last executing test programs: 1m8.442322036s ago: executing program 2 (id=9865): mknod$loop(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) io_setup(0x6, &(0x7f0000000240)) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0xfffffd6e}, {&(0x7f0000019740)=""/242}], 0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_open_dev$video4linux(&(0x7f0000000300), 0x0, 0x0) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f0000000000)={0x9, 0x8}) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) semget$private(0x0, 0x1, 0x0) semop(0x0, &(0x7f0000000000)=[{0x0, 0xffff}], 0x1) 1m5.707672724s ago: executing program 2 (id=9871): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x3091, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) io_uring_setup(0x168c, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x0, 0x16}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) r4 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x2000c1, 0x0) r5 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205649, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)={0xf029, 0x6, '\x00', @string=&(0x7f00000001c0)=0x8}}) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, &(0x7f0000000000)={0x7b3, 0x2, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f000000b940)={0x0, 0x0, 0xc6, 0x3, @vifc_lcl_addr=@multicast2, @remote}, 0x10) r8 = accept4$packet(r4, 0x0, &(0x7f000000cac0), 0x80000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f000000b9c0)={'batadv0\x00', 0x0}) setsockopt$packet_drop_memb(r8, 0x107, 0x2, &(0x7f000000ba00)={r9, 0x1, 0x6, @random="f7f4cbc53791"}, 0x10) sendto$packet(r8, &(0x7f000000ba40)="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", 0x1000, 0x8000, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f000000ca40)={0x0, 0x20, 0x8, 0x7, 0x5, 0x400}, &(0x7f000000ca80)=0x14) 1m4.335999861s ago: executing program 2 (id=9872): inotify_init1(0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x309000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='block_bio_remap\x00'}, 0x10) sync() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r3, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0x46, &(0x7f0000000680)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @dev}, "0104000780000100"}}}}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socket$nl_route(0x10, 0x3, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) 1m2.841853268s ago: executing program 3 (id=9877): inotify_init1(0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x309000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='block_bio_remap\x00', r2}, 0x10) sync() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0x46, &(0x7f0000000680)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @dev}, "0104000780000100"}}}}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socket$nl_route(0x10, 0x3, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) 1m2.753382735s ago: executing program 2 (id=9879): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0xe43986f95b0e4309}) ioctl$TUNGETSNDBUF(r1, 0x400454dc, &(0x7f0000001700)) socket(0x0, 0x0, 0x0) unshare(0x0) io_submit(0x0, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x16, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x19f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r2, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r3, &(0x7f0000000340)={&(0x7f0000000240)={0xa, 0x4e21, 0x200, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="00dada25362e9ec264509fb4a9ec92da0df8557492bcc2d28b0a400d419e38f347e03d5424901a842f8d48deb4fbdcbf8ef426515197a9a24da9475c08c24ccc62df1947167b1f597830457db6b1086e25a57f5fcbb83e58e64af03c8be5eab3fccc14e0144623ddc1de51756e9b33ed29f31105814f563a9582adc9aa407b4936770e9cd7a287d72ddce51fdd0750d17ffb82f030d6b77a27968224e7a8592fc8847edc8a786da3fd542d61ec8d51c2a42f1dd5e82bd14b861728bfd92b2a5dfd3b51fa536688c508cb4483b0db8b5a1e213096904b"], 0x28}, 0x8010) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_vhci(&(0x7f0000000640)=ANY=[], 0x22) syz_emit_vhci(0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x8000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x7ff, 0xef9, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x8, 0x7fff}) r5 = socket(0x10, 0x2, 0x0) write(r5, &(0x7f0000000040)="1c0000001a009b8a14e5f40700426e2400000000ff00000000000000", 0x23) recvmmsg(r5, &(0x7f0000003200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002b00)=[{0x0}, {&(0x7f0000002900)=""/70, 0x46}], 0x2}}, {{&(0x7f0000002b80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000002e80)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000002dc0)=""/110, 0x6e}, {&(0x7f0000002e40)=""/47, 0x2f}], 0x5}}], 0x3, 0x0, 0x0) 23.126231235s ago: executing program 1 (id=9933): syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x45}, @l2cap_cid_signaling={{0x41}, [@l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x0, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x15, 0x4}, {0xc2, 0x9357}}, @l2cap_disconn_rsp={{0x7, 0x5, 0x4}, {0x401, 0x1}}, @l2cap_info_req={{0xa, 0x77, 0x2}, {0x5}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x46, 0x2}, {0x3}}, @l2cap_conf_rsp={{0x5, 0x0, 0x19}, {0x80, 0x0, 0x7ff, [@l2cap_conf_mtu={0x1, 0x2, 0x1167}, @l2cap_conf_rfc={0x4, 0x9, {0x3, 0x0, 0x10, 0x5, 0xc000, 0x99}}, @l2cap_conf_mtu={0x1, 0x2, 0x3a}]}}]}}, 0x4a) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x3) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="62000000000000007b0a00ff000000001d0a000000000000950000000000000018100000c60381dc6c17fbb970c1aec762bc25e76efad02d3dc177ebac46e7f3cbb2f05fc45966b903378233a4e4873bfc51fbd9ecfa5e81b375b700ce5b1ed3e41578372c9c37fefb6c3b59797d944e1af368429d9c6fe9c3144f159d864cdb42d2e39fd2531835938daa4a6c8d370ffbb0d1868e90453c6c184ec3fab174fd36d6be9336e95c670283ae325ad6958201fd8088aed6aa4d2f9adca64fe7b66e5ec32b4d2162371e3a82a3beea", @ANYRES32, @ANYBLOB="100000000000002500000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xa, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x47, 0x10, 0x0, 0x1e}, 0x2d) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = dup(r3) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000050000f54503"]) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f00000016c0)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000280)="1e7d56d8895e9488fc7fff1118f35efabf17c0875467b65ae42334e184d62c1810528d3a2d1fc3f783570a328e6008c66f28299a32a044c8901e2a7d48c5335a8f46e44b0ea0a14eab7135dac977761a3df35c8a1527b5e708338c91308da426dc1266f4fb925c21800614", 0x6b}, {&(0x7f00000005c0)="a947098c6bf43bbf2abe42602aeb3b238b4a4e11b2fcbcd169a81756a4f42e336d847c3234208d7c84e41b61f959a7819c1ce4d22e5bdb00d47b069194ea949c871c", 0x42}, {&(0x7f0000000100)="95918988db5383667f18828c2ec99b31541814412b447c5b6e6b0ca925fba3b26e2b82c94d869046e5b75bc8fa8e72cec49dec73f0c8c7a9a017e3dc3a27af", 0x3f}, {&(0x7f0000000300)="9a222253855f1e990901dae107c0d30623a0e6f18d3b862baf6d62560d46", 0x1e}, {&(0x7f0000000740)="47115020c6e0477a246fa1d849af853ce6029b9617dc517db77971f8ce8ac10b1d95a8eae6d775831fe429ac3bbf9a26302e23bba41a44f79d48a34d5250fc1aa18243b864d6afea0e06071b513b89e3c1", 0x51}], 0x5, &(0x7f0000000840)=[@ip_retopts={{0x20, 0x0, 0x7, {[@rr={0x7, 0xf, 0x4e, [@remote, @private=0xa010102, @multicast2]}]}}}, @ip_retopts={{0xe4, 0x0, 0x7, {[@lsrr={0x83, 0x1b, 0xbc, [@private=0xa010102, @empty, @multicast1, @empty, @local, @empty]}, @cipso={0x86, 0xe, 0x1, [{0x1, 0x3, '9'}, {0x0, 0x5, "b2933c"}]}, @ssrr={0x89, 0x13, 0x10, [@local, @multicast1, @multicast1, @dev={0xac, 0x14, 0x14, 0x2a}]}, @noop, @timestamp_addr={0x44, 0x2c, 0xc9, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@multicast1, 0x2}, {@empty, 0x7}, {@loopback, 0x100}, {@private=0xa010100, 0x3}]}, @timestamp_prespec={0x44, 0x4c, 0x1f, 0x3, 0x8, [{@loopback, 0x1}, {@multicast2, 0x5}, {@private=0xa010102}, {@multicast2, 0x3}, {@multicast1, 0x679c}, {@broadcast, 0x8}, {@empty, 0xd5e}, {@broadcast, 0x2}, {@loopback, 0x9}]}, @timestamp_prespec={0x44, 0x1c, 0x5c, 0x3, 0x8, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xcc}, {@rand_addr=0x64010100, 0x10000}, {@local, 0x5}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x52}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}], 0x138}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000980)="0ca781006f5d72c7721b8dc7eb1433754618910055601d5dd3df937fe2eb1f2ebf5bff2a41451d7fed97170d8fa6a36f70b8ee1c799d9f3a52104444f56df08783621cf64210fd28a9581909466dbafcaabd00e4853e535c", 0x58}, {&(0x7f0000000640)="106575bda5115cc330f96e638def0d18cf571b296c070f35414f3d27", 0x1c}], 0x2, &(0x7f0000000a40)=[@ip_retopts={{0x94, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0xb0, 0x1, 0x8, [{@remote, 0x4}, {@private=0xa010100, 0x4}]}, @lsrr={0x83, 0x2b, 0x6a, [@empty, @private=0xa010100, @rand_addr=0x64010100, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xa}, @multicast2, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, @noop, @ra={0x94, 0x4}, @cipso={0x86, 0x10, 0x3, [{0x1, 0x2}, {0x0, 0x8, "e28a42d93c06"}]}, @generic={0x89, 0x9, "d0d8a2e3f43209"}, @cipso={0x86, 0x24, 0x0, [{0x0, 0x11, "af242a018c0c6ab9d56a3866847161"}, {0x6, 0xd, "bdee9987fe3c5bb8a21dcb"}]}, @noop]}}}, @ip_retopts={{0x38, 0x0, 0x7, {[@ssrr={0x89, 0x27, 0x3b, [@broadcast, @rand_addr=0x64010100, @rand_addr=0x64010100, @multicast1, @private=0xa010101, @remote, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x10001}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}}], 0x138}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000bc0)="a5477386038a54a3b976a7a005f896d0dcf6c39dd639c524b7d975bde66559227b438c8f7c92cf35949a70538047041236f7effe819d69a8449a4d82b859e0d181a2b83c8deb", 0x46}, {&(0x7f0000000c40)="d103e87bb97536bca5cc191dc8f5cc0c86c69d53d3e890aaabb433ceb3065df688309fc7ae0a1b9bd17278711149df96a58e8cc35e4a8b2953bcc8dc2808cd759b655e43330204571586d841bc1aa2bbb74ea0e2fef8e0c3ba357c18a2fe9451e30a82a5106a8d727a837d8a314a45855f800b539e46bcb1b9b053ad700fdca0fb8b", 0x82}], 0x2, &(0x7f0000000d40)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xc}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xe}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x30}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffff8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xac0e}}, @ip_tos_int={{0x14}}], 0xd8}}, {{&(0x7f0000000e40)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000f00)=[{&(0x7f0000000e80)="092f344cb261bbc6ca4b59518de452957cd303e2c5f59a9a71b86a8ccb842faebc2b939af8ced08574f00191d94868f8f820526f99911779dcf461930448617dd29ff7bd326d8701c412ef892bcd36d3319d5ecb312da2990791bc2f4079c7e63a374377", 0x64}, {&(0x7f000001aa80)="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", 0x1000}], 0x2, &(0x7f000001ba80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x10}}, @ip_tos_int={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010102, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x83}}, @ip_retopts={{0x10c, 0x0, 0x7, {[@timestamp={0x44, 0x20, 0xba, 0x0, 0x4, [0x238e, 0x0, 0x3, 0xd3, 0x101, 0x9, 0xffffff1f]}, @timestamp_addr={0x44, 0x54, 0x50, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@empty, 0xb}, {@remote, 0xb7}, {@local, 0xcb02}, {@local, 0x8}, {@empty, 0xfffff800}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x6}, {@multicast1, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x700}]}, @end, @lsrr={0x83, 0x1b, 0x43, [@local, @dev={0xac, 0x14, 0x14, 0x32}, @dev={0xac, 0x14, 0x14, 0x22}, @private=0xa010100, @multicast2, @loopback]}, @timestamp={0x44, 0xc, 0x95, 0x0, 0x3, [0x8a47, 0x1000]}, @rr={0x7, 0x17, 0xcb, [@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x32}, @rand_addr=0x64010102, @loopback, @rand_addr=0x64010100]}, @timestamp_addr={0x44, 0x3c, 0x43, 0x1, 0x6, [{@broadcast, 0x7}, {@loopback, 0x8}, {@private=0xa010102, 0x1fe00000}, {@remote, 0x60a}, {@empty, 0x6e752e9b}, {@loopback, 0x80000000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}]}, @rr={0x7, 0xb, 0xf6, [@multicast2, @multicast2]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0xc051, @rand_addr=0x64010101}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x10001}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010100, @multicast1}}}], 0x208}}, {{&(0x7f0000001140)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000001240), 0x0, &(0x7f0000000f40)=[@ip_retopts={{0x9c, 0x0, 0x7, {[@rr={0x7, 0x7, 0x70, [@rand_addr=0x64010100]}, @timestamp_prespec={0x44, 0x1c, 0x7a, 0x3, 0x9, [{@empty, 0x7}, {@multicast1, 0xffffffff}, {@loopback, 0x1}]}, @generic={0x94, 0x4, "37e7"}, @end, @ssrr={0x89, 0x1f, 0x31, [@rand_addr=0x64010102, @empty, @loopback, @broadcast, @private=0xa010100, @remote, @loopback]}, @rr={0x7, 0x2b, 0xb, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x1b}, @dev={0xac, 0x14, 0x14, 0x36}, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @loopback, @multicast2, @empty, @multicast1]}, @ssrr={0x89, 0x17, 0xea, [@empty, @broadcast, @broadcast, @remote, @broadcast]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf}}, @ip_retopts={{0x34, 0x0, 0x7, {[@noop, @timestamp_prespec={0x44, 0x1c, 0x70, 0x3, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3ff}, {@private=0xa010101, 0x3}, {@multicast1, 0x1}]}, @lsrr={0x83, 0x7, 0x1f, [@empty]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x64b0}}], 0x120}}, {{&(0x7f00000013c0)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000001480)=[{&(0x7f0000001400)="b87856d533b2d73796c9fd79e02fa419e2a0dc060d3d7ae38696d8061cf91db60388dbf6354465140b57647c16ca1e1ea248197ce96bc20a", 0x38}, {&(0x7f0000001440)}], 0x2, &(0x7f00000014c0)=[@ip_retopts={{0x3c, 0x0, 0x7, {[@end, @ra={0x94, 0x4}, @noop, @lsrr={0x83, 0xb, 0xed, [@rand_addr=0x64010101, @remote]}, @timestamp={0x44, 0x18, 0x31, 0x0, 0x2, [0x1fffe00, 0x5, 0x8, 0x0, 0xb]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x400000}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_retopts={{0x54, 0x0, 0x7, {[@noop, @timestamp_prespec={0x44, 0x34, 0x11, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@local, 0x9}, {@remote, 0x1ed}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x6}, {@multicast1, 0x6}, {@remote, 0xfc}]}, @ssrr={0x89, 0xf, 0x99, [@local, @private=0xa010101, @local]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010100, @multicast2}}}, @ip_retopts={{0xbc, 0x0, 0x7, {[@lsrr={0x83, 0x13, 0xf5, [@multicast2, @multicast2, @remote, @remote]}, @lsrr={0x83, 0x2b, 0x5b, [@local, @multicast2, @private=0x2, @private=0xa010101, @multicast2, @empty, @rand_addr=0x81, @rand_addr=0x64010101, @empty, @local]}, @generic={0x82, 0x6, "aa756edc"}, @cipso={0x86, 0x32, 0x0, [{0x6, 0xb, "bb6248ae7e9d353575"}, {0x6, 0xf, "de5cb9f99d7f9f968176bed3f7"}, {0x0, 0x8, "0b3aacf8e054"}, {0x5, 0x7, "f04d6f4c37"}, {0x5, 0x3, '('}]}, @noop, @timestamp={0x44, 0x8, 0x20, 0x0, 0x8, [0x6]}, @timestamp_addr={0x44, 0x2c, 0x37, 0x1, 0x0, [{@multicast2, 0x93}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xd}, {@multicast1, 0x8}, {@private=0xa010100, 0x10000}, {@empty, 0x9}]}]}}}], 0x1d8}}], 0x6, 0x0) syz_emit_ethernet(0x69, &(0x7f0000000400)=ANY=[@ANYBLOB="0180c20000000000cae4a00c57a9f8c4bcaeddc23f000000008848000803000000000000000f0000000000000003001d000000000000007e42037bb6570b6a66b028c6e96d648317310b82bf54f6ba458849486e014a64a99ecde5ec2d5403a53c218e000000000000ab4ca3de91c79487f8185bb7aadfed1dae791c03c985fcf75ff7400ace39e5d6e699eb5a46147ad770bd27799ebd7cd1f143bb1e197ec1d1eaca5d06baef206f304d05e3a1877274387f01eca3cbe780ce0a1d4c"], 0x0) pipe2(&(0x7f0000000000), 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="340000001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="000000000000000014001a801000080000000000000000000000e902"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) 20.184589328s ago: executing program 1 (id=9934): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0x20}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001400), 0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000002340)={'wlan0\x00'}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x40, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{}, {}, @broadcast}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x64}, @void}}}}]}, 0x40}}, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000740)={0x6, 0x0, [{0x2, 0x92, &(0x7f0000000500)=""/146}, {0x3000, 0x1000, &(0x7f0000002680)=""/4096}, {0x3000, 0x1000, &(0x7f0000003680)=""/4096}, {0x1000, 0x3f, &(0x7f00000001c0)=""/63}, {0x10000, 0x43, &(0x7f00000005c0)=""/67}, {0x100000, 0x7f, &(0x7f00000006c0)=""/127}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)={@ifindex, 0xffffffffffffffff, 0xb, 0x8, 0xffffffffffffffff, @link_id}, 0x20) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="041816aaaaaaaaaa103395f9d846821098c6fb9d51eed8b8427e"], 0x1a) socket$nl_netfilter(0x10, 0x3, 0xc) getdents64(0xffffffffffffffff, 0x0, 0x18) sendmsg$NL80211_CMD_GET_SURVEY(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="00fdff", @ANYRES16=r8, @ANYBLOB="210300000000000000003200000008000300", @ANYRES32=r9, @ANYBLOB], 0x1c}}, 0x0) 19.85753717s ago: executing program 1 (id=9938): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@ipv6_newrule={0x24, 0x20, 0xc01, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_FWMARK={0x8}]}, 0x24}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYRES8=r0], 0x0, 0x4e}, 0x20) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl2\x00', 0x0}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) syz_open_dev$vcsa(&(0x7f0000000000), 0x6, 0x2041) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010065727370616e000014000280050016000000000006000e0011"], 0x44}}, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$uinput_user_dev(r3, &(0x7f0000001100)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa3]}, 0x45c) r5 = socket$qrtr(0x2a, 0x2, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000340)={0x1, 0x0, 0x27, 0x4}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000003c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)}) ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f0000000040)={0x0, r8, r9}) close_range(r5, 0xffffffffffffffff, 0x0) r10 = dup(r3) ioctl$UI_DEV_CREATE(r10, 0x5501) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x2}) 14.289653617s ago: executing program 1 (id=9944): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@ipv6_newrule={0x24, 0x20, 0xc01, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_FWMARK={0x8}]}, 0x24}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYRES8=r0], 0x0, 0x4e}, 0x20) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl2\x00', 0x0}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) syz_open_dev$vcsa(&(0x7f0000000000), 0x6, 0x2041) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010065727370616e000014000280050016000000000006000e0011"], 0x44}}, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$uinput_user_dev(r3, &(0x7f0000001100)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa3]}, 0x45c) r5 = socket$qrtr(0x2a, 0x2, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000340)={0x1, 0x0, 0x27, 0x4}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000003c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000040)={r10, r8, r9}) close_range(r5, 0xffffffffffffffff, 0x0) r11 = dup(r3) ioctl$UI_DEV_CREATE(r11, 0x5501) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x2}) 10.677904623s ago: executing program 4 (id=9952): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c003d000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f00000026c0)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r5 = landlock_create_ruleset(&(0x7f00000000c0)={0x1000, 0x2}, 0x10, 0x0) r6 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYRES32=0x0, @ANYRESOCT=r4, @ANYRESOCT=r6, @ANYRES8=r0, @ANYRES64=r5, @ANYRES8=r6, @ANYBLOB="2076394449ef5c03d9faa979e57d450501b4dbd26ffa51d76bef0c11aa5271b1731c2bba4cb6fe55a52891022ff1df72a8f0"], 0xfb) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) read(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) process_madvise(0xffffffffffffffff, &(0x7f0000000200), 0x1000000000000276, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x101641) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 9.506845129s ago: executing program 4 (id=9953): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@ipv6_newrule={0x24, 0x20, 0xc01, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_FWMARK={0x8}]}, 0x24}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYRES8=r0], 0x0, 0x4e}, 0x20) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl2\x00', 0x0}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) syz_open_dev$vcsa(&(0x7f0000000000), 0x6, 0x2041) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010065727370616e000014000280050016000000000006000e0011"], 0x44}}, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$uinput_user_dev(r3, &(0x7f0000001100)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa3]}, 0x45c) r5 = socket$qrtr(0x2a, 0x2, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000340)={0x1, 0x0, 0x27, 0x4}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000003c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)}) ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f0000000040)={0x0, r8, r9}) close_range(r5, 0xffffffffffffffff, 0x0) r10 = dup(r3) ioctl$UI_DEV_CREATE(r10, 0x5501) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x2}) 9.13936456s ago: executing program 1 (id=9955): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000280)={0x1, r2}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r3}, 0x38) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff}, 0x90) r6 = syz_open_dev$sg(&(0x7f00000001c0), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000740)={0x53, 0x0, 0x6, 0xff, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="a1f8a81b133d", 0x0, 0xfffffffc, 0x10012, 0x3, 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, &(0x7f00000002c0)=""/17, 0x2b, 0x11, 0x0, 0x100}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/syz1\x00', 0x1ff) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r8, 0xc0305602, &(0x7f0000000100)={0x0, 0x6}) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)=""/3, &(0x7f0000000300)=0x3) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r13, 0xc008ae88, 0x0) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r10, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000180)=@req3={0x6, 0x4000, 0x20000000, 0x72, 0x3, 0x7fff, 0x6}, 0x1c) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 8.487550054s ago: executing program 0 (id=9956): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c003d000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f00000026c0)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r5 = landlock_create_ruleset(&(0x7f00000000c0)={0x1000, 0x2}, 0x10, 0x0) r6 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYRES32=0x0, @ANYRESOCT=r4, @ANYRESOCT=r6, @ANYRES8=r0, @ANYRES64=r5, @ANYRES8=r6, @ANYBLOB="2076394449ef5c03d9faa979e57d450501b4dbd26ffa51d76bef0c11aa5271b1731c2bba4cb6fe55a52891022ff1df72a8f0"], 0xfb) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) read(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x101641) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 7.3201901s ago: executing program 3 (id=9887): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0x20}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001400), 0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000002340)={'wlan0\x00'}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x40, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{}, {}, @broadcast}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x64}, @void}}}}]}, 0x40}}, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000740)={0x6, 0x0, [{0x2, 0x92, &(0x7f0000000500)=""/146}, {0x3000, 0x1000, &(0x7f0000002680)=""/4096}, {0x3000, 0x1000, &(0x7f0000003680)=""/4096}, {0x1000, 0x3f, &(0x7f00000001c0)=""/63}, {0x10000, 0x43, &(0x7f00000005c0)=""/67}, {0x100000, 0x7f, &(0x7f00000006c0)=""/127}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)={@ifindex, 0xffffffffffffffff, 0xb, 0x8, 0xffffffffffffffff, @link_id}, 0x20) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="041816aaaaaaaaaa103395f9d846821098c6fb9d51eed8b8427e"], 0x1a) socket$nl_netfilter(0x10, 0x3, 0xc) getdents64(0xffffffffffffffff, 0x0, 0x18) sendmsg$NL80211_CMD_GET_SURVEY(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="00fdff", @ANYRES16=r8, @ANYBLOB="210300000000000000003200000008000300", @ANYRES32=r9, @ANYBLOB], 0x1c}}, 0x0) 7.217465118s ago: executing program 0 (id=9957): syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x45}, @l2cap_cid_signaling={{0x41}, [@l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x0, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x15, 0x4}, {0xc2, 0x9357}}, @l2cap_disconn_rsp={{0x7, 0x5, 0x4}, {0x401, 0x1}}, @l2cap_info_req={{0xa, 0x77, 0x2}, {0x5}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x46, 0x2}, {0x3}}, @l2cap_conf_rsp={{0x5, 0x0, 0x19}, {0x80, 0x0, 0x7ff, [@l2cap_conf_mtu={0x1, 0x2, 0x1167}, @l2cap_conf_rfc={0x4, 0x9, {0x3, 0x0, 0x10, 0x5, 0xc000, 0x99}}, @l2cap_conf_mtu={0x1, 0x2, 0x3a}]}}]}}, 0x4a) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x3) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="62000000000000007b0a00ff000000001d0a000000000000950000000000000018100000c60381dc6c17fbb970c1aec762bc25e76efad02d3dc177ebac46e7f3cbb2f05fc45966b903378233a4e4873bfc51fbd9ecfa5e81b375b700ce5b1ed3e41578372c9c37fefb6c3b59797d944e1af368429d9c6fe9c3144f159d864cdb42d2e39fd2531835938daa4a6c8d370ffbb0d1868e90453c6c184ec3fab174fd36d6be9336e95c670283ae325ad6958201fd8088aed6aa4d2f9adca64fe7b66e5ec32b4d2162371e3a82a3beea", @ANYRES32, @ANYBLOB="100000000000002500000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xa, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x47, 0x10, 0x0, 0x1e}, 0x2d) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r3 = dup(0xffffffffffffffff) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000050000f54503"]) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f00000016c0)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000280)="1e7d56d8895e9488fc7fff1118f35efabf17c0875467b65ae42334e184d62c1810528d3a2d1fc3f783570a328e6008c66f28299a32a044c8901e2a7d48c5335a8f46e44b0ea0a14eab7135dac977761a3df35c8a1527b5e708338c91308da426dc1266f4fb925c21800614", 0x6b}, {&(0x7f00000005c0)="a947098c6bf43bbf2abe42602aeb3b238b4a4e11b2fcbcd169a81756a4f42e336d847c3234208d7c84e41b61f959a7819c1ce4d22e5bdb00d47b069194ea949c871c", 0x42}, {&(0x7f0000000100)="95918988db5383667f18828c2ec99b31541814412b447c5b6e6b0ca925fba3b26e2b82c94d869046e5b75bc8fa8e72cec49dec73f0c8c7a9a017e3dc3a27af", 0x3f}, {&(0x7f0000000300)="9a222253855f1e990901dae107c0d30623a0e6f18d3b862baf6d62560d46", 0x1e}, {&(0x7f0000000740)="47115020c6e0477a246fa1d849af853ce6029b9617dc517db77971f8ce8ac10b1d95a8eae6d775831fe429ac3bbf9a26302e23bba41a44f79d48a34d5250fc1aa18243b864d6afea0e06071b513b89e3c1", 0x51}], 0x5, &(0x7f0000000840)=[@ip_retopts={{0x20, 0x0, 0x7, {[@rr={0x7, 0xf, 0x4e, [@remote, @private=0xa010102, @multicast2]}]}}}, @ip_retopts={{0xe4, 0x0, 0x7, {[@lsrr={0x83, 0x1b, 0xbc, [@private=0xa010102, @empty, @multicast1, @empty, @local, @empty]}, @cipso={0x86, 0xe, 0x1, [{0x1, 0x3, '9'}, {0x0, 0x5, "b2933c"}]}, @ssrr={0x89, 0x13, 0x10, [@local, @multicast1, @multicast1, @dev={0xac, 0x14, 0x14, 0x2a}]}, @noop, @timestamp_addr={0x44, 0x2c, 0xc9, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@multicast1, 0x2}, {@empty, 0x7}, {@loopback, 0x100}, {@private=0xa010100, 0x3}]}, @timestamp_prespec={0x44, 0x4c, 0x1f, 0x3, 0x8, [{@loopback, 0x1}, {@multicast2, 0x5}, {@private=0xa010102}, {@multicast2, 0x3}, {@multicast1, 0x679c}, {@broadcast, 0x8}, {@empty, 0xd5e}, {@broadcast, 0x2}, {@loopback, 0x9}]}, @timestamp_prespec={0x44, 0x1c, 0x5c, 0x3, 0x8, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xcc}, {@rand_addr=0x64010100, 0x10000}, {@local, 0x5}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x52}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}], 0x138}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000980)="0ca781006f5d72c7721b8dc7eb1433754618910055601d5dd3df937fe2eb1f2ebf5bff2a41451d7fed97170d8fa6a36f70b8ee1c799d9f3a52104444f56df08783621cf64210fd28a9581909466dbafcaabd00e4853e535c", 0x58}, {&(0x7f0000000640)="106575bda5115cc330f96e638def0d18cf571b296c070f35414f3d27", 0x1c}], 0x2, &(0x7f0000000a40)=[@ip_retopts={{0x94, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0xb0, 0x1, 0x8, [{@remote, 0x4}, {@private=0xa010100, 0x4}]}, @lsrr={0x83, 0x2b, 0x6a, [@empty, @private=0xa010100, @rand_addr=0x64010100, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xa}, @multicast2, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, @noop, @ra={0x94, 0x4}, @cipso={0x86, 0x10, 0x3, [{0x1, 0x2}, {0x0, 0x8, "e28a42d93c06"}]}, @generic={0x89, 0x9, "d0d8a2e3f43209"}, @cipso={0x86, 0x24, 0x0, [{0x0, 0x11, "af242a018c0c6ab9d56a3866847161"}, {0x6, 0xd, "bdee9987fe3c5bb8a21dcb"}]}, @noop]}}}, @ip_retopts={{0x38, 0x0, 0x7, {[@ssrr={0x89, 0x27, 0x3b, [@broadcast, @rand_addr=0x64010100, @rand_addr=0x64010100, @multicast1, @private=0xa010101, @remote, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x10001}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}}], 0x138}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000bc0)="a5477386038a54a3b976a7a005f896d0dcf6c39dd639c524b7d975bde66559227b438c8f7c92cf35949a70538047041236f7effe819d69a8449a4d82b859e0d181a2b83c8deb", 0x46}, {&(0x7f0000000c40)="d103e87bb97536bca5cc191dc8f5cc0c86c69d53d3e890aaabb433ceb3065df688309fc7ae0a1b9bd17278711149df96a58e8cc35e4a8b2953bcc8dc2808cd759b655e43330204571586d841bc1aa2bbb74ea0e2fef8e0c3ba357c18a2fe9451e30a82a5106a8d727a837d8a314a45855f800b539e46bcb1b9b053ad700fdca0fb8b", 0x82}], 0x2, &(0x7f0000000d40)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xc}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xe}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x30}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffff8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xac0e}}, @ip_tos_int={{0x14}}], 0xd8}}, {{&(0x7f0000000e40)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000f00)=[{&(0x7f0000000e80)="092f344cb261bbc6ca4b59518de452957cd303e2c5f59a9a71b86a8ccb842faebc2b939af8ced08574f00191d94868f8f820526f99911779dcf461930448617dd29ff7bd326d8701c412ef892bcd36d3319d5ecb312da2990791bc2f4079c7e63a374377", 0x64}, {&(0x7f000001aa80)="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", 0x1000}], 0x2, &(0x7f000001ba80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x10}}, @ip_tos_int={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010102, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x83}}, @ip_retopts={{0x10c, 0x0, 0x7, {[@timestamp={0x44, 0x20, 0xba, 0x0, 0x4, [0x238e, 0x0, 0x3, 0xd3, 0x101, 0x9, 0xffffff1f]}, @timestamp_addr={0x44, 0x54, 0x50, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@empty, 0xb}, {@remote, 0xb7}, {@local, 0xcb02}, {@local, 0x8}, {@empty, 0xfffff800}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x6}, {@multicast1, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x700}]}, @end, @lsrr={0x83, 0x1b, 0x43, [@local, @dev={0xac, 0x14, 0x14, 0x32}, @dev={0xac, 0x14, 0x14, 0x22}, @private=0xa010100, @multicast2, @loopback]}, @timestamp={0x44, 0xc, 0x95, 0x0, 0x3, [0x8a47, 0x1000]}, @rr={0x7, 0x17, 0xcb, [@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x32}, @rand_addr=0x64010102, @loopback, @rand_addr=0x64010100]}, @timestamp_addr={0x44, 0x3c, 0x43, 0x1, 0x6, [{@broadcast, 0x7}, {@loopback, 0x8}, {@private=0xa010102, 0x1fe00000}, {@remote, 0x60a}, {@empty, 0x6e752e9b}, {@loopback, 0x80000000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}]}, @rr={0x7, 0xb, 0xf6, [@multicast2, @multicast2]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0xc051, @rand_addr=0x64010101}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x10001}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010100, @multicast1}}}], 0x208}}, {{&(0x7f0000001140)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000001240)=[{&(0x7f0000001180)="c6bd7a9eafdfc956257e14d5c2ebdf6a56a25809d0c24ebb32305066d5cfded04781411d72009385c9922a1a2157a0a0864b6d8244922d0b1a7968c4d1712022897dc96ae25df8f71cb2346937b22e38e5ccf8ae3b420843eff98603cbf5ae7557642fcf57d217621d1f2e62cf7c8b9033af9d5997b9e3d54967826009f734aecd7d6c37d8e1c4f49991c2220d678af1fc89e82cb14d8475177744b35b6e82f864104a83a4216a2b7b34d1d12beb27a9fb21d0", 0xb3}], 0x1, &(0x7f0000000f40)=[@ip_retopts={{0x9c, 0x0, 0x7, {[@rr={0x7, 0x7, 0x70, [@rand_addr=0x64010100]}, @timestamp_prespec={0x44, 0x1c, 0x7a, 0x3, 0x9, [{@empty, 0x7}, {@multicast1, 0xffffffff}, {@loopback, 0x1}]}, @generic={0x94, 0x4, "37e7"}, @end, @ssrr={0x89, 0x1f, 0x31, [@rand_addr=0x64010102, @empty, @loopback, @broadcast, @private=0xa010100, @remote, @loopback]}, @rr={0x7, 0x2b, 0xb, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x1b}, @dev={0xac, 0x14, 0x14, 0x36}, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @loopback, @multicast2, @empty, @multicast1]}, @ssrr={0x89, 0x17, 0xea, [@empty, @broadcast, @broadcast, @remote, @broadcast]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf}}, @ip_retopts={{0x34, 0x0, 0x7, {[@noop, @timestamp_prespec={0x44, 0x1c, 0x70, 0x3, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3ff}, {@private=0xa010101, 0x3}, {@multicast1, 0x1}]}, @lsrr={0x83, 0x7, 0x1f, [@empty]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x64b0}}], 0x120}}, {{&(0x7f00000013c0)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000001480)=[{&(0x7f0000001400)="b87856d533b2d73796c9fd79e02fa419e2a0dc060d3d7ae38696d8061cf91db60388dbf6354465140b57647c16ca1e1ea248197ce96bc20a", 0x38}, {&(0x7f0000001440)}], 0x2, &(0x7f00000014c0)=[@ip_retopts={{0x3c, 0x0, 0x7, {[@end, @ra={0x94, 0x4}, @noop, @lsrr={0x83, 0xb, 0xed, [@rand_addr=0x64010101, @remote]}, @timestamp={0x44, 0x18, 0x31, 0x0, 0x2, [0x1fffe00, 0x5, 0x8, 0x0, 0xb]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x400000}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_retopts={{0x54, 0x0, 0x7, {[@noop, @timestamp_prespec={0x44, 0x34, 0x11, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@local}, {@remote, 0x1ed}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x6}, {@multicast1, 0x6}, {@remote, 0xfc}]}, @ssrr={0x89, 0xf, 0x99, [@local, @private=0xa010101, @local]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010100, @multicast2}}}, @ip_retopts={{0xbc, 0x0, 0x7, {[@lsrr={0x83, 0x13, 0xf5, [@multicast2, @multicast2, @remote, @remote]}, @lsrr={0x83, 0x2b, 0x5b, [@local, @multicast2, @private=0x2, @private=0xa010101, @multicast2, @empty, @rand_addr=0x81, @rand_addr=0x64010101, @empty, @local]}, @generic={0x82, 0x6, "aa756edc"}, @cipso={0x86, 0x32, 0x0, [{0x6, 0xb, "bb6248ae7e9d353575"}, {0x6, 0xf, "de5cb9f99d7f9f968176bed3f7"}, {0x0, 0x8, "0b3aacf8e054"}, {0x5, 0x7, "f04d6f4c37"}, {0x5, 0x3, '('}]}, @noop, @timestamp={0x44, 0x8, 0x20, 0x0, 0x8, [0x6]}, @timestamp_addr={0x44, 0x2c, 0x37, 0x1, 0x0, [{@multicast2, 0x93}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xd}, {@multicast1, 0x8}, {@private=0xa010100, 0x10000}, {@empty, 0x9}]}]}}}], 0x1d8}}], 0x6, 0x0) syz_emit_ethernet(0x69, &(0x7f0000000400)=ANY=[@ANYBLOB="0180c20000000000cae4a00c57a9f8c4bcaeddc23f000000008848000803000000000000000f0000000000000003001d000000000000007e42037bb6570b6a66b028c6e96d648317310b82bf54f6ba458849486e014a64a99ecde5ec2d5403a53c218e000000000000ab4ca3de91c79487f8185bb7aadfed1dae791c03c985fcf75ff7400ace39e5d6e699eb5a46147ad770bd27799ebd7cd1f143bb1e197ec1d1eaca5d06baef206f304d05e3a1877274387f01eca3cbe780ce0a1d4c"], 0x0) pipe2(&(0x7f0000000000), 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="340000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="000000000000000014001a801000080000000000000000000000e902"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) 7.17878981s ago: executing program 1 (id=9958): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_SET(0x0, 0x1, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x54) socket$nl_netfilter(0x10, 0x3, 0xc) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) r5 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x1b, 0x0, 0xffffffffffffffff, 0x0, 0x0}) unshare(0x20000400) io_uring_enter(r5, 0x54, 0x0, 0x1, 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0xffffffffffffffb6) socket$inet6(0xa, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400"], 0x7c}}, 0x0) 6.631115779s ago: executing program 3 (id=9959): inotify_init1(0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x309000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='block_bio_remap\x00', r2}, 0x10) sync() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r4, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0x46, &(0x7f0000000680)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @dev}, "0104000780000100"}}}}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socket$nl_route(0x10, 0x3, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) 6.372593973s ago: executing program 0 (id=9960): inotify_init1(0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x309000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='block_bio_remap\x00', r2}, 0x10) sync() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r4, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0x46, &(0x7f0000000680)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @dev}, "0104000780000100"}}}}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socket$nl_route(0x10, 0x3, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) 6.122834477s ago: executing program 4 (id=9961): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c003d000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f00000026c0)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r5 = landlock_create_ruleset(&(0x7f00000000c0)={0x1000, 0x2}, 0x10, 0x0) r6 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000740)=ANY=[@ANYBLOB="02c820f600f20001000e01030006001f0f0704000008070002090400090009001001040007000c0004ff1e00f1210600040904040707000a00b50007020400040900614807000a0ef0ff0104020000000b01a000ff030700acb70f9cc397e0d33a2bf508da9571344cba20dcfb54b52608e06ca6b257da34e5b3b7196ba0397a0344ffc594d6eca22f3c09ada09fc403bd1c7cc5299b698358227a7be99254a5095728d7a5f1f369c7b818e0f113c3107d3f18d45b862aafce0c1527a3647ddfe0cd9effbac6e2c29e67febbca2db4415924d1a71f159a5d6d415562748c3cd2bf57b2e3a4b5bb6b1bf6059d082156deaf7688230e0003000700a3", @ANYRES64=0x0, @ANYRES32=0x0, @ANYRESOCT=r4, @ANYRESOCT=r6, @ANYRES8=r0, @ANYRES64=r5, @ANYRES8=r6, @ANYBLOB="2076394449ef5c03d9faa979e57d450501b4dbd26ffa51d76bef0c11aa5271b1731c2bba4cb6fe55a52891022ff1df72a8f0"], 0xfb) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) read(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) process_madvise(0xffffffffffffffff, &(0x7f0000000200), 0x1000000000000276, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x101641) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 4.919588402s ago: executing program 4 (id=9962): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c003d000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f00000026c0)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r5 = landlock_create_ruleset(&(0x7f00000000c0)={0x1000, 0x2}, 0x10, 0x0) r6 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYRES32=0x0, @ANYRESOCT=r4, @ANYRESOCT=r6, @ANYRES8=r0, @ANYRES64=r5, @ANYRES8=r6, @ANYBLOB="2076394449ef5c03d9faa979e57d450501b4dbd26ffa51d76bef0c11aa5271b1731c2bba4cb6fe55a52891022ff1df72a8f0"], 0xfb) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) read(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) process_madvise(0xffffffffffffffff, &(0x7f0000000200), 0x1000000000000276, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x101641) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 3.656567862s ago: executing program 4 (id=9963): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c003d000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f00000026c0)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r5 = landlock_create_ruleset(&(0x7f00000000c0)={0x1000, 0x2}, 0x10, 0x0) r6 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYRES32=0x0, @ANYRESOCT=r4, @ANYRESOCT=r6, @ANYRES8=r0, @ANYRES64=r5, @ANYRES8=r6, @ANYBLOB="2076394449ef5c03d9faa979e57d450501b4dbd26ffa51d76bef0c11aa5271b1731c2bba4cb6fe55a52891022ff1df72a8f0"], 0xfb) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) read(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) process_madvise(0xffffffffffffffff, &(0x7f0000000200), 0x1000000000000276, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x101641) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 3.569513848s ago: executing program 0 (id=9964): syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x45}, @l2cap_cid_signaling={{0x41}, [@l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x0, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x15, 0x4}, {0xc2, 0x9357}}, @l2cap_disconn_rsp={{0x7, 0x5, 0x4}, {0x401, 0x1}}, @l2cap_info_req={{0xa, 0x77, 0x2}, {0x5}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x46, 0x2}, {0x3}}, @l2cap_conf_rsp={{0x5, 0x0, 0x19}, {0x80, 0x0, 0x7ff, [@l2cap_conf_mtu={0x1, 0x2, 0x1167}, @l2cap_conf_rfc={0x4, 0x9, {0x3, 0x0, 0x10, 0x5, 0xc000, 0x99}}, @l2cap_conf_mtu={0x1, 0x2, 0x3a}]}}]}}, 0x4a) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x3) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="62000000000000007b0a00ff000000001d0a000000000000950000000000000018100000c60381dc6c17fbb970c1aec762bc25e76efad02d3dc177ebac46e7f3cbb2f05fc45966b903378233a4e4873bfc51fbd9ecfa5e81b375b700ce5b1ed3e41578372c9c37fefb6c3b59797d944e1af368429d9c6fe9c3144f159d864cdb42d2e39fd2531835938daa4a6c8d370ffbb0d1868e90453c6c184ec3fab174fd36d6be9336e95c670283ae325ad6958201fd8088aed6aa4d2f9adca64fe7b66e5ec32b4d2162371e3a82a3beea", @ANYRES32, @ANYBLOB="100000000000002500000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xa, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x47, 0x10, 0x0, 0x1e}, 0x2d) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000050000f54503"]) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f00000016c0)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000280)="1e7d56d8895e9488fc7fff1118f35efabf17c0875467b65ae42334e184d62c1810528d3a2d1fc3f783570a328e6008c66f28299a32a044c8901e2a7d48c5335a8f46e44b0ea0a14eab7135dac977761a3df35c8a1527b5e708338c91308da426dc1266f4fb925c21800614", 0x6b}, {&(0x7f00000005c0)="a947098c6bf43bbf2abe42602aeb3b238b4a4e11b2fcbcd169a81756a4f42e336d847c3234208d7c84e41b61f959a7819c1ce4d22e5bdb00d47b069194ea949c871c", 0x42}, {&(0x7f0000000100)="95918988db5383667f18828c2ec99b31541814412b447c5b6e6b0ca925fba3b26e2b82c94d869046e5b75bc8fa8e72cec49dec73f0c8c7a9a017e3dc3a27af", 0x3f}, {&(0x7f0000000300)="9a222253855f1e990901dae107c0d30623a0e6f18d3b862baf6d62560d46", 0x1e}, {&(0x7f0000000740)="47115020c6e0477a246fa1d849af853ce6029b9617dc517db77971f8ce8ac10b1d95a8eae6d775831fe429ac3bbf9a26302e23bba41a44f79d48a34d5250fc1aa18243b864d6afea0e06071b513b89e3c1", 0x51}], 0x5, &(0x7f0000000840)=[@ip_retopts={{0x20, 0x0, 0x7, {[@rr={0x7, 0xf, 0x4e, [@remote, @private=0xa010102, @multicast2]}]}}}, @ip_retopts={{0xe4, 0x0, 0x7, {[@lsrr={0x83, 0x1b, 0xbc, [@private=0xa010102, @empty, @multicast1, @empty, @local, @empty]}, @cipso={0x86, 0xe, 0x1, [{0x1, 0x3, '9'}, {0x0, 0x5, "b2933c"}]}, @ssrr={0x89, 0x13, 0x10, [@local, @multicast1, @multicast1, @dev={0xac, 0x14, 0x14, 0x2a}]}, @noop, @timestamp_addr={0x44, 0x2c, 0xc9, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@multicast1, 0x2}, {@empty, 0x7}, {@loopback, 0x100}, {@private=0xa010100, 0x3}]}, @timestamp_prespec={0x44, 0x4c, 0x1f, 0x3, 0x8, [{@loopback, 0x1}, {@multicast2, 0x5}, {@private=0xa010102}, {@multicast2, 0x3}, {@multicast1, 0x679c}, {@broadcast, 0x8}, {@empty, 0xd5e}, {@broadcast, 0x2}, {@loopback, 0x9}]}, @timestamp_prespec={0x44, 0x1c, 0x5c, 0x3, 0x8, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xcc}, {@rand_addr=0x64010100, 0x10000}, {@local, 0x5}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x52}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}], 0x138}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000980)="0ca781006f5d72c7721b8dc7eb1433754618910055601d5dd3df937fe2eb1f2ebf5bff2a41451d7fed97170d8fa6a36f70b8ee1c799d9f3a52104444f56df08783621cf64210fd28a9581909466dbafcaabd00e4853e535c", 0x58}, {&(0x7f0000000640)="106575bda5115cc330f96e638def0d18cf571b296c070f35414f3d27", 0x1c}], 0x2, &(0x7f0000000a40)=[@ip_retopts={{0x94, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0xb0, 0x1, 0x8, [{@remote, 0x4}, {@private=0xa010100, 0x4}]}, @lsrr={0x83, 0x2b, 0x6a, [@empty, @private=0xa010100, @rand_addr=0x64010100, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xa}, @multicast2, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, @noop, @ra={0x94, 0x4}, @cipso={0x86, 0x10, 0x3, [{0x1, 0x2}, {0x0, 0x8, "e28a42d93c06"}]}, @generic={0x89, 0x9, "d0d8a2e3f43209"}, @cipso={0x86, 0x24, 0x0, [{0x0, 0x11, "af242a018c0c6ab9d56a3866847161"}, {0x6, 0xd, "bdee9987fe3c5bb8a21dcb"}]}, @noop]}}}, @ip_retopts={{0x38, 0x0, 0x7, {[@ssrr={0x89, 0x27, 0x3b, [@broadcast, @rand_addr=0x64010100, @rand_addr=0x64010100, @multicast1, @private=0xa010101, @remote, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x10001}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}}], 0x138}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000bc0)="a5477386038a54a3b976a7a005f896d0dcf6c39dd639c524b7d975bde66559227b438c8f7c92cf35949a70538047041236f7effe819d69a8449a4d82b859e0d181a2b83c8deb", 0x46}, {&(0x7f0000000c40)="d103e87bb97536bca5cc191dc8f5cc0c86c69d53d3e890aaabb433ceb3065df688309fc7ae0a1b9bd17278711149df96a58e8cc35e4a8b2953bcc8dc2808cd759b655e43330204571586d841bc1aa2bbb74ea0e2fef8e0c3ba357c18a2fe9451e30a82a5106a8d727a837d8a314a45855f800b539e46bcb1b9b053ad700fdca0fb8b", 0x82}], 0x2, &(0x7f0000000d40)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xc}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xe}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x30}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffff8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xac0e}}, @ip_tos_int={{0x14}}], 0xd8}}, {{&(0x7f0000000e40)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000f00)=[{&(0x7f0000000e80)="092f344cb261bbc6ca4b59518de452957cd303e2c5f59a9a71b86a8ccb842faebc2b939af8ced08574f00191d94868f8f820526f99911779dcf461930448617dd29ff7bd326d8701c412ef892bcd36d3319d5ecb312da2990791bc2f4079c7e63a374377", 0x64}, {&(0x7f000001aa80)="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", 0x1000}], 0x2, &(0x7f000001ba80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x10}}, @ip_tos_int={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010102, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x83}}, @ip_retopts={{0x10c, 0x0, 0x7, {[@timestamp={0x44, 0x20, 0xba, 0x0, 0x4, [0x238e, 0x0, 0x3, 0xd3, 0x101, 0x9, 0xffffff1f]}, @timestamp_addr={0x44, 0x54, 0x50, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@empty, 0xb}, {@remote, 0xb7}, {@local, 0xcb02}, {@local, 0x8}, {@empty, 0xfffff800}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x6}, {@multicast1, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x700}]}, @end, @lsrr={0x83, 0x1b, 0x43, [@local, @dev={0xac, 0x14, 0x14, 0x32}, @dev={0xac, 0x14, 0x14, 0x22}, @private=0xa010100, @multicast2, @loopback]}, @timestamp={0x44, 0xc, 0x95, 0x0, 0x3, [0x8a47, 0x1000]}, @rr={0x7, 0x17, 0xcb, [@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x32}, @rand_addr=0x64010102, @loopback, @rand_addr=0x64010100]}, @timestamp_addr={0x44, 0x3c, 0x43, 0x1, 0x6, [{@broadcast, 0x7}, {@loopback, 0x8}, {@private=0xa010102, 0x1fe00000}, {@remote, 0x60a}, {@empty, 0x6e752e9b}, {@loopback, 0x80000000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}]}, @rr={0x7, 0xb, 0xf6, [@multicast2, @multicast2]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0xc051, @rand_addr=0x64010101}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x10001}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010100, @multicast1}}}], 0x208}}, {{&(0x7f0000001140)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000001240)=[{&(0x7f0000001180)="c6bd7a9eafdfc956257e14d5c2ebdf6a56a25809d0c24ebb32305066d5cfded04781411d72009385c9922a1a2157a0a0864b6d8244922d0b1a7968c4d1712022897dc96ae25df8f71cb2346937b22e38e5ccf8ae3b420843eff98603cbf5ae7557642fcf57d217621d1f2e62cf7c8b9033af9d5997b9e3d54967826009f734aecd7d6c37d8e1c4f49991c2220d678af1fc89e82cb14d8475177744b35b6e82f864104a83a4216a2b7b34d1d12beb27a9fb21d0", 0xb3}], 0x1, &(0x7f0000000f40)=[@ip_retopts={{0x9c, 0x0, 0x7, {[@rr={0x7, 0x7, 0x70, [@rand_addr=0x64010100]}, @timestamp_prespec={0x44, 0x1c, 0x7a, 0x3, 0x9, [{@empty, 0x7}, {@multicast1, 0xffffffff}, {@loopback, 0x1}]}, @generic={0x94, 0x4, "37e7"}, @end, @ssrr={0x89, 0x1f, 0x31, [@rand_addr=0x64010102, @empty, @loopback, @broadcast, @private=0xa010100, @remote, @loopback]}, @rr={0x7, 0x2b, 0xb, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x1b}, @dev={0xac, 0x14, 0x14, 0x36}, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @loopback, @multicast2, @empty, @multicast1]}, @ssrr={0x89, 0x17, 0xea, [@empty, @broadcast, @broadcast, @remote, @broadcast]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf}}, @ip_retopts={{0x34, 0x0, 0x7, {[@noop, @timestamp_prespec={0x44, 0x1c, 0x70, 0x3, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3ff}, {@private=0xa010101, 0x3}, {@multicast1, 0x1}]}, @lsrr={0x83, 0x7, 0x1f, [@empty]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x64b0}}], 0x120}}, {{&(0x7f00000013c0)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000001480)=[{&(0x7f0000001400)="b87856d533b2d73796c9fd79e02fa419e2a0dc060d3d7ae38696d8061cf91db60388dbf6354465140b57647c16ca1e1ea248197ce96bc20a", 0x38}, {&(0x7f0000001440)}], 0x2, &(0x7f00000014c0)=[@ip_retopts={{0x38, 0x0, 0x7, {[@end, @noop, @lsrr={0x83, 0xb, 0xed, [@rand_addr=0x64010101, @remote]}, @timestamp={0x44, 0x18, 0x31, 0x0, 0x2, [0x1fffe00, 0x5, 0x8, 0x0, 0xb]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x400000}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_retopts={{0x54, 0x0, 0x7, {[@noop, @timestamp_prespec={0x44, 0x34, 0x11, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@local, 0x9}, {@remote, 0x1ed}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x6}, {@multicast1, 0x6}, {@remote, 0xfc}]}, @ssrr={0x89, 0xf, 0x99, [@local, @private=0xa010101, @local]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010100, @multicast2}}}, @ip_retopts={{0xbc, 0x0, 0x7, {[@lsrr={0x83, 0x13, 0xf5, [@multicast2, @multicast2, @remote, @remote]}, @lsrr={0x83, 0x2b, 0x5b, [@local, @multicast2, @private=0x2, @private=0xa010101, @multicast2, @empty, @rand_addr=0x81, @rand_addr=0x64010101, @empty, @local]}, @generic={0x82, 0x6, "aa756edc"}, @cipso={0x86, 0x32, 0x0, [{0x6, 0xb, "bb6248ae7e9d353575"}, {0x6, 0xf, "de5cb9f99d7f9f968176bed3f7"}, {0x0, 0x8, "0b3aacf8e054"}, {0x5, 0x7, "f04d6f4c37"}, {0x5, 0x3, '('}]}, @noop, @timestamp={0x44, 0x8, 0x20, 0x0, 0x8, [0x6]}, @timestamp_addr={0x44, 0x2c, 0x37, 0x1, 0x0, [{@multicast2, 0x93}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xd}, {@multicast1, 0x8}, {@private=0xa010100, 0x10000}, {@empty, 0x9}]}]}}}], 0x1d0}}], 0x6, 0x0) syz_emit_ethernet(0x69, &(0x7f0000000400)=ANY=[@ANYBLOB="0180c20000000000cae4a00c57a9f8c4bcaeddc23f000000008848000803000000000000000f0000000000000003001d000000000000007e42037bb6570b6a66b028c6e96d648317310b82bf54f6ba458849486e014a64a99ecde5ec2d5403a53c218e000000000000ab4ca3de91c79487f8185bb7aadfed1dae791c03c985fcf75ff7400ace39e5d6e699eb5a46147ad770bd27799ebd7cd1f143bb1e197ec1d1eaca5d06baef206f304d05e3a1877274387f01eca3cbe780ce0a1d4c"], 0x0) pipe2(&(0x7f0000000000), 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="340000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="000000000000000014001a801000080000000000000000000000e902"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) 3.531036148s ago: executing program 2 (id=9886): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x8000, 0x7800, 0x0, 0x3cf7, {{0x14, 0x4, 0x0, 0x34, 0x50, 0x68, 0x0, 0x40, 0x0, 0x0, @broadcast, @broadcast, {[@timestamp_addr={0x44, 0x1c, 0xb, 0x1, 0x6, [{@remote, 0x9}, {@private=0xa010101, 0x7fff}, {@broadcast}]}, @timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x8, [{@private=0xa010100, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@rand_addr=0x64010100, 0xd3}]}, @ra={0x94, 0x4}]}}}}}) bind$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x1b, r1, 0x1, 0x5}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000040)={0x2, @pix_mp={0x0, 0x0, 0x50323234}}) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) futex(&(0x7f000000cffc), 0xd, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000b40), 0x2b842ac, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000580)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0xc0182101, &(0x7f0000000100)={r6}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000180)={r7, 0x3, r5, 0x6}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) fchdir(0xffffffffffffffff) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000040000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.412551264s ago: executing program 3 (id=9965): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000009c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003540)=[{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000280)="4abb1d8fb9ec59d06d02cc053ce6ac1168d484bfc91789aa", 0x18}], 0x1}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000059c0)=""/4104, 0x1008}], 0x1}}], 0x1, 0x0, 0x0) 2.404897451s ago: executing program 4 (id=9966): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@ipv6_newrule={0x24, 0x20, 0xc01, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_FWMARK={0x8}]}, 0x24}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYRES8=r0], 0x0, 0x4e}, 0x20) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl2\x00', 0x0}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) syz_open_dev$vcsa(&(0x7f0000000000), 0x6, 0x2041) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010065727370616e000014000280050016000000000006000e0011"], 0x44}}, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$uinput_user_dev(r3, &(0x7f0000001100)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa3]}, 0x45c) r5 = socket$qrtr(0x2a, 0x2, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000340)={0x1, 0x0, 0x27, 0x4}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000003c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f0000000040)={r9, r8}) close_range(r5, 0xffffffffffffffff, 0x0) r10 = dup(r3) ioctl$UI_DEV_CREATE(r10, 0x5501) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x2}) 2.169104911s ago: executing program 3 (id=9967): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c003d000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f00000026c0)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r5 = landlock_create_ruleset(&(0x7f00000000c0)={0x1000, 0x2}, 0x10, 0x0) r6 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYRES32=0x0, @ANYRESOCT=r4, @ANYRESOCT=r6, @ANYRES8=r0, @ANYRES64=r5, @ANYRES8=r6, @ANYBLOB="2076394449ef5c03d9faa979e57d450501b4dbd26ffa51d76bef0c11aa5271b1731c2bba4cb6fe55a52891022ff1df72a8f0"], 0xfb) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) read(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x101641) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 2.143283323s ago: executing program 0 (id=9968): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c003d000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f00000026c0)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r5 = landlock_create_ruleset(&(0x7f00000000c0)={0x1000, 0x2}, 0x10, 0x0) r6 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYRES32=0x0, @ANYRESOCT=r4, @ANYRESOCT=r6, @ANYRES8=r0, @ANYRES64=r5, @ANYRES8=r6, @ANYBLOB="2076394449ef5c03d9faa979e57d450501b4dbd26ffa51d76bef0c11aa5271b1731c2bba4cb6fe55a52891022ff1df72a8f0"], 0xfb) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) read(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) process_madvise(0xffffffffffffffff, &(0x7f0000000200), 0x1000000000000276, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x101641) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 15.852411ms ago: executing program 0 (id=9969): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1}) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0x20}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001400), 0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000002340)={'wlan0\x00'}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x40, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{}, {}, @broadcast}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x64}, @void}}}}]}, 0x40}}, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000740)={0x6, 0x0, [{0x2, 0x92, &(0x7f0000000500)=""/146}, {0x3000, 0x1000, &(0x7f0000002680)=""/4096}, {0x3000, 0x1000, &(0x7f0000003680)=""/4096}, {0x1000, 0x3f, &(0x7f00000001c0)=""/63}, {0x10000, 0x43, &(0x7f00000005c0)=""/67}, {0x100000, 0x7f, &(0x7f00000006c0)=""/127}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)={@ifindex, 0xffffffffffffffff, 0xb, 0x8, 0xffffffffffffffff, @link_id}, 0x20) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="041816aaaaaaaaaa103395f9d846821098c6fb9d51eed8b8427e"], 0x1a) socket$nl_netfilter(0x10, 0x3, 0xc) getdents64(0xffffffffffffffff, 0x0, 0x18) sendmsg$NL80211_CMD_GET_SURVEY(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="00fdff", @ANYRES16=r8, @ANYBLOB="210300000000000000003200000008000300", @ANYRES32=r9, @ANYBLOB], 0x1c}}, 0x0) 14.030009ms ago: executing program 2 (id=9970): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c003d000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f00000026c0)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r5 = landlock_create_ruleset(&(0x7f00000000c0)={0x1000, 0x2}, 0x10, 0x0) r6 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYRES32=0x0, @ANYRESOCT=r4, @ANYRESOCT=r6, @ANYRES8=r0, @ANYRES64=r5, @ANYRES8=r6, @ANYBLOB="2076394449ef5c03d9faa979e57d450501b4dbd26ffa51d76bef0c11aa5271b1731c2bba4cb6fe55a52891022ff1df72a8f0"], 0xfb) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) read(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x101641) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 0s ago: executing program 3 (id=9971): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c003d000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f00000026c0)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r5 = landlock_create_ruleset(&(0x7f00000000c0)={0x1000, 0x2}, 0x10, 0x0) r6 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYRES32=0x0, @ANYRESOCT=r4, @ANYRESOCT=r6, @ANYRES8=r0, @ANYRES64=r5, @ANYRES8=r6, @ANYBLOB="2076394449ef5c03d9faa979e57d450501b4dbd26ffa51d76bef0c11aa5271b1731c2bba4cb6fe55a52891022ff1df72a8f0"], 0xfb) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) read(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) process_madvise(0xffffffffffffffff, &(0x7f0000000200), 0x1000000000000276, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x101641) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) kernel console output (not intermixed with test programs): 20] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3254.260687][ T8493] veth1_macvtap: entered promiscuous mode [ 3254.400826][ T8493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3254.441635][ T8493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3254.469036][ T8493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3254.506967][ T8493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3254.536205][ T8493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3254.554980][ T8493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3254.599856][ T8493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3254.639728][ T8493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3254.698155][ T8493] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3254.763319][ T8493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3254.801450][ T8493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3254.828119][ T8493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3254.859544][ T8493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3254.881749][ T8493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3254.925178][ T8493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3254.935713][ T3677] Bluetooth: hci5: Malformed HCI Event: 0x22 [ 3255.057190][ T8493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3255.079658][ T8493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3255.128231][ T8493] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3255.192490][ T8493] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3255.273013][ T8493] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3255.288855][ T8493] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3255.372462][ T8493] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3255.978471][ T1037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3255.987174][ T1037] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3256.968068][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3256.986714][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3257.341411][ T3677] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 3258.891126][ T8974] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9259'. [ 3258.963349][ C0] eth0: bad gso: type: 1, size: 1408 [ 3259.274085][ T8988] netlink: 'syz.4.9261': attribute type 10 has an invalid length. [ 3259.383948][ T8988] batman_adv: batadv0: Adding interface: team0 [ 3259.390211][ T8988] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3259.421034][ T8988] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 3259.432596][ T8993] netlink: 'syz.4.9261': attribute type 10 has an invalid length. [ 3259.440522][ T8993] netlink: 2 bytes leftover after parsing attributes in process `syz.4.9261'. [ 3259.449774][ T8993] team0: entered promiscuous mode [ 3259.454947][ T8993] team_slave_0: entered promiscuous mode [ 3259.461132][ T8993] team_slave_1: entered promiscuous mode [ 3259.471032][ T8993] 8021q: adding VLAN 0 to HW filter on device team0 [ 3259.478537][ T8993] batman_adv: batadv0: Interface activated: team0 [ 3259.485229][ T8993] batman_adv: batadv0: Interface deactivated: team0 [ 3259.492025][ T8993] batman_adv: batadv0: Removing interface: team0 [ 3265.233917][ T8993] bridge0: port 3(team0) entered blocking state [ 3265.251679][ T8993] bridge0: port 3(team0) entered disabled state [ 3265.441646][ T8993] team0: entered allmulticast mode [ 3265.474509][ T8993] team_slave_0: entered allmulticast mode [ 3265.501508][ T8993] team_slave_1: entered allmulticast mode [ 3265.558083][ T8993] bridge0: port 3(team0) entered blocking state [ 3265.564469][ T8993] bridge0: port 3(team0) entered forwarding state [ 3265.871989][ T9006] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9268'. [ 3266.242876][ T5178] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 3266.361109][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 3266.369106][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 3266.463901][ T5178] usb 4-1: config index 0 descriptor too short (expected 9533, got 36) [ 3266.499139][ T5178] usb 4-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 3266.520770][ T5178] usb 4-1: config 161 has an invalid interface descriptor of length 7, skipping [ 3266.544153][ T5178] usb 4-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 3266.586036][ T5178] usb 4-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 3266.618387][ T5178] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 3266.639533][ T5178] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3266.960601][ C0] eth0: bad gso: type: 1, size: 1408 [ 3267.042368][ T5178] usb 4-1: USB disconnect, device number 99 [ 3267.050063][ T3677] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 3267.071566][ T9049] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9275'. [ 3267.166968][ T9031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9272'. [ 3267.511912][ T7154] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 3267.715989][ T7154] usb 1-1: config index 0 descriptor too short (expected 9533, got 36) [ 3267.732076][ T7154] usb 1-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 3267.740994][ T7154] usb 1-1: config 161 has an invalid interface descriptor of length 7, skipping [ 3267.769680][ T7154] usb 1-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 3267.781666][ T7154] usb 1-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 3267.791055][ T7154] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 3267.804475][ T7154] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3269.028447][T29404] usb 1-1: USB disconnect, device number 88 [ 3272.109384][ T3677] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 3272.340231][ T9096] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9288'. [ 3272.807987][ T9100] program syz.3.9289 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3272.908798][ C0] eth0: bad gso: type: 1, size: 1408 [ 3276.383600][ T3677] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 3276.392589][ T3677] Bluetooth: hci4: Injecting HCI hardware error event [ 3276.408453][ T3677] Bluetooth: hci4: hardware error 0x00 [ 3277.046833][ T1090] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 3277.053872][ T1090] Bluetooth: Wrong link type (-22) [ 3277.059244][ T1090] Bluetooth: hci2: link tx timeout [ 3277.066184][ T1090] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 3277.183380][ T9140] Bluetooth: hci2: unexpected event for opcode 0x0c1a [ 3279.427937][ T3677] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 3279.738692][ T9163] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9304'. [ 3281.283661][ T1090] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 3281.292803][ T1090] Bluetooth: hci2: Injecting HCI hardware error event [ 3281.318850][ T9140] Bluetooth: hci2: hardware error 0x00 [ 3281.771568][ T3677] Bluetooth: hci4: Opcode 0x206c failed: -110 [ 3282.412818][ T9180] input: syz1 as /devices/virtual/input/input112 [ 3283.749839][ T9184] fuse: Unknown parameter 'fd0x0000000000000008' [ 3283.795242][ T3677] Bluetooth: hci4: Opcode 0x2046 failed: -110 [ 3283.980944][ T9176] input: syz1 as /devices/virtual/input/input113 [ 3284.031633][ T9140] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 3286.111429][ T9140] Bluetooth: hci2: Opcode 0x206c failed: -110 [ 3287.824378][ T9226] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9320'. [ 3288.552798][ T9140] Bluetooth: hci2: Opcode 0x2046 failed: -110 [ 3291.592976][ T6830] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 3291.791425][ T6830] usb 4-1: Using ep0 maxpacket: 8 [ 3291.921966][ T6830] usb 4-1: unable to get BOS descriptor or descriptor too short [ 3292.882350][ T6830] usb 4-1: string descriptor 0 read error: -22 [ 3292.912154][ T6830] usb 4-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 3292.981436][ T6830] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3293.606866][ T6830] usb 4-1: config 0 descriptor?? [ 3294.041735][ T6830] usb 4-1: can't set config #0, error -71 [ 3294.080845][ T6830] usb 4-1: USB disconnect, device number 100 [ 3294.808148][ T9273] fuse: Unknown parameter 'fd0x0000000000000008' [ 3295.220376][ T9278] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9334'. [ 3295.793954][ T9283] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9336'. [ 3296.072228][ T5148] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 3296.295079][ T5148] usb 4-1: config index 0 descriptor too short (expected 9533, got 36) [ 3296.377674][ T5148] usb 4-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 3296.445669][ T5148] usb 4-1: config 161 has an invalid interface descriptor of length 7, skipping [ 3296.531614][ T5148] usb 4-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 3296.581538][ T5148] usb 4-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 3296.602165][ T5148] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 3296.629316][ T5148] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3297.051532][ T2188] usb 4-1: USB disconnect, device number 101 [ 3297.356360][ T9300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9339'. [ 3297.609024][ T9307] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9342'. [ 3297.653782][ T9307] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 3297.660344][ T9307] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 3297.668306][ T9307] vhci_hcd vhci_hcd.0: Device attached [ 3297.686935][ T9309] vhci_hcd: connection closed [ 3297.687228][T20720] vhci_hcd: stop threads [ 3297.701486][ T1960] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 3297.709339][T20720] vhci_hcd: release socket [ 3297.719337][T20720] vhci_hcd: disconnect device [ 3297.871400][ T6830] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 3297.895518][ T1960] usb 1-1: config index 0 descriptor too short (expected 9533, got 36) [ 3297.910069][ T1960] usb 1-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 3297.921484][ T1960] usb 1-1: config 161 has an invalid interface descriptor of length 7, skipping [ 3297.930733][ T1960] usb 1-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 3297.942975][ T1960] usb 1-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 3297.954713][ T1960] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 3297.966263][ T1960] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3297.968507][ T9315] input: syz1 as /devices/virtual/input/input114 [ 3298.062813][ T6830] usb 5-1: Using ep0 maxpacket: 8 [ 3298.094552][ T6830] usb 5-1: unable to get BOS descriptor or descriptor too short [ 3298.123481][ T6830] usb 5-1: string descriptor 0 read error: -22 [ 3298.137625][ T6830] usb 5-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 3298.154072][ T6830] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3298.242775][ T6830] usb 5-1: config 0 descriptor?? [ 3298.321382][ T2188] usb 1-1: USB disconnect, device number 89 [ 3298.767241][ T9306] netlink: 'syz.4.9341': attribute type 10 has an invalid length. [ 3299.689916][ T9322] input: syz1 as /devices/virtual/input/input115 [ 3299.832960][ T9331] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9348'. [ 3300.241662][ T6830] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 3300.299826][ T6830] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 3300.327197][ T6830] dib0700: firmware download failed at 7 with -22 [ 3300.383717][ T6830] usb 5-1: USB disconnect, device number 109 [ 3308.059377][ T9362] program syz.4.9357 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3308.351494][ T1090] Bluetooth: hci5: command 0x0406 tx timeout [ 3308.642438][ T9372] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9360'. [ 3310.111775][ T9375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9361'. [ 3310.441524][ T1960] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 3310.516634][ T9366] input: syz1 as /devices/virtual/input/input116 [ 3310.644191][ T1960] usb 1-1: config index 0 descriptor too short (expected 9533, got 36) [ 3310.697220][ T9388] input: syz1 as /devices/virtual/input/input117 [ 3310.725446][ T1960] usb 1-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 3310.745448][ T1960] usb 1-1: config 161 has an invalid interface descriptor of length 7, skipping [ 3310.756139][ T1960] usb 1-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 3310.777413][ T1960] usb 1-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 3310.818165][ T1960] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 3310.857693][ T1960] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3312.140584][ T5148] usb 1-1: USB disconnect, device number 90 [ 3312.181406][ T5178] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 3312.392123][ T5178] usb 3-1: Using ep0 maxpacket: 8 [ 3312.430441][ T5178] usb 3-1: unable to get BOS descriptor or descriptor too short [ 3312.532873][ T5178] usb 3-1: string descriptor 0 read error: -22 [ 3312.540911][ T5178] usb 3-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 3312.573989][ T5178] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3312.618540][ T5178] usb 3-1: config 0 descriptor?? [ 3318.031466][ T5178] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 3318.052811][ T5178] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 3318.086136][ T5178] dib0700: firmware download failed at 7 with -22 [ 3318.194928][ T5178] usb 3-1: USB disconnect, device number 107 [ 3318.211764][ T9140] Bluetooth: hci5: unexpected event for opcode 0x0c56 [ 3318.282376][ T9140] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 3318.381384][ T9429] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9376'. [ 3318.487955][ T9140] Bluetooth: hci5: unexpected event for opcode 0x0c1a [ 3320.955164][ T9453] input: syz1 as /devices/virtual/input/input119 [ 3322.511534][ T9140] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 3322.588726][ T9140] Bluetooth: hci5: Injecting HCI hardware error event [ 3322.600082][ T9140] Bluetooth: hci5: hardware error 0x00 [ 3322.708448][ T9462] input: syz1 as /devices/virtual/input/input120 [ 3322.902698][ T1090] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 3325.657833][ T9140] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 3327.712888][ T9140] Bluetooth: hci5: Opcode 0x206c failed: -110 [ 3327.801034][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 3328.272693][ T1090] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 3329.794609][ T9140] Bluetooth: hci5: Opcode 0x2046 failed: -110 [ 3332.471462][ T1090] Bluetooth: hci0: Injecting HCI hardware error event [ 3332.472542][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 3332.481161][ T1090] Bluetooth: hci0: hardware error 0x00 [ 3334.755503][ T1090] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 3336.283931][ T29] audit: type=1326 audit(1721586764.266:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9539 comm="syz.1.9406" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0a72b75b59 code=0x0 [ 3337.542103][ T1090] Bluetooth: hci0: Opcode 0x206c failed: -110 [ 3337.882523][ T29] audit: type=1326 audit(1721586765.866:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9539 comm="syz.1.9406" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0a72b75b59 code=0x0 [ 3338.391442][ T6830] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 3338.399985][ T3677] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 3338.430875][ T3677] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 3338.440668][ T3677] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 3338.448961][ T3677] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 3338.485016][ T3677] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 3338.498026][ T3677] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 3338.621505][ T6830] usb 3-1: Using ep0 maxpacket: 8 [ 3338.628885][ T6830] usb 3-1: unable to get BOS descriptor or descriptor too short [ 3338.646734][ T6830] usb 3-1: string descriptor 0 read error: -22 [ 3338.666038][ T6830] usb 3-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 3338.697343][ T6830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3338.714333][ T6830] usb 3-1: config 0 descriptor?? [ 3338.957813][ T4223] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3339.057199][ T9562] netlink: 'syz.2.9413': attribute type 10 has an invalid length. [ 3339.173950][ T4223] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3339.458702][ T4223] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3339.696721][ T1090] Bluetooth: hci0: Opcode 0x2046 failed: -110 [ 3340.623409][ T1090] Bluetooth: hci3: command tx timeout [ 3341.027883][ T6830] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 3341.075522][ T6830] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 3341.096351][ T6830] dib0700: firmware download failed at 7 with -22 [ 3341.141576][ T6830] usb 3-1: USB disconnect, device number 108 [ 3341.185477][ T4223] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3341.502091][ T6211] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 3341.553408][ T9566] chnl_net:caif_netlink_parms(): no params data found [ 3341.711647][ T4223] bridge_slave_1: left allmulticast mode [ 3341.718084][ T4223] bridge_slave_1: left promiscuous mode [ 3341.718186][ T6211] usb 5-1: config index 0 descriptor too short (expected 9533, got 36) [ 3341.725590][ T4223] bridge0: port 2(bridge_slave_1) entered disabled state [ 3341.772356][ T4223] bridge_slave_0: left allmulticast mode [ 3341.794362][ T4223] bridge_slave_0: left promiscuous mode [ 3341.807513][ T4223] bridge0: port 1(bridge_slave_0) entered disabled state [ 3341.845845][ T6211] usb 5-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 3341.896504][ T6211] usb 5-1: config 161 has an invalid interface descriptor of length 7, skipping [ 3341.925676][ T6211] usb 5-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 3341.954933][ T6211] usb 5-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 3341.971543][ T6211] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 3341.991559][ T6211] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3342.036898][ T9603] fuse: Unknown parameter 'fd0x0000000000000008' [ 3342.240985][ T6830] usb 5-1: USB disconnect, device number 110 [ 3342.674387][ T1090] Bluetooth: hci3: command tx timeout [ 3344.168951][ T4223] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3344.212150][ T4223] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3344.239240][ T4223] bond0 (unregistering): Released all slaves [ 3344.921818][ T1090] Bluetooth: hci3: command tx timeout [ 3345.811549][ T9566] bridge0: port 1(bridge_slave_0) entered blocking state [ 3345.818702][ T9566] bridge0: port 1(bridge_slave_0) entered disabled state [ 3345.826838][ T6211] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 3345.869925][ T9566] bridge_slave_0: entered allmulticast mode [ 3345.894162][ T9566] bridge_slave_0: entered promiscuous mode [ 3345.953331][ T9566] bridge0: port 2(bridge_slave_1) entered blocking state [ 3346.042041][ T6211] usb 5-1: Using ep0 maxpacket: 8 [ 3346.088140][ T6211] usb 5-1: unable to get BOS descriptor or descriptor too short [ 3346.099713][ T9566] bridge0: port 2(bridge_slave_1) entered disabled state [ 3346.130361][ T6211] usb 5-1: string descriptor 0 read error: -22 [ 3346.141583][ T9566] bridge_slave_1: entered allmulticast mode [ 3346.151743][ T6211] usb 5-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 3346.180252][ T9566] bridge_slave_1: entered promiscuous mode [ 3346.186306][ T6211] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3346.194730][ T6211] usb 5-1: config 0 descriptor?? [ 3347.081895][ T1090] Bluetooth: hci3: command tx timeout [ 3347.598315][ T9566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3347.693203][ T9639] netlink: 'syz.4.9431': attribute type 10 has an invalid length. [ 3347.780654][ T9566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3348.291974][ T4223] hsr_slave_0: left promiscuous mode [ 3348.310605][T29257] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 3348.334508][ T4223] hsr_slave_1: left promiscuous mode [ 3348.352121][ T4223] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3348.374781][ T6211] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 3348.407413][ T6211] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 3348.419819][ T4223] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3348.430038][ T6211] dib0700: firmware download failed at 7 with -22 [ 3348.471630][ T6211] usb 5-1: USB disconnect, device number 111 [ 3348.524566][ T4223] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3348.561026][ T4223] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3348.612813][T29257] usb 3-1: config index 0 descriptor too short (expected 9533, got 36) [ 3348.643839][T29257] usb 3-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 3348.681357][T29257] usb 3-1: config 161 has an invalid interface descriptor of length 7, skipping [ 3348.709730][ T4223] veth1_macvtap: left promiscuous mode [ 3348.729644][ T4223] veth0_macvtap: left promiscuous mode [ 3348.731075][T29257] usb 3-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 3348.760158][ T4223] veth1_vlan: left promiscuous mode [ 3348.789716][ T4223] veth0_vlan: left promiscuous mode [ 3348.790742][T29257] usb 3-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 3348.819238][T29257] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 3348.839259][T29257] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3350.276904][T29257] usb 3-1: USB disconnect, device number 109 [ 3351.875048][ T4223] team0 (unregistering): Port device team_slave_1 removed [ 3351.969072][ T4223] team0 (unregistering): Port device team_slave_0 removed [ 3352.840435][ T9566] team0: Port device team_slave_0 added [ 3352.895995][ T9566] team0: Port device team_slave_1 added [ 3354.005896][ T9566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3354.034192][ T9566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3354.060102][ C0] vkms_vblank_simulate: vblank timer overrun [ 3354.224258][ T9566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3354.385817][ T9723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9443'. [ 3354.436635][ T9566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3354.472469][ T9566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3354.509994][ T9566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3354.734480][ T9719] input: syz1 as /devices/virtual/input/input122 [ 3355.640213][ T9740] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9448'. [ 3355.747917][ T9566] hsr_slave_0: entered promiscuous mode [ 3355.821842][ T9566] hsr_slave_1: entered promiscuous mode [ 3356.144849][ T9740] input: syz1 as /devices/virtual/input/input123 [ 3356.251441][T29404] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 3356.494663][T29404] usb 4-1: config index 0 descriptor too short (expected 9533, got 36) [ 3356.514559][T29404] usb 4-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 3356.557719][T29404] usb 4-1: config 161 has an invalid interface descriptor of length 7, skipping [ 3356.707727][T29404] usb 4-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 3356.826353][T29404] usb 4-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 3356.975184][T29404] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 3357.001223][T29404] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3357.267923][T29257] usb 4-1: USB disconnect, device number 102 [ 3357.663014][ T9566] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 3357.725130][ T9566] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 3357.767072][ T9566] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 3357.812661][ T9566] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 3357.923502][T29257] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 3358.171369][T29257] usb 3-1: Using ep0 maxpacket: 8 [ 3360.595215][T29257] usb 3-1: unable to get BOS descriptor or descriptor too short [ 3360.615461][T29257] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 3360.627782][ T9566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3360.634774][T29257] usb 3-1: can't read configurations, error -71 [ 3360.728437][ T9566] 8021q: adding VLAN 0 to HW filter on device team0 [ 3361.132209][ T9803] program syz.2.9460 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3361.726700][ T1960] bridge0: port 1(bridge_slave_0) entered blocking state [ 3361.733987][ T1960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3362.125104][ T5150] bridge0: port 2(bridge_slave_1) entered blocking state [ 3362.132315][ T5150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3362.219506][ T9816] program syz.2.9462 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3363.228134][ T9839] fuse: Unknown parameter 'fd0x0000000000000008' [ 3363.238626][ T9566] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3363.472876][ T5150] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 3363.526228][ T9566] veth0_vlan: entered promiscuous mode [ 3363.583430][ T9566] veth1_vlan: entered promiscuous mode [ 3363.679908][ T9566] veth0_macvtap: entered promiscuous mode [ 3363.714588][ T5150] usb 5-1: config index 0 descriptor too short (expected 9533, got 36) [ 3363.759725][ T5150] usb 5-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 3363.772094][ T9566] veth1_macvtap: entered promiscuous mode [ 3363.838636][ T5150] usb 5-1: config 161 has an invalid interface descriptor of length 7, skipping [ 3363.872054][ T5150] usb 5-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 3363.920375][ T9566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3363.931800][ T5150] usb 5-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 3363.946250][ T9566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3363.983922][ T9853] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9468'. [ 3364.023439][ T9566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3364.038526][ T5150] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 3364.065476][ T5150] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3364.086449][ T9566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3364.146919][ T9566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3364.196270][ T9566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3364.224095][ T9566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3364.254811][ T9566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3364.278539][ T9566] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3364.332864][T29404] usb 5-1: USB disconnect, device number 112 [ 3364.373659][ T5148] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 3364.406615][ T9566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3364.472360][ T9566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3364.506350][ T9566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3364.538711][ T9566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3364.588283][ T9566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3364.601571][ T5148] usb 4-1: config index 0 descriptor too short (expected 9533, got 36) [ 3364.605926][ T9566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3364.630327][ T9566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3364.651235][ T9566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3364.723158][ T5148] usb 4-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 3364.732650][ T9566] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3364.768865][ T5148] usb 4-1: config 161 has an invalid interface descriptor of length 7, skipping [ 3364.807206][ T9566] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3364.821934][ T5148] usb 4-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 3364.824071][ T9566] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3364.851736][ T9566] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3364.887023][ T9566] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3364.913815][ T5148] usb 4-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 3364.931383][ T5148] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 3364.941428][ T5148] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3365.473765][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3365.475516][T29404] usb 4-1: USB disconnect, device number 103 [ 3365.506114][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3365.781489][ T4223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3365.789393][ T4223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3365.797885][ T9880] netlink: 'syz.4.9471': attribute type 10 has an invalid length. [ 3365.845952][ T9880] bridge0: port 3(team0) entered disabled state [ 3365.943373][ T9880] team0: left allmulticast mode [ 3365.948257][ T9880] team_slave_0: left allmulticast mode [ 3365.991516][ T9880] team_slave_1: left allmulticast mode [ 3365.997092][ T9880] team0: left promiscuous mode [ 3366.007090][ T9880] team_slave_0: left promiscuous mode [ 3366.013046][ T9880] team_slave_1: left promiscuous mode [ 3366.019298][ T9880] bridge0: port 3(team0) entered disabled state [ 3366.048835][ T9883] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9471'. [ 3366.109695][ T3677] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 3366.129522][ T3677] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 3366.146125][ T3677] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 3366.156033][ T3677] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 3366.166204][ T3677] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 3366.174805][ T3677] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 3366.222573][ T9880] batman_adv: batadv0: Adding interface: team0 [ 3366.243912][ T9880] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3366.269660][ T9880] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 3366.281081][ T9881] netlink: 'syz.4.9471': attribute type 10 has an invalid length. [ 3366.289050][ T9881] netlink: 2 bytes leftover after parsing attributes in process `syz.4.9471'. [ 3366.298499][ T9881] team0: entered promiscuous mode [ 3366.303655][ T9881] team_slave_0: entered promiscuous mode [ 3366.313811][ T9881] team_slave_1: entered promiscuous mode [ 3366.335437][ T9881] 8021q: adding VLAN 0 to HW filter on device team0 [ 3366.342862][ T9881] batman_adv: batadv0: Interface activated: team0 [ 3366.349548][ T9881] batman_adv: batadv0: Interface deactivated: team0 [ 3366.358164][ T9881] batman_adv: batadv0: Removing interface: team0 [ 3366.615740][ T9881] bridge0: port 3(team0) entered blocking state [ 3366.633762][ T9881] bridge0: port 3(team0) entered disabled state [ 3366.670294][ T9881] team0: entered allmulticast mode [ 3366.689301][ T9881] team_slave_0: entered allmulticast mode [ 3366.695542][ T9881] team_slave_1: entered allmulticast mode [ 3366.725234][ T9881] bridge0: port 3(team0) entered blocking state [ 3366.731635][ T9881] bridge0: port 3(team0) entered forwarding state [ 3367.459313][ T1037] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 3367.490795][ T1037] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3367.800247][ T1037] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 3367.819431][ T1037] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3368.064318][ T1037] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 3368.116009][ T1037] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3368.154572][ T3677] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 3368.161153][ T3677] Bluetooth: Wrong link type (-22) [ 3368.272011][ T3677] Bluetooth: hci5: command tx timeout [ 3368.521248][ T1037] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 3368.613050][ T1037] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3369.151928][ T6830] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 3369.162613][ T9884] chnl_net:caif_netlink_parms(): no params data found [ 3369.316478][ T9959] fuse: Unknown parameter 'fd0x0000000000000008' [ 3369.394570][ T6830] usb 4-1: config index 0 descriptor too short (expected 9533, got 36) [ 3369.439200][ T9958] input: syz1 as /devices/virtual/input/input124 [ 3369.472410][ T6830] usb 4-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 3369.555705][ T6830] usb 4-1: config 161 has an invalid interface descriptor of length 7, skipping [ 3369.569453][ T6830] usb 4-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 3369.621884][ T6830] usb 4-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 3369.644744][ T6830] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 3369.657904][ T6830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3369.921784][ T1037] team0: left allmulticast mode [ 3369.941244][ T1037] team_slave_0: left allmulticast mode [ 3369.950054][ T6830] usb 4-1: USB disconnect, device number 104 [ 3370.068063][ T1037] team_slave_1: left allmulticast mode [ 3370.137151][ T1037] bridge0: port 3(team0) entered disabled state [ 3370.220529][ T1037] bridge_slave_1: left allmulticast mode [ 3370.302896][ T1037] bridge_slave_1: left promiscuous mode [ 3370.322701][ T1037] bridge0: port 2(bridge_slave_1) entered disabled state [ 3370.351627][ T3677] Bluetooth: hci5: command tx timeout [ 3370.376933][ T1037] bridge_slave_0: left allmulticast mode [ 3370.391182][ T1037] bridge_slave_0: left promiscuous mode [ 3370.407693][ T1037] bridge0: port 1(bridge_slave_0) entered disabled state [ 3371.556864][ T9989] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9485'. [ 3372.361439][ T3677] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 3372.370400][ T3677] Bluetooth: hci3: Injecting HCI hardware error event [ 3372.383030][ T3677] Bluetooth: hci3: hardware error 0x00 [ 3372.440274][ T1090] Bluetooth: hci5: command tx timeout [ 3372.558471][ T1037] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3372.571879][ T1037] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3372.585117][ T1037] bond0 (unregistering): Released all slaves [ 3372.620330][ T9981] netlink: 'syz.0.9485': attribute type 10 has an invalid length. [ 3372.662933][ T9981] batman_adv: batadv0: Adding interface: team0 [ 3372.669105][ T9981] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3372.733083][ T9981] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 3372.753856][ T9984] netlink: 'syz.0.9485': attribute type 10 has an invalid length. [ 3372.784915][ T9984] netlink: 2 bytes leftover after parsing attributes in process `syz.0.9485'. [ 3372.798463][ T9984] team0: entered promiscuous mode [ 3372.804100][ T9984] team_slave_0: entered promiscuous mode [ 3372.820266][ T9984] team_slave_1: entered promiscuous mode [ 3372.852111][ T9984] 8021q: adding VLAN 0 to HW filter on device team0 [ 3372.858978][ T9984] batman_adv: batadv0: Interface activated: team0 [ 3372.881041][ T9984] batman_adv: batadv0: Interface deactivated: team0 [ 3372.897878][ T9984] batman_adv: batadv0: Removing interface: team0 [ 3372.912813][ T9984] bridge0: port 3(team0) entered blocking state [ 3372.928069][ T9984] bridge0: port 3(team0) entered disabled state [ 3372.935994][ T9984] team0: entered allmulticast mode [ 3372.941193][ T9984] team_slave_0: entered allmulticast mode [ 3372.951591][ T9984] team_slave_1: entered allmulticast mode [ 3372.968838][ T9984] bridge0: port 3(team0) entered blocking state [ 3372.975412][ T9984] bridge0: port 3(team0) entered forwarding state [ 3373.402378][ T9884] bridge0: port 1(bridge_slave_0) entered blocking state [ 3373.450987][ T9884] bridge0: port 1(bridge_slave_0) entered disabled state [ 3373.470743][ T9884] bridge_slave_0: entered allmulticast mode [ 3373.498384][ T9884] bridge_slave_0: entered promiscuous mode [ 3373.514631][ T9884] bridge0: port 2(bridge_slave_1) entered blocking state [ 3373.523393][ T9884] bridge0: port 2(bridge_slave_1) entered disabled state [ 3373.537248][ T29] audit: type=1326 audit(1721586801.516:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10003 comm="syz.3.9489" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd207775b59 code=0x0 [ 3373.560807][ T9884] bridge_slave_1: entered allmulticast mode [ 3373.562450][ T9884] bridge_slave_1: entered promiscuous mode [ 3373.795502][ T9884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3373.808656][ T29] audit: type=1326 audit(1721586801.746:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10003 comm="syz.3.9489" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd207775b59 code=0x0 [ 3373.881093][ T9884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3374.343057][T10022] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9492'. [ 3374.512039][ T9140] Bluetooth: hci5: command tx timeout [ 3374.513279][ T3677] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 3374.605680][ T1037] hsr_slave_0: left promiscuous mode [ 3374.669531][ T1037] hsr_slave_1: left promiscuous mode [ 3374.708576][ T1037] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3374.731864][ T1037] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3374.757114][ T1037] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3374.776856][ T1037] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3374.888374][ T1037] veth1_macvtap: left promiscuous mode [ 3374.906502][ T1037] veth0_macvtap: left promiscuous mode [ 3374.931906][ T1037] veth1_vlan: left promiscuous mode [ 3374.947446][ T1037] veth0_vlan: left promiscuous mode [ 3375.147232][T29257] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 3375.383808][T29257] usb 5-1: config index 0 descriptor too short (expected 9533, got 36) [ 3375.407253][T29257] usb 5-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 3375.425936][T10047] input: syz1 as /devices/virtual/input/input125 [ 3375.451648][T29257] usb 5-1: config 161 has an invalid interface descriptor of length 7, skipping [ 3375.488083][T29257] usb 5-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 3375.535892][T29257] usb 5-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 3375.575904][T29257] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 3375.602804][T29257] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3375.871707][T29257] usb 5-1: USB disconnect, device number 113 [ 3376.601716][ T3677] Bluetooth: hci3: Opcode 0x206c failed: -110 [ 3376.927482][ T1037] team_slave_1 (unregistering): left promiscuous mode [ 3376.976256][ T1037] team0 (unregistering): Port device team_slave_1 removed [ 3377.133244][ T1037] team_slave_0 (unregistering): left promiscuous mode [ 3377.149652][ T1037] team0 (unregistering): Port device team_slave_0 removed [ 3377.377703][T10062] input: syz1 as /devices/virtual/input/input126 [ 3378.367805][ T9884] team0: Port device team_slave_0 added [ 3378.386807][T10044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9495'. [ 3378.575578][ T9884] team0: Port device team_slave_1 added [ 3378.673721][ T3677] Bluetooth: hci3: Opcode 0x2046 failed: -110 [ 3378.786698][ T9884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3378.825691][ T9884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3378.906388][ T9884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3378.950016][ T9884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3378.973028][ T9884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3379.064486][ T9884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3379.382236][ T9884] hsr_slave_0: entered promiscuous mode [ 3379.414651][ T9884] hsr_slave_1: entered promiscuous mode [ 3379.459944][ T9884] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3379.475542][ T9884] Cannot create hsr debugfs directory [ 3379.922460][T29257] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 3380.191847][T29257] usb 4-1: Using ep0 maxpacket: 8 [ 3380.205701][T29257] usb 4-1: unable to get BOS descriptor or descriptor too short [ 3380.229863][T29257] usb 4-1: string descriptor 0 read error: -22 [ 3380.262111][T29257] usb 4-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 3380.301256][T29257] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3380.332329][T29257] usb 4-1: config 0 descriptor?? [ 3380.494310][T10101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9505'. [ 3381.002621][T10090] netlink: 'syz.3.9503': attribute type 10 has an invalid length. [ 3381.048205][T10101] input: syz1 as /devices/virtual/input/input127 [ 3381.593894][ T6211] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 3381.638334][T29257] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 3381.715151][T29257] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 3381.728643][T29257] dib0700: firmware download failed at 7 with -22 [ 3381.779075][T29257] usb 4-1: USB disconnect, device number 105 [ 3381.885020][ T6211] usb 3-1: config index 0 descriptor too short (expected 9533, got 36) [ 3381.911433][ T6211] usb 3-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 3381.935813][ T6211] usb 3-1: config 161 has an invalid interface descriptor of length 7, skipping [ 3381.971928][ T6211] usb 3-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 3382.027856][ T6211] usb 3-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 3382.060833][ T6211] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 3382.111444][ T6211] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3382.218992][ T9884] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 3382.284316][ T9884] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 3382.339106][ T9884] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 3382.516200][ T9884] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 3382.538709][ T6211] usb 3-1: USB disconnect, device number 112 [ 3384.694581][ T9884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3384.835805][ T9884] 8021q: adding VLAN 0 to HW filter on device team0 [ 3384.914357][T29404] bridge0: port 1(bridge_slave_0) entered blocking state [ 3384.921677][T29404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3384.992756][T29404] bridge0: port 2(bridge_slave_1) entered blocking state [ 3384.999957][T29404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3385.375840][T10139] input: syz1 as /devices/virtual/input/input128 [ 3387.176724][ T9884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3387.378169][ T9884] veth0_vlan: entered promiscuous mode [ 3387.460163][ T9884] veth1_vlan: entered promiscuous mode [ 3387.685349][T10157] input: syz1 as /devices/virtual/input/input129 [ 3387.744735][ T9884] veth0_macvtap: entered promiscuous mode [ 3387.855978][ T9884] veth1_macvtap: entered promiscuous mode [ 3387.954299][ T9884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3387.994322][ T9884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3388.020315][T10187] fuse: Unknown parameter 'fd0x0000000000000008' [ 3388.050586][ T9884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3388.115983][ T9884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3388.181522][ T9884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3388.225463][ T9884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3388.335815][ T9884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3388.387430][ T9884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3388.446652][ T9884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3388.795815][ T9884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3388.819496][ T9884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3388.884503][ T9884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3388.929473][ T9884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3388.976945][ T9884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3389.045534][ T9884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3389.105817][ T9884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3389.147844][ T9884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3389.202972][ T9884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3389.235256][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 3389.241885][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 3389.324311][ T9884] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3389.409945][ T9884] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3389.482449][ T9884] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3389.521703][ T9884] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3389.952469][T10208] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9520'. [ 3390.263895][T10208] input: syz1 as /devices/virtual/input/input130 [ 3390.450412][T11449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3390.459900][T10220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9521'. [ 3390.696324][T11449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3391.619810][T11449] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3391.726751][T11449] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3391.990155][T10220] input: syz1 as /devices/virtual/input/input131 [ 3395.390338][T10282] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9533'. [ 3395.789777][T10289] input: syz1 as /devices/virtual/input/input132 [ 3395.961534][ T1158] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 3396.112895][T10295] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9535'. [ 3396.177497][T10295] input: syz1 as /devices/virtual/input/input133 [ 3396.223565][ T1158] usb 1-1: config index 0 descriptor too short (expected 9533, got 36) [ 3396.232468][ T1158] usb 1-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 3396.259886][ T1158] usb 1-1: config 161 has an invalid interface descriptor of length 7, skipping [ 3396.270036][ T1158] usb 1-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 3396.301862][ T1158] usb 1-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 3396.361717][ T1158] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 3396.404973][ T1158] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3396.700360][ T1158] usb 1-1: USB disconnect, device number 91 [ 3396.999144][T10315] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9539'. [ 3397.407211][T10315] input: syz1 as /devices/virtual/input/input134 [ 3399.532372][T10340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9545'. [ 3402.065000][ T29] audit: type=1326 audit(1721586830.046:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10351 comm="syz.0.9550" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2e82775b59 code=0x0 [ 3402.097710][ T3677] Bluetooth: hci5: command 0x0406 tx timeout [ 3402.127715][T10340] input: syz1 as /devices/virtual/input/input135 [ 3402.169134][T10363] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9552'. [ 3402.218399][T10352] netlink: 'syz.0.9550': attribute type 54 has an invalid length. [ 3402.232682][T10352] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9550'. [ 3404.699002][T10363] input: syz1 as /devices/virtual/input/input136 [ 3405.247921][ T9140] Bluetooth: hci5: unexpected event for opcode 0x0c56 [ 3405.355895][ T9140] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 3405.566484][T10392] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9559'. [ 3405.618646][ T9140] Bluetooth: hci5: unexpected event for opcode 0x0c1a [ 3405.709587][T10392] input: syz1 as /devices/virtual/input/input137 [ 3405.803396][T10400] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9561'. [ 3406.097349][ C0] eth0: bad gso: type: 1, size: 1408 [ 3408.226135][ T29] audit: type=1326 audit(1721586836.206:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10414 comm="syz.0.9566" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2e82775b59 code=0x0 [ 3409.335542][ T9140] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 3409.417636][T10428] hub 9-0:1.0: USB hub found [ 3409.425016][T10428] hub 9-0:1.0: 8 ports detected [ 3409.763716][ T9140] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 3409.772927][ T9140] Bluetooth: hci5: Injecting HCI hardware error event [ 3409.785487][ T9140] Bluetooth: hci5: hardware error 0x00 [ 3410.126619][T10424] fuse: Unknown parameter 'fd0x0000000000000008' [ 3411.361471][ T1960] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 3411.871468][ T9140] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 3412.131441][ T1960] usb 3-1: Using ep0 maxpacket: 8 [ 3412.147792][T10434] input: syz1 as /devices/virtual/input/input138 [ 3412.154894][T10452] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9576'. [ 3412.172924][ T1960] usb 3-1: unable to get BOS descriptor or descriptor too short [ 3412.196759][ T1960] usb 3-1: string descriptor 0 read error: -22 [ 3412.231596][ T1960] usb 3-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 3412.275183][T10444] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9574'. [ 3412.328409][ T1960] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3412.365603][ T1960] usb 3-1: config 0 descriptor?? [ 3413.780776][T10441] netlink: 'syz.2.9573': attribute type 10 has an invalid length. [ 3413.805450][T10448] input: syz1 as /devices/virtual/input/input139 [ 3413.952169][ T9140] Bluetooth: hci5: Opcode 0x206c failed: -110 [ 3415.507761][ T1960] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 3415.553684][ T1960] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 3415.612590][ T1960] dib0700: firmware download failed at 7 with -22 [ 3415.679342][ T1960] usb 3-1: USB disconnect, device number 113 [ 3415.699353][ C0] eth0: bad gso: type: 1, size: 1408 [ 3416.118497][ T9140] Bluetooth: hci5: Opcode 0x2046 failed: -110 [ 3418.369237][T10493] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9587'. [ 3418.434492][T10496] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9588'. [ 3418.544174][T10496] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 3418.550733][T10496] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 3418.579233][T10496] vhci_hcd vhci_hcd.0: Device attached [ 3418.622337][T10500] vhci_hcd: connection closed [ 3418.636116][T20720] vhci_hcd: stop threads [ 3418.689068][T20720] vhci_hcd: release socket [ 3418.719746][T20720] vhci_hcd: disconnect device [ 3418.742208][ T5150] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 3419.855901][ T5150] usb 2-1: config index 0 descriptor too short (expected 9533, got 36) [ 3419.868678][ T5150] usb 2-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 3419.901107][ T5150] usb 2-1: config 161 has an invalid interface descriptor of length 7, skipping [ 3419.922292][ T5150] usb 2-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 3419.948211][ T5150] usb 2-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 3419.974209][ T5150] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 3420.228754][ T5150] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3421.409158][ T5150] usb 2-1: can't set config #161, error -71 [ 3421.442857][ T5150] usb 2-1: USB disconnect, device number 102 [ 3421.641447][ T6830] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 3421.851785][ T6830] usb 5-1: Using ep0 maxpacket: 8 [ 3421.882681][ T6830] usb 5-1: unable to get BOS descriptor or descriptor too short [ 3421.928672][ T6830] usb 5-1: string descriptor 0 read error: -22 [ 3421.953049][ T6830] usb 5-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 3422.008921][ T6830] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3422.025523][ T6830] usb 5-1: config 0 descriptor?? [ 3422.091015][T10510] input: syz1 as /devices/virtual/input/input140 [ 3422.888453][T10516] netlink: 'syz.4.9592': attribute type 10 has an invalid length. [ 3426.452952][ T6830] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 3426.498178][ T6830] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 3426.523988][ T6830] dib0700: firmware download failed at 7 with -22 [ 3426.544361][ T6830] usb 5-1: USB disconnect, device number 114 [ 3426.755204][T10558] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9604'. [ 3427.151505][ T6830] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 3428.185010][ T6830] usb 5-1: config index 0 descriptor too short (expected 9533, got 36) [ 3428.202369][ T6830] usb 5-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 3428.243832][ T6830] usb 5-1: config 161 has an invalid interface descriptor of length 7, skipping [ 3428.319302][ T6830] usb 5-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 3428.336725][T10570] input: syz1 as /devices/virtual/input/input141 [ 3428.350660][ T6830] usb 5-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 3428.374876][ T6830] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 3428.441467][ T6830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3428.691966][ T6830] usb 5-1: USB disconnect, device number 115 [ 3432.229544][T10594] input: syz1 as /devices/virtual/input/input143 [ 3434.451617][T10633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9623'. [ 3434.781791][ T6211] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 3434.840555][T10639] input: syz1 as /devices/virtual/input/input144 [ 3435.006395][ T6211] usb 3-1: config index 0 descriptor too short (expected 9533, got 36) [ 3435.048471][ T6211] usb 3-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 3435.083251][ T6211] usb 3-1: config 161 has an invalid interface descriptor of length 7, skipping [ 3435.104812][ T6211] usb 3-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 3435.127140][ T6211] usb 3-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 3435.181524][ T6211] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 3435.214052][ T6211] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3435.498318][ T6211] usb 3-1: USB disconnect, device number 114 [ 3435.571558][T10654] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9630'. [ 3436.625352][T10671] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9633'. [ 3437.034655][T29257] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 3437.253522][T29257] usb 1-1: config index 0 descriptor too short (expected 9533, got 36) [ 3437.444634][T29257] usb 1-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 3437.471680][T29257] usb 1-1: config 161 has an invalid interface descriptor of length 7, skipping [ 3437.475466][T10680] fuse: Unknown parameter 'fd0x0000000000000008' [ 3438.210867][T29257] usb 1-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 3438.221410][T29257] usb 1-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 3438.230941][T29257] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 3438.240209][T29257] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3438.676865][ T5148] usb 1-1: USB disconnect, device number 92 [ 3439.711759][ T5150] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 3439.906234][ T5150] usb 2-1: config index 0 descriptor too short (expected 9533, got 36) [ 3439.924047][ T5150] usb 2-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 3439.929253][T10707] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9643'. [ 3439.969917][ T5150] usb 2-1: config 161 has an invalid interface descriptor of length 7, skipping [ 3439.996965][ T5150] usb 2-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 3440.029636][ T5150] usb 2-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 3440.050807][ T5150] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 3440.083919][ T5150] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3440.389629][ T5150] usb 2-1: USB disconnect, device number 103 [ 3442.369572][T10712] input: syz1 as /devices/virtual/input/input145 [ 3444.794374][T10747] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9654'. [ 3445.022181][T10758] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9656'. [ 3445.204869][T29404] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 3445.401415][T29257] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 3447.223522][T29257] usb 4-1: config index 0 descriptor too short (expected 9533, got 36) [ 3447.249386][T29257] usb 4-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 3447.281384][T29257] usb 4-1: config 161 has an invalid interface descriptor of length 7, skipping [ 3447.330064][T29257] usb 4-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 3447.376196][T29257] usb 4-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 3447.406637][T29257] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 3447.437928][T29404] usb 5-1: config index 0 descriptor too short (expected 9533, got 36) [ 3447.454433][T29404] usb 5-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 3447.461317][T29257] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3447.473688][T29404] usb 5-1: config 161 has an invalid interface descriptor of length 7, skipping [ 3447.484694][T29404] usb 5-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 3447.495149][T29404] usb 5-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 3447.507121][T29404] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 3447.532496][T29404] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3447.575041][T29404] usb 5-1: can't set config #161, error -71 [ 3447.616623][T10771] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9661'. [ 3447.625844][T29404] usb 5-1: USB disconnect, device number 116 [ 3447.702840][ T29] audit: type=1326 audit(1721586875.676:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10773 comm="syz.1.9663" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f35a5975b59 code=0x0 [ 3447.737292][ T1960] usb 4-1: USB disconnect, device number 106 [ 3447.841522][ T29] audit: type=1326 audit(1721586875.786:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10773 comm="syz.1.9663" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f35a5975b59 code=0x0 [ 3447.971468][T29257] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 3448.213559][T29257] usb 1-1: config index 0 descriptor too short (expected 9533, got 36) [ 3448.266069][T29257] usb 1-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 3448.284476][T29257] usb 1-1: config 161 has an invalid interface descriptor of length 7, skipping [ 3448.335483][T29257] usb 1-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 3448.355956][T29257] usb 1-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 3448.369866][T29257] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 3448.380850][T29257] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3449.658945][ T5148] usb 1-1: USB disconnect, device number 93 [ 3450.745240][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 3450.781492][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 3453.043557][T10808] netlink: 'syz.1.9671': attribute type 10 has an invalid length. [ 3454.229464][T10808] batman_adv: batadv0: Adding interface: team0 [ 3454.235961][T10808] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3454.261671][T10808] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 3454.276053][T10812] netlink: 'syz.1.9671': attribute type 10 has an invalid length. [ 3454.323085][T10812] netlink: 2 bytes leftover after parsing attributes in process `syz.1.9671'. [ 3454.381787][T10812] team0: entered promiscuous mode [ 3454.387132][T10812] team_slave_0: entered promiscuous mode [ 3454.417474][T10812] team_slave_1: entered promiscuous mode [ 3454.427342][T10812] 8021q: adding VLAN 0 to HW filter on device team0 [ 3454.434680][T10812] batman_adv: batadv0: Interface activated: team0 [ 3454.441356][T10812] batman_adv: batadv0: Interface deactivated: team0 [ 3454.448101][T10812] batman_adv: batadv0: Removing interface: team0 [ 3454.465970][T10808] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9671'. [ 3454.754331][T10812] bridge0: port 3(team0) entered blocking state [ 3454.787286][T10812] bridge0: port 3(team0) entered disabled state [ 3454.813561][T10812] team0: entered allmulticast mode [ 3454.844193][T10812] team_slave_0: entered allmulticast mode [ 3454.868204][T10812] team_slave_1: entered allmulticast mode [ 3454.898630][T10812] bridge0: port 3(team0) entered blocking state [ 3454.905118][T10812] bridge0: port 3(team0) entered forwarding state [ 3454.955267][ T29] audit: type=1326 audit(1721586882.936:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10821 comm="syz.4.9677" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3858f75b59 code=0x0 [ 3455.071300][ T29] audit: type=1326 audit(1721586883.046:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10821 comm="syz.4.9677" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3858f75b59 code=0x0 [ 3456.142601][ T1960] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 3456.833702][ T1960] usb 2-1: config index 0 descriptor too short (expected 9533, got 36) [ 3456.861337][ T1960] usb 2-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 3457.085553][ T1960] usb 2-1: config 161 has an invalid interface descriptor of length 7, skipping [ 3457.120462][ T1960] usb 2-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 3458.154822][ T1960] usb 2-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 3458.165530][ T1960] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 3458.175384][ T1960] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3458.374665][ T6830] usb 2-1: USB disconnect, device number 104 [ 3458.629949][ T1960] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 3458.641571][ T6211] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 3458.841535][ T1960] usb 5-1: Using ep0 maxpacket: 8 [ 3458.856238][ T1960] usb 5-1: unable to get BOS descriptor or descriptor too short [ 3458.861396][ T6211] usb 1-1: Using ep0 maxpacket: 8 [ 3458.878699][ T6211] usb 1-1: unable to get BOS descriptor or descriptor too short [ 3458.891852][ T1960] usb 5-1: string descriptor 0 read error: -22 [ 3458.928688][ T1960] usb 5-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 3458.935674][ T6211] usb 1-1: string descriptor 0 read error: -22 [ 3458.951644][ T6211] usb 1-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 3458.951651][ T1960] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3458.951685][ T6211] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3459.003762][ T6211] usb 1-1: config 0 descriptor?? [ 3459.060870][ T1960] usb 5-1: config 0 descriptor?? [ 3459.326557][T10864] netlink: 'syz.0.9686': attribute type 10 has an invalid length. [ 3459.404504][T10862] netlink: 'syz.4.9687': attribute type 10 has an invalid length. [ 3460.253252][ C0] eth0: bad gso: type: 1, size: 1408 [ 3460.297200][ T6211] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 3460.330170][ T6211] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 3460.342960][ T6211] dib0700: firmware download failed at 7 with -22 [ 3460.405527][ T6211] usb 1-1: USB disconnect, device number 94 [ 3460.414680][ T1960] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 3460.466826][ T1960] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 3460.513004][ T1960] dib0700: firmware download failed at 7 with -22 [ 3460.566492][ T1960] usb 5-1: USB disconnect, device number 117 [ 3469.873225][ C0] eth0: bad gso: type: 1, size: 1408 [ 3472.950645][T10956] input: syz1 as /devices/virtual/input/input146 [ 3473.441724][T10966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9714'. [ 3473.883379][ T6830] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 3475.076276][ T6830] usb 2-1: config index 0 descriptor too short (expected 9533, got 36) [ 3475.115922][ T6830] usb 2-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 3475.138714][ T6830] usb 2-1: config 161 has an invalid interface descriptor of length 7, skipping [ 3475.181398][ T6830] usb 2-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 3475.234575][ T6830] usb 2-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 3475.382220][ T6830] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 3475.448704][ T6830] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3475.608271][T10984] input: syz1 as /devices/virtual/input/input147 [ 3475.735180][ T6830] usb 2-1: USB disconnect, device number 105 [ 3476.583270][ C0] eth0: bad gso: type: 1, size: 1408 [ 3479.521612][T11020] input: syz1 as /devices/virtual/input/input148 [ 3479.679795][T11025] input: syz1 as /devices/virtual/input/input149 [ 3489.113095][ C0] eth0: bad gso: type: 1, size: 1408 [ 3489.153267][ T3677] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 3489.178005][ T3677] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 3489.190599][ T3677] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 3489.202020][ T3677] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 3489.209778][ T3677] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 3489.217522][ T3677] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 3490.359845][T11449] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3490.504178][T11449] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3490.513116][T11074] input: syz1 as /devices/virtual/input/input150 [ 3490.762562][T11449] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3490.833980][T11082] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9741'. [ 3491.034721][T11449] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3491.313634][ T3677] Bluetooth: hci1: command tx timeout [ 3491.399907][T11083] input: syz1 as /devices/virtual/input/input151 [ 3491.523571][T11085] input: syz1 as /devices/virtual/input/input152 [ 3492.971821][T11067] chnl_net:caif_netlink_parms(): no params data found [ 3493.029698][T11449] team0: left allmulticast mode [ 3493.041604][T11449] team_slave_0: left allmulticast mode [ 3493.074148][T11449] team_slave_1: left allmulticast mode [ 3493.116387][T11449] bridge0: port 3(team0) entered disabled state [ 3493.194128][T11449] bridge_slave_1: left allmulticast mode [ 3493.245905][T11449] bridge_slave_1: left promiscuous mode [ 3493.252403][T11449] bridge0: port 2(bridge_slave_1) entered disabled state [ 3493.277686][T11449] bridge_slave_0: left allmulticast mode [ 3493.297671][T11449] bridge_slave_0: left promiscuous mode [ 3493.309349][T11449] bridge0: port 1(bridge_slave_0) entered disabled state [ 3493.401937][ T3677] Bluetooth: hci1: command tx timeout [ 3494.896108][T11449] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3494.918962][T11449] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3494.940396][T11449] bond0 (unregistering): Released all slaves [ 3494.953282][ T29] audit: type=1326 audit(1721586922.926:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11132 comm="syz.2.9748" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4d48375b59 code=0x0 [ 3495.150684][ T29] audit: type=1326 audit(1721586923.126:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11132 comm="syz.2.9748" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4d48375b59 code=0x0 [ 3495.482030][ T3677] Bluetooth: hci1: command tx timeout [ 3495.959930][T11067] bridge0: port 1(bridge_slave_0) entered blocking state [ 3496.048816][T11067] bridge0: port 1(bridge_slave_0) entered disabled state [ 3496.072466][T11067] bridge_slave_0: entered allmulticast mode [ 3496.080414][T11067] bridge_slave_0: entered promiscuous mode [ 3496.724710][T11163] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9753'. [ 3496.803297][T11067] bridge0: port 2(bridge_slave_1) entered blocking state [ 3496.817572][T11067] bridge0: port 2(bridge_slave_1) entered disabled state [ 3496.845538][T11067] bridge_slave_1: entered allmulticast mode [ 3496.896078][T11067] bridge_slave_1: entered promiscuous mode [ 3497.543830][T11183] hub 9-0:1.0: USB hub found [ 3497.551742][T11183] hub 9-0:1.0: 8 ports detected [ 3497.612782][ T3677] Bluetooth: hci1: command tx timeout [ 3497.761689][T11449] hsr_slave_0: left promiscuous mode [ 3498.231762][T11449] hsr_slave_1: left promiscuous mode [ 3498.238107][T11449] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3498.261762][T11449] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3498.271239][T11449] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3498.288264][T11449] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3498.415472][T11191] input: syz1 as /devices/virtual/input/input153 [ 3498.440993][T11449] veth1_macvtap: left promiscuous mode [ 3498.479886][T11449] veth0_macvtap: left promiscuous mode [ 3498.517896][T11449] veth1_vlan: left promiscuous mode [ 3498.533810][T11449] veth0_vlan: left promiscuous mode [ 3501.079316][T11449] team_slave_1 (unregistering): left promiscuous mode [ 3501.096555][T11449] team0 (unregistering): Port device team_slave_1 removed [ 3501.161897][T11449] team_slave_0 (unregistering): left promiscuous mode [ 3501.179181][T11449] team0 (unregistering): Port device team_slave_0 removed [ 3502.142550][T11067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3502.168074][T11067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3502.324813][T11222] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9764'. [ 3502.430822][T11067] team0: Port device team_slave_0 added [ 3502.483733][T11067] team0: Port device team_slave_1 added [ 3502.906298][T11232] hub 9-0:1.0: USB hub found [ 3502.914041][T11232] hub 9-0:1.0: 8 ports detected [ 3503.465041][T11067] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3503.473370][T11067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3503.499497][T11067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3503.571853][T11067] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3503.612144][ T1158] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 3503.619862][T11067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3503.666997][T11067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3503.842018][ T1158] usb 3-1: Using ep0 maxpacket: 8 [ 3503.860508][ T1158] usb 3-1: unable to get BOS descriptor or descriptor too short [ 3503.887563][ T1158] usb 3-1: string descriptor 0 read error: -22 [ 3503.902019][ T1158] usb 3-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 3503.919367][T11067] hsr_slave_0: entered promiscuous mode [ 3503.940705][ T1158] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3503.956764][T11067] hsr_slave_1: entered promiscuous mode [ 3503.985094][ T1158] usb 3-1: config 0 descriptor?? [ 3504.112373][ T6830] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 3504.230503][T11239] input: syz1 as /devices/virtual/input/input154 [ 3504.287431][T11231] netlink: 'syz.2.9767': attribute type 10 has an invalid length. [ 3504.332067][ T6830] usb 2-1: Using ep0 maxpacket: 8 [ 3504.361556][ T6830] usb 2-1: unable to get BOS descriptor or descriptor too short [ 3504.409516][ T6830] usb 2-1: string descriptor 0 read error: -22 [ 3504.468378][ T1158] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 3504.477550][ T6830] usb 2-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 3504.516433][ T1158] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 3504.529785][ T6830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3504.571535][ T1158] dib0700: firmware download failed at 7 with -22 [ 3504.593421][ T6830] usb 2-1: config 0 descriptor?? [ 3504.603586][ C0] eth0: bad gso: type: 1, size: 1408 [ 3504.623998][ T1158] usb 3-1: USB disconnect, device number 115 [ 3504.985285][T11244] netlink: 'syz.1.9770': attribute type 10 has an invalid length. [ 3505.210903][T11261] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9771'. [ 3505.571653][ T2188] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 3505.657731][ T6830] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 3505.696905][ T6830] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 3505.715248][ T6830] dib0700: firmware download failed at 7 with -22 [ 3505.776812][ T6830] usb 2-1: USB disconnect, device number 106 [ 3505.819781][ T2188] usb 5-1: config index 0 descriptor too short (expected 9533, got 36) [ 3505.895203][ T2188] usb 5-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 3505.907404][ T2188] usb 5-1: config 161 has an invalid interface descriptor of length 7, skipping [ 3505.966201][ T2188] usb 5-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 3505.992717][ T2188] usb 5-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 3506.014776][ T29] audit: type=1326 audit(1721586933.986:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11270 comm="syz.2.9773" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4d48375b59 code=0x0 [ 3506.039567][ T2188] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 3506.059168][ T2188] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3506.206601][ T29] audit: type=1326 audit(1721586934.136:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11270 comm="syz.2.9773" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4d48375b59 code=0x0 [ 3506.574653][T11067] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 3506.597946][ T6830] usb 5-1: USB disconnect, device number 118 [ 3506.665167][T11067] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 3506.737749][T11067] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 3506.794566][T11067] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 3508.198357][T11067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3508.558822][T11302] hub 9-0:1.0: USB hub found [ 3508.565044][T11302] hub 9-0:1.0: 8 ports detected [ 3509.232596][T11067] 8021q: adding VLAN 0 to HW filter on device team0 [ 3509.282815][T10976] bridge0: port 1(bridge_slave_0) entered blocking state [ 3509.290044][T10976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3509.331207][T10976] bridge0: port 2(bridge_slave_1) entered blocking state [ 3509.338362][T10976] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3510.929395][ C0] eth0: bad gso: type: 1, size: 1408 [ 3511.065041][T11067] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3511.331023][T11067] veth0_vlan: entered promiscuous mode [ 3511.575570][T11067] veth1_vlan: entered promiscuous mode [ 3511.657034][T11067] veth0_macvtap: entered promiscuous mode [ 3511.720266][T11067] veth1_macvtap: entered promiscuous mode [ 3511.785484][T11067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3511.835166][T11067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3511.857945][T11067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3511.885961][T11067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3511.909125][T11067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3511.909919][T11340] input: syz1 as /devices/virtual/input/input155 [ 3511.946017][T11067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3512.028104][T11067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3512.075257][T11067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3512.119260][T11067] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3512.121169][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 3512.146440][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 3512.190047][T11067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3512.257085][T11067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3512.267421][T11067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3512.290757][T11067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3512.301726][ T7154] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 3512.319445][T11067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3512.356753][T11067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3512.368803][T11067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3512.387033][T11067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3512.445835][T11067] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3512.521442][ T7154] usb 4-1: Using ep0 maxpacket: 8 [ 3512.542577][T11067] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3512.572969][ T7154] usb 4-1: unable to get BOS descriptor or descriptor too short [ 3512.615329][ T7154] usb 4-1: string descriptor 0 read error: -22 [ 3512.633063][ T7154] usb 4-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 3512.655119][T11067] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3512.675693][ T7154] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3512.736304][T11067] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3512.747018][ T7154] usb 4-1: config 0 descriptor?? [ 3512.786720][T11067] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3513.127210][T11361] netlink: 'syz.3.9790': attribute type 10 has an invalid length. [ 3513.370582][T28919] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3513.465699][T28919] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3513.768464][T11449] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3513.814041][T11449] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3518.259229][ T7154] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 3519.130178][ T7154] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 3519.181520][ T7154] dib0700: firmware download failed at 7 with -22 [ 3519.201251][ T7154] usb 4-1: USB disconnect, device number 107 [ 3523.749958][ T9140] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 3523.764855][ T9140] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 3523.802249][ T9140] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 3523.830352][ T9140] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 3523.841785][ T9140] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 3523.856524][ T9140] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 3524.074688][ T4223] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3524.413539][ T4223] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3524.491635][ T2188] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 3524.656108][ T4223] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3524.698028][ T3677] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 3524.705076][ T2188] usb 3-1: Using ep0 maxpacket: 8 [ 3524.710216][ T3677] Bluetooth: Wrong link type (-22) [ 3524.716389][ T3677] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 3524.725850][ T3677] Bluetooth: Wrong link type (-22) [ 3524.731167][ T3677] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 3524.738891][ T3677] Bluetooth: Wrong link type (-22) [ 3524.761775][ T2188] usb 3-1: unable to get BOS descriptor or descriptor too short [ 3524.799531][ T2188] usb 3-1: string descriptor 0 read error: -22 [ 3524.806120][ T2188] usb 3-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 3524.822617][ T2188] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3524.850802][ T2188] usb 3-1: config 0 descriptor?? [ 3524.947706][ T4223] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3525.199868][T11451] netlink: 'syz.2.9806': attribute type 10 has an invalid length. [ 3525.942466][ T4223] team0: left allmulticast mode [ 3525.952185][ T3677] Bluetooth: hci2: command tx timeout [ 3525.983824][ T4223] team_slave_0: left allmulticast mode [ 3525.989345][ T4223] team_slave_1: left allmulticast mode [ 3526.024013][ T4223] bridge0: port 3(team0) entered disabled state [ 3526.059232][ T2188] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 3526.086837][ T4223] bridge_slave_1: left allmulticast mode [ 3526.115434][ T2188] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 3526.127426][ T4223] bridge_slave_1: left promiscuous mode [ 3526.141517][ T2188] dib0700: firmware download failed at 7 with -22 [ 3526.148396][ T4223] bridge0: port 2(bridge_slave_1) entered disabled state [ 3526.211427][ T2188] usb 3-1: USB disconnect, device number 116 [ 3526.293296][ T4223] bridge_slave_0: left allmulticast mode [ 3526.318107][ T4223] bridge_slave_0: left promiscuous mode [ 3526.382236][ T4223] bridge0: port 1(bridge_slave_0) entered disabled state [ 3528.041640][ T3677] Bluetooth: hci2: command tx timeout [ 3528.455714][T11493] input: syz1 as /devices/virtual/input/input156 [ 3529.507499][ T4223] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3529.523685][ T4223] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3529.554184][T11519] input: syz1 as /devices/virtual/input/input157 [ 3529.578163][ T4223] bond0 (unregistering): Released all slaves [ 3530.040494][T11437] chnl_net:caif_netlink_parms(): no params data found [ 3530.121513][ T3677] Bluetooth: hci2: command tx timeout [ 3530.882918][ T4223] hsr_slave_0: left promiscuous mode [ 3530.930091][ T4223] hsr_slave_1: left promiscuous mode [ 3530.945066][ T4223] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3530.954473][ T4223] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3530.992936][ T4223] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3531.009720][ T4223] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3531.017879][T11539] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9818'. [ 3531.101443][ T4223] veth1_macvtap: left promiscuous mode [ 3531.127486][ T4223] veth0_macvtap: left promiscuous mode [ 3531.135671][ T4223] veth1_vlan: left promiscuous mode [ 3531.141206][ T4223] veth0_vlan: left promiscuous mode [ 3531.361463][ T5148] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 3531.574379][ T5148] usb 3-1: config index 0 descriptor too short (expected 9533, got 36) [ 3531.603584][ T5148] usb 3-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 3531.627268][ T5148] usb 3-1: config 161 has an invalid interface descriptor of length 7, skipping [ 3531.680407][ T5148] usb 3-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 3531.734208][ T5148] usb 3-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 3531.775218][ T5148] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 3531.805288][ T5148] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3532.211345][ T3677] Bluetooth: hci2: command tx timeout [ 3532.504893][ T3677] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 3532.512145][ T3677] Bluetooth: Wrong link type (-22) [ 3532.862499][ T4223] team_slave_1 (unregistering): left promiscuous mode [ 3532.883639][ T4223] team0 (unregistering): Port device team_slave_1 removed [ 3533.119272][ T4223] team_slave_0 (unregistering): left promiscuous mode [ 3533.136975][ T4223] team0 (unregistering): Port device team_slave_0 removed [ 3534.364584][ T5148] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 3534.541893][T10976] usb 3-1: USB disconnect, device number 117 [ 3534.563813][ T5148] usb 1-1: Using ep0 maxpacket: 8 [ 3534.607955][ T5148] usb 1-1: unable to get BOS descriptor or descriptor too short [ 3534.629530][T11437] bridge0: port 1(bridge_slave_0) entered blocking state [ 3534.659905][ T5148] usb 1-1: string descriptor 0 read error: -22 [ 3534.670131][ T5148] usb 1-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 3534.681961][ T5148] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3534.689060][T11437] bridge0: port 1(bridge_slave_0) entered disabled state [ 3534.697836][ T5148] usb 1-1: config 0 descriptor?? [ 3534.717849][T11437] bridge_slave_0: entered allmulticast mode [ 3534.739202][T11437] bridge_slave_0: entered promiscuous mode [ 3534.771807][T11437] bridge0: port 2(bridge_slave_1) entered blocking state [ 3534.778997][T11437] bridge0: port 2(bridge_slave_1) entered disabled state [ 3534.809057][T11437] bridge_slave_1: entered allmulticast mode [ 3534.823493][T11437] bridge_slave_1: entered promiscuous mode [ 3534.943207][T11574] netlink: 'syz.0.9824': attribute type 10 has an invalid length. [ 3535.112564][T11437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3535.274287][T11437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3535.288257][ T5148] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 3535.363702][ T5148] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 3535.377647][ T5148] dib0700: firmware download failed at 7 with -22 [ 3535.412336][ T5148] usb 1-1: USB disconnect, device number 95 [ 3535.709038][T11437] team0: Port device team_slave_0 added [ 3535.832487][T11437] team0: Port device team_slave_1 added [ 3536.251888][T11599] netlink: 'syz.0.9829': attribute type 10 has an invalid length. [ 3536.475217][T11599] batman_adv: batadv0: Adding interface: team0 [ 3536.481681][T11599] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3536.506870][ C1] vkms_vblank_simulate: vblank timer overrun [ 3536.517407][T11599] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 3536.529453][T11603] netlink: 'syz.0.9829': attribute type 10 has an invalid length. [ 3536.537417][T11603] netlink: 2 bytes leftover after parsing attributes in process `syz.0.9829'. [ 3536.546819][T11603] team0: entered promiscuous mode [ 3536.552161][T11603] team_slave_0: entered promiscuous mode [ 3536.558455][T11603] team_slave_1: entered promiscuous mode [ 3536.577591][T11603] 8021q: adding VLAN 0 to HW filter on device team0 [ 3536.585348][T11603] batman_adv: batadv0: Interface activated: team0 [ 3536.592503][T11603] batman_adv: batadv0: Interface deactivated: team0 [ 3536.603606][T11603] batman_adv: batadv0: Removing interface: team0 [ 3536.910177][ T3677] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 3536.919257][ T3677] Bluetooth: hci1: Injecting HCI hardware error event [ 3536.929437][ T3677] Bluetooth: hci1: hardware error 0x00 [ 3537.094916][T11603] bridge0: port 3(team0) entered blocking state [ 3537.101636][T11603] bridge0: port 3(team0) entered disabled state [ 3537.716958][T11603] team0: entered allmulticast mode [ 3537.751379][T11603] team_slave_0: entered allmulticast mode [ 3537.757137][T11603] team_slave_1: entered allmulticast mode [ 3537.815530][T11603] bridge0: port 3(team0) entered blocking state [ 3537.821944][T11603] bridge0: port 3(team0) entered forwarding state [ 3537.907762][T11437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3537.923492][T11437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3538.043944][T11437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3538.097422][T11437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3538.185613][T11437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3538.250564][T11437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3538.674808][T11437] hsr_slave_0: entered promiscuous mode [ 3538.698278][T11437] hsr_slave_1: entered promiscuous mode [ 3538.749706][T11437] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3538.779661][T11437] Cannot create hsr debugfs directory [ 3539.369183][T11620] input: syz1 as /devices/virtual/input/input158 [ 3539.951511][ T3677] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 3540.862807][T11643] input: syz1 as /devices/virtual/input/input159 [ 3541.147774][T11437] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 3541.285633][T11437] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 3541.350276][T11437] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 3541.386444][T11437] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 3541.887096][T11437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3541.949566][T11437] 8021q: adding VLAN 0 to HW filter on device team0 [ 3542.038165][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 3542.041500][ T3677] Bluetooth: hci1: Opcode 0x206c failed: -110 [ 3542.045422][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3542.262438][ T6830] bridge0: port 2(bridge_slave_1) entered blocking state [ 3542.269773][ T6830] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3542.909814][T11684] hub 9-0:1.0: USB hub found [ 3542.921718][T11684] hub 9-0:1.0: 8 ports detected [ 3544.112262][ T3677] Bluetooth: hci1: Opcode 0x2046 failed: -110 [ 3549.589514][T11437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3552.347674][T11741] hub 9-0:1.0: USB hub found [ 3552.353970][T11741] hub 9-0:1.0: 8 ports detected [ 3553.255858][T11437] veth0_vlan: entered promiscuous mode [ 3553.343369][T11437] veth1_vlan: entered promiscuous mode [ 3553.609278][T11437] veth0_macvtap: entered promiscuous mode [ 3553.694041][T11437] veth1_macvtap: entered promiscuous mode [ 3553.794173][T11437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3553.831606][T11437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3554.970245][T11437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3555.155411][T11437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3555.176930][T11437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3555.246551][T11437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3556.205861][T11437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3556.268973][T11437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3556.323941][T11437] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3556.538629][T11437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3556.641432][T11437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3557.187055][T11794] hub 9-0:1.0: USB hub found [ 3557.193618][T11794] hub 9-0:1.0: 8 ports detected [ 3557.429630][T11437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3557.526083][T11437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3558.211408][T11437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3558.261388][T11437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3558.298197][T11437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3558.330451][T11437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3558.354739][T11437] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3558.396712][T11437] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3558.423557][T11437] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3558.461664][T11437] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3558.479301][T11437] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3558.941234][T28919] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3559.025587][T28919] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3559.217621][T20720] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3559.256627][T20720] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3561.363929][T11829] input: syz1 as /devices/virtual/input/input160 [ 3562.463557][ T2188] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 3566.219196][ T2188] usb 1-1: Using ep0 maxpacket: 8 [ 3566.277746][ T2188] usb 1-1: device descriptor read/all, error -71 [ 3573.442536][ T3677] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 3573.455721][ T3677] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 3573.474168][ T3677] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 3573.487873][ T3677] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 3573.498855][ T3677] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 3573.513263][ T3677] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 3573.557054][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 3573.563460][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 3574.248435][ T9140] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 3574.278763][ T9140] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 3574.317430][ T9140] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 3574.335637][ T9140] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 3574.364587][ T9140] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 3574.378224][ T9140] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 3574.524539][T20720] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3574.619380][T11898] input: syz1 as /devices/virtual/input/input162 [ 3574.817694][T11908] input: syz1 as /devices/virtual/input/input163 [ 3574.839734][T20720] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3575.146452][T20720] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3575.498516][T20720] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3575.632302][ T3677] Bluetooth: hci3: command tx timeout [ 3575.640601][T11917] input: syz1 as /devices/virtual/input/input164 [ 3576.518972][ T3677] Bluetooth: hci0: command tx timeout [ 3577.213812][T11899] chnl_net:caif_netlink_parms(): no params data found [ 3577.473356][T11912] chnl_net:caif_netlink_parms(): no params data found [ 3577.696228][T20720] bridge_slave_1: left allmulticast mode [ 3577.721439][ T3677] Bluetooth: hci3: command tx timeout [ 3577.722064][T20720] bridge_slave_1: left promiscuous mode [ 3577.841801][T20720] bridge0: port 2(bridge_slave_1) entered disabled state [ 3577.868389][T20720] bridge_slave_0: left allmulticast mode [ 3577.876157][T20720] bridge_slave_0: left promiscuous mode [ 3577.909535][T20720] bridge0: port 1(bridge_slave_0) entered disabled state [ 3578.380104][ T7154] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 3578.591667][ T3677] Bluetooth: hci0: command tx timeout [ 3578.648427][ T7154] usb 5-1: Using ep0 maxpacket: 8 [ 3578.668325][ T7154] usb 5-1: unable to get BOS descriptor or descriptor too short [ 3578.695453][ T7154] usb 5-1: string descriptor 0 read error: -22 [ 3578.706084][ T7154] usb 5-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 3578.740586][ T7154] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3578.765177][ T7154] usb 5-1: config 0 descriptor?? [ 3578.968216][T20720] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3579.008226][T20720] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3579.045281][T20720] bond0 (unregistering): Released all slaves [ 3579.265258][T11945] netlink: 'syz.4.9896': attribute type 10 has an invalid length. [ 3579.791436][ T3677] Bluetooth: hci3: command tx timeout [ 3579.859073][ T7154] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 3579.940105][ T7154] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 3579.977799][ T7154] dib0700: firmware download failed at 7 with -22 [ 3580.047477][ T7154] usb 5-1: USB disconnect, device number 119 [ 3580.252625][T11899] bridge0: port 1(bridge_slave_0) entered blocking state [ 3580.282608][T11899] bridge0: port 1(bridge_slave_0) entered disabled state [ 3580.289918][T11899] bridge_slave_0: entered allmulticast mode [ 3580.359646][T11899] bridge_slave_0: entered promiscuous mode [ 3580.413717][T11899] bridge0: port 2(bridge_slave_1) entered blocking state [ 3580.453709][T11899] bridge0: port 2(bridge_slave_1) entered disabled state [ 3580.503029][T11899] bridge_slave_1: entered allmulticast mode [ 3580.536149][T11899] bridge_slave_1: entered promiscuous mode [ 3580.674036][ T3677] Bluetooth: hci0: command tx timeout [ 3580.930149][T11912] bridge0: port 1(bridge_slave_0) entered blocking state [ 3580.958349][T11912] bridge0: port 1(bridge_slave_0) entered disabled state [ 3581.001788][T11912] bridge_slave_0: entered allmulticast mode [ 3581.033936][T11912] bridge_slave_0: entered promiscuous mode [ 3581.218770][T20720] hsr_slave_0: left promiscuous mode [ 3581.272418][T20720] hsr_slave_1: left promiscuous mode [ 3581.331627][T20720] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3581.339280][T20720] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3581.554107][T20720] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3581.563501][T20720] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3581.871600][ T3677] Bluetooth: hci3: command tx timeout [ 3582.413355][T20720] veth1_macvtap: left promiscuous mode [ 3582.418888][T20720] veth0_macvtap: left promiscuous mode [ 3582.430103][T20720] veth1_vlan: left promiscuous mode [ 3582.451588][T20720] veth0_vlan: left promiscuous mode [ 3582.753128][ T3677] Bluetooth: hci0: command tx timeout [ 3582.961482][ T2188] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 3583.191466][ T2188] usb 2-1: Using ep0 maxpacket: 8 [ 3583.238262][ T2188] usb 2-1: unable to get BOS descriptor or descriptor too short [ 3583.261201][ T2188] usb 2-1: string descriptor 0 read error: -22 [ 3583.272143][ T2188] usb 2-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 3583.297243][ T2188] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3583.340300][ T2188] usb 2-1: config 0 descriptor?? [ 3583.971475][ T29] audit: type=1326 audit(1721587011.936:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11994 comm="syz.0.9905" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8401775b59 code=0x0 [ 3584.174446][ T29] audit: type=1326 audit(1721587012.156:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11994 comm="syz.0.9905" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8401775b59 code=0x0 [ 3584.348832][T20720] team0 (unregistering): Port device team_slave_1 removed [ 3584.425797][T20720] team0 (unregistering): Port device team_slave_0 removed [ 3585.698291][T11899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3585.736226][T11912] bridge0: port 2(bridge_slave_1) entered blocking state [ 3585.754139][T11912] bridge0: port 2(bridge_slave_1) entered disabled state [ 3585.762112][T11912] bridge_slave_1: entered allmulticast mode [ 3585.769607][T11912] bridge_slave_1: entered promiscuous mode [ 3585.841607][T11990] netlink: 'syz.1.9903': attribute type 10 has an invalid length. [ 3585.892992][T11899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3585.994514][ T2188] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 3586.033576][ T2188] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 3586.052466][ T2188] dib0700: firmware download failed at 7 with -22 [ 3586.072796][ T2188] usb 2-1: USB disconnect, device number 107 [ 3587.445931][T11899] team0: Port device team_slave_0 added [ 3587.466076][T11912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3587.910338][T11912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3588.654025][T11899] team0: Port device team_slave_1 added [ 3588.752051][T11912] team0: Port device team_slave_0 added [ 3588.806155][T11912] team0: Port device team_slave_1 added [ 3589.062830][T11899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3589.104364][T11899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3589.210516][T11899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3589.467628][T11912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3590.261412][T11912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3590.411390][T11912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3590.442998][T11912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3590.451407][T11912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3590.535398][T11912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3590.589265][T11899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3590.631492][T11899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3590.700514][T11899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3590.923955][ T29] audit: type=1326 audit(1721587018.906:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12043 comm="syz.4.9914" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fafc6775b59 code=0x0 [ 3591.047520][ T29] audit: type=1326 audit(1721587019.026:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12043 comm="syz.4.9914" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fafc6775b59 code=0x0 [ 3591.100449][T11899] hsr_slave_0: entered promiscuous mode [ 3591.150474][T11899] hsr_slave_1: entered promiscuous mode [ 3591.169381][T11899] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3591.191925][T11899] Cannot create hsr debugfs directory [ 3591.348888][T11912] hsr_slave_0: entered promiscuous mode [ 3591.364518][T11912] hsr_slave_1: entered promiscuous mode [ 3591.374476][T11912] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3591.398959][T11912] Cannot create hsr debugfs directory [ 3591.859015][T20720] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3591.911515][T29257] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 3592.921419][T29257] usb 5-1: Using ep0 maxpacket: 8 [ 3592.931255][T29257] usb 5-1: unable to get BOS descriptor or descriptor too short [ 3592.958572][T29257] usb 5-1: string descriptor 0 read error: -22 [ 3592.978907][T29257] usb 5-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 3592.989014][T29257] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3593.026326][T29257] usb 5-1: config 0 descriptor?? [ 3593.036011][T20720] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3593.120391][T12071] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9921'. [ 3593.250457][T20720] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3593.278481][T12066] input: syz1 as /devices/virtual/input/input165 [ 3593.502748][ T5150] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 3593.520224][T20720] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3593.663945][T12065] netlink: 'syz.4.9920': attribute type 10 has an invalid length. [ 3593.740433][ T5150] usb 1-1: config index 0 descriptor too short (expected 9533, got 36) [ 3593.829935][ T5150] usb 1-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 3593.868070][ T5150] usb 1-1: config 161 has an invalid interface descriptor of length 7, skipping [ 3593.927390][ T5150] usb 1-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 3593.973036][ T5150] usb 1-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 3594.025213][ T5150] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 3594.069547][ T5150] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3594.394495][ T2188] usb 1-1: USB disconnect, device number 98 [ 3594.510321][T29257] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 3594.567714][T29257] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 3594.580384][T20720] team0: left allmulticast mode [ 3594.585986][T20720] team_slave_0: left allmulticast mode [ 3594.592558][T29257] dib0700: firmware download failed at 7 with -22 [ 3594.603116][T20720] team_slave_1: left allmulticast mode [ 3594.611620][T20720] bridge0: port 3(team0) entered disabled state [ 3594.631748][T20720] bridge_slave_1: left allmulticast mode [ 3594.637438][T20720] bridge_slave_1: left promiscuous mode [ 3594.677993][T29257] usb 5-1: USB disconnect, device number 120 [ 3594.680706][T20720] bridge0: port 2(bridge_slave_1) entered disabled state [ 3594.709849][T20720] bridge_slave_0: left allmulticast mode [ 3594.724538][T20720] bridge_slave_0: left promiscuous mode [ 3594.744874][T20720] bridge0: port 1(bridge_slave_0) entered disabled state [ 3597.642540][ T3677] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 3597.741709][T12100] input: syz1 as /devices/virtual/input/input166 [ 3597.824592][T12108] input: syz1 as /devices/virtual/input/input167 [ 3598.297069][T20720] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3598.339225][T20720] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3598.391885][T20720] bond0 (unregistering): Released all slaves [ 3600.711531][ T2188] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 3600.775022][T20720] hsr_slave_0: left promiscuous mode [ 3600.810892][T20720] hsr_slave_1: left promiscuous mode [ 3600.822269][T20720] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3600.829754][T20720] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3601.034814][T20720] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3601.051515][ T2188] usb 1-1: Using ep0 maxpacket: 8 [ 3601.068783][ T2188] usb 1-1: unable to get BOS descriptor or descriptor too short [ 3601.076561][T20720] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3601.971484][ T2188] usb 1-1: string descriptor 0 read error: -22 [ 3601.977907][ T2188] usb 1-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 3602.001347][ T2188] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3602.034146][ T2188] usb 1-1: config 0 descriptor?? [ 3602.039405][T20720] veth1_macvtap: left promiscuous mode [ 3602.039513][T20720] veth0_macvtap: left promiscuous mode [ 3602.039771][T20720] veth1_vlan: left promiscuous mode [ 3602.130755][T20720] veth0_vlan: left promiscuous mode [ 3603.908347][T20720] team_slave_1 (unregistering): left promiscuous mode [ 3603.923099][T20720] team0 (unregistering): Port device team_slave_1 removed [ 3603.991927][T20720] team_slave_0 (unregistering): left promiscuous mode [ 3604.001592][T20720] team0 (unregistering): Port device team_slave_0 removed [ 3604.787421][T12131] netlink: 'syz.0.9929': attribute type 10 has an invalid length. [ 3604.904523][ T2188] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 3604.933804][ T2188] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 3604.961389][ T2188] dib0700: firmware download failed at 7 with -22 [ 3604.991798][ T2188] usb 1-1: USB disconnect, device number 99 [ 3605.311457][ T9140] Bluetooth: hci2: command 0x0406 tx timeout [ 3605.473189][T11912] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 3605.554620][T11912] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 3605.628143][T11912] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 3605.736660][T11912] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 3606.185182][T11899] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 3606.247262][T11899] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 3606.323970][T11899] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 3606.363674][T12175] input: syz1 as /devices/virtual/input/input169 [ 3606.442899][T11899] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 3607.713572][T11912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3607.859480][T11912] 8021q: adding VLAN 0 to HW filter on device team0 [ 3608.966702][ T5148] bridge0: port 1(bridge_slave_0) entered blocking state [ 3608.973992][ T5148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3609.066502][ T5148] bridge0: port 2(bridge_slave_1) entered blocking state [ 3609.073674][ T5148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3610.509122][T11912] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3610.535185][T11912] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3610.665176][T11899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3610.752655][T11899] 8021q: adding VLAN 0 to HW filter on device team0 [ 3610.862951][ T2188] bridge0: port 1(bridge_slave_0) entered blocking state [ 3610.870175][ T2188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3610.917270][ T2188] bridge0: port 2(bridge_slave_1) entered blocking state [ 3610.924521][ T2188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3611.412976][T11912] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3612.708079][T11912] veth0_vlan: entered promiscuous mode [ 3612.748262][T11912] veth1_vlan: entered promiscuous mode [ 3613.699473][T11912] veth0_macvtap: entered promiscuous mode [ 3613.992774][T12221] input: syz1 as /devices/virtual/input/input170 [ 3614.034005][T11912] veth1_macvtap: entered promiscuous mode [ 3614.251140][T11912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3614.269092][ T3677] Bluetooth: hci2: ACL packet for unknown connection handle 203 [ 3614.351932][T11912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3614.368473][T11912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3614.395177][T11912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3614.432159][T11912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3614.449072][T11912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3614.488590][T11912] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3614.680848][T11912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3614.691490][T11912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3614.708430][T11912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3614.719520][T11912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3614.872875][T12260] hub 9-0:1.0: USB hub found [ 3614.879420][T12260] hub 9-0:1.0: 8 ports detected [ 3615.176434][ T3677] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 3615.535011][T11912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3615.581424][T11912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3615.635419][T11912] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3615.779015][T11912] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3615.821650][T11912] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3615.858148][T11912] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3615.910884][T11912] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3615.935685][T11899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3616.252926][T12272] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9955'. [ 3616.322697][T20951] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3616.377728][T20951] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3616.571082][T20720] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3616.589272][T11899] veth0_vlan: entered promiscuous mode [ 3616.603219][T20720] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3616.656696][T11899] veth1_vlan: entered promiscuous mode [ 3616.790739][T11899] veth0_macvtap: entered promiscuous mode [ 3617.002355][T11899] veth1_macvtap: entered promiscuous mode [ 3617.011923][T12265] input: syz1 as /devices/virtual/input/input171 [ 3617.025773][T11899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3617.036749][T11899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3617.048934][T11899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3617.356893][T12288] hub 9-0:1.0: USB hub found [ 3617.363246][T12288] hub 9-0:1.0: 8 ports detected [ 3617.851369][T11899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3617.861892][T11899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3617.874041][T11899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3617.897223][T11899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3617.956086][T11899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3618.037886][T11899] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3618.098962][T11899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3618.117429][T11899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3618.128169][T11899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3618.145267][T11899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3618.163748][T11899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3618.212454][T11899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3618.251586][T11899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3618.325629][T11899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3618.404460][T11899] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3618.516089][T11899] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3618.557544][T11899] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3618.587646][T11899] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3618.609202][T11899] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3619.124553][T11517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3619.161016][T11517] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3619.523899][T12318] hub 9-0:1.0: USB hub found [ 3619.530364][T12318] hub 9-0:1.0: 8 ports detected [ 3619.620260][ T3677] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 3620.159744][T11517] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3620.201370][T11517] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3620.823531][T12325] hub 9-0:1.0: USB hub found [ 3620.830008][T12325] hub 9-0:1.0: 8 ports detected [ 3621.380482][ T3677] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 3622.102984][T12335] hub 9-0:1.0: USB hub found [ 3622.109906][T12335] hub 9-0:1.0: 8 ports detected [ 3622.272976][ T3677] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 3624.017921][T12359] hub 9-0:1.0: USB hub found [ 3624.025320][T12359] hub 9-0:1.0: 8 ports detected [ 3624.145021][T12361] hub 9-0:1.0: USB hub found [ 3624.156436][T12361] hub 9-0:1.0: 8 ports detected [ 3624.893005][ T1090] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 3624.899571][ T1090] Bluetooth: Wrong link type (-22) [ 3624.909783][ T1090] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 3624.920965][ T1090] Bluetooth: Wrong link type (-22) [ 3625.164145][ T1090] ================================================================== [ 3625.172254][ T1090] BUG: KASAN: slab-use-after-free in l2cap_connect.constprop.0+0x10d8/0x1270 [ 3625.181040][ T1090] Read of size 8 at addr ffff88801b794800 by task kworker/u9:0/1090 [ 3625.189023][ T1090] [ 3625.191369][ T1090] CPU: 0 PID: 1090 Comm: kworker/u9:0 Not tainted 6.10.0-syzkaller-11185-g2c9b3512402e #0 [ 3625.201282][ T1090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 3625.211359][ T1090] Workqueue: hci0 hci_rx_work [ 3625.216100][ T1090] Call Trace: [ 3625.219397][ T1090] [ 3625.222346][ T1090] dump_stack_lvl+0x116/0x1f0 [ 3625.227066][ T1090] print_report+0xc3/0x620 [ 3625.231526][ T1090] ? __virt_addr_valid+0x5e/0x590 [ 3625.236591][ T1090] ? __phys_addr+0xc6/0x150 [ 3625.241128][ T1090] kasan_report+0xd9/0x110 [ 3625.245573][ T1090] ? l2cap_connect.constprop.0+0x10d8/0x1270 [ 3625.251759][ T1090] ? l2cap_connect.constprop.0+0x10d8/0x1270 [ 3625.257856][ T1090] l2cap_connect.constprop.0+0x10d8/0x1270 [ 3625.263696][ T1090] ? do_raw_spin_unlock+0x172/0x230 [ 3625.268917][ T1090] ? __pfx_l2cap_connect.constprop.0+0x10/0x10 [ 3625.275096][ T1090] ? __mutex_unlock_slowpath+0x164/0x650 [ 3625.280754][ T1090] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 3625.286758][ T1090] ? lockdep_hardirqs_on+0x7c/0x110 [ 3625.291983][ T1090] l2cap_recv_frame+0xf0b/0x8eb0 [ 3625.296936][ T1090] ? hci_rx_work+0xa87/0x1610 [ 3625.301626][ T1090] ? __pfx_lock_release+0x10/0x10 [ 3625.306767][ T1090] ? __pfx___lock_acquire+0x10/0x10 [ 3625.311980][ T1090] ? __pfx_l2cap_recv_frame+0x10/0x10 [ 3625.317364][ T1090] ? trace_contention_end+0xea/0x140 [ 3625.322666][ T1090] ? __mutex_unlock_slowpath+0x164/0x650 [ 3625.328321][ T1090] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 3625.334322][ T1090] ? hci_rx_work+0xa73/0x1610 [ 3625.339011][ T1090] ? hci_conn_enter_active_mode+0x219/0x360 [ 3625.344924][ T1090] ? __pfx_lock_release+0x10/0x10 [ 3625.349967][ T1090] ? __pfx_hci_conn_enter_active_mode+0x10/0x10 [ 3625.356227][ T1090] l2cap_recv_acldata+0x9b4/0xb70 [ 3625.361277][ T1090] hci_rx_work+0xaab/0x1610 [ 3625.365798][ T1090] process_one_work+0x9c5/0x1b40 [ 3625.370758][ T1090] ? __pfx_lock_acquire+0x10/0x10 [ 3625.375799][ T1090] ? __pfx_process_one_work+0x10/0x10 [ 3625.381196][ T1090] ? assign_work+0x1a0/0x250 [ 3625.385801][ T1090] worker_thread+0x6c8/0xf20 [ 3625.390411][ T1090] ? __kthread_parkme+0x148/0x220 [ 3625.395464][ T1090] ? __pfx_worker_thread+0x10/0x10 [ 3625.400599][ T1090] kthread+0x2c1/0x3a0 [ 3625.404709][ T1090] ? _raw_spin_unlock_irq+0x23/0x50 [ 3625.409927][ T1090] ? __pfx_kthread+0x10/0x10 [ 3625.414539][ T1090] ret_from_fork+0x45/0x80 [ 3625.418981][ T1090] ? __pfx_kthread+0x10/0x10 [ 3625.423594][ T1090] ret_from_fork_asm+0x1a/0x30 [ 3625.428386][ T1090] [ 3625.431411][ T1090] [ 3625.433790][ T1090] Allocated by task 3677: [ 3625.438118][ T1090] kasan_save_stack+0x33/0x60 [ 3625.442810][ T1090] kasan_save_track+0x14/0x30 [ 3625.447500][ T1090] __kasan_kmalloc+0xaa/0xb0 [ 3625.452104][ T1090] l2cap_conn_add.part.0+0x60/0xa60 [ 3625.457320][ T1090] l2cap_connect_cfm+0x428/0xf80 [ 3625.462350][ T1090] hci_remote_features_evt+0x548/0x9e0 [ 3625.467833][ T1090] hci_event_packet+0x9eb/0x1180 [ 3625.472781][ T1090] hci_rx_work+0x2c6/0x1610 [ 3625.477296][ T1090] process_one_work+0x9c5/0x1b40 [ 3625.482251][ T1090] worker_thread+0x6c8/0xf20 [ 3625.486855][ T1090] kthread+0x2c1/0x3a0 [ 3625.490950][ T1090] ret_from_fork+0x45/0x80 [ 3625.495388][ T1090] ret_from_fork_asm+0x1a/0x30 [ 3625.500174][ T1090] [ 3625.502495][ T1090] Freed by task 9140: [ 3625.506472][ T1090] kasan_save_stack+0x33/0x60 [ 3625.511162][ T1090] kasan_save_track+0x14/0x30 [ 3625.515851][ T1090] kasan_save_free_info+0x3b/0x60 [ 3625.520893][ T1090] poison_slab_object+0xf7/0x160 [ 3625.525842][ T1090] __kasan_slab_free+0x32/0x50 [ 3625.530622][ T1090] kfree+0x12a/0x3b0 [ 3625.534530][ T1090] l2cap_conn_del+0x59f/0x740 [ 3625.539228][ T1090] l2cap_connect_cfm+0x9e6/0xf80 [ 3625.544173][ T1090] hci_conn_failed+0x1c3/0x370 [ 3625.548951][ T1090] hci_abort_conn_sync+0x75a/0xb50 [ 3625.554077][ T1090] abort_conn_sync+0x197/0x360 [ 3625.558851][ T1090] hci_cmd_sync_work+0x1a4/0x410 [ 3625.563809][ T1090] process_one_work+0x9c5/0x1b40 [ 3625.568765][ T1090] worker_thread+0x6c8/0xf20 [ 3625.573370][ T1090] kthread+0x2c1/0x3a0 [ 3625.577458][ T1090] ret_from_fork+0x45/0x80 [ 3625.581897][ T1090] ret_from_fork_asm+0x1a/0x30 [ 3625.586685][ T1090] [ 3625.589013][ T1090] Last potentially related work creation: [ 3625.594731][ T1090] kasan_save_stack+0x33/0x60 [ 3625.599424][ T1090] __kasan_record_aux_stack+0xba/0xd0 [ 3625.604822][ T1090] insert_work+0x36/0x230 [ 3625.609173][ T1090] __queue_work+0x97e/0x1070 [ 3625.613776][ T1090] call_timer_fn+0x1a0/0x610 [ 3625.618382][ T1090] __run_timers+0x567/0xaf0 [ 3625.622896][ T1090] run_timer_base+0x111/0x190 [ 3625.627585][ T1090] run_timer_softirq+0x1a/0x40 [ 3625.632370][ T1090] handle_softirqs+0x216/0x8f0 [ 3625.637157][ T1090] irq_exit_rcu+0xbb/0x120 [ 3625.641590][ T1090] sysvec_apic_timer_interrupt+0x95/0xb0 [ 3625.647250][ T1090] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3625.653243][ T1090] [ 3625.655563][ T1090] Second to last potentially related work creation: [ 3625.662141][ T1090] kasan_save_stack+0x33/0x60 [ 3625.666832][ T1090] __kasan_record_aux_stack+0xba/0xd0 [ 3625.672233][ T1090] insert_work+0x36/0x230 [ 3625.676576][ T1090] __queue_work+0x3f8/0x1070 [ 3625.681179][ T1090] queue_work_on+0x11a/0x140 [ 3625.685789][ T1090] l2cap_connect_cfm+0x9c9/0xf80 [ 3625.690740][ T1090] hci_remote_features_evt+0x548/0x9e0 [ 3625.696224][ T1090] hci_event_packet+0x9eb/0x1180 [ 3625.701255][ T1090] hci_rx_work+0x2c6/0x1610 [ 3625.705771][ T1090] process_one_work+0x9c5/0x1b40 [ 3625.710721][ T1090] worker_thread+0x6c8/0xf20 [ 3625.715328][ T1090] kthread+0x2c1/0x3a0 [ 3625.719421][ T1090] ret_from_fork+0x45/0x80 [ 3625.723869][ T1090] ret_from_fork_asm+0x1a/0x30 [ 3625.728654][ T1090] [ 3625.730977][ T1090] The buggy address belongs to the object at ffff88801b794800 [ 3625.730977][ T1090] which belongs to the cache kmalloc-1k of size 1024 [ 3625.745036][ T1090] The buggy address is located 0 bytes inside of [ 3625.745036][ T1090] freed 1024-byte region [ffff88801b794800, ffff88801b794c00) [ 3625.758755][ T1090] [ 3625.761078][ T1090] The buggy address belongs to the physical page: [ 3625.767499][ T1090] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1b790 [ 3625.776272][ T1090] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 3625.784779][ T1090] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 3625.792778][ T1090] page_type: 0xffffefff(slab) [ 3625.797480][ T1090] raw: 00fff00000000040 ffff888015441dc0 0000000000000000 dead000000000001 [ 3625.806078][ T1090] raw: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000 [ 3625.814676][ T1090] head: 00fff00000000040 ffff888015441dc0 0000000000000000 dead000000000001 [ 3625.823355][ T1090] head: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000 [ 3625.832034][ T1090] head: 00fff00000000003 ffffea00006de401 ffffffffffffffff 0000000000000000 [ 3625.840802][ T1090] head: ffff888000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 3625.849481][ T1090] page dumped because: kasan: bad access detected [ 3625.855904][ T1090] page_owner tracks the page as allocated [ 3625.861613][ T1090] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 20951, tgid 20951 (kworker/u8:4), ts 3574296889642, free_ts 3573828153658 [ 3625.882839][ T1090] post_alloc_hook+0x2d1/0x350 [ 3625.887626][ T1090] get_page_from_freelist+0x1353/0x2e50 [ 3625.893194][ T1090] __alloc_pages_noprof+0x22b/0x2460 [ 3625.898515][ T1090] alloc_slab_page+0x56/0x110 [ 3625.903212][ T1090] new_slab+0x84/0x260 [ 3625.907297][ T1090] ___slab_alloc+0xdac/0x1870 [ 3625.911991][ T1090] __slab_alloc.constprop.0+0x56/0xb0 [ 3625.917383][ T1090] __kmalloc_noprof+0x367/0x400 [ 3625.922250][ T1090] ieee802_11_parse_elems_full+0xea/0x1680 [ 3625.928079][ T1090] ieee80211_inform_bss+0xfd/0x1100 [ 3625.933308][ T1090] cfg80211_inform_single_bss_data+0x8e2/0x1dc0 [ 3625.939567][ T1090] cfg80211_inform_bss_data+0x205/0x39c0 [ 3625.945231][ T1090] cfg80211_inform_bss_frame_data+0x271/0x7b0 [ 3625.951337][ T1090] ieee80211_bss_info_update+0x311/0xab0 [ 3625.957015][ T1090] ieee80211_ibss_rx_queued_mgmt+0x1898/0x2f40 [ 3625.963288][ T1090] ieee80211_iface_work+0xc0b/0xf00 [ 3625.968511][ T1090] page last free pid 6828 tgid 6828 stack trace: [ 3625.974843][ T1090] free_unref_page+0x64a/0xe40 [ 3625.979620][ T1090] vfree+0x181/0x7a0 [ 3625.983535][ T1090] kcov_put+0x2a/0x40 [ 3625.987534][ T1090] kcov_close+0x10/0x20 [ 3625.991708][ T1090] __fput+0x408/0xbb0 [ 3625.995713][ T1090] task_work_run+0x14e/0x250 [ 3626.000324][ T1090] do_exit+0xaa3/0x2bb0 [ 3626.004492][ T1090] do_group_exit+0xd3/0x2a0 [ 3626.009094][ T1090] get_signal+0x25fb/0x2770 [ 3626.013618][ T1090] arch_do_signal_or_restart+0x90/0x7e0 [ 3626.019181][ T1090] syscall_exit_to_user_mode+0x150/0x2a0 [ 3626.024846][ T1090] do_syscall_64+0xda/0x250 [ 3626.029380][ T1090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3626.035301][ T1090] [ 3626.037638][ T1090] Memory state around the buggy address: [ 3626.043270][ T1090] ffff88801b794700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 3626.051339][ T1090] ffff88801b794780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 3626.059409][ T1090] >ffff88801b794800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 3626.067471][ T1090] ^ [ 3626.071542][ T1090] ffff88801b794880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3626.079605][ T1090] ffff88801b794900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3626.087666][ T1090] ================================================================== [ 3626.151526][ T29] audit: type=1400 audit(1721587054.086:1387): avc: denied { write } for pid=5081 comm="syz-executor" path="pipe:[4295]" dev="pipefs" ino=4295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 3626.196202][ T1090] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 3626.203541][ T1090] CPU: 1 PID: 1090 Comm: kworker/u9:0 Not tainted 6.10.0-syzkaller-11185-g2c9b3512402e #0 [ 3626.213550][ T1090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 3626.223635][ T1090] Workqueue: hci0 hci_rx_work [ 3626.228343][ T1090] Call Trace: [ 3626.231628][ T1090] [ 3626.234563][ T1090] dump_stack_lvl+0x3d/0x1f0 [ 3626.239173][ T1090] panic+0x6f5/0x7a0 [ 3626.243084][ T1090] ? __pfx_panic+0x10/0x10 [ 3626.247516][ T1090] ? preempt_schedule_thunk+0x1a/0x30 [ 3626.253009][ T1090] ? preempt_schedule_common+0x44/0xc0 [ 3626.258489][ T1090] check_panic_on_warn+0xab/0xb0 [ 3626.263445][ T1090] end_report+0x117/0x180 [ 3626.267793][ T1090] kasan_report+0xe9/0x110 [ 3626.272230][ T1090] ? l2cap_connect.constprop.0+0x10d8/0x1270 [ 3626.278243][ T1090] ? l2cap_connect.constprop.0+0x10d8/0x1270 [ 3626.284338][ T1090] l2cap_connect.constprop.0+0x10d8/0x1270 [ 3626.290174][ T1090] ? do_raw_spin_unlock+0x172/0x230 [ 3626.295407][ T1090] ? __pfx_l2cap_connect.constprop.0+0x10/0x10 [ 3626.301615][ T1090] ? __mutex_unlock_slowpath+0x164/0x650 [ 3626.307285][ T1090] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 3626.313289][ T1090] ? lockdep_hardirqs_on+0x7c/0x110 [ 3626.318519][ T1090] l2cap_recv_frame+0xf0b/0x8eb0 [ 3626.323476][ T1090] ? hci_rx_work+0xa87/0x1610 [ 3626.328165][ T1090] ? __pfx_lock_release+0x10/0x10 [ 3626.333203][ T1090] ? __pfx___lock_acquire+0x10/0x10 [ 3626.338412][ T1090] ? __pfx_l2cap_recv_frame+0x10/0x10 [ 3626.343796][ T1090] ? trace_contention_end+0xea/0x140 [ 3626.349098][ T1090] ? __mutex_unlock_slowpath+0x164/0x650 [ 3626.354753][ T1090] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 3626.360756][ T1090] ? hci_rx_work+0xa73/0x1610 [ 3626.365444][ T1090] ? hci_conn_enter_active_mode+0x219/0x360 [ 3626.371354][ T1090] ? __pfx_lock_release+0x10/0x10 [ 3626.376392][ T1090] ? __pfx_hci_conn_enter_active_mode+0x10/0x10 [ 3626.382654][ T1090] l2cap_recv_acldata+0x9b4/0xb70 [ 3626.387702][ T1090] hci_rx_work+0xaab/0x1610 [ 3626.392218][ T1090] process_one_work+0x9c5/0x1b40 [ 3626.397176][ T1090] ? __pfx_lock_acquire+0x10/0x10 [ 3626.402218][ T1090] ? __pfx_process_one_work+0x10/0x10 [ 3626.407619][ T1090] ? assign_work+0x1a0/0x250 [ 3626.412230][ T1090] worker_thread+0x6c8/0xf20 [ 3626.416839][ T1090] ? __kthread_parkme+0x148/0x220 [ 3626.421885][ T1090] ? __pfx_worker_thread+0x10/0x10 [ 3626.427011][ T1090] kthread+0x2c1/0x3a0 [ 3626.431102][ T1090] ? _raw_spin_unlock_irq+0x23/0x50 [ 3626.436316][ T1090] ? __pfx_kthread+0x10/0x10 [ 3626.440937][ T1090] ret_from_fork+0x45/0x80 [ 3626.445382][ T1090] ? __pfx_kthread+0x10/0x10 [ 3626.449999][ T1090] ret_from_fork_asm+0x1a/0x30 [ 3626.454790][ T1090] [ 3626.458036][ T1090] Kernel Offset: disabled [ 3626.462361][ T1090] Rebooting in 86400 seconds..