hci1: command 0x0406 tx timeout [ 211.351168][ T3648] Bluetooth: hci5: command 0x0406 tx timeout [ 211.360376][ T3648] Bluetooth: hci0: command 0x0406 tx timeout [ 211.366974][ T3648] Bluetooth: hci4: command 0x0406 tx timeout [ 221.585292][ T13] Bluetooth: hci2: command 0x0406 tx timeout [ 226.705235][ T1779] Bluetooth: hci3: command 0x0406 tx timeout [ 255.346269][ T1224] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.352564][ T1224] ieee802154 phy1 wpan1: encryption failed: -22 [ 286.065380][ T28] INFO: task syz-executor.2:4736 blocked for more than 143 seconds. [ 286.073400][ T28] Tainted: G W 5.17.0-syzkaller-01442-gb47d5a4f6b8d #0 [ 286.096951][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.108177][ T28] task:syz-executor.2 state:D stack:28792 pid: 4736 ppid: 3632 flags:0x20004004 [ 286.121916][ T28] Call Trace: [ 286.127854][ T28] [ 286.130795][ T28] __schedule+0xa94/0x4910 [ 286.142408][ T28] ? io_schedule_timeout+0x140/0x140 [ 286.151067][ T28] schedule+0xd2/0x1f0 [ 286.160155][ T28] schedule_timeout+0x1db/0x2a0 [ 286.167493][ T28] ? usleep_range_state+0x1b0/0x1b0 [ 286.172709][ T28] ? __wait_for_common+0x2a6/0x360 [ 286.183655][ T28] ? lock_downgrade+0x6e0/0x6e0 [ 286.191506][ T28] ? do_raw_spin_lock+0x120/0x2a0 [ 286.202126][ T28] ? rwlock_bug.part.0+0x90/0x90 [ 286.209497][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 286.214773][ T28] ? trace_hardirqs_on+0x5b/0x1c0 [ 286.225452][ T28] __wait_for_common+0x2af/0x360 [ 286.230413][ T28] ? usleep_range_state+0x1b0/0x1b0 [ 286.239697][ T28] ? io_wq_put_and_exit+0x47c/0xe40 [ 286.244985][ T28] ? bit_wait_io_timeout+0x160/0x160 [ 286.254695][ T28] ? xa_find_after+0x270/0x440 [ 286.263685][ T28] io_wq_put_and_exit+0x4d6/0xe40 [ 286.271495][ T28] ? io_wq_exit_start+0x20/0x20 [ 286.280645][ T28] io_uring_cancel_generic+0x60b/0x695 [ 286.289009][ T28] ? io_uring_setup.cold+0x26c5/0x26c5 [ 286.294488][ T28] ? lock_release+0x522/0x720 [ 286.304961][ T28] ? do_exit+0x187/0x29d0 [ 286.313401][ T28] ? lock_downgrade+0x6e0/0x6e0 [ 286.322408][ T28] ? finish_wait+0x270/0x270 [ 286.329894][ T28] ? rwlock_bug.part.0+0x90/0x90 [ 286.334850][ T28] ? trace_hardirqs_on+0x5b/0x1c0 [ 286.344417][ T28] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 286.353813][ T28] ? io_uring_unreg_ringfd+0xe5/0x140 [ 286.361585][ T28] do_exit+0x4f9/0x29d0 [ 286.368070][ T28] ? rcu_read_lock_sched_held+0xd/0x70 [ 286.373608][ T28] ? lock_acquire+0x442/0x510 [ 286.381907][ T28] ? rcu_read_lock_sched_held+0xd/0x70 [ 286.389993][ T28] ? lock_release+0x522/0x720 [ 286.394685][ T28] ? mm_update_next_owner+0x7a0/0x7a0 [ 286.404124][ T28] ? lock_downgrade+0x6e0/0x6e0 [ 286.411447][ T28] ? do_raw_spin_lock+0x120/0x2a0 [ 286.420217][ T28] ? rwlock_bug.part.0+0x90/0x90 [ 286.427072][ T28] do_group_exit+0xd2/0x2f0 [ 286.431595][ T28] get_signal+0x45a/0x2490 [ 286.436306][ T28] ? force_sigsegv+0x150/0x150 [ 286.441397][ T28] arch_do_signal_or_restart+0x2a9/0x1c40 [ 286.447399][ T28] ? do_futex+0x12e/0x300 [ 286.451763][ T28] ? __ia32_sys_get_robust_list+0x3b0/0x3b0 [ 286.457930][ T28] ? lock_release+0x522/0x720 [ 286.463055][ T28] ? get_sigframe_size+0x10/0x10 [ 286.468272][ T28] ? __ia32_sys_futex_time32+0x1ac/0x440 [ 286.473915][ T28] ? __x64_sys_futex_time32+0x460/0x460 [ 286.479752][ T28] ? vtime_user_exit+0x218/0x6c0 [ 286.484764][ T28] exit_to_user_mode_prepare+0x17d/0x290 [ 286.490688][ T28] syscall_exit_to_user_mode+0x19/0x60 [ 286.496362][ T28] do_int80_syscall_32+0x53/0x90 [ 286.501310][ T28] entry_INT80_compat+0x71/0x76 [ 286.506385][ T28] RIP: 0023:0xf6f34549 [ 286.511149][ T28] RSP: 002b:00000000f592e67c EFLAGS: 00000296 ORIG_RAX: 00000000000000f0 [ 286.519826][ T28] RAX: fffffffffffffe00 RBX: 00000000f7090fa8 RCX: 0000000000000080 [ 286.529190][ T28] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7090fac [ 286.538035][ T28] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 286.546731][ T28] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 286.554719][ T28] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 286.563060][ T28] [ 286.566929][ T28] INFO: lockdep is turned off. [ 286.571701][ T28] NMI backtrace for cpu 0 [ 286.576027][ T28] CPU: 0 PID: 28 Comm: khungtaskd Tainted: G W 5.17.0-syzkaller-01442-gb47d5a4f6b8d #0 [ 286.587583][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 286.597633][ T28] Call Trace: [ 286.600914][ T28] [ 286.603845][ T28] dump_stack_lvl+0xcd/0x134 [ 286.608504][ T28] nmi_cpu_backtrace.cold+0x47/0x144 [ 286.613797][ T28] ? lapic_can_unplug_cpu+0x80/0x80 [ 286.619035][ T28] nmi_trigger_cpumask_backtrace+0x1e6/0x230 [ 286.625058][ T28] watchdog+0xc1d/0xf50 [ 286.629220][ T28] ? proc_dohung_task_timeout_secs+0x80/0x80 [ 286.635204][ T28] kthread+0x2e9/0x3a0 [ 286.639293][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 286.644938][ T28] ret_from_fork+0x1f/0x30 [ 286.649372][ T28] [ 286.652831][ T28] Sending NMI from CPU 0 to CPUs 1: [ 286.658162][ C1] NMI backtrace for cpu 1 [ 286.658175][ C1] CPU: 1 PID: 10 Comm: kworker/u4:1 Tainted: G W 5.17.0-syzkaller-01442-gb47d5a4f6b8d #0 [ 286.658201][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 286.658215][ C1] Workqueue: phy5 ieee80211_iface_work [ 286.658315][ C1] RIP: 0010:unwind_next_frame+0xaf/0x1ce0 [ 286.658350][ C1] Code: 3b 48 ba 00 00 00 00 00 fc ff df 48 c7 04 13 00 00 00 00 48 8b 8c 24 98 00 00 00 65 48 2b 0c 25 28 00 00 00 0f 85 53 15 00 00 <48> 81 c4 a0 00 00 00 5b 5d 41 5c 41 5d 41 5e 41 5f c3 4d 8d 66 48 [ 286.658373][ C1] RSP: 0018:ffffc90000cf7128 EFLAGS: 00000246 [ 286.658389][ C1] RAX: 0000000000000001 RBX: 1ffff9200019ee2d RCX: 0000000000000000 [ 286.658405][ C1] RDX: dffffc0000000000 RSI: ffffc90000cf7cf8 RDI: 0000000000000001 [ 286.658420][ C1] RBP: ffffc90000cf7d28 R08: ffffffff8e9daa60 R09: 0000000000000001 [ 286.658436][ C1] R10: fffff5200019ee4b R11: 0000000000088078 R12: ffffc90000cf0000 [ 286.658452][ C1] R13: ffffc90000cf7235 R14: ffffc90000cf7200 R15: ffffc90000cf7234 [ 286.658469][ C1] FS: 0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 286.658491][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 286.658507][ C1] CR2: 00007f217e80cc48 CR3: 000000000b88e000 CR4: 00000000003506e0 [ 286.658530][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 286.658544][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 286.658559][ C1] Call Trace: [ 286.658564][ C1] [ 286.658573][ C1] ? ieee80211_iface_work+0xa69/0xd00 [ 286.658599][ C1] ? deref_stack_reg+0x150/0x150 [ 286.658622][ C1] ? ieee80211_iface_work+0xa69/0xd00 [ 286.658645][ C1] ? kernel_text_address+0xd/0x80 [ 286.658671][ C1] ? create_prof_cpu_mask+0x20/0x20 [ 286.658700][ C1] arch_stack_walk+0x7d/0xe0 [ 286.658752][ C1] ? process_one_work+0x9ac/0x1650 [ 286.658777][ C1] stack_trace_save+0x8c/0xc0 [ 286.658802][ C1] ? filter_irq_stacks+0x90/0x90 [ 286.658844][ C1] ? lock_downgrade+0x6e0/0x6e0 [ 286.658870][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 286.658897][ C1] kasan_save_stack+0x1e/0x40 [ 286.658962][ C1] ? kasan_save_stack+0x1e/0x40 [ 286.658987][ C1] ? __kasan_record_aux_stack+0xbe/0xd0 [ 286.659011][ C1] ? kvfree_call_rcu+0x74/0x990 [ 286.659031][ C1] ? cfg80211_update_known_bss+0x833/0xa60 [ 286.659070][ C1] ? cfg80211_bss_update+0xef/0x2070 [ 286.659093][ C1] ? cfg80211_inform_single_bss_frame_data+0x731/0xf40 [ 286.659120][ C1] ? cfg80211_inform_bss_frame_data+0xa7/0xb50 [ 286.659146][ C1] ? ieee80211_bss_info_update+0x35b/0xb00 [ 286.659185][ C1] ? ieee80211_ibss_rx_queued_mgmt+0x19cf/0x3150 [ 286.659210][ C1] ? ieee80211_iface_work+0xa69/0xd00 [ 286.659234][ C1] ? lock_release+0x522/0x720 [ 286.659258][ C1] ? debug_object_activate+0x287/0x3e0 [ 286.659316][ C1] ? debug_object_active_state+0x260/0x350 [ 286.659340][ C1] ? lock_downgrade+0x6e0/0x6e0 [ 286.659366][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 286.659394][ C1] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 286.659424][ C1] ? trace_hardirqs_on+0x5b/0x1c0 [ 286.659447][ C1] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 286.659476][ C1] ? debug_object_active_state+0x260/0x350 [ 286.659500][ C1] ? kasan_save_stack+0x2e/0x40 [ 286.659531][ C1] ? debug_object_destroy+0x210/0x210 [ 286.659554][ C1] ? cfg80211_inform_bss_frame_data+0xa7/0xb50 [ 286.659579][ C1] ? ieee80211_bss_info_update+0x35b/0xb00 [ 286.659606][ C1] ? ieee80211_ibss_rx_queued_mgmt+0x19cf/0x3150 [ 286.659632][ C1] ? cfg80211_find_elem_match+0x193/0x1d0 [ 286.659656][ C1] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 286.659685][ C1] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 286.659714][ C1] ? __phys_addr+0xc4/0x140 [ 286.659739][ C1] __kasan_record_aux_stack+0xbe/0xd0 [ 286.659763][ C1] kvfree_call_rcu+0x74/0x990 [ 286.659782][ C1] ? do_raw_spin_lock+0x120/0x2a0 [ 286.659810][ C1] cfg80211_update_known_bss+0x833/0xa60 [ 286.659836][ C1] cfg80211_bss_update+0xef/0x2070 [ 286.659863][ C1] ? rcu_read_lock_sched_held+0xd/0x70 [ 286.659888][ C1] ? trace_kmalloc+0x32/0xf0 [ 286.659911][ C1] ? __kmalloc+0x1f3/0x450 [ 286.659937][ C1] cfg80211_inform_single_bss_frame_data+0x731/0xf40 [ 286.659966][ C1] ? cfg80211_inform_bss_data+0x160/0x160 [ 286.659991][ C1] ? rcu_read_lock_sched_held+0xd/0x70 [ 286.660023][ C1] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 286.660051][ C1] ? trace_hardirqs_on+0x5b/0x1c0 [ 286.660073][ C1] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 286.660102][ C1] ? jhash+0x4d6/0x5d0 [ 286.660124][ C1] cfg80211_inform_bss_frame_data+0xa7/0xb50 [ 286.660152][ C1] ? rcu_read_lock_sched_held+0xd/0x70 [ 286.660177][ C1] ? lock_acquire+0x442/0x510 [ 286.660201][ C1] ? rcu_read_lock_sched_held+0xd/0x70 [ 286.660225][ C1] ? lock_release+0x522/0x720 [ 286.660249][ C1] ? ieee80211_bss_info_update+0x301/0xb00 [ 286.660276][ C1] ? cfg80211_inform_single_bss_frame_data+0xf40/0xf40 [ 286.660303][ C1] ? rcu_read_lock_sched_held+0xd/0x70 [ 286.660328][ C1] ? lock_acquire+0x442/0x510 [ 286.660352][ C1] ? rcu_read_lock_sched_held+0xd/0x70 [ 286.660377][ C1] ? lock_release+0x522/0x720 [ 286.660404][ C1] ieee80211_bss_info_update+0x35b/0xb00 [ 286.660431][ C1] ? rcu_read_lock_sched_held+0xd/0x70 [ 286.660456][ C1] ? ieee80211_rx_bss_put+0x50/0x50 [ 286.660482][ C1] ? ieee80211_ibss_rx_queued_mgmt+0x1981/0x3150 [ 286.660515][ C1] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 286.660545][ C1] ? ieee80211_mandatory_rates+0x1b4/0x240 [ 286.660594][ C1] ieee80211_ibss_rx_queued_mgmt+0x19cf/0x3150 [ 286.660619][ C1] ? lock_downgrade+0x6e0/0x6e0 [ 286.660644][ C1] ? lock_acquire+0x442/0x510 [ 286.660672][ C1] ? ieee80211_ibss_rx_no_sta+0x840/0x840 [ 286.660696][ C1] ? lock_release+0x522/0x720 [ 286.660720][ C1] ? kcov_remote_start+0x277/0x770 [ 286.660747][ C1] ? lock_downgrade+0x6e0/0x6e0 [ 286.660771][ C1] ? do_raw_spin_lock+0x120/0x2a0 [ 286.660797][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 286.660822][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 286.660849][ C1] ? kcov_remote_start+0x155/0x770 [ 286.660875][ C1] ? trace_hardirqs_on+0x5b/0x1c0 [ 286.660898][ C1] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 286.660928][ C1] ieee80211_iface_work+0xa69/0xd00 [ 286.660954][ C1] process_one_work+0x9ac/0x1650 [ 286.660980][ C1] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 286.661004][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 286.661034][ C1] worker_thread+0x657/0x1110 [ 286.661060][ C1] ? process_one_work+0x1650/0x1650 [ 286.661083][ C1] kthread+0x2e9/0x3a0 [ 286.661101][ C1] ? kthread_complete_and_exit+0x40/0x40 [ 286.661130][ C1] ret_from_fork+0x1f/0x30 [ 286.661160][ C1] [ 287.323404][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 287.330271][ T28] CPU: 1 PID: 28 Comm: khungtaskd Tainted: G W 5.17.0-syzkaller-01442-gb47d5a4f6b8d #0 [ 287.341202][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 287.351251][ T28] Call Trace: [ 287.354525][ T28] [ 287.357454][ T28] dump_stack_lvl+0xcd/0x134 [ 287.362053][ T28] panic+0x2b0/0x6dd [ 287.366004][ T28] ? __warn_printk+0xf3/0xf3 [ 287.370608][ T28] ? lapic_can_unplug_cpu+0x80/0x80 [ 287.375835][ T28] ? preempt_schedule_thunk+0x16/0x18 [ 287.381221][ T28] ? nmi_trigger_cpumask_backtrace+0x1c9/0x230 [ 287.387391][ T28] ? watchdog.cold+0x130/0x158 [ 287.392216][ T28] watchdog.cold+0x141/0x158 [ 287.396828][ T28] ? proc_dohung_task_timeout_secs+0x80/0x80 [ 287.402825][ T28] kthread+0x2e9/0x3a0 [ 287.406912][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 287.412554][ T28] ret_from_fork+0x1f/0x30 [ 287.416985][ T28] [ 287.420164][ T28] Kernel Offset: disabled [ 287.424474][ T28] Rebooting in 86400 seconds..