last executing test programs: 21m45.689189451s ago: executing program 3 (id=192): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x2, 0x180000, 0x1}, 0x1c) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f0000000540)=0x9, 0x4) recvmsg$unix(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x0) 21m42.49539099s ago: executing program 3 (id=203): sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x40800) syz_create_resource$binfmt(0x0) r0 = syz_open_dev$evdev(0x0, 0x1, 0x2002) syz_read_part_table(0x63b, &(0x7f0000000640)="$eJzs0zuIXFUYB/D/vfNOss4iKcSA2cLawm1isbgBn1gkKKawsbITi0ACFjITsqCdpVhomoBiYRDUStFCdsXKWAUrCYutBMFq5ci9d2YkKWwSXZXfj+U8vvO45+z5JvynDZODUsqt+1aR6UMfV0nKbJbM+8lg2MVvjsaZJ6WUSZLexWbSix89/8QLz43yzrHeYvVGdazdttpJMhm0sSqnXm4bi0lllpTpo9fTn2Q+f+CTH/Z63bQkX9TJyeTxZBXqlt1K772rP1W5cuKOGzxz55XevLDW1mv38N/Ev9S1rd3p5bqM1rpcbhPusWreju2XXsqsqgYZ3r5o86sk84zuwfd7ydG2UVW58fQb+w9fP9WcoW723pt2c1bf+XnclJcWvdJvM7zJ8XNJZl0wzSV6ry2XlFLKn0uSbDfFZ92vjEPX5t/O+eHX/fZlblw5frOq6jTvVzdvt8q85pkPyjg5uZEj9eRwTw0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPwf9ZNUq9532ZxkcuLtejt1lXzfjm1mtBwf3VaX2eiuv39ta3d6eef8JKPFKQbDwbBtjLM3yJn3k2Gy3h2ybv9yqRk9104a3vUBOFTt+zev+PrWb4MudGyZkvf/+M1kOa8/HM+OX2i78yY3Fj7tqno5a1FXy3CXoEcX4dLL+PeL/SN/96UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEP15FPPbpztmtVoPE3q9au7bXfelqX08uCXL3346renx3uvJGdGnyc5qLol64tdtuuzo3aL1b6P9JtymP23fs0H7zbt3mqsarY9/cs/c0H+0h8BAAD//ywFbXw=") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) membarrier(0x40, 0x0) membarrier(0x20, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x405}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) setreuid(0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x21, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getgroups(0x0, 0x0) 21m41.392976148s ago: executing program 3 (id=204): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000380)={0x2, &(0x7f00000000c0)=[{0x28, 0x2, 0xd1, 0x1}, {0x16}]}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r1, &(0x7f0000000c00)=[{{&(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r1, &(0x7f0000000c80)="e8", 0x6200, 0x0, 0x0, 0x0) 21m41.070789269s ago: executing program 3 (id=206): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) connect$unix(r0, &(0x7f0000000180)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 21m40.909736864s ago: executing program 3 (id=207): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 21m40.666965052s ago: executing program 3 (id=209): socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000f80)={'filter\x00', 0x7, 0x4, 0x3e8, 0x1f0, 0x3e8, 0x300, 0x300, 0x1f0, 0x300, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x1000, 0xc0, 0x3}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz0\x00', {0x10000}}}}, {{@arp={@broadcast, @rand_addr=0x64010100, 0x0, 0x0, 0x5, 0xd, {@empty, {[0xff, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {}, 0xfffa, 0x6, 0x7, 0x0, 0xb2, 0x6, 'veth1_to_bond\x00', 'wg0\x00', {}, {0xff}, 0x0, 0x210}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @multicast1, @remote, 0xd, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x202) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = getpgid(r0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x120) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x8c, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000040), 0x2000010, &(0x7f0000000080)={[{@mode={'mode', 0x3d, 0x7}}]}) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) connect$pppl2tp(r5, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) connect$inet6(r4, &(0x7f0000000480)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) sendmmsg(r5, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) 21m30.350888533s ago: executing program 0 (id=225): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="0200000001000000000000000400000000001b23072a7054b2a300001000020000000000200000000000"], 0x24, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) rmdir(&(0x7f0000000380)='./file0/../file0\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000580)='./file2\x00', 0x8, &(0x7f0000000000)=ANY=[], 0x5, 0x1e2, &(0x7f00000002c0)="$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") r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x1f, &(0x7f0000000400)={[{@lazytime}, {}, {@acl}, {@nolazytime}, {@fastboot}, {@discard_unit_section}, {@compress_cache}, {@lazytime}, {@whint_mode_user}, {@noinline_xattr}, {}, {@jqfmt_vfsv1}, {@six_active_logs}, {@background_gc_off}, {@extent_cache}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'nousep_xattr#\xc5\xf8\xf5\xfe\a\xc7\xa5\x17\xe1\xb8\xd3\'\xe5\xe4\x81b\v\x91aOtR\xdb\xd6u\xfc-\xb3\xf4\xf4A-\xf7\x1f7;:\xa4fZ\xf2\t\xafrkR\xef\xe7w\xfc\xd0J`\xcb\xf48\x895b\xb7n\xfe\x8a\xc6K\xb7g\x99\xca,\xdb\xc3~\xe4\xaa9W\xa2\xfe\xaf\xce\"\xc1m\xc8\xecq\xfbG\x97AK\xdf\xa7D\x8f\xa6\xe2\xc4L7\x8e\xf5%\xac\x84n\xe1\x13\xa1u\xf00\xbe)c\x82I\xe6Pu\xaaG1-\x12\x14\xe7\x12\xd6[\x8a>\xbbc-\x11\x15\x02\xe0bW\xfew\xb3\xe4@\xf9\x94.\xf9\x00\xfa\x17\xeb8>\v\x04|\x0eYZ\xd3\x06\xb4\xdb:fKW\xc9\xebhn\x82`'}}, {@dont_appraise}, {@fsname={'fsname', 0x3d, '\x15x\xd38/vjf\xfa\xb0\xe4\x00>\x85m^\xf4\x16\x18d\a\tA\xa2\xee\xdf\xf4H\xc3{I\xe8\x1c7\x1e\xf8&\xf9\x1db\xc1-\x7f\xc19\xdd\xf7\x90\vW&]\xae\x1c\xfc\xc5\xf8\xbc\xb3yZ\x89\xc4E\xc7I\xb2\xb8\x1d2\x99\xccg9\x92Y\xe3\xec\xdaI\xfc\xe5\xdb\x8b\xd9\xbdy\x80\xee\xa8\xdf\x8bMO\f\xc8\xfcdNJ\x02\x1bj\xd0\x85S\x1c\x8a\x17h!\xde\x19\xc5\xc1\xbf\x9c$\x1a\xea@2o \xc5\x12m\x86\xb5T\xbb\xf0\x8c\xf9\x98#\xcd?\x03\xbc\xd6\xf0\xbd\xbe\x88\x84\f\xacw\x9bl\x1a\xae\x9a;\xf5U\x93\xc4\x06\x13 \xc9\x01\xd1P\x80\xdf[\x97\x84\'Ec\xaaa\xedJ\xb0\xbd \xf0\xad\xe2\xf1\x9f\xbd\xf1-\x95c\b\x00\fc.\x0e\x8d\xfb/\xf0\xa3&\xeblU\xe8A\x174>\xe1\xdd\xbfbV9\x16\xeaY%\xad}\xd2GB\r\xdb\xb3\x14^\xec\xc7\xb5\x86\x0e\x1a\xb6\x12_\t\xdf5l;\xdbY\x88\x8b'}}]}, 0x1, 0x5553, &(0x7f000000b3c0)="$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") r4 = openat$cgroup_procs(r3, &(0x7f0000000200)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000001c0), 0x12) 21m24.847528989s ago: executing program 32 (id=209): socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000f80)={'filter\x00', 0x7, 0x4, 0x3e8, 0x1f0, 0x3e8, 0x300, 0x300, 0x1f0, 0x300, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x1000, 0xc0, 0x3}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz0\x00', {0x10000}}}}, {{@arp={@broadcast, @rand_addr=0x64010100, 0x0, 0x0, 0x5, 0xd, {@empty, {[0xff, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {}, 0xfffa, 0x6, 0x7, 0x0, 0xb2, 0x6, 'veth1_to_bond\x00', 'wg0\x00', {}, {0xff}, 0x0, 0x210}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @multicast1, @remote, 0xd, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x202) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = getpgid(r0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x120) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x8c, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000040), 0x2000010, &(0x7f0000000080)={[{@mode={'mode', 0x3d, 0x7}}]}) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) connect$pppl2tp(r5, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) connect$inet6(r4, &(0x7f0000000480)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) sendmmsg(r5, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) 21m24.8252533s ago: executing program 0 (id=228): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5b9, &(0x7f0000000680)="$eJzs3W2IHHcdB/Df7N6mebiaNLZqa2xOQ20gdPdyuYREfGGJD7UmtaL4IhTCkdvuhezdnrkN9LaCLb4pCiL4RgShYl9YEQ3kTaXU9kWLbxSU+kClxoAKIhStFERQV2YfrmszaYr3MHjz+cDc/ec/c/v/7y3fndmd/8wEUFgT6Y8kYjwiLkXEzv7sf68w0f/VOXRxLp2S6HY//Zekt97soYtzw1WHf7cj/TEWsTUidh9PYl/l6naXljvnZprN+vnBfK09v1hbWu7cdXZ+plFv1BcOH50+NnVk+uj02j3XyZ9uv+WPd9x35Ynn//7Pb/76yPfT/o4Plo0+j7UyEROD/0klbhqpH0si7l3rxnJS7r/UccdIXTKWY4d4y7rd3d9LX7+3R8S+Xv53Rjn6L95LTz/wt53xy3vy7iOwfrpD2Ytf7QKbVqm3D5yUqhHRL5dK1Wp/H/7m2F5qtpbaBx5sXViY7e8r74pK6cGzzfrk4LPCrqgk6fzBXvn1+ak3zB+K6O0DP1be1puvnmk1Zzf6zQ7oGY+4fOlzZ7bseEP+/1Tu5x/YvNL8/+KFp55Ny6+V8+4NsJHS/H/3tflPhPxD4cg/FJf8Q3HJPxSX/ENxyT8Ul/xDcck/FJf8Q3HJPxTXMP/3nzwZ95882e0Mzn9faDXOnptbPDY1WZ2/cKZ6pnV+sdpotRq9M3bmr/+4zVZr8eBUXHio1q4vtWtLy53T860LC+3TvfP6T9czLgUA5ODUla333rT3uZeSiHjkA9t6U2rLYLmswubW7SaR9znIQD589Ificqk2KC6f8YHkOsu3XmtBc+37AmyMUt4dAHJz562O/0FR+f4fisv3/1Bc9vEB3/9D8fj+H4pr/Br3/7px5N5dkxHxtoj4Sblyw/BeX8D/r/GIy5e//dnayn24FRQUFFYKeb9DAevt9dDn3RMgL7OHLs4Np41q85nGRrUEZHnl7v4goDT3ncHUXzK2cmygsk7jhF5+LGIifvjbx/fPldMpBu9D69AUkOGRRyPiXVnb/6R3bGDXYL3d/dXi5oi4JSLeERHvXGXbX/9Umv8X6qN18g8b563m/9aIuD0ibouId0fEnoh4zyrb/vmlNP+/2jZaJ/9QDJ9/Pu8eAHn5+FN59wDIyyljDKCwvvNw3j0A8vL0D/LuAZCXr7yYdw+g2J67OyIms47/lXrH+4cqg+sC3jC4FsC2iNgeETsG5xDeODhHcOfIMcPrOf3JiIm4/UejdY7/wcYZjv/rXDX+r7Qy/q8cEXtX0cYzHxz/clb9zJ40/088PBz/l05p+8OxgMD6euXRiNsy85+sjPlNIs1pxHv/xzYmvnDlyaz6F+9LH7fyM/mHfHS/FfH+yM7/UFqqtecXa0vLnbt69/Fu1BcOH50+NnVk+uh0rXeJkNrwQiEZTvz11QNZ9S9Ppfn/xmH5h3yk2//t18j/6P7/+1bRxvGvfelUVv3479P873n2zfNf+vOW5DO9+eF9CR6aabfPH4zYkpy4un5qFR2FTW6YkWGG0vzv35f9+X/34G/S7f/xiPhwur8QEf+KiH9HxEci4qMR8bGIuOdN2vzqnY0rWfW/ezLN/+PnbP8hH2n+Z6+z/U9//2MVbRzY/+MvZtV/aG+a/+pv/nDigbF0kn8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAtbe03Dk302zWz69jIe/nCAAAAAAAAEXxnwAAAP//xOQ08g==") syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) unshare(0x2040400) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x8000, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x3, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, @multicast2, @private}}}}) 21m23.237352834s ago: executing program 0 (id=230): socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000000180c200000008004500005800000000002f907800000000e0000001248065580000000010000800000086dd080088be00000000100000000100000000000000080022"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x1e9100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0xd, 0x99, 0x0, 0x0, 0x10000, 0x2, '\x00', 0xc94}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 21m22.522212498s ago: executing program 0 (id=232): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0\x00') 21m16.830996261s ago: executing program 0 (id=237): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2b0, &(0x7f0000000280)="$eJzs3T9vI0UYB+B3E3vtg8IuqBASK0FBdbpcS+MI5aQIVyAXQAEn7k5CsYV0J0XijzBX0dJQ8gmQkOj4EjQU9Ei0SHRccdKi9e7GTlg72QgnwD1Pk8ns/Gbe3YwTpfD4g5dmR/eyePD481+j309iZxSjeJLEMHai9mWcMvo6AID/sid5Hn/kpTa5JCL62ysLANiilb//Ny4U+GHrJQEAW/b2O+++uT8eH7yVZf24M/vqeFL8Z198La/vP4iPYhr341YM4mlEfqJs38nzfN7JCsN4dTY/nhTJ2fs/VfPv/x6xyO/FIIaLrtP5w/HBXlZayc+LOp6r1h8V+dsxiBca1j8cH9xuyMckjddeWan/Zgzi5w/j45jGvUURy/wXe1n2Rv7Nn5+9V5RX5JP58aS3GLeU717xjwYAAAAAAAAAAAAAAAAAAAAAgP+xm9XZOb1YnN9TdFXn7+w+Lb7pRlYbnj6fp8wn9URnzgea5/Ftfb7OrSzL8mrgMt+JFzvRuZ67BgAAAAAAAAAAAAAAAAAAgH+XR598enR3Or3/8B9p1KcB1G/rv+w8o5Wel6NhzDBOenrLJXeqZTfMHLv1mCRiYxnFjK2K756/+prGjXWp775v++j654/pXqLClo16dx3dTZqfYS/qnn69SX5cHZPGBddK113KW22/tPFS2voFkj6/aMw3jIlkU2Gv/1Y+uaonOXsX6eKpNsa7VaN8LTTtjVb7+e+/KxKndQAAAAAAAAAAAAAAAAAAwFYt3/TbcPHxmtAvh+WH/Mdwy9UBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNVYfv5/i8a8Cl9gcBoPH13zLQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAM+CsAAP//yylfnw==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='freezer.parent_freezing\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f00000000c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x8880, 0x81) r7 = inotify_init1(0x0) inotify_add_watch(r7, &(0x7f00000001c0)='./bus\x00', 0x210006a9) lseek(r6, 0x1, 0x2) getdents64(r6, 0x0, 0x4f) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000a40)="2e9b3d0007e03dd651930100c575963f886411", 0x13}, {&(0x7f0000000040)='\x00\x00\x00\x005\x00W', 0x7}], 0x2) sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x90) socket$inet(0x2, 0x2, 0x1) 21m15.138898399s ago: executing program 0 (id=240): syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="757466383d302c756d61736b3d30303030303030303030303030303030303134373537372c73686f72746e616d653d6d697865642c636865636b3d7374726963742c636f6465706167653d313235302c6e6f6e756d7461696c3d302c756e695f786c6174653d312c756e695f786c6174653d302c756e695f786c6174653d312c696f636861727365743d63703836332c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c6e6f6e756d7461696c3d302c756e695f786c6174653d302c73686f72746e616d653d6c6f7765722c726f6469722c0073e891503a0309d91d60a3f79fb445ef040adbfaebe458f48306d4472e78e0c79837a8ba4cdfcf2664aea65ded67e7618d999eb426ea4d6e3c245287de93a7671165d44c0692c1e44faa189afae462610344caaf8690af6f5b8092420bf6e652ec1dd96df4f7fa2122c8a1eb91332abb080a48cf8d995e2f518dc460183619759f02357d416969cde8685c58841fd65e9ae556ec5221ab219a826bb13cc6ebfb345749e676fa449156aaef0e2d00409ca2cf5ae7c47b594d6a41fab2"], 0x26, 0x34b, &(0x7f0000000700)="$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") r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) dup2(r1, r0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000340)=ANY=[], 0x118) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 21m14.422470943s ago: executing program 33 (id=240): syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x26, 0x34b, &(0x7f0000000700)="$eJzs3TtoZNUbAPBv9uYN+0+KPwStRjtBlk3EQquEZYXFFLoy+GocTNZH7riQwYFskdlpFEvFRtDKzkLLrcVCxM7C1hVkVWzcbmEXr8zcm5k7j2hWTOKyv18RPr5zvjnn3HvC3LxOXlmL7c3puHTz5o2Ym6vE1Nq5tbhViaU4FUnkrsaIzmgCALiX3Mqy+D3LldLLk3t/sLAfzRzD3ACAo9F7/3/t9CAxe5KzAQCOwwFf/496ZmL28pFNCwA4QmPv/w8PNY98m3+q/zsBAMC967kXX3p6fSPiYrU6F9F4t1Vr1eLJQfv6pXgj0tiKs7EYdyLyB4X8aaH78akLG+fPVrt+Xopat6JVi2i0W7X8SWE96dXPxkosxlJRn/Xrk279Sq++GhFX273xo1Fp1aZjoRj/h4XYitVYjP+P1Udc2Di/Wi1eoNbYr29HdGJufxHd+Z+Jxfju1bgcaWxGt3Yw/72VavVctlGqr/d+ELJ5EjcEAAAAAAAAAAAAAAAAAAAAAID7wplq31L//Jus0W69c3G0w1L5fJ1WLW8uzgfq5OcDZbP7p/O8l4yeDzR8Pk+rNhWnTnTlAAAAAAAAAAAAAAAAAAAA8N/R3J2Jeppu7TR3r2yXg3Yp89Y3n381H6N93kwGmZjKX26oT5GLUlUS/fKsX54lQ32KIIkYdP7sWn/GeSaZsJaxVcz2FljOVIo51dP09EM/fTw26O6V7T8GmSTGLstwUClGLjU1/pen/qLq4GD1b/pcz7LsoPK9j8arohIxNXbj/o3g6xuvP/BYc/nxXubL4tCHRx5dfP76h5/+ul1Po7g0aTqz07yT/eOxktL+qRTXuRITNtvEoDPIdHaau/Xk+99eePD9b4f6zI9tkiLIypm394O54dtdT9MvRkefyYPuNA+z0ukJm39y8PLt/u69+4u5/Mla/drej78ctqr0ieWgDgAAAAAAAAAAAAAAAAAAOBalvxW/C088e3QzAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDjN/j//6WgM5Y5THC7HeNNs1s7zQMHnz/WpQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcB/7MwAA//+xzHAn") r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) dup2(r1, r0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000340)=ANY=[], 0x118) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 9m4.503841497s ago: executing program 4 (id=2821): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x8}]}}, 0x0, 0x26}, 0x28) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="180000006800000000000000c7"], 0x0, 0xf, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r4, &(0x7f00000004c0)=[{&(0x7f0000000100)="bc", 0x1}], 0x11) 9m3.417844033s ago: executing program 4 (id=2824): syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000010c0), 0x0, 0x4000002b, 0x0) 9m1.528835358s ago: executing program 4 (id=2829): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0xc52, @local, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000000)="0010", 0x2}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[], 0x190}}], 0x2, 0x4000841) 9m1.238425468s ago: executing program 4 (id=2830): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file1\x00') 9m1.035024974s ago: executing program 4 (id=2831): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x8}]}}, 0x0, 0x26}, 0x28) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="180000006800000000000000c7"], 0x0, 0xf, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r3, &(0x7f00000004c0)=[{&(0x7f0000000100)="bc", 0x1}], 0x11) 9m0.634739778s ago: executing program 4 (id=2835): fsmount(0xffffffffffffffff, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) setsockopt$sock_linger(r4, 0x1, 0x3c, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x2c, 0x0, &(0x7f0000000000)=[@register_looper, @register_looper, @increfs_done={0x40106308, 0x2}, @clear_death={0x400c630f, 0x3}], 0xf26, 0x0, &(0x7f00000014c0)="ca9bb559252828f7280f1e9d66aa3f61297e27ee1cee598c4a07dafdcd35cbe58dc20ecc4265f005a6daa4921b1ca68dd3f12459d069c4a08044e8b7837af53779ab199063234d5166e7744eb276399d052cd0e760a76bfdf196d4cb207014823352e28af53d187c448895a05938700791c9c90a8ea8cbd85ff179d8e6a799ab4603abe70b87bbc700ff6b728c0f7a658d155d6096cb21a9a7baf8069bab4e318d700960c30be5ca8f90aa1103043552cf8b6a7ab57199aa4c32c463a32e5da2f1f6b342012f64c0286c1f4ddf63d2acbd0c164d7d915ee3e552ee364e1745cc47059b95b5a050daeecf3f09b2b5f779afd0942579f1eff52485cccc1b49b9e8d6a8cfca0eb55dbdc5da133fc3e0c23a9b63bf5d8e0bca947f4dbaa3b5482b690c1e3eee6555767ecacf477927de85e22cabcb7930ba362bbe7d672102ef3ddc776c7593e38c9182af9b814f4ddc40c5fd1c352476c1f85535420443abf6e064f2099e144b1a0ae954a64e1b114ae1f6c0384e36b321209d2a42fc1d71b992e3b5efee65007c58ce4c9943f0b1caae0828d72bebedda6bd57ff2f1128de8a68cbfb8b8ba293848ba4177f468707749d87decbea303cde7bc9592602545e1447281ca94d6d08b6aad60c29809bc25f6bed7c80e6d7a74eea5f2377eed00257aa1969e19160f51dca402a7293397495e7f3df3347f260747ddcd0abbf47226b21cee04db718bf3173660431f85beb2e816d041040dd1de0dddff4942d201b6cd2fda0456aae6da036a31621606e4f7d9945e7c746b02604a54aaa16610308aa2f9e1546bfbdba943c2a52e386851b723d4f96d0ffbe3e065c7d7d672763019a50a61b2755a4c9fb8216553e06bedeb5809e31af7bb03a4a754f12ea41c50dd306fb8ce05909ba426c677ced4183a174665d5da48becec51dd9123450c76ba60228b341678f0f3b2bd1bcf440a488c785acb98f9f196195363951164215d884f97d2a6077b4e01b4a2b442b32b95db5e8d63c4bd5227e9c63ca9ed99a7fb155d13dc283af1af5363ceea55daa0afc7b8a07b6f4ffb0e230fb845ffaadc5dfe57bebf04753f88a0bd2d66d771cbff8a87882a8597e90e3259d636824a6c2b31b54da0c8383053d369f354a1f972136d3638b3bf052d33b44bde9bc2099641e29c32099fa11290b523a3824eaaa18c6270452ca757ae5eccb9f684771fb54b10ba0fa7cc9381eb1409e2aa2ea153556f254416d210f04661734386f1ff795b41955642821085d107a22712338a8ccfbd5bf5c1a8447364bd2cfe544dfefd70777f4bed14a6d2c4b5f47cc7594839da3ac6cff44e965de5007906014c137ec9b692c78b558a4ea336c7f8ae09f315360ba7bb9b578962ad601b8746d4049a373f0999ec52ab0d59fd76aaf64e2ca4c4a5f5ef915ed6e9df4600bbce1967037f2a20849c06fae29e82aeb3cfb54621d3c28bef9d8afea56c571c76868ce9d61a03d1af94c3c2f4f1b4ed2fe26012e63e8aada2ca21bf1fe7a2cdb916cc80c9847b075fa295507612417e9bf90e65330ad7ca90014cd79373152300743dfde1c3e7943f256a5e706d8030100ab66f6b9069a21703b80d70afdbe1e9d74e4bd16ec24222e45c4cbf6de6981669a8525db8d8dadb3e09c8d0bbd5bcecd138a49d8569dcea0b1867f23df8f9575147d48418f2b4bee2ce146510cb0271fa2e70ab4b749b6ceb2ba44b17e0928f5b4f42c25d7f3720f92ad13a88fdbc070b985bc8231902a3488bb0932cffdc73042425883bbb9556e790ee97e9bbcb17de3b4a935f34c87113a7d7c7dd82031c8b0213bf9fe784fc1d95f8810bf1f643c533d693ba236a5e8595064cb710f9d0c949b87fb1789135645215faeeb7f1871d7c180dfb9b9e89caf5235e634b61b80ef17d30814d2b82cee2905e9911f9b48ba3eac331628689a4767c5044303289d7f5f9fd6c4b7fbeb4cd536ca2b766769255229aad45b742ef4be8615409df469bc0c06f3ea4faf5e1f9797063b9c533e8633e9440550ae47aef2c6985ef893f3b7bda30fff5bef98162b6b6cee7ff7dce60fd1f94c2f25c7b76400f792abdbc90ab81d61a70b8a24efc2beaac8b3419714ab8ae03e2c579b319a0a2422b24de4a96151b757f0ec44b8d0f154059ee20c0f321a60fab07827b9e73b34dee388271167524de1604cccfa9f5ccd8468814589e80dd6622af0041a7e4abc7c3ea945dc8591caf61ef05b61f07b3bcc2a830b4ddd3ffaebb127d980f5f7fe86562e7c54a10dcb3f17b2fe8a1def2a463f72fc17604ec6ab1c1c789b9c53ee147c5c979d1c5ce85bd422414a32bd8b760b6c916c1dc14014dfb047287c245218fe748d6b53b51154ae871749e5bd00411b2f6131c9a44da36049d9b326f8bc1e245ce325d96497c0af51c314272af7ea8e00d7d396dae288434d463efe31446fef7fa343ddc8d8946ea061478f6efeb5b14850adc7cf0985c93acfe8bbb89d134a19db1d3a87176eebe03838bea6c87ff180606ff23aa85526909eca38f4d1e39a13f6895773a98b459ea409ff3848e505032b0e1c1b0a96982eff863e51dad6ad5d353ab60de5c9d43a82b12e26da973dae63ca9807c25a205278166a224a38945ac64ea661fbb44120a1e8697493ba38d41231fdd70117c628ec7b079ac84a7807231d52594d3ffadef5d824ac120d79b8b0d40658fe1f01bd7b92aefd2f9a1417002df418d9c92736f569872a10d1316f4c4fec336fca3d4b376a7fcbf1b65c9b1e7805d2b8205c8c3803b90f8adcba6d1621d10d7ac02849982ada2c6dfb132c8036726d9f99832f9a1b74c85dbad759a4f56c879d34099c9420cda4ae9ba91a055cb4bbb9593527596780c1f33966899f0f077e8d671d328e2afe5604c113e4371d1202390344bfa7c936a4e250db77fa065b51c0d9b10c56090af6cbf3c0cf0de32c7ec21620bc1dc145e81a8e174572e1c4974c1121706b1dbc52488ce42158c41c505fb247640b4807bf28e91ba06af969065cab2d69d988239e5276435fe67a844bb9616392238cd7d41f30cbbe910b2a29bb772ffff87423e02950b7be953566d04e1c0f5d1e6b0deaca591e1f64de6cef048af101b6eb6186b16700aec3ee5cb772867d3bd5545aa912312958b37fc6cb7dd53cd428d456a7240738510a337dba694fe26994cbe866a27868a5989df8b2817e4acb571640c6e15b2f64c5f8ab7edc4cbc21e67addcee5caca0a4cce01015f19a20fdb7f5f3de018954aae79739e3e3cb8e047b654f64192c2ebb7cdf8f48b7d518bfda5fb7b14d2d07ebad7ce33e62f791254e57708ac7c3b107cd5b235038b50f0a5d87ae2fc65a7f363ac69db0637f259a829c385d23a0c44914afec4a58543e52f443cd9a3c2fd1229c26d1392a149d172d8c16b83587a6f6e02958ee1528f621962ddb2abcd8e01f847190ff290b1b2b1269afd7766ff1a892d3c292b6e6f8773898e58235eb4e46d0b4068a345aa92e9205ff441e93b12dfc1c65ecf39af69b6ddef22f38a394c7505d8130b78b332ad4c8168b49dc0e826118b7cd96a0c5efb43c91700b69069d28cb6d17ca8b44034df41519812cb7bb4b22b1a481a97f38b6546ce844166e98251a0b921bba6da12948fea199a85ac6b8086ee5f6786510b22e2c2f255bf42212a3a978e0faceba6726e5835eb2c7574265f6c68efcb0e32228926a35697416d31906c8e39b3a957269a6d1c63ee46026a2af642246a8184a780c846e61e4462a34d38c7ea44ebaf66e81f2a7e3af71884142dec43ae9fdb7cce8c5e432787529a8058a4020fad245e4af841c31200e2bcdf652113001cd06d79e38a5c8857dea57d9bdc73d37bd07b48b6413ffe1fddd7119c13d1ae831a0cbfb26b8448218c630d7fbf32ccd2f68eb10f53bf48ca58a02e948b3a77aba6d02caab96b5c551d8de2da99e8c82ac9092d93711fd6f5473f7bba5c6ea96b2b9665f2b898c18e6a11699da1c6556d48e60e5800ae9a1968491d1e8e5e90ceaf693bb4f151ec8fdfe93bef3d41d11a1df388853a5afb58e01addbc16d8da0302e7394fb46550f26d1fa43cb82410b18910f06ef16d60e30f6e32ef8631488e29b7637b86b2ad9dc076096933fb04b237d89dc25b08d1d6125b98d8b619754290abe1fdf2fafdf4cfe7b8fa5c6656038553857b099a54a45c05d084e3f4f3b4859e41475de8b676ac4c97e59d146da94694f34b1d97a119a2dd6a2321205802bf0d55eb793f5128e14aeaa43e5da3215cdc77420be5f3b62422f2efd24f95e535d3415ddce1c0401272b021243ded28d240cea411b885e5825ab60d4809703cb3586250f22604440088a71f000701938c8b8aa6dcf4aba150306f38d6502f0c4b380801e339fb0f1e415d289642903d1a31d1f051b13a13a16b66155a49a0cc5de60b893ccbc3cde597eb5964cb180fe34338d1617fe004a4993aed5650189c17cfde75b05756e335b02854ab2c0c5b22b9a27c150b5e191e466468d0ba4d10d51a9b8f171a4bf3004df226e762041cb4fe0417e81e6f711a2e5320e9287589250e7928d1a0dbc1d5ed725fbe979e4bdb200c5daa4b2fb9e0d743da090895f150c65c3a323cdc04bcef16320d650b0869a72c7f69b3366aadf578d6e8ecfd7e9e2b68d686326c4651a57a96f1e1fcba447fcc8220efe1a3fdf1d7d235255abd964b2358009910648b00f693801c8440b7fc0fa390f045e21b1224bbf0ae8b1c9f4b3ef52b251637045db02f6ba223269bfd475bc02b0353b04dd5e8630eed360e47db8a5cad0657a08345fffe22746ad68b7a7da812c00b0d615148c80e3744a54836f169230e4a150d36dbb3abbe61822528df234a70be2d53ceb7b23bfbbcc45e6d93cd029b3e035936a2aaa1d46a035da0d5e912732c0ddd0909fec2660703ed4eb87c3811dd90bf6a0c45fadafe99167d6b953184ea3008dcf8900725c8023e9b921058e9ef30e94076d50ebacdcaee88b7420312ee5f55c8cc4b82a89cb34aa41f7966a7055165f0d53d3eef82d123a67270dbd6c94c21295e8be496825886c7296bd7658eef94d775e6a2cea0528a9741f0a1b2b342f62317b3d91f434d0ce788e2e119272d05b6621893d0e7f8178e49da1edb3a5af74c827e018858f9dc5a243c816c15c6616ff9255136bf77dcebec43e29389b257918e086e5e28c238dc6ca3ad57c193b580514fc9a1c3cf30ee12e514c45e7b84460d2ce3b709998b270b181f5a8fff8a7b65f9437916ed964ebf4408153ca9696e90eb4a6e32500fe7dda1ade058c3f9376ed417d2494a3cbeb0375d3db576cbadc05c5e97f1cd788b2dc2ec15b99b585c87259d624781a4bab19e6e72073694521030221e8fe8657ea0d28ef7133c527baf2f509f5c9bb7628d3de9d8c234a586d9feb2c815904b4c77134b9dacb6be80e8f52a2f71a365e472749a914666326fe07d7c941f67aec4c97dcca5"}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f00000002800000", 0x2c}], 0x1}, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r7, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) 9m0.315811119s ago: executing program 34 (id=2835): fsmount(0xffffffffffffffff, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) setsockopt$sock_linger(r4, 0x1, 0x3c, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x2c, 0x0, &(0x7f0000000000)=[@register_looper, @register_looper, @increfs_done={0x40106308, 0x2}, @clear_death={0x400c630f, 0x3}], 0xf26, 0x0, &(0x7f00000014c0)="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"}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f00000002800000", 0x2c}], 0x1}, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r7, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) 5m26.555088377s ago: executing program 5 (id=3501): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) socket$kcm(0x11, 0xa, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22ff8984"], 0xffbf) 5m22.03613972s ago: executing program 5 (id=3520): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="cc1200000d0a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000a01203809c1200800c000180060001001e1c000008000a80040002807812018030000280"], 0x12cc}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 5m21.859161696s ago: executing program 5 (id=3523): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x10) 5m21.482524209s ago: executing program 5 (id=3526): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000100)='./file0\x00', 0x0, 0xb7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 5m20.945046877s ago: executing program 5 (id=3529): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x4000800) 5m20.491214783s ago: executing program 5 (id=3537): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001480)=@acquire={0x178, 0x17, 0x1, 0x70bd27, 0x25dfdbfe, {{@in=@rand_addr=0x64010101, 0x4d4, 0xff}, @in=@loopback, {@in=@multicast2, @in6=@private1, 0x4e01, 0x100, 0x4e20, 0x0, 0x2, 0xe0, 0x0, 0x3b, 0x0, 0xffffffffffffffff}, {{@in6=@mcast2, @in=@local, 0x4e21, 0x9, 0x4e22, 0x83, 0xa, 0x0, 0x0, 0xc}, {0x7f, 0xec2b, 0x5, 0xa, 0xd5, 0x80, 0x6, 0xa}, {0x7, 0xa0, 0x200000000009, 0x200000000000000}, 0xba, 0x0, 0x2, 0x0, 0x0, 0x3}, 0x3, 0x1, 0x200, 0x70bd29}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x4d6, 0x6c}, 0xa, @in=@empty, 0x3504, 0x3, 0x1, 0x4, 0x1, 0x4, 0x9}]}, @mark={0xc, 0x15, {0x35075a, 0x7f}}]}, 0x178}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 5m19.39664433s ago: executing program 35 (id=3537): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001480)=@acquire={0x178, 0x17, 0x1, 0x70bd27, 0x25dfdbfe, {{@in=@rand_addr=0x64010101, 0x4d4, 0xff}, @in=@loopback, {@in=@multicast2, @in6=@private1, 0x4e01, 0x100, 0x4e20, 0x0, 0x2, 0xe0, 0x0, 0x3b, 0x0, 0xffffffffffffffff}, {{@in6=@mcast2, @in=@local, 0x4e21, 0x9, 0x4e22, 0x83, 0xa, 0x0, 0x0, 0xc}, {0x7f, 0xec2b, 0x5, 0xa, 0xd5, 0x80, 0x6, 0xa}, {0x7, 0xa0, 0x200000000009, 0x200000000000000}, 0xba, 0x0, 0x2, 0x0, 0x0, 0x3}, 0x3, 0x1, 0x200, 0x70bd29}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x4d6, 0x6c}, 0xa, @in=@empty, 0x3504, 0x3, 0x1, 0x4, 0x1, 0x4, 0x9}]}, @mark={0xc, 0x15, {0x35075a, 0x7f}}]}, 0x178}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 9.027657594s ago: executing program 6 (id=5281): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x1, 0xfffffffe, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40a4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="0503d6fcd3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 8.399087715s ago: executing program 6 (id=5283): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0xc840}, 0x0) 8.128607334s ago: executing program 6 (id=5287): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000780)="c8900dd8cf5f2bcddc0fcb539683abd3bf3e066e7381e73bb236d0e3ccdc3cbc9ad9143b77c50bed54fb6b7bea11d4991e3a0a929ebabbbc0fe5ccfdd97132ff22918d3557b653812e9299ddd8fd993e8bdfafb2b566365a42704e619e06b0a8114d6a1cfd7c234e407221e24ae63d881dd9e41f5bd7a984f6dc4e6c16832431fb8e386b9725fa4857e2673422428853b07eff7a591029acbb8112dc8340e4969a443e961ba1a17fb9c9c3f726155ddafa4fbe6173b01fb72e0b3a14bffb39", 0xbf}], 0x1}}], 0x1, 0x20000001) r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r6, 0x3a}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000840)='\'', 0x30}], 0x1}, 0x894) 7.679889649s ago: executing program 6 (id=5293): syz_usb_connect$lan78xx(0x3, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000180)=0x1) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000380)={'syz1\x00', {0x0, 0x7fff, 0x2, 0x2}, 0x51, [0x3ff, 0x2, 0x10000, 0x0, 0x7ca6, 0x9, 0xc2ad, 0x4, 0x9, 0x9, 0x5, 0x9, 0x8, 0x200, 0x5, 0x3, 0x7, 0x5, 0xfffffff9, 0x6, 0x3, 0xfff, 0x7f, 0x4152, 0x8b3, 0x9, 0x861, 0x7, 0x5, 0x0, 0x3c, 0x4, 0x1005, 0x4, 0x8, 0x38, 0x8, 0x8, 0xd5bb, 0x3, 0x1, 0x9de9, 0x8, 0x3, 0x3, 0x7f, 0x5, 0x8, 0x0, 0x1, 0x3ff, 0x6, 0x2e, 0x800, 0x846c, 0x3, 0x6, 0x31b, 0x8, 0xa, 0x1, 0x7, 0xffffffff, 0x3], [0x4a, 0x19a78cbf, 0xe936, 0x0, 0x200, 0xfffffff7, 0x2, 0x7d, 0x10001, 0x8, 0x3ff, 0x1, 0x7, 0x8f, 0x1, 0x5, 0x1ff, 0x200, 0x40000, 0x7, 0xd, 0x3, 0x100788, 0x6, 0x0, 0x0, 0x8, 0x3, 0x5, 0x2, 0xa, 0x7, 0x80, 0x5aa, 0xfffff000, 0x400, 0x2, 0x7, 0x6, 0x6, 0x5, 0x3, 0x87, 0x22e2, 0x502, 0xffffffff, 0x7, 0x1ff, 0x6, 0x10001, 0x9e, 0x1, 0x5, 0x101, 0xfffffffa, 0x0, 0x2, 0x2, 0x6, 0x1ff, 0x8, 0x3, 0x6], [0x2, 0x94da, 0xffffffff, 0x7, 0xc0000, 0x4, 0x4, 0xfffffffa, 0x6, 0x7, 0xea, 0x7, 0x6, 0x400, 0xfffeffff, 0xfc000000, 0x8, 0x8, 0xd1, 0x2, 0xb66, 0x3, 0x4, 0x52c, 0x4, 0x10001, 0xfffffff8, 0x2, 0x9, 0x1, 0x7, 0xe86, 0x8, 0x20000100, 0x7, 0x1, 0x746a6ffd, 0x3, 0x4, 0x0, 0x1, 0x45a6c325, 0x8, 0x10000, 0x1000, 0x2, 0x5, 0x0, 0x2, 0x2, 0x1, 0x8, 0x2, 0x2, 0x81, 0x200, 0x3ff, 0xffffffcc, 0x6, 0xa000000, 0x8, 0xfff, 0x4000, 0x1], [0x8, 0x7, 0x3, 0xfffffffc, 0x2, 0x2, 0x8, 0x1ff, 0xfffffffe, 0x10, 0x5e, 0x4, 0x8, 0x8, 0x5, 0x8, 0x45eb, 0xf25, 0xd, 0x1ff, 0x2, 0x95, 0x9, 0x9, 0x1, 0xc, 0xffff6f9e, 0x4, 0xfffffff7, 0x2, 0x7, 0x52a, 0x5, 0xc1a4, 0x4, 0x8, 0x3, 0x9, 0x5, 0xb7af, 0x3, 0x4, 0x0, 0x1ff8, 0x2, 0x7, 0x6, 0x80000000, 0x652d, 0x7, 0x7fffffff, 0xd, 0x40, 0x3ff, 0xc, 0x1ff, 0x9, 0x6, 0x0, 0x1000, 0x9, 0x2, 0x9, 0x4]}, 0x45c) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000040)=0x8000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'gre0\x00'}) r3 = socket$phonet(0x23, 0x2, 0x1) sendto(r3, 0x0, 0x0, 0x0, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000880)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) listen(r4, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) ppoll(&(0x7f00000000c0)=[{r4, 0x60}], 0x1, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x4) 6.537084738s ago: executing program 7 (id=5303): r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x4) 6.343081155s ago: executing program 7 (id=5305): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 6.285528496s ago: executing program 2 (id=5306): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0xc840}, 0x0) 6.099687113s ago: executing program 2 (id=5307): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xa4}}, 0x0) 5.991740997s ago: executing program 2 (id=5308): socket$packet(0x11, 0xa, 0x300) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socket$rxrpc(0x21, 0x2, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[], 0x0, 0x26, 0x0, 0x1, 0xfffffffd}, 0x28) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) 5.875442451s ago: executing program 2 (id=5309): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x6, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x0, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x5, 0x8, 0x101, 0x3}, {0x3, 0x9, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x8}, {0x3, 0x4, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0xb, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0x0, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x0, 0xffffffff}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0x5b86, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0x7, 0x9, 0x167, 0x2, 0x71, 0x9b91}, {0x5, 0x2, 0xc, 0x8, 0x9, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x329, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x5, 0x1ff, 0x7437ec77, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x81, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x2, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0xffff, 0x6, 0x3, 0x4, 0xffb, 0x9}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff742, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0x8ac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001}, {0x0, 0x6, 0x8000, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7f7f, 0x6, 0x0, 0x2, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0xad, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x8, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x1}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5206, 0x2, 0x53ce, 0x3}, {0xffffff81, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x808f}, {0x741, 0x0, 0x9, 0x7ffffffd, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x6, 0x4, 0xc6e9}, {0x0, 0x2d73, 0x3ff, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x4f}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x8000, 0x7, 0x9}, {0xff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0x2, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff05, 0x3}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x9, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0xffff, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b5}, {0xa24b, 0x947d, 0x3, 0x5, 0x80000000, 0x2}, {0x9, 0xffff8000, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x6}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x2}, {0x6, 0x10, 0x3, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x0, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x3, 0xffe00000, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0x7, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0x7, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0xb, 0x7}, {0x20000006, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x5, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x4, 0x7, 0x4, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7c0, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80040000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x40003, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x2}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x5}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x0, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x2}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x5}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x5}], 0xff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r4, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 5.366539988s ago: executing program 7 (id=5310): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x17, 0x11, 0x839, 0x70bd2c, 0x100003, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x2, 0xa}, {0xf, 0xfff1}}}, 0x24}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000d40)={{r0, &(0x7f0000000300)='skcipher\x00', 0x0, 0x0, 0x3, &(0x7f0000000540)={@_ha_fsid}, 0x0}, 0x0, &(0x7f0000000e00)}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x2, 0x3, 0x0, 0xad7}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x481d5) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=@newsa={0x14c, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@local}, {@in=@dev={0xac, 0x14, 0x14, 0x17}, 0x4d5, 0x33}, @in=@multicast1, {0x3}, {}, {0x0, 0x22}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x5b, 0x14, {{'cmac(aes)\x00'}, 0x78, 0x0, "3509fe8fd57fd44aa5074c50bc700e"}}]}, 0x14c}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 5.215191693s ago: executing program 7 (id=5311): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024"], 0x64}}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1000430, &(0x7f0000000780)=ANY=[@ANYBLOB="58e1a192964f91b2b2b082e5b2d36bfb79aa692b33c0fe4f45accc6a979fe95b1d"]) r0 = socket$alg(0x26, 0x5, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 4.563498435s ago: executing program 6 (id=5312): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000780)="c8900dd8cf5f2bcddc0fcb539683abd3bf3e066e7381e73bb236d0e3ccdc3cbc9ad9143b77c50bed54fb6b7bea11d4991e3a0a929ebabbbc0fe5ccfdd97132ff22918d3557b653812e9299ddd8fd993e8bdfafb2b566365a42704e619e06b0a8114d6a1cfd7c234e407221e24ae63d881dd9e41f5bd7a984f6dc4e6c16832431fb8e386b9725fa4857e2673422428853b07eff7a591029acbb8112dc8340e4969a443e961ba1a17fb9c9c3f726155ddafa4fbe6173b01fb72e0b3a14bffb3937e3", 0xc1}], 0x1}}], 0x1, 0x20000001) r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r6, 0x3a}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000840)='\'', 0x30}], 0x1}, 0x894) 2.832804454s ago: executing program 7 (id=5313): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x8000) 2.251117993s ago: executing program 1 (id=5314): socket$inet(0x2, 0x3, 0x2) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendto$netrom(r0, 0x0, 0x0, 0x86c, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NETID(r1, 0x0, 0xc000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f00000001c0)={0x0, &(0x7f0000000100)}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b5738180123", 0x7) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000078c0), 0x0, 0x4040) recvmsg$can_raw(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x1) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$SIOCNRDECOBS(r0, 0x89e2) 2.104949648s ago: executing program 1 (id=5315): r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x4) 1.930862674s ago: executing program 1 (id=5316): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xa4}}, 0x0) 1.880468256s ago: executing program 1 (id=5317): socket$packet(0x11, 0xa, 0x300) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socket$rxrpc(0x21, 0x2, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[], 0x0, 0x26, 0x0, 0x1, 0xfffffffd}, 0x28) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {0x0}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) 1.744333591s ago: executing program 1 (id=5318): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000000240)=[{&(0x7f00000003c0)="2e9bbd3507e03dd65193dfb6c575963f86dd606712e900320400", 0x1a}, {&(0x7f0000000100)="b700"/12, 0xc}, {&(0x7f0000000680)="17a8a6c41e58e8b6cdb8040db329c064116e4c4cbb04627dfddbd514be6688ff", 0x20}], 0x3) 210.099123ms ago: executing program 7 (id=5319): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="600000001000030400000000fedbdf2500007400f728ab93db3c140d69363e3273752c18fb3ff28f25abc8f645000ea41d2c292d330aaf5f6c5bf158a72d1c01b4de725a894ffa6fc8934ef3402a646fc57b88bf57de4902c3699b4f6c9b7fa498e9356c7906056c02f02b4f9b6708737b9fe80ffb8fda620b071256eb58a45c85d673480dcf8a9036c4ea97302c3a5dbcfe7135c8ac04e1fd50fb", @ANYRES32=r1, @ANYBLOB="0008000000000000400034801400350076657468315f766c616e0000000000001400350076657468305f746f5f7465616d00000014003500776c616e3000"/72], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20802, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) setsockopt(0xffffffffffffffff, 0xc, 0x7f, 0x0, 0x0) ioctl$sock_netdev_private(r7, 0x8914, &(0x7f0000000000)) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002e00010000000000fbdbdd250401f2800c00160002ac0f0000000000140017"], 0x114}], 0x1, 0x0, 0x0, 0x41}, 0x4008080) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r9, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) connect$rose(r9, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) connect$rose(r9, &(0x7f00000000c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x3, [@bcast, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x40) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000340)={0xfffbfffc, 0x5, 0x1, 0x6}, 0x10) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wrr\x00', 0x15, 0xff, 0xf}, 0x2c) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="7800000010000104fcfffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000480012800b0001006772657461700000380002800400120008001500d57002000500", @ANYRES32, @ANYBLOB, @ANYRES32], 0x78}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) syz_extract_tcp_res$synack(&(0x7f00000001c0), 0x1, 0x0) 200.434653ms ago: executing program 2 (id=5320): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x44004) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) 123.114436ms ago: executing program 6 (id=5321): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d7843e40108804400208024000100000000000100000000000000fdffff01000000000000000000000000000000001400040003000000ac1414bb00000000000000000600050000000000000100802400020073e591ec06154031d3954ac0e16752e72640f08b5281a8461d17d26d12f2bbb6060005000021000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39228c00098028000080060001000a0000001400020020010000000000000000000000000001050003000000000088000080060001000a0000001400020020010000000000000000000000000002050003000000001003800080060001008c0e000008000200ac1414aa05000300000000001c000080060001000200000008000200ac1414bb0500030000000000200004000e00000000000000fe800000000000000000000000000000000000009c0000802400020073961633df6dc9cb418b15afd0bae7b90f1e6cfed8bb423cf9285c474163154908000a00010000002400010000000000000000000000000000000000000000000000000000000000000000004800098028000080060001000a00000014000200fe8000000000000000000000000000bb05000300000000001c00008006000100020000000800020000000000050003000000000008"], 0x22c}}, 0x0) 89.815757ms ago: executing program 1 (id=5322): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet6(0xa, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x158, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xea, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) 0s ago: executing program 2 (id=5323): socket$inet(0x2, 0x3, 0x2) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendto$netrom(r0, 0x0, 0x0, 0x86c, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NETID(r1, 0x0, 0xc000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f00000001c0)={0x0, &(0x7f0000000100)}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b5738180123", 0x7) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000078c0), 0x0, 0x4040) recvmsg$can_raw(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x1) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$SIOCNRDECOBS(r0, 0x89e2) kernel console output (not intermixed with test programs): bond1 (unregistering): Released all slaves [ 1293.546761][T20791] syzkaller0: entered promiscuous mode [ 1293.552308][T20791] syzkaller0: entered allmulticast mode [ 1294.723843][ T5835] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1294.914839][ T5835] usb 8-1: Using ep0 maxpacket: 16 [ 1294.924267][ T5835] usb 8-1: config 0 has an invalid descriptor of length 42, skipping remainder of the config [ 1294.960245][ T5835] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1294.972773][ T5835] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1294.983128][ T5835] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1295.015638][ T5835] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1295.048701][ T5835] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1295.059079][ T5835] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1295.067762][ T5835] usb 8-1: Manufacturer: syz [ 1295.109320][ T5835] usb 8-1: config 0 descriptor?? [ 1295.488642][ T5835] rc_core: IR keymap rc-hauppauge not found [ 1295.494636][ T5835] Registered IR keymap rc-empty [ 1295.500965][ T5835] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1295.548383][ T5835] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1295.591791][ T5835] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 1295.626035][ T5835] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input54 [ 1295.642914][ T5835] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1295.699054][ T5835] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1295.743606][ T5835] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1295.775012][ T5835] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1295.810381][ T5835] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1295.865110][ T5835] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1295.906997][ T5835] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1295.950927][ T5835] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1296.011710][ T5835] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1296.067086][ T5835] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1296.108048][ T5835] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1296.119082][ T5835] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1296.168512][ T5835] usb 8-1: USB disconnect, device number 13 [ 1299.376233][T20868] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1299.435053][T20642] bridge0: port 1(bridge_slave_0) entered blocking state [ 1299.494860][T20642] bridge0: port 1(bridge_slave_0) entered disabled state [ 1299.502181][T20642] bridge_slave_0: entered allmulticast mode [ 1299.592981][T20642] bridge_slave_0: entered promiscuous mode [ 1299.620363][T20642] bridge0: port 2(bridge_slave_1) entered blocking state [ 1299.628227][T20642] bridge0: port 2(bridge_slave_1) entered disabled state [ 1299.635916][T20642] bridge_slave_1: entered allmulticast mode [ 1299.643581][T20642] bridge_slave_1: entered promiscuous mode [ 1300.108302][T20642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1300.223442][T20642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1300.372608][T20642] team0: Port device team_slave_0 added [ 1300.400196][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.409656][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.435766][T20899] syzkaller0: entered promiscuous mode [ 1300.441568][T20899] syzkaller0: entered allmulticast mode [ 1300.456458][T20642] team0: Port device team_slave_1 added [ 1304.886348][T20642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1304.925385][T20642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1305.006915][T20642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1305.251893][T20642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1305.285892][T20642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1305.330168][T20642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1305.616323][T20642] hsr_slave_0: entered promiscuous mode [ 1305.641539][T20642] hsr_slave_1: entered promiscuous mode [ 1305.675190][T20642] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1305.704925][T20642] Cannot create hsr debugfs directory [ 1305.772268][ T6949] hsr_slave_0: left promiscuous mode [ 1305.798508][ T6949] hsr_slave_1: left promiscuous mode [ 1305.817581][ T6949] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1305.850065][ T6949] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1305.887104][ T6949] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1305.899376][ T6949] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1305.926217][ T6949] bridge_slave_1: left allmulticast mode [ 1305.934238][ T6949] bridge_slave_1: left promiscuous mode [ 1305.948070][ T6949] bridge0: port 2(bridge_slave_1) entered disabled state [ 1305.971979][ T6949] bridge_slave_0: left allmulticast mode [ 1305.979891][ T6949] bridge_slave_0: left promiscuous mode [ 1305.986591][ T6949] bridge0: port 1(bridge_slave_0) entered disabled state [ 1306.147589][ T6949] veth1_macvtap: left promiscuous mode [ 1306.153294][ T6949] veth0_macvtap: left promiscuous mode [ 1306.186178][ T6949] veth1_vlan: left promiscuous mode [ 1306.191598][ T6949] veth0_vlan: left promiscuous mode [ 1306.433368][T21000] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4614'. [ 1306.538980][ T6949] bond7 (unregistering): Released all slaves [ 1306.568649][ T6949] bond6 (unregistering): Released all slaves [ 1306.621162][ T6949] bond5 (unregistering): (slave geneve2): Releasing active interface [ 1306.631058][ T6949] geneve2 (unregistering): left allmulticast mode [ 1306.875406][ T6949] bond5 (unregistering): Released all slaves [ 1307.128522][ T6949] bond4 (unregistering): Released all slaves [ 1307.355584][ T6949] bond3 (unregistering): Released all slaves [ 1307.584275][ T6949] bond2 (unregistering): Released all slaves [ 1308.411285][ T6949] team0 (unregistering): Port device team_slave_1 removed [ 1308.487019][ T6949] team0 (unregistering): Port device team_slave_0 removed [ 1308.566973][ T6949] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1308.647443][ T6949] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1309.161674][ T6949] bond0 (unregistering): Released all slaves [ 1309.502453][T21001] syzkaller0: entered promiscuous mode [ 1309.573379][T21001] syzkaller0: entered allmulticast mode [ 1314.566988][T21053] syzkaller0: entered promiscuous mode [ 1314.572542][T21053] syzkaller0: entered allmulticast mode [ 1314.903819][T21051] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4622'. [ 1315.713942][T20642] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1315.747048][T20642] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1315.792165][T20642] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1315.823798][T20642] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1315.980440][T21085] syzkaller0: entered promiscuous mode [ 1315.998666][T21085] syzkaller0: entered allmulticast mode [ 1320.146647][T20642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1320.230928][T20642] 8021q: adding VLAN 0 to HW filter on device team0 [ 1320.254335][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state [ 1320.261750][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1320.293115][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state [ 1320.300386][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1321.032955][T20642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1321.180762][T20642] veth0_vlan: entered promiscuous mode [ 1321.220199][T20642] veth1_vlan: entered promiscuous mode [ 1321.297780][T20642] veth0_macvtap: entered promiscuous mode [ 1321.370326][T20642] veth1_macvtap: entered promiscuous mode [ 1321.458476][T20642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1321.495591][T20642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1321.507722][T20642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1321.566330][T20642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1321.594836][T20642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1321.614812][T20642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1321.644725][T20642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1321.676391][T20642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1321.698560][T20642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1321.747124][T20642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1321.790685][T20642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1321.810740][T20642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1321.821544][T20642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1321.833070][T20642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1321.843800][T20642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1321.853873][T20642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1321.864969][T20642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1321.888960][T20642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1321.968490][T20642] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1322.023836][T20642] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1322.052898][T20642] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1322.103088][T20642] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1322.181471][T21166] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4643'. [ 1322.332329][T21166] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4643'. [ 1322.662691][ T6154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1322.700753][ T6154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1322.779709][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1322.817097][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1323.518123][T21214] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4653'. [ 1323.626447][T21214] hsr0: entered promiscuous mode [ 1323.632538][T21214] macvlan2: entered allmulticast mode [ 1323.644884][T21214] hsr0: entered allmulticast mode [ 1323.667233][T21214] hsr_slave_0: entered allmulticast mode [ 1323.708103][T21214] hsr_slave_1: entered allmulticast mode [ 1324.065998][T21227] syzkaller0: entered promiscuous mode [ 1324.071600][T21227] syzkaller0: entered allmulticast mode [ 1325.075490][ T5774] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1325.152194][T21249] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1325.175433][T21249] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1325.184484][T21249] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1325.209353][T21249] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1325.217508][T21249] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1325.227495][T21249] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1325.269555][T21251] syzkaller0: entered promiscuous mode [ 1325.284755][ T5774] usb 2-1: Using ep0 maxpacket: 16 [ 1325.298100][ T5774] usb 2-1: config 0 has an invalid descriptor of length 222, skipping remainder of the config [ 1325.303159][T21251] syzkaller0: entered allmulticast mode [ 1325.314740][ T5774] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1325.314778][ T5774] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1325.314802][ T5774] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1325.314826][ T5774] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1325.316205][ T5774] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1325.369310][ T5774] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1325.377876][ T5774] usb 2-1: Manufacturer: syz [ 1325.397218][ T5774] usb 2-1: config 0 descriptor?? [ 1325.520700][ T6154] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1325.735545][ T5774] rc_core: IR keymap rc-hauppauge not found [ 1325.741618][ T5774] Registered IR keymap rc-empty [ 1325.764624][ T5774] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1325.820801][ T6154] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1325.835330][ T5774] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1325.881555][ T5774] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1325.951525][ T6154] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1325.953174][ T5774] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input55 [ 1326.008249][ T5774] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1326.055180][ T5774] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1326.095101][ T5774] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1326.134245][ T5774] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1326.179371][ T6154] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1326.193079][ T5774] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1326.238013][ T5774] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1326.274863][ T5774] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1326.334971][ T5774] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1326.399645][ T5774] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1326.454811][ T5774] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1326.597731][T21247] chnl_net:caif_netlink_parms(): no params data found [ 1326.604292][ T5774] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1326.616464][ T5774] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1326.654899][ T5774] usb 2-1: USB disconnect, device number 81 [ 1327.284820][ T5776] Bluetooth: hci2: command tx timeout [ 1327.305016][ T42] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1327.425035][ T6154] bond1: (slave ip6gre1): Releasing backup interface [ 1327.449018][ T6154] ip6gre1 (unregistering): left promiscuous mode [ 1327.486365][ T6154] bond1: Destroying bond [ 1327.556319][ T42] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1327.568077][ T42] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1327.587071][ T42] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1327.614054][ T42] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1327.642368][ T42] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1327.674052][ T42] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1327.684002][ T42] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1327.709024][ T42] usb 2-1: Product: syz [ 1327.713329][ T42] usb 2-1: Manufacturer: syz [ 1327.746230][ T42] cdc_wdm 2-1:1.0: skipping garbage [ 1327.751695][ T42] cdc_wdm 2-1:1.0: skipping garbage [ 1327.795062][ T42] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1327.801051][ T42] cdc_wdm 2-1:1.0: Unknown control protocol [ 1327.937923][ T6154] bond1 (unregistering): Released all slaves [ 1328.052464][T21247] bridge0: port 1(bridge_slave_0) entered blocking state [ 1328.060531][T21247] bridge0: port 1(bridge_slave_0) entered disabled state [ 1328.068711][T21247] bridge_slave_0: entered allmulticast mode [ 1328.080685][T21247] bridge_slave_0: entered promiscuous mode [ 1328.165826][T21247] bridge0: port 2(bridge_slave_1) entered blocking state [ 1328.173092][T21247] bridge0: port 2(bridge_slave_1) entered disabled state [ 1328.188017][T21247] bridge_slave_1: entered allmulticast mode [ 1328.199156][T21247] bridge_slave_1: entered promiscuous mode [ 1328.406210][T21247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1328.462296][T21247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1328.537220][ C0] wdm_int_callback: 770 callbacks suppressed [ 1328.537243][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1328.642430][T21247] team0: Port device team_slave_0 added [ 1328.695692][T21247] team0: Port device team_slave_1 added [ 1328.760889][T21301] syzkaller0: entered promiscuous mode [ 1328.776549][T21301] syzkaller0: entered allmulticast mode [ 1328.986098][T21247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1328.993143][T21247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1329.047685][T21247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1329.169716][T21247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1329.195373][T21247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1329.238857][T21247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1329.355522][ T5776] Bluetooth: hci2: command tx timeout [ 1329.891973][T21247] hsr_slave_0: entered promiscuous mode [ 1329.910563][T21247] hsr_slave_1: entered promiscuous mode [ 1329.939229][T21247] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1329.947320][T21247] Cannot create hsr debugfs directory [ 1329.974138][ T6154] hsr_slave_0: left promiscuous mode [ 1330.004362][ T6154] hsr_slave_1: left promiscuous mode [ 1330.062182][ T42] usb 2-1: USB disconnect, device number 82 [ 1330.231067][ T6154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1330.244783][ T6154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1330.257225][ T6154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1330.282249][ T6154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1330.370882][ T6154] veth1_macvtap: left promiscuous mode [ 1330.380165][ T6154] veth0_macvtap: left promiscuous mode [ 1330.387455][ T6154] veth1_vlan: left promiscuous mode [ 1330.393208][ T6154] veth0_vlan: left promiscuous mode [ 1330.803317][ T6154] bond6 (unregistering): Released all slaves [ 1330.870046][ T6154] bond5 (unregistering): Released all slaves [ 1331.268274][ T6154] bond4 (unregistering): Released all slaves [ 1331.442688][ T5776] Bluetooth: hci2: command tx timeout [ 1331.527262][ T6154] bond3 (unregistering): Released all slaves [ 1331.765668][ T6154] bond2 (unregistering): Released all slaves [ 1332.660584][ T6154] team0 (unregistering): Port device team_slave_1 removed [ 1332.744093][ T6154] team0 (unregistering): Port device team_slave_0 removed [ 1332.823923][ T6154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1332.902243][ T6154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1333.525077][ T5776] Bluetooth: hci2: command tx timeout [ 1333.535255][ T6154] bond0 (unregistering): Released all slaves [ 1333.960958][T21355] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4681'. [ 1334.145577][ T5774] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1334.360326][ T5774] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1334.396499][ T5774] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1334.447588][ T5774] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1334.463777][ T5774] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1334.488157][ T5774] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1334.557176][ T5774] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1334.580215][ T5774] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1334.603680][ T5774] usb 2-1: Product: syz [ 1334.608391][ T5774] usb 2-1: Manufacturer: syz [ 1334.633995][ T5774] cdc_wdm 2-1:1.0: skipping garbage [ 1334.660271][ T5774] cdc_wdm 2-1:1.0: skipping garbage [ 1334.685488][ T5774] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1334.691469][ T5774] cdc_wdm 2-1:1.0: Unknown control protocol [ 1334.901800][T21372] syzkaller0: entered promiscuous mode [ 1334.908024][T21372] syzkaller0: entered allmulticast mode [ 1335.314383][T21247] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1335.362455][T21247] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1335.402514][T21247] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1335.440451][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1335.485797][T21247] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1335.773916][T21247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1335.832953][T21247] 8021q: adding VLAN 0 to HW filter on device team0 [ 1335.874344][ T6911] bridge0: port 1(bridge_slave_0) entered blocking state [ 1335.881935][ T6911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1335.948283][ T6911] bridge0: port 2(bridge_slave_1) entered blocking state [ 1335.955588][ T6911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1336.692428][T21247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1336.882242][T21247] veth0_vlan: entered promiscuous mode [ 1336.927587][T21247] veth1_vlan: entered promiscuous mode [ 1336.979253][ T8] usb 2-1: USB disconnect, device number 83 [ 1337.050371][T21247] veth0_macvtap: entered promiscuous mode [ 1337.117716][T21247] veth1_macvtap: entered promiscuous mode [ 1337.148047][T21411] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4692'. [ 1337.258144][T21414] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4692'. [ 1337.339283][T21247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1337.384809][T21247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1337.424991][T21247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1337.464849][T21247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1337.514840][T21247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1337.547401][T21247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1337.586771][T21247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1337.614690][T21247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1337.636383][T21247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1337.763811][T21431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4694'. [ 1337.784507][T21415] syzkaller0: entered promiscuous mode [ 1337.808442][T21415] syzkaller0: entered allmulticast mode [ 1337.843799][T21247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1337.873089][T21247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1337.894311][T21247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1337.924805][T21247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1337.934873][T21247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1337.945694][T21247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1337.962028][T21247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1337.972991][T21247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1338.003992][T21247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1342.210043][T21247] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1342.219418][T21247] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1342.229635][T21247] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1342.239816][T21247] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1342.465427][ T6930] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1342.473380][ T6930] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1342.535424][T21449] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4697'. [ 1342.571891][T21452] syzkaller0: entered promiscuous mode [ 1342.577739][T21452] syzkaller0: entered allmulticast mode [ 1342.592787][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1342.601671][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1342.662958][T21455] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4697'. [ 1342.683982][T21455] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4697'. [ 1342.962985][T21465] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4701'. [ 1343.063234][T21467] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4701'. [ 1343.110285][T21470] syzkaller0: entered promiscuous mode [ 1343.117759][T21470] syzkaller0: entered allmulticast mode [ 1343.637438][T21483] syzkaller0: entered promiscuous mode [ 1343.646276][T21483] syzkaller0: entered allmulticast mode [ 1343.675534][T21480] syzkaller0: entered promiscuous mode [ 1343.681088][T21480] syzkaller0: entered allmulticast mode [ 1347.217133][T21489] syzkaller0: entered promiscuous mode [ 1347.223459][T21489] syzkaller0: entered allmulticast mode [ 1347.253743][T21492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4712'. [ 1347.375100][T21495] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4712'. [ 1347.390664][T21495] macvlan2: entered promiscuous mode [ 1347.396753][T21495] macvlan2: entered allmulticast mode [ 1347.482580][T21500] syzkaller0: entered promiscuous mode [ 1347.500955][T21500] syzkaller0: entered allmulticast mode [ 1347.721047][T21506] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4716'. [ 1347.799818][T21507] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4716'. [ 1347.815537][T21507] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4716'. [ 1347.887703][T16782] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1348.085242][T16782] usb 2-1: Using ep0 maxpacket: 16 [ 1348.106285][T16782] usb 2-1: config 0 has an invalid descriptor of length 24, skipping remainder of the config [ 1348.126331][T16782] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1348.146228][T16782] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1348.164088][T16782] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1348.174368][T16782] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1348.189786][T16782] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1348.199494][T16782] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1348.208642][T16782] usb 2-1: Manufacturer: syz [ 1348.213186][T21517] syzkaller0: entered promiscuous mode [ 1348.225786][T16782] usb 2-1: config 0 descriptor?? [ 1348.234762][T21517] syzkaller0: entered allmulticast mode [ 1348.534830][T16782] rc_core: IR keymap rc-hauppauge not found [ 1348.543340][T16782] Registered IR keymap rc-empty [ 1348.551337][T16782] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1348.587774][T16782] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1348.626873][T16782] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1348.649285][T16782] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input56 [ 1348.696115][T16782] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1348.729611][T16782] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1348.766137][T16782] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1348.815885][T16782] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1348.853940][T16782] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1348.905624][T16782] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1348.951388][T16782] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1348.986461][T16782] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1349.020972][T16782] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1349.063632][T16782] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1349.129178][T16782] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1349.152927][T16782] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1349.166813][T16782] usb 2-1: USB disconnect, device number 84 [ 1352.143744][T21521] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1352.153732][T21521] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1352.168724][T21521] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1352.216684][T21519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1352.242125][T21519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1352.261698][T21519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1352.272501][T21519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1352.289063][T21519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1352.303546][T21519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1352.313727][T21519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1352.324728][T21519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1352.337232][T21519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1352.349509][T21519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1352.361440][T21519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1352.374435][T21519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1352.388904][T21519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1352.402606][T21519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1352.414394][T21519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1352.428671][T21519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1352.531557][T21527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4723'. [ 1352.583700][T21529] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4723'. [ 1352.622751][T21529] macvlan2: entered promiscuous mode [ 1352.631495][T21529] macvlan2: entered allmulticast mode [ 1352.750182][T21543] syzkaller0: entered promiscuous mode [ 1352.767789][T21543] syzkaller0: entered allmulticast mode [ 1352.789659][T21538] syzkaller0: entered promiscuous mode [ 1352.804877][T21538] syzkaller0: entered allmulticast mode [ 1353.478730][T21569] netlink: 64 bytes leftover after parsing attributes in process `syz.7.4734'. [ 1353.613677][T16782] IPVS: starting estimator thread 0... [ 1353.619901][T21573] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4734'. [ 1353.644395][T21573] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4734'. [ 1353.685601][T21573] gretap1: entered promiscuous mode [ 1353.702627][T21576] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4735'. [ 1353.735377][T21574] IPVS: using max 17 ests per chain, 40800 per kthread [ 1353.827211][T21572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1353.849681][T21572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1353.864766][T21572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1353.876551][T21572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1353.888771][T21572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1353.899609][T21572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1353.909724][T21572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1353.921858][T21572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1353.936082][T21572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1353.946885][T21572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1353.958673][T21572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1353.999469][T21572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1354.020764][T21572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1354.032679][T21572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1354.042921][T21572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1354.053690][T21572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1354.123850][T21579] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4735'. [ 1354.167781][T21583] syzkaller0: entered promiscuous mode [ 1354.173309][T21583] syzkaller0: entered allmulticast mode [ 1354.385791][T21589] syzkaller0: entered promiscuous mode [ 1354.405440][T21589] syzkaller0: entered allmulticast mode [ 1354.614074][T21593] syzkaller0: entered promiscuous mode [ 1354.621362][T21593] syzkaller0: entered allmulticast mode [ 1355.109287][T21611] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4746'. [ 1355.255095][T21614] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4746'. [ 1355.292290][T21614] macvlan2: entered promiscuous mode [ 1355.298209][T21614] macvlan2: entered allmulticast mode [ 1355.321929][T21620] netlink: 64 bytes leftover after parsing attributes in process `syz.7.4750'. [ 1355.427418][T21622] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4750'. [ 1355.445314][T21622] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4750'. [ 1355.550844][T21617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1355.562742][T21617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1355.590602][T21617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1355.609472][T21617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1355.621046][T21617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1355.631911][T21617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1355.643190][T21617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1355.655342][T21617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1355.679212][T21617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1355.710708][T21617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1355.728979][T21617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1355.740309][T21617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1355.770721][T21617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1355.798240][T21617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1355.808817][T21617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1355.823885][T21617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1356.104171][T21630] syzkaller0: entered promiscuous mode [ 1356.110397][T21630] syzkaller0: entered allmulticast mode [ 1356.288923][T21643] syzkaller0: entered promiscuous mode [ 1356.300128][T21643] syzkaller0: entered allmulticast mode [ 1356.544469][T21649] syzkaller0: entered promiscuous mode [ 1356.558321][T21649] syzkaller0: entered allmulticast mode [ 1360.227154][T21663] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1360.238828][T21663] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1360.248705][T21663] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1360.345936][T21660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1360.371757][T21660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1360.390936][T21660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1360.404094][T21660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1360.422168][T21660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1360.433847][T21660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1360.450512][T21660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1360.462281][T21660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1360.485935][T21660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1360.497934][T21660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1360.520513][T21660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1360.531214][T21660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1360.542502][T21660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1360.553270][T21660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1360.563820][T21660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1360.574404][T21660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1360.606429][T21669] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4764'. [ 1360.643768][T21669] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4764'. [ 1360.665325][ T5774] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1360.673832][T21669] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4764'. [ 1360.865469][ T5774] usb 2-1: Using ep0 maxpacket: 16 [ 1360.873478][ T5774] usb 2-1: config 0 has an invalid descriptor of length 34, skipping remainder of the config [ 1360.888670][T21685] syzkaller0: entered promiscuous mode [ 1360.894302][T21685] syzkaller0: entered allmulticast mode [ 1360.899249][ T5774] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1360.917701][ T5774] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1360.928175][ T5774] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1360.940500][ T5774] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1360.963696][ T5774] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1360.972971][ T5774] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1360.981310][ T5774] usb 2-1: Manufacturer: syz [ 1361.000925][ T5774] usb 2-1: config 0 descriptor?? [ 1361.404780][ T5774] rc_core: IR keymap rc-hauppauge not found [ 1361.410869][ T5774] Registered IR keymap rc-empty [ 1361.431609][ T5774] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1361.484855][ T5774] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1361.547025][ T5774] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1361.590622][ T5774] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input57 [ 1361.617635][T21698] syzkaller0: entered promiscuous mode [ 1361.634445][T21698] syzkaller0: entered allmulticast mode [ 1361.650497][ T5774] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1361.725640][ T5774] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1361.765248][ T5774] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1361.794943][ T5774] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1361.824873][ T5774] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1361.838978][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.846243][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.862418][ T5774] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1361.919570][ T5774] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1361.964924][ T5774] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1362.004975][ T5774] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1362.044882][ T5774] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1362.077139][ T5774] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1362.094211][ T5774] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1362.123185][ T5774] usb 2-1: USB disconnect, device number 85 [ 1365.416491][T21711] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1365.436938][T21711] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1365.462035][T21712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1365.472672][T21711] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1365.500077][T21712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1365.531524][T21712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1365.554729][T21712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1365.564596][T21712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1365.579556][T21712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1365.589576][T21712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1365.600273][T21712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1365.612826][T21712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1365.623627][T21712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1365.634053][T21712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1365.646162][T21712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1365.657491][T21712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1365.675630][T21712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1365.695426][T21712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1365.714731][T21712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1366.007570][T21726] IPv4: Oversized IP packet from 127.202.26.0 [ 1366.106035][T21726] x_tables: duplicate underflow at hook 1 [ 1366.181792][T21729] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4782'. [ 1366.347489][ T5774] IPVS: starting estimator thread 0... [ 1366.355083][T21736] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1366.370288][T21737] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4782'. [ 1366.431027][T21737] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4782'. [ 1366.465842][T21739] IPVS: using max 19 ests per chain, 45600 per kthread [ 1366.485799][T21737] gretap1: entered promiscuous mode [ 1366.727756][T21748] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4785'. [ 1366.977647][T21752] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4787'. [ 1367.722029][T21761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1367.763441][T21761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1367.794312][T21761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1367.807094][T21780] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4796'. [ 1367.824250][T21761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1367.854798][T21761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1367.874899][T21761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1367.894217][T21761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1367.921257][T21761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1367.933972][T21761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1367.945491][T21761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1367.956200][T21761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1367.966711][T21761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1367.977271][T21761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1367.987824][T21761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1367.997983][T21761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1368.009584][T21761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1368.253199][T21783] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4799'. [ 1368.397376][T21788] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1368.409328][T21787] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.4801'. [ 1368.425370][T21788] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4799'. [ 1368.434472][T21788] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4799'. [ 1369.776037][T21805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1369.825714][T21805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1369.846289][T21805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1369.873475][T21805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1369.911169][T21805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1369.962101][T21805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1369.983076][T21805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1370.002684][T21805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1370.018191][T21805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1370.028929][T21805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1370.049370][T21805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1370.082303][T21805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1370.094365][T21805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1370.105811][T21805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1370.124312][T21805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1370.140613][T21805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1371.004953][ T9] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1371.107853][T21867] IPv4: Oversized IP packet from 127.202.26.0 [ 1371.130074][T21867] x_tables: duplicate underflow at hook 1 [ 1371.217830][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 1371.237313][ T9] usb 2-1: config 0 has an invalid descriptor of length 39, skipping remainder of the config [ 1371.264735][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1371.287686][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1371.316481][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1371.338405][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1371.379352][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1371.391854][ T9] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1371.418755][ T9] usb 2-1: Manufacturer: syz [ 1371.450450][ T9] usb 2-1: config 0 descriptor?? [ 1371.587965][T21877] __nla_validate_parse: 4 callbacks suppressed [ 1371.587982][T21877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4830'. [ 1371.708920][T21868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1371.764733][T21868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1371.775741][ T9] rc_core: IR keymap rc-hauppauge not found [ 1371.781804][ T9] Registered IR keymap rc-empty [ 1371.792877][T21868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1371.796976][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1371.811716][T21868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1371.821991][T21868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1371.833032][T21868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1371.843336][T21868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1371.857561][T21868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1371.860780][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1371.883320][T21868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1371.927097][T21868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1371.927424][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1371.943536][T21868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1371.951848][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input58 [ 1371.962384][T21868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1371.985027][T21868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1371.996144][T21868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1372.005458][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1372.008272][T21868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1372.024189][T21868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1372.035936][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1372.095892][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1372.145054][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1372.204820][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1372.322630][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1372.391213][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1372.454918][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1372.523532][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1372.574807][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1372.617815][ T9] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1372.664812][ T9] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1372.691309][T21896] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4834'. [ 1372.719616][ T9] usb 2-1: USB disconnect, device number 86 [ 1373.456168][T21917] netlink: 'syz.2.4840': attribute type 72 has an invalid length. [ 1374.155637][T21249] Bluetooth: hci1: command 0x0406 tx timeout [ 1374.190749][T21922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1374.228500][T21922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1374.262294][T21922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1374.303684][T21922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1374.334984][T21922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1374.364933][T21922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1374.414778][T21922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1374.443070][T21922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1374.500617][T21922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1374.534206][T21922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1374.549210][T21922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1374.560241][T21922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1374.571959][T21922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1374.582891][T21922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1374.593277][T21922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1374.605491][T21922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1375.304339][T21968] netlink: 'syz.7.4851': attribute type 72 has an invalid length. [ 1375.347280][T21969] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.4855'. [ 1376.297932][T21982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1376.345062][T21982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1376.420148][T21982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1376.449525][T21982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1376.468807][T21982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1376.490992][T21982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1376.506704][T21982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1376.537268][T21982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1376.562620][T21982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1376.574407][T21982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1376.586158][T21982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1376.597707][T21982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1376.610581][T21982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1376.628968][T21982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1376.644339][T21982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1376.667050][T21982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1376.858001][T22006] syzkaller0: entered promiscuous mode [ 1376.871580][T22006] syzkaller0: entered allmulticast mode [ 1377.135685][T22024] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4867'. [ 1377.155085][T16782] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1377.243960][T22026] netlink: 'syz.7.4868': attribute type 72 has an invalid length. [ 1377.250039][T22028] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.4866'. [ 1377.348061][T16782] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1377.375316][T16782] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1377.407344][T16782] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1377.439096][T16782] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1377.454187][T16782] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1377.469864][T16782] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1377.479882][T16782] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1377.488451][T16782] usb 3-1: Product: syz [ 1377.492703][T16782] usb 3-1: Manufacturer: syz [ 1377.511094][T16782] cdc_wdm 3-1:1.0: skipping garbage [ 1377.518823][T16782] cdc_wdm 3-1:1.0: skipping garbage [ 1377.535336][T16782] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1377.558726][T16782] cdc_wdm 3-1:1.0: Unknown control protocol [ 1377.761613][T22040] syzkaller0: entered promiscuous mode [ 1377.767410][T22040] syzkaller0: entered allmulticast mode [ 1378.539772][ T8] usb 3-1: USB disconnect, device number 69 [ 1382.082439][T22053] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1382.092525][T22053] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1382.102413][T22053] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1382.134422][T22048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1382.162171][T22048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1382.175734][T22048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1382.191676][T22048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1382.201748][T22048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1382.218120][T22048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1382.229615][T22048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1382.241395][T22048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1382.255312][T22048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1382.265903][T22048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1382.277095][T22048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1382.288162][T22048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1382.299507][T22048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1382.310189][T22048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1382.321216][T22048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1382.331928][T22048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1382.408314][T22085] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4877'. [ 1382.610479][T22087] netlink: 1752 bytes leftover after parsing attributes in process `syz.7.4879'. [ 1382.898530][T22096] netlink: 'syz.6.4878': attribute type 72 has an invalid length. [ 1383.257624][T22102] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4885'. [ 1383.284906][T22102] bridge_slave_1: left allmulticast mode [ 1383.290638][T22102] bridge_slave_1: left promiscuous mode [ 1383.302231][T22102] bridge0: port 2(bridge_slave_1) entered disabled state [ 1383.312749][T22102] bridge_slave_0: left allmulticast mode [ 1383.318992][T22102] bridge_slave_0: left promiscuous mode [ 1383.324982][T22102] bridge0: port 1(bridge_slave_0) entered disabled state [ 1383.344957][T13620] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1383.418052][T22102] bond0: (slave bridge0): Releasing backup interface [ 1383.580612][T13620] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1383.605222][T13620] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1383.621440][T13620] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1383.631138][T13620] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1383.652424][T13620] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1383.659914][T22108] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4887'. [ 1383.675535][T13620] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1383.685658][T13620] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1383.693925][T13620] usb 7-1: Product: syz [ 1383.698843][T13620] usb 7-1: Manufacturer: syz [ 1383.716031][T13620] cdc_wdm 7-1:1.0: skipping garbage [ 1383.721830][T13620] cdc_wdm 7-1:1.0: skipping garbage [ 1383.733082][T13620] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1383.744259][T13620] cdc_wdm 7-1:1.0: Unknown control protocol [ 1383.901327][T22106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1383.959453][T22106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1384.013790][T22106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1384.038242][T22114] xt_bpf: check failed: parse error [ 1384.047146][T22106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1384.059556][T22106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1384.074026][T22106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1384.104485][T22106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1384.123679][T22106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1384.156551][T22106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1384.204775][T22106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1384.230746][T22106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1384.264396][T22106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1384.287237][T22106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1384.321756][T22106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1384.352224][T22106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1384.379887][T22106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1384.509391][T22114] lo speed is unknown, defaulting to 1000 [ 1384.552613][T22117] syzkaller0: entered promiscuous mode [ 1384.569788][T22117] syzkaller0: entered allmulticast mode [ 1384.581826][T22114] lo speed is unknown, defaulting to 1000 [ 1384.590245][T22114] lo speed is unknown, defaulting to 1000 [ 1384.633147][T22114] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1384.691830][T22114] lo speed is unknown, defaulting to 1000 [ 1384.711333][ T9] usb 7-1: USB disconnect, device number 38 [ 1384.748823][T22114] lo speed is unknown, defaulting to 1000 [ 1384.777032][T22114] lo speed is unknown, defaulting to 1000 [ 1384.784504][T22114] lo speed is unknown, defaulting to 1000 [ 1384.798882][T22114] lo speed is unknown, defaulting to 1000 [ 1385.253595][T22142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4896'. [ 1386.078729][T22153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1386.094918][T22153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1386.108808][T22153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1386.119572][T22153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1386.129814][T22153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1386.142301][T22153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1386.152600][T22153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1386.164319][ T8] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1386.172430][T22153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1386.195963][T22153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1386.214947][T22153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1386.243254][T22153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1386.254173][T22153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1386.265678][T22153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1386.278584][T22153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1386.289011][T22153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1386.299938][T22153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1386.316460][ T9] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1386.365207][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 1386.386447][ T8] usb 2-1: config 0 has an invalid descriptor of length 41, skipping remainder of the config [ 1386.415805][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1386.427298][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1386.444383][ T8] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1386.455577][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1386.481437][ T8] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1386.486292][T22168] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.4907'. [ 1386.501176][ T8] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1386.518314][ T9] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1386.532169][ T9] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1386.551126][ T8] usb 2-1: Manufacturer: syz [ 1386.566000][ T9] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1386.576368][ T8] usb 2-1: config 0 descriptor?? [ 1386.600915][ T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1386.620875][ T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1386.642633][ T9] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1386.657331][ T9] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1386.666310][ T9] usb 8-1: Product: syz [ 1386.670948][ T9] usb 8-1: Manufacturer: syz [ 1386.700870][T22170] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4909'. [ 1386.702891][ T9] cdc_wdm 8-1:1.0: skipping garbage [ 1386.724758][ T9] cdc_wdm 8-1:1.0: skipping garbage [ 1386.732815][ T9] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 1386.740263][ T9] cdc_wdm 8-1:1.0: Unknown control protocol [ 1386.816847][T22174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4908'. [ 1386.832261][T22173] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4909'. [ 1386.865758][ T8] rc_core: IR keymap rc-hauppauge not found [ 1386.866350][T22173] macvlan2: entered promiscuous mode [ 1386.871716][ T8] Registered IR keymap rc-empty [ 1386.883299][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1386.894881][T22173] macvlan2: entered allmulticast mode [ 1386.903259][T22173] bond2: (slave macvlan2): Opening slave failed [ 1386.914803][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1386.946334][ T8] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1386.967031][ T8] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input59 [ 1386.992823][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1387.027546][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1387.036887][T22177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4910'. [ 1387.075058][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1387.105651][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1387.134364][T22180] syzkaller0: entered promiscuous mode [ 1387.140228][T22180] syzkaller0: entered allmulticast mode [ 1387.157769][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1387.195100][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1387.245132][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1387.275378][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1387.318644][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1387.364906][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1387.434530][ T8] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1387.449519][ T8] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1387.453472][T22187] netlink: 'syz.6.4915': attribute type 10 has an invalid length. [ 1387.475270][ T8] usb 2-1: USB disconnect, device number 87 [ 1387.483116][T22187] bridge0: port 2(bridge_slave_1) entered disabled state [ 1387.491046][T22187] bridge0: port 1(bridge_slave_0) entered disabled state [ 1387.556522][T22187] bridge0: port 2(bridge_slave_1) entered blocking state [ 1387.563828][T22187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1387.571504][T22187] bridge0: port 1(bridge_slave_0) entered blocking state [ 1387.578794][T22187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1387.626908][T22187] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1387.709924][T13620] usb 8-1: USB disconnect, device number 14 [ 1388.269587][T22209] __nla_validate_parse: 2 callbacks suppressed [ 1388.269608][T22209] netlink: 324 bytes leftover after parsing attributes in process `syz.1.4919'. [ 1388.303582][T22203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1388.344793][T22203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1388.358166][T22203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1388.368906][T22203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1388.380184][T22203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1388.418188][T22203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1388.457543][T22203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1388.493703][T22203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1388.543280][T22203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1388.568985][T22203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1388.584795][T22203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1388.615037][T22203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1388.634213][T22203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1388.666165][T22203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1388.710109][T22203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1388.756291][T22203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1388.911890][T22207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4918'. [ 1389.258110][T22230] syzkaller0: entered promiscuous mode [ 1389.274155][T22230] syzkaller0: entered allmulticast mode [ 1392.856418][T22245] netlink: 'syz.7.4924': attribute type 10 has an invalid length. [ 1393.151592][T22258] syzkaller0: entered promiscuous mode [ 1393.159456][T22258] syzkaller0: entered allmulticast mode [ 1393.240698][T22260] syzkaller0: entered promiscuous mode [ 1393.259816][T22260] syzkaller0: entered allmulticast mode [ 1393.271903][T22263] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4931'. [ 1393.294900][ T8] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1393.447532][T22265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4932'. [ 1393.516689][ T8] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1393.546023][ T8] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1393.570304][ T8] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1393.587856][ T8] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1393.613032][T22270] netlink: 'syz.1.4935': attribute type 10 has an invalid length. [ 1393.621945][ T8] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1393.635612][T22270] bridge0: port 2(bridge_slave_1) entered disabled state [ 1393.643422][T22270] bridge0: port 1(bridge_slave_0) entered disabled state [ 1393.648138][ T8] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1393.684903][ T8] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1393.694476][T22270] bridge0: port 2(bridge_slave_1) entered blocking state [ 1393.701741][T22270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1393.703492][ T8] usb 7-1: Product: syz [ 1393.709302][T22270] bridge0: port 1(bridge_slave_0) entered blocking state [ 1393.720611][T22270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1393.754567][ T8] usb 7-1: Manufacturer: syz [ 1393.781014][ T8] cdc_wdm 7-1:1.0: skipping garbage [ 1393.802500][ T8] cdc_wdm 7-1:1.0: skipping garbage [ 1393.806741][T22270] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1393.818596][ T8] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1393.824552][ T8] cdc_wdm 7-1:1.0: Unknown control protocol [ 1393.954193][T22278] syzkaller0: entered promiscuous mode [ 1393.960156][T22278] syzkaller0: entered allmulticast mode [ 1394.227411][T22282] syzkaller0: entered promiscuous mode [ 1394.232967][T22282] syzkaller0: entered allmulticast mode [ 1394.270599][T22284] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4941'. [ 1394.512855][T22289] lo speed is unknown, defaulting to 1000 [ 1394.515297][T22291] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4944'. [ 1394.770555][ T8] usb 7-1: USB disconnect, device number 39 [ 1394.852685][T22303] netlink: 'syz.7.4947': attribute type 10 has an invalid length. [ 1394.987403][T22308] syzkaller0: entered promiscuous mode [ 1394.993262][T22308] syzkaller0: entered allmulticast mode [ 1395.568929][T22317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4953'. [ 1395.706146][T22321] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4955'. [ 1395.865280][T13620] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1395.895066][T22325] netlink: 'syz.1.4957': attribute type 10 has an invalid length. [ 1395.903332][T22325] bridge0: port 2(bridge_slave_1) entered disabled state [ 1395.910670][T22325] bridge0: port 1(bridge_slave_0) entered disabled state [ 1396.054738][T13620] usb 7-1: Using ep0 maxpacket: 16 [ 1396.062215][T13620] usb 7-1: config 0 has an invalid descriptor of length 42, skipping remainder of the config [ 1396.093376][T13620] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1396.121955][T13620] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1396.159372][T22327] syzkaller0: entered promiscuous mode [ 1396.170962][T13620] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1396.172295][T22327] syzkaller0: entered allmulticast mode [ 1396.187360][T13620] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1396.223427][T13620] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1396.245035][T13620] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1396.253787][T13620] usb 7-1: Manufacturer: syz [ 1396.262295][T13620] usb 7-1: config 0 descriptor?? [ 1396.384836][ T5835] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1396.509259][T22339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4962'. [ 1396.598413][ T5835] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1396.614834][T13620] rc_core: IR keymap rc-hauppauge not found [ 1396.617512][ T5835] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1396.620789][T13620] Registered IR keymap rc-empty [ 1396.620924][T13620] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1396.661273][ T5835] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1396.701816][ T5835] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1396.717094][ T5835] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1396.722939][T13620] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1396.740475][ T5835] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1396.760996][ T5835] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1396.777114][T13620] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1396.779339][ T5835] usb 2-1: Product: syz [ 1396.793830][T13620] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input60 [ 1396.813490][T13620] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1396.816399][ T5835] usb 2-1: Manufacturer: syz [ 1396.845051][T13620] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1396.849390][ T5835] cdc_wdm 2-1:1.0: skipping garbage [ 1396.870173][ T5835] cdc_wdm 2-1:1.0: skipping garbage [ 1396.883029][T22344] syzkaller1: entered allmulticast mode [ 1396.886794][ T5835] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1396.894813][T13620] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1396.904736][ T5835] cdc_wdm 2-1:1.0: Unknown control protocol [ 1396.965119][T13620] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1396.995419][T13620] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1397.025113][T13620] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1397.065709][T13620] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1397.115137][T13620] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1397.144961][T13620] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1397.185439][T13620] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1397.198748][T22346] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4964'. [ 1397.217145][T13620] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1397.227678][T13620] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1397.250766][T13620] usb 7-1: USB disconnect, device number 40 [ 1397.420879][T22350] Bluetooth: MGMT ver 1.22 [ 1397.497824][T22353] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4967'. [ 1397.726976][T22355] netlink: 'syz.7.4968': attribute type 10 has an invalid length. [ 1397.837033][T22359] syzkaller0: entered promiscuous mode [ 1397.849456][ T5815] usb 2-1: USB disconnect, device number 88 [ 1397.868975][T22359] syzkaller0: entered allmulticast mode [ 1398.009718][T22366] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4972'. [ 1398.158005][T22369] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4973'. [ 1398.469083][T22379] syzkaller0: entered promiscuous mode [ 1398.476472][T22379] syzkaller0: entered allmulticast mode [ 1398.620999][T22382] netlink: 'syz.1.4979': attribute type 10 has an invalid length. [ 1398.819962][T22387] __nla_validate_parse: 1 callbacks suppressed [ 1398.819982][T22387] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4981'. [ 1398.966737][T22392] syzkaller0: entered promiscuous mode [ 1398.998008][T22392] syzkaller0: entered allmulticast mode [ 1399.192332][T22397] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4985'. [ 1399.397293][T22404] netlink: 'syz.1.4989': attribute type 10 has an invalid length. [ 1399.461147][T22405] syzkaller0: entered promiscuous mode [ 1399.472639][T22405] syzkaller0: entered allmulticast mode [ 1399.494380][T22401] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4988'. [ 1399.629469][T22407] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4987'. [ 1399.764841][ T5776] Bluetooth: hci4: command 0x0406 tx timeout [ 1400.170171][T22427] netlink: 'syz.1.4999': attribute type 10 has an invalid length. [ 1400.358748][T22431] syzkaller0: entered promiscuous mode [ 1400.365861][T22431] syzkaller0: entered allmulticast mode [ 1400.378995][T22434] syzkaller0: entered promiscuous mode [ 1400.384952][T22434] syzkaller0: entered allmulticast mode [ 1401.278586][T22456] netlink: 'syz.7.5011': attribute type 10 has an invalid length. [ 1401.337548][T22459] syzkaller0: entered promiscuous mode [ 1401.343194][T22459] syzkaller0: entered allmulticast mode [ 1401.679188][T22468] syzkaller0: entered promiscuous mode [ 1401.690527][T22468] syzkaller0: entered allmulticast mode [ 1402.083406][T22481] netlink: 'syz.7.5023': attribute type 10 has an invalid length. [ 1402.729222][T22504] syzkaller0: entered promiscuous mode [ 1402.748764][T22504] syzkaller0: entered allmulticast mode [ 1402.804383][T22502] netlink: 'syz.2.5032': attribute type 10 has an invalid length. [ 1402.827992][T22502] bridge0: port 2(bridge_slave_1) entered disabled state [ 1402.835799][T22502] bridge0: port 1(bridge_slave_0) entered disabled state [ 1402.899870][T22502] bridge0: port 2(bridge_slave_1) entered blocking state [ 1402.907199][T22502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1402.914864][T22502] bridge0: port 1(bridge_slave_0) entered blocking state [ 1402.922181][T22502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1402.967615][T22502] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1403.763400][T22533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5045'. [ 1404.394463][T22555] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5050'. [ 1404.480438][T22555] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5050'. [ 1404.496511][T22555] macvlan2: entered promiscuous mode [ 1404.501970][T22555] macvlan2: entered allmulticast mode [ 1404.508864][T22555] bond1: (slave macvlan2): Opening slave failed [ 1404.804591][T22552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1404.852637][T22552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1404.873341][T22552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1404.894273][T22552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1404.905160][T22552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1404.923154][T22552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1404.935754][T22552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1404.949634][T22552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1404.962482][ T5815] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1404.982454][T22552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1404.993895][T22552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1405.006382][T22552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1405.017767][T22552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1405.027743][T22552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1405.038543][T22552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1405.051477][T22552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1405.062594][T22552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1405.119104][T22568] netlink: 'syz.1.5053': attribute type 10 has an invalid length. [ 1405.203837][ T5815] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1405.233331][ T5815] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1405.261025][ T5815] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1405.281908][ T5815] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1405.317695][ T5815] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1405.361931][ T5815] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1405.384732][ T5815] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1405.393311][ T5815] usb 3-1: Product: syz [ 1405.406499][ T5815] usb 3-1: Manufacturer: syz [ 1405.428038][ T5815] cdc_wdm 3-1:1.0: skipping garbage [ 1405.433318][ T5815] cdc_wdm 3-1:1.0: skipping garbage [ 1405.455828][ T5815] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1405.461982][ T5815] cdc_wdm 3-1:1.0: Unknown control protocol [ 1405.668530][T22577] syzkaller0: entered promiscuous mode [ 1405.684582][T22577] syzkaller0: entered allmulticast mode [ 1406.429139][ T5815] usb 3-1: USB disconnect, device number 70 [ 1410.202393][T22608] netlink: 'syz.2.5063': attribute type 10 has an invalid length. [ 1410.210957][T22608] bridge0: port 2(bridge_slave_1) entered disabled state [ 1410.218271][T22608] bridge0: port 1(bridge_slave_0) entered disabled state [ 1410.239089][T22616] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1410.281605][T22616] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1410.335362][T22616] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1410.397242][T22606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1410.427807][T22606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.454663][T22606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1410.485374][T22606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.504849][T22606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1410.522790][T22606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.532949][T22606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1410.551699][T22606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.572289][T22606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1410.619203][T22606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.634137][T22606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1410.654753][T22606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.676087][T22606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1410.706138][T22606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.729215][T22606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1410.750387][T22606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1411.263361][T22649] netlink: 'syz.6.5072': attribute type 10 has an invalid length. [ 1411.292729][T22649] bridge0: port 2(bridge_slave_1) entered disabled state [ 1411.300552][T22649] bridge0: port 1(bridge_slave_0) entered disabled state [ 1411.434998][ T9] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1411.644175][T22659] syzkaller0: entered promiscuous mode [ 1411.652410][ T9] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1411.672365][T22659] syzkaller0: entered allmulticast mode [ 1411.678311][ T9] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1411.704721][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1411.724586][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1411.741500][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1411.787507][ T9] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1411.805050][ T9] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1411.814734][ T9] usb 3-1: Product: syz [ 1411.818960][ T9] usb 3-1: Manufacturer: syz [ 1411.872512][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 1411.880895][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 1411.904951][ T9] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1411.912195][ T9] cdc_wdm 3-1:1.0: Unknown control protocol [ 1412.889377][T13620] usb 3-1: USB disconnect, device number 71 [ 1414.088150][ T9] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1414.284778][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1414.293672][ T9] usb 3-1: config 0 has an invalid descriptor of length 27, skipping remainder of the config [ 1414.306923][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1414.319803][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1414.329707][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1414.340931][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1414.357650][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1414.367057][ T9] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1414.383021][ T9] usb 3-1: Manufacturer: syz [ 1414.393512][ T9] usb 3-1: config 0 descriptor?? [ 1414.705572][ T9] rc_core: IR keymap rc-hauppauge not found [ 1414.711588][ T9] Registered IR keymap rc-empty [ 1414.717439][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1414.764225][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1414.808521][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1414.824250][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input61 [ 1414.846891][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1414.885241][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1414.926669][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1414.962080][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1414.998848][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1415.046346][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1415.084860][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1415.135294][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1415.174766][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1415.224329][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1415.277327][ T9] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1415.296117][ T9] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1415.335289][ T9] usb 3-1: USB disconnect, device number 72 [ 1416.271945][T22670] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1416.281820][T22670] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1416.292924][T22670] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1416.318467][T22674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1416.331461][T22674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1416.347697][T22674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1416.365871][T22674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1416.379441][T22674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1416.390186][T22674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1416.403113][T22674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1416.418417][T22674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1416.430432][T22674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1416.441105][T22674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1416.455621][T22674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1416.468171][T22674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1416.487002][T22674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1416.497688][T22674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1416.507624][T22674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1416.518511][T22674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1416.636354][T22702] netlink: 'syz.2.5083': attribute type 10 has an invalid length. [ 1416.665689][ T5835] lo speed is unknown, defaulting to 1000 [ 1417.034896][ T5815] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1417.228698][ T5815] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1417.243843][ T5815] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1417.278361][ T5815] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1417.305582][ T5815] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1417.344786][ T5815] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1417.379787][ T5815] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1417.394912][ T5815] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1417.419907][ T5815] usb 7-1: Product: syz [ 1417.424145][ T5815] usb 7-1: Manufacturer: syz [ 1417.468528][ T5815] cdc_wdm 7-1:1.0: skipping garbage [ 1417.495260][ T5815] cdc_wdm 7-1:1.0: skipping garbage [ 1417.503245][ T5815] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1417.521318][ T5815] cdc_wdm 7-1:1.0: Unknown control protocol [ 1417.593467][T22726] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5091'. [ 1417.601809][T22724] syzkaller0: entered promiscuous mode [ 1417.612080][T22724] syzkaller0: entered allmulticast mode [ 1418.482062][ T5815] usb 7-1: USB disconnect, device number 41 [ 1419.321625][T22759] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5099'. [ 1419.336987][T22759] nbd: socks must be embedded in a SOCK_ITEM attr [ 1421.891056][T22738] netlink: 'syz.1.5095': attribute type 10 has an invalid length. [ 1422.101025][T22763] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5102'. [ 1422.641003][T22783] netlink: 'syz.6.5108': attribute type 10 has an invalid length. [ 1422.905236][T22788] syzkaller0: entered promiscuous mode [ 1422.929720][T22788] syzkaller0: entered allmulticast mode [ 1423.080546][T22795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5112'. [ 1423.273106][T21249] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 1423.294102][T21249] CPU: 1 PID: 21249 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 1423.298725][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.301868][T21249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1423.318358][T21249] Workqueue: hci2 hci_rx_work [ 1423.323099][T21249] Call Trace: [ 1423.324795][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.326388][T21249] [ 1423.326402][T21249] dump_stack_lvl+0x18c/0x250 [ 1423.326441][T21249] ? show_regs_print_info+0x20/0x20 [ 1423.345638][T21249] ? load_image+0x400/0x400 [ 1423.350210][T21249] sysfs_create_dir_ns+0x26e/0x2a0 [ 1423.355363][T21249] ? sysfs_warn_dup+0xa0/0xa0 [ 1423.360044][T21249] ? do_raw_spin_unlock+0x121/0x230 [ 1423.365255][T21249] kobject_add_internal+0x61c/0xcc0 [ 1423.370476][T21249] kobject_add+0x164/0x240 [ 1423.375005][T21249] ? __rwlock_init+0x150/0x150 [ 1423.379794][T21249] ? kobject_init+0x1e0/0x1e0 [ 1423.384491][T21249] ? _raw_spin_unlock+0x28/0x40 [ 1423.389390][T21249] ? get_device_parent+0x366/0x390 [ 1423.394553][T21249] device_add+0x408/0xc20 [ 1423.398903][T21249] hci_conn_add_sysfs+0xd5/0x1e0 [ 1423.403863][T21249] le_conn_complete_evt+0xf5d/0x1540 [ 1423.409179][T21249] ? hci_event_packet+0x4cb/0x1270 [ 1423.414401][T21249] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 1423.420667][T21249] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1423.426406][T21249] ? skb_pull_data+0xfb/0x200 [ 1423.431117][T21249] hci_le_conn_complete_evt+0x187/0x440 [ 1423.436704][T21249] ? hci_remote_host_features_evt+0x150/0x150 [ 1423.442807][T21249] hci_event_packet+0x7ba/0x1270 [ 1423.447755][T21249] ? bis_list+0x290/0x290 [ 1423.452112][T21249] ? lockdep_hardirqs_on+0x98/0x150 [ 1423.457324][T21249] ? hci_send_to_monitor+0xd7/0x4f0 [ 1423.462535][T21249] hci_rx_work+0x43a/0xd60 [ 1423.466977][T21249] ? process_scheduled_works+0x96f/0x15d0 [ 1423.472711][T21249] process_scheduled_works+0xa5d/0x15d0 [ 1423.478300][T21249] ? worker_attach_to_pool+0x380/0x380 [ 1423.483792][T21249] ? assign_work+0x3d2/0x5d0 [ 1423.488472][T21249] worker_thread+0xa55/0xfc0 [ 1423.493076][T21249] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1423.498995][T21249] ? _raw_spin_unlock+0x40/0x40 [ 1423.503857][T21249] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1423.509768][T21249] kthread+0x2fa/0x390 [ 1423.513847][T21249] ? pr_cont_work+0x560/0x560 [ 1423.518537][T21249] ? kthread_blkcg+0xd0/0xd0 [ 1423.523129][T21249] ret_from_fork+0x48/0x80 [ 1423.527547][T21249] ? kthread_blkcg+0xd0/0xd0 [ 1423.532131][T21249] ret_from_fork_asm+0x11/0x20 [ 1423.536912][T21249] [ 1423.576544][T21249] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1423.594363][T21249] Bluetooth: hci2: failed to register connection device [ 1423.654077][T22810] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5113'. [ 1423.852976][T22810] nbd: socks must be embedded in a SOCK_ITEM attr [ 1427.613372][T22620] udevd[22620]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1427.651008][T22711] udevd[22711]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1427.783368][T22836] netlink: 'syz.1.5117': attribute type 10 has an invalid length. [ 1427.804981][T22835] syzkaller0: entered promiscuous mode [ 1427.814140][T22835] syzkaller0: entered allmulticast mode [ 1428.328163][T22852] syzkaller0: entered promiscuous mode [ 1428.334139][T22852] syzkaller0: entered allmulticast mode [ 1428.680539][T21249] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1428.748224][T22864] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5126'. [ 1428.856212][T22864] nbd: socks must be embedded in a SOCK_ITEM attr [ 1432.674011][T22711] udevd[22711]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1432.742121][T22682] udevd[22682]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1432.814375][T22872] syzkaller0: entered promiscuous mode [ 1432.853083][T22872] syzkaller0: entered allmulticast mode [ 1433.492149][T22897] syzkaller0: entered promiscuous mode [ 1433.500186][T22897] syzkaller0: entered allmulticast mode [ 1434.025340][T22905] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5138'. [ 1434.401910][T21249] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1434.477872][T22918] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5139'. [ 1434.591251][T22918] nbd: socks must be embedded in a SOCK_ITEM attr [ 1438.542497][T22711] udevd[22711]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1438.597458][T22682] udevd[22682]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1439.055215][ T5815] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1439.218214][T22963] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5149'. [ 1439.274787][ T5815] usb 8-1: Using ep0 maxpacket: 16 [ 1439.303412][ T5815] usb 8-1: config 0 has an invalid descriptor of length 27, skipping remainder of the config [ 1439.320189][ T5815] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1439.352532][ T5815] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1439.371401][ T5815] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1439.383793][ T5815] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1439.401106][ T5815] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1439.421709][ T5815] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1439.431625][ T5815] usb 8-1: Manufacturer: syz [ 1439.454380][ T5815] usb 8-1: config 0 descriptor?? [ 1439.784924][ T5815] rc_core: IR keymap rc-hauppauge not found [ 1439.792186][ T5815] Registered IR keymap rc-empty [ 1439.801589][T22973] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5153'. [ 1439.802467][ T5815] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1439.855825][T22973] nbd: socks must be embedded in a SOCK_ITEM attr [ 1439.866028][ T5815] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1439.897757][T22682] block nbd64: NBD_DISCONNECT [ 1439.912186][ T5815] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 1439.932384][ T5815] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input62 [ 1439.962038][ T5815] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1439.996238][ T5815] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1440.044794][ T5815] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1440.095405][ T5815] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1440.145788][ T5815] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1440.194802][ T5815] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1440.221396][T22682] udevd[22682]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1440.246102][ T5815] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1440.284781][ T5815] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1440.314908][ T5815] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1440.345023][ T5815] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1440.378326][ T5815] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1440.388158][ T5815] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1440.405959][ T5815] usb 8-1: USB disconnect, device number 15 [ 1442.539544][T23047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5172'. [ 1442.926884][T23057] syzkaller0: entered promiscuous mode [ 1442.933045][T23057] syzkaller0: entered allmulticast mode [ 1442.949765][T23058] syzkaller0: entered promiscuous mode [ 1442.958660][T23058] syzkaller0: entered allmulticast mode [ 1443.330072][T23073] syzkaller0: entered promiscuous mode [ 1443.345695][T23073] syzkaller0: entered allmulticast mode [ 1443.591906][ T5776] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1443.658777][T23087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5183'. [ 1443.710794][T23087] nbd: socks must be embedded in a SOCK_ITEM attr [ 1444.122379][T23101] syzkaller0: entered promiscuous mode [ 1444.129499][T23101] syzkaller0: entered allmulticast mode [ 1444.265155][T23104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5189'. [ 1444.380707][T23106] syzkaller0: entered promiscuous mode [ 1444.418900][T23106] syzkaller0: entered allmulticast mode [ 1444.535205][T23111] xt_hashlimit: size too large, truncated to 1048576 [ 1444.693317][T23116] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5194'. [ 1444.904381][T23119] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5194'. [ 1444.940641][T23120] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5194'. [ 1445.071468][T23120] macvlan2: entered promiscuous mode [ 1445.091637][T23120] macvlan2: entered allmulticast mode [ 1445.105560][T23120] bond2: (slave macvlan2): Opening slave failed [ 1445.394939][ T42] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1445.584781][ T42] usb 8-1: Using ep0 maxpacket: 16 [ 1445.628999][ T42] usb 8-1: config 0 has an invalid descriptor of length 35, skipping remainder of the config [ 1445.649112][ T42] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1445.683882][ T42] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1445.706120][ T42] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1445.716793][ T42] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1445.753721][ T42] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1445.774969][ T42] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1445.822389][ T42] usb 8-1: Manufacturer: syz [ 1445.865456][ T42] usb 8-1: config 0 descriptor?? [ 1446.120053][T23137] syzkaller0: entered promiscuous mode [ 1446.140261][T23137] syzkaller0: entered allmulticast mode [ 1446.236713][ T42] rc_core: IR keymap rc-hauppauge not found [ 1446.242697][ T42] Registered IR keymap rc-empty [ 1446.279306][ T42] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1446.334907][ T42] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1446.382934][ T42] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 1446.413744][ T42] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input63 [ 1446.476151][ T42] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1446.542983][ T42] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1446.594944][ T42] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1446.638319][ T42] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1446.665416][T23141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5200'. [ 1446.688815][ T42] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1446.744802][ T42] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1446.802795][ T42] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1446.835376][T23143] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5201'. [ 1446.844943][ T42] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1446.895336][ T42] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1446.932133][ T42] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1446.990163][ T42] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1447.014575][ T42] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1447.033974][T23146] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1447.052334][T23146] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5201'. [ 1447.072150][ T42] usb 8-1: USB disconnect, device number 16 [ 1447.092248][T23146] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5201'. [ 1447.184485][T23148] syzkaller0: entered promiscuous mode [ 1447.205805][T23148] syzkaller0: entered allmulticast mode [ 1447.901732][T21249] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 1447.914105][T21249] CPU: 0 PID: 21249 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 1447.921810][T21249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1447.931887][T21249] Workqueue: hci4 hci_rx_work [ 1447.936597][T21249] Call Trace: [ 1447.939891][T21249] [ 1447.942834][T21249] dump_stack_lvl+0x18c/0x250 [ 1447.947539][T21249] ? show_regs_print_info+0x20/0x20 [ 1447.952850][T21249] ? load_image+0x400/0x400 [ 1447.957384][T21249] sysfs_create_dir_ns+0x26e/0x2a0 [ 1447.962516][T21249] ? sysfs_warn_dup+0xa0/0xa0 [ 1447.967207][T21249] ? do_raw_spin_unlock+0x121/0x230 [ 1447.972512][T21249] kobject_add_internal+0x61c/0xcc0 [ 1447.977737][T21249] kobject_add+0x164/0x240 [ 1447.982170][T21249] ? __rwlock_init+0x150/0x150 [ 1447.986959][T21249] ? kobject_init+0x1e0/0x1e0 [ 1447.991664][T21249] ? _raw_spin_unlock+0x28/0x40 [ 1447.996544][T21249] ? get_device_parent+0x366/0x390 [ 1448.001692][T21249] device_add+0x408/0xc20 [ 1448.006052][T21249] hci_conn_add_sysfs+0xd5/0x1e0 [ 1448.011013][T21249] le_conn_complete_evt+0xf5d/0x1540 [ 1448.016398][T21249] ? hci_event_packet+0x4cb/0x1270 [ 1448.021628][T21249] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 1448.027945][T21249] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1448.033591][T21249] ? skb_pull_data+0xfb/0x200 [ 1448.038375][T21249] hci_le_conn_complete_evt+0x187/0x440 [ 1448.043951][T21249] ? hci_remote_host_features_evt+0x150/0x150 [ 1448.050036][T21249] hci_event_packet+0x7ba/0x1270 [ 1448.055001][T21249] ? bis_list+0x290/0x290 [ 1448.059348][T21249] ? lockdep_hardirqs_on+0x98/0x150 [ 1448.064563][T21249] ? hci_send_to_monitor+0xd7/0x4f0 [ 1448.069782][T21249] hci_rx_work+0x43a/0xd60 [ 1448.074229][T21249] ? process_scheduled_works+0x96f/0x15d0 [ 1448.079964][T21249] process_scheduled_works+0xa5d/0x15d0 [ 1448.085551][T21249] ? worker_attach_to_pool+0x380/0x380 [ 1448.091118][T21249] ? assign_work+0x3d2/0x5d0 [ 1448.095729][T21249] worker_thread+0xa55/0xfc0 [ 1448.100336][T21249] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1448.106246][T21249] ? _raw_spin_unlock+0x40/0x40 [ 1448.111285][T21249] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1448.117233][T21249] kthread+0x2fa/0x390 [ 1448.121325][T21249] ? pr_cont_work+0x560/0x560 [ 1448.126015][T21249] ? kthread_blkcg+0xd0/0xd0 [ 1448.130616][T21249] ret_from_fork+0x48/0x80 [ 1448.135047][T21249] ? kthread_blkcg+0xd0/0xd0 [ 1448.139648][T21249] ret_from_fork_asm+0x11/0x20 [ 1448.144443][T21249] [ 1448.154654][T21249] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1448.168860][T21249] Bluetooth: hci4: failed to register connection device [ 1448.193030][T23163] syzkaller0: entered promiscuous mode [ 1448.204058][T23163] syzkaller0: entered allmulticast mode [ 1448.759764][T23168] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5210'. [ 1449.588642][T23190] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5216'. [ 1449.620848][T23191] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5217'. [ 1449.641423][T23191] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5217'. [ 1449.651059][T23191] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1449.815752][T23196] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1449.849306][T23190] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5216'. [ 1449.858776][T23190] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5216'. [ 1450.663494][T23198] netlink: 'syz.7.5218': attribute type 1 has an invalid length. [ 1450.731589][T23198] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1450.860641][T23202] bond2: (slave dummy0): Enslaving as a backup interface with an up link [ 1450.912759][T23200] syzkaller0: entered promiscuous mode [ 1450.925828][T23200] syzkaller0: entered allmulticast mode [ 1450.958430][ T6930] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1450.959998][T21249] Bluetooth: hci2: command 0x0406 tx timeout [ 1451.151068][T22815] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1451.194177][T23207] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5220'. [ 1451.783413][T23232] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5227'. [ 1451.957242][T21249] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 1451.976020][T23238] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1452.009973][T23238] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5227'. [ 1452.019758][T23238] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5227'. [ 1452.031661][T23241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5228'. [ 1452.112651][T23241] nbd: socks must be embedded in a SOCK_ITEM attr [ 1452.314231][T23246] syzkaller0: entered promiscuous mode [ 1452.320491][T23246] syzkaller0: entered allmulticast mode [ 1452.723097][T23254] syzkaller0: entered promiscuous mode [ 1452.737025][T23254] syzkaller0: entered allmulticast mode [ 1453.329901][T23269] syzkaller0: entered promiscuous mode [ 1453.335627][T23269] syzkaller0: entered allmulticast mode [ 1453.584270][T23283] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1453.837828][T23291] syzkaller0: entered promiscuous mode [ 1453.843701][T23291] syzkaller0: entered allmulticast mode [ 1454.103916][T23293] netlink: 'syz.2.5248': attribute type 1 has an invalid length. [ 1454.161713][T23293] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1454.739751][T23306] syzkaller0: entered promiscuous mode [ 1454.750735][T23306] syzkaller0: entered allmulticast mode [ 1455.133859][T23318] __nla_validate_parse: 3 callbacks suppressed [ 1455.133878][T23318] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5258'. [ 1455.239691][T23323] netlink: 'syz.2.5259': attribute type 1 has an invalid length. [ 1455.360574][ T8] IPVS: starting estimator thread 0... [ 1455.361612][T23327] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1455.423615][T23323] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1455.446720][T23334] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5258'. [ 1455.479999][T23334] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5258'. [ 1455.497020][T23334] gretap1: entered promiscuous mode [ 1455.524860][T23333] IPVS: using max 17 ests per chain, 40800 per kthread [ 1456.067840][ T5776] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1456.135395][T23350] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5265'. [ 1456.192872][T23352] syzkaller0: entered promiscuous mode [ 1456.215059][T23352] syzkaller0: entered allmulticast mode [ 1456.289860][T23350] nbd: socks must be embedded in a SOCK_ITEM attr [ 1456.502444][T23355] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5266'. [ 1456.542145][T22682] udevd[22682]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1456.888554][T23367] netlink: 'syz.6.5270': attribute type 1 has an invalid length. [ 1457.031450][T23367] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1457.742436][T23390] syzkaller0: entered promiscuous mode [ 1457.748985][T23390] syzkaller0: entered allmulticast mode [ 1458.018383][T23396] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5278'. [ 1458.124558][T23398] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5279'. [ 1458.273323][T23398] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1458.303959][T23398] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1458.340158][T23398] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1458.368975][T23398] bond0 (unregistering): Released all slaves [ 1459.428755][T23425] syzkaller0: entered promiscuous mode [ 1459.447571][T23425] syzkaller0: entered allmulticast mode [ 1459.558959][T23429] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5288'. [ 1459.957859][T23447] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5293'. [ 1460.055938][T23447] nbd: socks must be embedded in a SOCK_ITEM attr [ 1460.478038][T22711] udevd[22711]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1460.671946][T23463] syzkaller0: entered promiscuous mode [ 1460.680423][T23465] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5302'. [ 1460.691084][T23463] syzkaller0: entered allmulticast mode [ 1461.641682][T23483] syzkaller0: entered promiscuous mode [ 1461.647581][T23483] syzkaller0: entered allmulticast mode [ 1462.558366][ T5815] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1462.753688][ T5815] usb 8-1: Using ep0 maxpacket: 16 [ 1462.776325][ T5815] usb 8-1: config 0 has an invalid descriptor of length 41, skipping remainder of the config [ 1462.801234][ T5815] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1462.840578][ T5815] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1462.857791][ T5815] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1462.891655][ T5815] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1462.937161][ T5815] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1462.952618][ T5815] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1462.987813][ T5815] usb 8-1: Manufacturer: syz [ 1462.999386][ T5815] usb 8-1: config 0 descriptor?? [ 1463.404946][ T5815] rc_core: IR keymap rc-hauppauge not found [ 1463.412233][ T5815] Registered IR keymap rc-empty [ 1463.424971][ T5815] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1463.494826][ T5815] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1463.529012][ T5815] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 1463.570064][ T5815] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input64 [ 1463.623966][ T5815] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1463.665377][ T5815] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1463.704928][ T5815] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1463.765040][ T5815] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1463.808106][ T5815] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1463.855426][ T5815] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1463.895075][ T5815] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1463.925869][ T5815] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1463.980890][ T5815] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1464.021114][ T5815] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1464.091554][ T5815] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1464.101799][ T5815] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1464.133119][ T5815] usb 8-1: USB disconnect, device number 17 [ 1467.093065][T23509] bond2: (slave dummy0): Removing an active aggregator [ 1467.103372][T23509] bond2: (slave dummy0): Releasing backup interface [ 1467.336410][T23531] netlink: 64 bytes leftover after parsing attributes in process `syz.7.5319'. [ 1467.437382][T23531] [ 1467.439773][T23531] ====================================================== [ 1467.446819][T23531] WARNING: possible circular locking dependency detected [ 1467.453861][T23531] syzkaller #0 Not tainted [ 1467.458306][T23531] ------------------------------------------------------ [ 1467.465346][T23531] syz.7.5319/23531 is trying to acquire lock: [ 1467.471436][T23531] ffffffff8e51ef18 (nr_node_list_lock){+...}-{2:2}, at: nr_rt_device_down+0xa9/0x720 [ 1467.481083][T23531] [ 1467.481083][T23531] but task is already holding lock: [ 1467.488471][T23531] ffffffff8e51eeb8 (nr_neigh_list_lock){+...}-{2:2}, at: nr_rt_device_down+0x28/0x720 [ 1467.498101][T23531] [ 1467.498101][T23531] which lock already depends on the new lock. [ 1467.498101][T23531] [ 1467.508530][T23531] [ 1467.508530][T23531] the existing dependency chain (in reverse order) is: [ 1467.517582][T23531] [ 1467.517582][T23531] -> #2 (nr_neigh_list_lock){+...}-{2:2}: [ 1467.525639][T23531] _raw_spin_lock_bh+0x36/0x50 [ 1467.530977][T23531] nr_rt_ioctl+0x3e2/0xde0 [ 1467.535951][T23531] sock_do_ioctl+0xfc/0x310 [ 1467.541018][T23531] sock_ioctl+0x5ba/0x7e0 [ 1467.545903][T23531] __se_sys_ioctl+0xfd/0x170 [ 1467.551058][T23531] do_syscall_64+0x55/0xa0 [ 1467.556047][T23531] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1467.562513][T23531] [ 1467.562513][T23531] -> #1 (&nr_node->node_lock){+...}-{2:2}: [ 1467.570557][T23531] _raw_spin_lock_bh+0x36/0x50 [ 1467.576081][T23531] nr_rt_ioctl+0x1e5/0xde0 [ 1467.581064][T23531] sock_do_ioctl+0xfc/0x310 [ 1467.586131][T23531] sock_ioctl+0x5ba/0x7e0 [ 1467.591015][T23531] __se_sys_ioctl+0xfd/0x170 [ 1467.596159][T23531] do_syscall_64+0x55/0xa0 [ 1467.601137][T23531] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1467.607592][T23531] [ 1467.607592][T23531] -> #0 (nr_node_list_lock){+...}-{2:2}: [ 1467.615448][T23531] __lock_acquire+0x2df1/0x7d40 [ 1467.620862][T23531] lock_acquire+0x19e/0x420 [ 1467.625926][T23531] _raw_spin_lock_bh+0x36/0x50 [ 1467.631247][T23531] nr_rt_device_down+0xa9/0x720 [ 1467.636651][T23531] nr_device_event+0x137/0x150 [ 1467.641981][T23531] notifier_call_chain+0x197/0x380 [ 1467.647656][T23531] __dev_notify_flags+0x16e/0x310 [ 1467.653247][T23531] dev_change_flags+0xe8/0x1a0 [ 1467.658579][T23531] dev_ioctl+0x7b4/0x1140 [ 1467.663481][T23531] sock_do_ioctl+0x239/0x310 [ 1467.668621][T23531] sock_ioctl+0x5ba/0x7e0 [ 1467.673582][T23531] __se_sys_ioctl+0xfd/0x170 [ 1467.678720][T23531] do_syscall_64+0x55/0xa0 [ 1467.683694][T23531] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1467.690148][T23531] [ 1467.690148][T23531] other info that might help us debug this: [ 1467.690148][T23531] [ 1467.700504][T23531] Chain exists of: [ 1467.700504][T23531] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 1467.700504][T23531] [ 1467.714465][T23531] Possible unsafe locking scenario: [ 1467.714465][T23531] [ 1467.721950][T23531] CPU0 CPU1 [ 1467.727344][T23531] ---- ---- [ 1467.732738][T23531] lock(nr_neigh_list_lock); [ 1467.737452][T23531] lock(&nr_node->node_lock); [ 1467.744769][T23531] lock(nr_neigh_list_lock); [ 1467.752004][T23531] lock(nr_node_list_lock); [ 1467.756624][T23531] [ 1467.756624][T23531] *** DEADLOCK *** [ 1467.756624][T23531] [ 1467.764794][T23531] 2 locks held by syz.7.5319/23531: [ 1467.770043][T23531] #0: ffffffff8e3c1988 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x7a4/0x1140 [ 1467.778904][T23531] #1: ffffffff8e51eeb8 (nr_neigh_list_lock){+...}-{2:2}, at: nr_rt_device_down+0x28/0x720 [ 1467.788983][T23531] [ 1467.788983][T23531] stack backtrace: [ 1467.794909][T23531] CPU: 0 PID: 23531 Comm: syz.7.5319 Not tainted syzkaller #0 [ 1467.802486][T23531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1467.812573][T23531] Call Trace: [ 1467.815881][T23531] [ 1467.818837][T23531] dump_stack_lvl+0x18c/0x250 [ 1467.823563][T23531] ? load_image+0x400/0x400 [ 1467.828193][T23531] ? show_regs_print_info+0x20/0x20 [ 1467.833444][T23531] ? print_circular_bug+0x12b/0x1a0 [ 1467.838684][T23531] check_noncircular+0x2fc/0x400 [ 1467.843662][T23531] ? print_deadlock_bug+0x5d0/0x5d0 [ 1467.848901][T23531] ? lockdep_lock+0xf5/0x230 [ 1467.853535][T23531] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1467.859469][T23531] ? _find_first_zero_bit+0xd3/0x100 [ 1467.864790][T23531] __lock_acquire+0x2df1/0x7d40 [ 1467.869695][T23531] ? verify_lock_unused+0x140/0x140 [ 1467.874925][T23531] ? verify_lock_unused+0x140/0x140 [ 1467.880156][T23531] ? verify_lock_unused+0x140/0x140 [ 1467.885382][T23531] ? rt6_disable_ip+0x745/0x7b0 [ 1467.890272][T23531] lock_acquire+0x19e/0x420 [ 1467.894808][T23531] ? nr_rt_device_down+0xa9/0x720 [ 1467.900040][T23531] ? read_lock_is_recursive+0x20/0x20 [ 1467.905552][T23531] ? do_raw_spin_lock+0x11f/0x2c0 [ 1467.910628][T23531] ? __rwlock_init+0x150/0x150 [ 1467.915442][T23531] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1467.920855][T23531] ? nr_rt_device_down+0xa9/0x720 [ 1467.925916][T23531] _raw_spin_lock_bh+0x36/0x50 [ 1467.930823][T23531] ? nr_rt_device_down+0xa9/0x720 [ 1467.935894][T23531] nr_rt_device_down+0xa9/0x720 [ 1467.940790][T23531] ? do_raw_spin_unlock+0x121/0x230 [ 1467.946042][T23531] nr_device_event+0x137/0x150 [ 1467.950856][T23531] notifier_call_chain+0x197/0x380 [ 1467.956017][T23531] __dev_notify_flags+0x16e/0x310 [ 1467.961319][T23531] ? __dev_change_flags+0x6a0/0x6a0 [ 1467.966568][T23531] ? __dev_change_flags+0x4d4/0x6a0 [ 1467.971824][T23531] ? dev_get_flags+0x1c0/0x1c0 [ 1467.976657][T23531] ? mutex_lock_nested+0x20/0x20 [ 1467.981641][T23531] dev_change_flags+0xe8/0x1a0 [ 1467.986450][T23531] dev_ioctl+0x7b4/0x1140 [ 1467.990817][T23531] sock_do_ioctl+0x239/0x310 [ 1467.995449][T23531] ? sock_show_fdinfo+0xb0/0xb0 [ 1468.000338][T23531] sock_ioctl+0x5ba/0x7e0 [ 1468.004701][T23531] ? sock_poll+0x3e0/0x3e0 [ 1468.009150][T23531] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1468.014116][T23531] ? security_file_ioctl+0x80/0xa0 [ 1468.019270][T23531] ? sock_poll+0x3e0/0x3e0 [ 1468.023809][T23531] __se_sys_ioctl+0xfd/0x170 [ 1468.028549][T23531] do_syscall_64+0x55/0xa0 [ 1468.032997][T23531] ? clear_bhb_loop+0x40/0x90 [ 1468.037707][T23531] ? clear_bhb_loop+0x40/0x90 [ 1468.042412][T23531] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1468.048422][T23531] RIP: 0033:0x7f06b4d9c799 [ 1468.052877][T23531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1468.072607][T23531] RSP: 002b:00007f06b5c30028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1468.081069][T23531] RAX: ffffffffffffffda RBX: 00007f06b5016090 RCX: 00007f06b4d9c799 [ 1468.089078][T23531] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 000000000000000a [ 1468.097165][T23531] RBP: 00007f06b4e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1468.105167][T23531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1468.113162][T23531] R13: 00007f06b5016128 R14: 00007f06b5016090 R15: 00007fff0163afb8 [ 1468.121431][T23531] [ 1468.210371][T23531] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1468.223928][T23531] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5319'. [ 1468.244752][T23531] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5319'.