last executing test programs: 19.562434151s ago: executing program 4 (id=3143): syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x20, 0xfffffffffffffffe, 0x0, 0x800, 0xfffffffffffffffe, 0x2}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5}, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) 18.366229959s ago: executing program 4 (id=3154): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52", 0xc) r1 = accept4$alg(r0, 0x0, 0x0, 0x80000) io_setup(0x42, &(0x7f0000000100)=0x0) sendmmsg$alg(r1, &(0x7f0000004400)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x810}], 0x1, 0x10) io_submit(r2, 0x1, &(0x7f0000000580)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000000)='e', 0x1, 0x0, 0x0, 0x2}]) 18.051686272s ago: executing program 4 (id=3157): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f00000001c0)=0x5, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) recvmmsg(r0, 0x0, 0x0, 0x45833af92e4b39ff, 0x0) 3.727810213s ago: executing program 3 (id=3239): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) recvmmsg(r0, &(0x7f0000000ec0)=[{{&(0x7f0000000580)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000600)=""/226, 0xe2}, {&(0x7f0000000700)=""/246, 0xf6}, {&(0x7f0000000940)=""/191, 0xbf}], 0x3}, 0x4}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x20, 0x0) 3.049862364s ago: executing program 4 (id=3162): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000130001000400"/20, @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000000c0)) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 2.771695422s ago: executing program 0 (id=3245): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x6c, 0x2c, 0xd27, 0x8070bd2d, 0x25dfdc20, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x38, 0x2, [@TCA_MATCHALL_ACT={0x34, 0x2, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x4044000) 2.737519598s ago: executing program 4 (id=3246): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc}) r3 = syz_open_dev$sg(&(0x7f00000002c0), 0x6, 0x480000) fcntl$lock(r3, 0x22, &(0x7f0000000340)={0x2, 0x4, 0x9, 0x92, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x78, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x78}}, 0x0) syz_emit_ethernet(0x10b, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r4, &(0x7f00000031c0)={0x0, 0x0, 0x0}, 0x2000) recvmmsg(r4, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000007c0)=""/188, 0xbc}, {0x0}, {&(0x7f0000001840)=""/74, 0x4a}, {&(0x7f0000000a00)=""/73, 0x49}], 0x4}, 0x7}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001700)=@ll, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000001a00)=""/131, 0x83}], 0x1, &(0x7f0000001b00)=""/249, 0xf9}, 0x4}], 0x4, 0x12040, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_REVISION={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 2.728276611s ago: executing program 3 (id=3247): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20040000, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x1}, 0x1c) 2.549485489s ago: executing program 3 (id=3250): syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x20, 0xfffffffffffffffe, 0x0, 0x800, 0xfffffffffffffffe, 0x2}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5}, 0x0, 0x0) r1 = dup(r0) write$UHID_INPUT(r1, 0x0, 0x0) 2.392534092s ago: executing program 0 (id=3251): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$fb0(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$adsp1(0xffffff9c, &(0x7f0000000040), 0x40000, 0x0) mmap$fb(&(0x7f00005b4000/0x2000)=nil, 0x2000, 0x2000000, 0x8010, r0, 0x96000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = socket(0x840000000002, 0x3, 0x100) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) sendmmsg$inet(r1, &(0x7f0000000900)=[{{&(0x7f0000000100)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0c000000000000000700000010000000000000000200000007000000180000000000000008000000", @ANYBLOB='B0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="f100000000000000000012000000080003", @ANYRES32=r3], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x24000000) 1.845738219s ago: executing program 1 (id=3254): close(0x3) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket(0x2b, 0x1, 0x1) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x5) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 1.71070722s ago: executing program 2 (id=3255): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x8000, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00), 0x0, 0xf00) 1.615963202s ago: executing program 1 (id=3256): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x101, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xffffffffffffff93, 0x2, {{0x4, 0x8001, 0x1000, 0xa5f5, 0x4}, 0xfa, 0x0, 0x1, 0x1, 0x6, 0xe, 0xf, 0x6, 0x7, 0x3, {0x8001, 0x4, 0x800, 0x2, 0x8, 0xc85}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x405c071}, 0x400c840) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {0x0, 0xc}, {0x8}}}, 0x24}}, 0x40004) 1.487714467s ago: executing program 3 (id=3257): munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x84}}, 0x0) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0xa0223}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x58, r0, 0xe10, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xc}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xff}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x8a}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x7}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x24040010}, 0x20004040) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0xfffffffffffffd57, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x60}}, 0x0) r3 = memfd_create(&(0x7f0000000480)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6#\r\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x17?$^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19THP\xf4O\x00\x00\x00\x00\x00\x00\x00\t\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0\xb04\xb7T5\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\x03\x8a\xc40\xbe\xe3\x93A\x15\xec\xdb\xaa\t9\x11\x82\xf6_\xc2)\x02\xb4C\x15\xfcp\x11\xdai\f{\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\x82t\x96\xf8\xb1\xd2\x168;0\xc9\x7f\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6^r\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xb3%QF)\xf4f\x12[\xf9w\xd2\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x00\x00\x00\x00\x00\x00\x00\xc5[v\x81\x82\xbe\xa9@I\x88\x1c\xbb\xf4\xb0d\xd2\x15\xe9\xea>{ig\x93[\xd3\xc2^\xf6\x01\xe8\xf5\xc8\x91\x8b\x1a\xf7\x8a\x19\xce\xc4\xde\xc6J\xe4\v\x1c\xc3\xccx\xd8}L\x92\xdes\xc1\x1b\x00@2T:(=\xfe72\xba-\x82\xb6\x995\x9e\x15c\x870$\f\x17\x1aU\x98\xfd\xdd\xcfL\xdf\xb5;\xe0\x14\xda\x17I\xbaX\xc8\x05w\xcf\x0e\x835p\x8f\xde\x15mE\xfe\x01\x17\xc1x\xc3\x19\xa7\x9d\x95\xb9%\xa9\xbbSf\nB\x80\xedj\xee\xaf\xa9L\x19\x96\'\xb5\x11\r\x02\x89\xe5\xc8\xc29Aa\xff0\x87\xa7G4\x83N(!\x81BsI\xfdf\x8c\xce%V\a\xc7\xb4\xca\x8aT\xa7\xabJ8`\x1fU\xb6\xe8b\x8f)\xa6x\xed\x04\xe5cW\x145\x14\x14\xda\xfb\xdb\x12\f\x9a7/\xf0\t]\xdc\x17\xee}*<\xd6O\xe5Yn`\xb8\xadL\x06\xf6\xde2\f\xe7\xbd,\x9a\xf6\b\xf3\xff\x9aD\x8d\xdezS\xe4\xfa]x\xb8\xddE\xb2\xfb\x01)\xdd\x9bJ\xbc_ZTaN\x8d\xac$\a\xcc\x7fU\xa0\xca\x10_T\xfd\x867il9\x82+D\x10\x00FOjq$\xfc\x88(\x00K\x11\x89\x8aL/\xe1\xa9c\xdd\x88\xcc\x0e\b4\xfd\xf8h3\xa9\x02\xd3\xf6\x9b\xcb\xf8\x03A\xb4\x86\xf3\xcf\xda\x86\x1c\x7fj\xcc\x15H\x88m2\xa4\xd1\xe9\xba\xc8C\xf2T(K\xf9\xdd\xca\x01a\x0477\xf7\x14CK\xfd\xd5/IE\f\xf2\x8fim\x90X\xc4\xce\xc8p\x1c\a\xd7\xb8\x11b=\xf2F\xbf\x97\xf0I\xf1\xb5\x9f\xd1Fcm\x90\xaf%\x01Q\xf0v\xef\x833_', 0x6) fallocate(r3, 0x3, 0x0, 0x1000000) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)={[&(0x7f00000002c0)='\x00']}, &(0x7f0000000500)={[&(0x7f0000000380)='cake\x00', &(0x7f00000003c0)='+\x00', &(0x7f0000000400)='/dev/input/event#\x00', &(0x7f0000000440)='\x7f[]\x00', &(0x7f0000000480)='/dev/net/tun\x00', &(0x7f00000004c0)='\x9d]*[\x00']}) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000540)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x301}, {0xfffffffd, 0x8c3ff}]}}) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) eventfd(0x800) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x88, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0xb, 0xffe0}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x3f, 0x6, 0x2}, 0x1}}]}, {0xfffffffffffffd70}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.464031592s ago: executing program 2 (id=3258): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000013c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="98010000", @ANYRES16=r1, @ANYRES32=r2, @ANYBLOB="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"], 0x198}, 0x1, 0x0, 0x0, 0x8c4}, 0x894) 1.155903834s ago: executing program 2 (id=3259): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa8201, 0x0) write(r0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x8000) write$dsp(r0, &(0x7f0000002200)="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", 0xc00) 1.106306499s ago: executing program 1 (id=3260): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20040000, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x1}, 0x1c) 880.128098ms ago: executing program 1 (id=3261): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x6c, 0x2c, 0xd27, 0x8070bd2d, 0x25dfdc20, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x38, 0x2, [@TCA_MATCHALL_ACT={0x34, 0x2, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x4044000) 735.448329ms ago: executing program 0 (id=3262): eventfd2(0xe5c, 0x80000) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x1, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000009c0)=ANY=[@ANYBLOB="12e01b3989dd", @ANYRES32], 0x1000f) 714.335783ms ago: executing program 4 (id=3263): openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_emit_vhci(0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000140)=0x7fc, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0xff4c) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0xf, @empty, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000440)={0xa, 0x4e20, 0x2, @empty, 0x6}, 0x1c, 0x0}}], 0x1, 0x20080058) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r3, 0xffffffffffffffff, 0x0) 702.018576ms ago: executing program 2 (id=3264): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f00000001c0)=0x5, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) recvmmsg(r0, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}, 0xff}], 0x1, 0x45833af92e4b39ff, 0x0) 578.073138ms ago: executing program 1 (id=3265): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="f100000000000000000012000000080003", @ANYRES32=r3], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x24000000) 510.838633ms ago: executing program 0 (id=3266): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x1, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000009c0)=ANY=[@ANYBLOB="12e01b3989dd", @ANYRES32=r0], 0x1000f) 422.012728ms ago: executing program 1 (id=3267): syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x20, 0xfffffffffffffffe, 0x0, 0x800, 0xfffffffffffffffe, 0x2}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5}, 0x0, 0x0) r1 = dup(r0) write$UHID_INPUT(r1, 0x0, 0x0) 316.470065ms ago: executing program 0 (id=3268): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x8000, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00), 0x0, 0xf00) 281.774337ms ago: executing program 3 (id=3269): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000000000500000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4d94f204e34ff65c26e278ef5b915395b19284a1a4bc72fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd086004c4a56c6cce6e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f7477137f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736c819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480efd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047acd083d3cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e430a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed1823cb7dde8212a8531bd9691dd4cc6a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b051f47db7aa110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c0000000000000000000a000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3938e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d8549f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c3e1f5a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea875583e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd1a08ce873e07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba46cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a1cc4df1112105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e9300b0144fe040cf5fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f262019586eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5ccb9f10f615c87c441dc50a244bc138a1cae9868c3079bafe69769000000000000000000e99b63029d219cd3545a8426b56554a9f265d3557eefb3602894507c256cb8ee9ebadfecb6afeb84ba757bfa8d00a5af0dd6aa1e8144ef8ef04410d52204c335408941b8eccc5c734cc6a05247142ed647f89bcb5c043acfb382b9cc918bc3cdc368983157851cdf678800aa7eb2a6cbc12c7ae23bc88b8f10223ab2a093429f3f6965bc5af0114cf6f246e891e20ecaad7059866506c3000000000c3230e901e885b7a4a36bdfdb5ce7a2e5807a0f4c1d461d1243fccf51b875b49490cd7d044e7a1e1a4c013fae1f070a8a37ab90da2efc6c875b3aab34b75a252072691fc97bef0fed8ee597ab83bb53f89c36bc2ee3ad54904542f66dc94132df75fc9944882d6f2e13b7057e0000000000000000000000000000000000001b726c0ccd24000000000000cfd2f4d005578b9ed06e1c41ef3b411066739de953d39b968caaca1507928d68c8f052"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442fd3fe8000000000000000000000000000aaff020000000000000000000000000001042022eb"], 0xfdef) 83.973835ms ago: executing program 0 (id=3270): close(0x3) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket(0x2b, 0x1, 0x1) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x5) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 20.64193ms ago: executing program 2 (id=3271): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20040000, 0x0, 0x0) 0s ago: executing program 3 (id=3272): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$fb0(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$adsp1(0xffffff9c, &(0x7f0000000040), 0x40000, 0x0) mmap$fb(&(0x7f00005b4000/0x2000)=nil, 0x2000, 0x2000000, 0x8010, r0, 0x96000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = socket(0x840000000002, 0x3, 0x100) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) sendmmsg$inet(r1, &(0x7f0000000900)=[{{&(0x7f0000000100)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0c000000000000000700000010000000000000000200000007000000180000000000000008000000", @ANYBLOB='B rejected, failed to enable media [ 920.313512][T16600] gretap0: entered promiscuous mode [ 920.343710][T16600] gretap0: left promiscuous mode [ 920.455786][T16607] netlink: 'syz.0.2747': attribute type 21 has an invalid length. [ 920.476093][T16607] netlink: 'syz.0.2747': attribute type 1 has an invalid length. [ 920.484376][T16607] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2747'. [ 920.671040][ T5747] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 920.850127][ T5747] usb 2-1: Using ep0 maxpacket: 8 [ 920.879409][ T5747] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 920.924471][ T5747] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 920.957872][ T5747] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 920.984392][T16623] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2756'. [ 920.995546][ T5747] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 921.008854][ T5747] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 921.036801][ T5747] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 921.057810][ T5747] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.351451][ T5747] usb 2-1: GET_CAPABILITIES returned 0 [ 921.361081][ T5747] usbtmc 2-1:16.0: can't read capabilities [ 921.611692][ T24] usb 2-1: USB disconnect, device number 43 [ 922.031887][T16647] netlink: 'syz.0.2764': attribute type 21 has an invalid length. [ 922.050156][T16647] netlink: 'syz.0.2764': attribute type 1 has an invalid length. [ 922.064301][T16647] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2764'. [ 922.261746][T16653] syzkaller0: entered promiscuous mode [ 922.274251][T16653] syzkaller0: entered allmulticast mode [ 922.324165][T16658] syzkaller0: entered promiscuous mode [ 922.340786][T16658] syzkaller0: entered allmulticast mode [ 922.536078][T16663] binder: 16662:16663 ioctl c0306201 0 returned -14 [ 924.368243][T16715] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2795'. [ 924.448395][T16718] netlink: 'syz.4.2796': attribute type 21 has an invalid length. [ 924.480111][T16718] netlink: 'syz.4.2796': attribute type 1 has an invalid length. [ 924.491473][T16718] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2796'. [ 924.518221][T16723] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2797'. [ 925.074612][T16740] syzkaller0: entered promiscuous mode [ 925.083850][T16743] netlink: 'syz.0.2807': attribute type 1 has an invalid length. [ 925.093796][T16740] syzkaller0: entered allmulticast mode [ 925.144250][T16743] bond1: entered promiscuous mode [ 925.152435][T16743] 8021q: adding VLAN 0 to HW filter on device bond1 [ 925.286179][T16751] netlink: 'syz.2.2809': attribute type 1 has an invalid length. [ 925.473443][T16751] 8021q: adding VLAN 0 to HW filter on device bond1 [ 925.514321][T16752] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 925.525704][T16002] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.546218][T16002] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.592805][T16002] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.644660][T16002] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.349827][ T5695] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 926.361735][T16788] netlink: 'syz.1.2823': attribute type 21 has an invalid length. [ 926.370367][T16788] netlink: 'syz.1.2823': attribute type 1 has an invalid length. [ 926.378410][T16788] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2823'. [ 926.499929][ T5695] usb 1-1: Using ep0 maxpacket: 16 [ 926.521503][ T5695] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 926.539845][ T5695] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 926.559778][ T5695] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 926.579792][ T5695] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 926.599816][ T5695] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 926.614762][ T5695] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 926.624229][ T5695] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 926.632841][ T5695] usb 1-1: Manufacturer: syz [ 926.640971][ T5695] usb 1-1: config 0 descriptor?? [ 927.009781][ T5695] rc_core: IR keymap rc-hauppauge not found [ 927.021879][ T5695] Registered IR keymap rc-empty [ 927.037919][ T5695] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 927.086314][T16781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 927.096528][ T5695] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 927.134448][ T5695] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 927.155466][T16781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 927.203463][ T5695] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input120 [ 927.211394][T16781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 927.276394][ T5695] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 927.283898][T16781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 927.341279][T16781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 927.349958][ T5695] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 927.381538][T16781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 927.410024][ T5695] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 927.449979][ T5695] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 927.500009][ T5695] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 927.550906][ T5695] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 927.609926][ T5695] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 927.633948][T16810] netlink: 'syz.2.2832': attribute type 21 has an invalid length. [ 927.665489][T16810] netlink: 'syz.2.2832': attribute type 1 has an invalid length. [ 927.674155][ T5695] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 927.694788][T16810] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2832'. [ 927.709997][ T5695] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 927.741050][ T5695] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 927.776737][ T5695] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 927.803570][T16816] syzkaller0: entered promiscuous mode [ 927.814341][ T5695] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 927.830828][T16816] syzkaller0: entered allmulticast mode [ 928.047628][T16822] netlink: 'syz.2.2835': attribute type 21 has an invalid length. [ 928.089891][T16822] netlink: 'syz.2.2835': attribute type 1 has an invalid length. [ 928.116141][T16822] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2835'. [ 928.221190][ T5709] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 928.392508][ T5709] usb 5-1: too many configurations: 13, using maximum allowed: 8 [ 928.422356][ T5709] usb 5-1: config 0 has no interfaces? [ 928.451137][ T5709] usb 5-1: config 0 has no interfaces? [ 928.461335][T16829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 928.491508][ T5709] usb 5-1: config 0 has no interfaces? [ 928.503534][T16829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 928.521458][ T5709] usb 5-1: config 0 has no interfaces? [ 928.545935][ T5709] usb 5-1: config 0 has no interfaces? [ 928.566171][ T5709] usb 5-1: config 0 has no interfaces? [ 928.595795][ T5709] usb 5-1: config 0 has no interfaces? [ 928.627508][ T5709] usb 5-1: config 0 has no interfaces? [ 928.658463][ T5709] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 928.705981][ T5709] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 928.736458][ T5709] usb 5-1: Product: syz [ 928.752168][ T5709] usb 5-1: Manufacturer: syz [ 928.771521][ T5709] usb 5-1: SerialNumber: syz [ 928.803587][ T5709] usb 5-1: config 0 descriptor?? [ 929.102744][ T5695] usb 5-1: USB disconnect, device number 44 [ 929.178830][T16838] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2840'. [ 929.770158][ T5695] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 929.850825][ T5709] usb 1-1: USB disconnect, device number 46 [ 929.954213][ T5695] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 930.006410][ T5695] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 930.063349][ T5695] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 930.090184][ T5695] usb 5-1: config 0 interface 0 has no altsetting 0 [ 930.120605][ T5695] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 930.156222][ T5695] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 930.196311][ T5695] usb 5-1: config 0 interface 0 has no altsetting 0 [ 930.222735][ T5695] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 930.247305][ T5695] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 930.273499][ T5695] usb 5-1: config 0 interface 0 has no altsetting 0 [ 930.310863][ T5695] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 930.348577][ T5695] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 930.399599][ T5695] usb 5-1: config 0 interface 0 has no altsetting 0 [ 930.415426][ T5695] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 930.448017][ T5695] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 930.490375][ T5695] usb 5-1: config 0 interface 0 has no altsetting 0 [ 930.518292][ T5695] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 930.552513][ T5695] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 930.592165][ T5695] usb 5-1: config 0 interface 0 has no altsetting 0 [ 930.634224][ T5695] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 930.663633][ T5695] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 930.692532][ T5695] usb 5-1: config 0 interface 0 has no altsetting 0 [ 930.715937][ T5695] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 930.750351][ T5695] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 930.788939][ T5695] usb 5-1: config 0 interface 0 has no altsetting 0 [ 930.812784][ T5695] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 930.847089][ T5695] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 930.879893][ T5695] usb 5-1: Product: syz [ 930.889777][ T5695] usb 5-1: Manufacturer: syz [ 930.915815][ T5695] usb 5-1: SerialNumber: syz [ 930.956918][ T5695] usb 5-1: config 0 descriptor?? [ 931.090858][ T5695] usb 5-1: can't set config #0, error -71 [ 931.133939][ T5695] usb 5-1: USB disconnect, device number 45 [ 931.462827][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.469247][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.620246][ T5695] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 931.722006][T16866] validate_nla: 2 callbacks suppressed [ 931.722027][T16866] netlink: 'syz.3.2852': attribute type 21 has an invalid length. [ 931.761387][T16866] netlink: 'syz.3.2852': attribute type 1 has an invalid length. [ 931.779552][T16866] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2852'. [ 931.792570][ T5695] usb 5-1: config 0 has no interfaces? [ 931.807216][ T5695] usb 5-1: config 0 has no interfaces? [ 931.826979][ T5695] usb 5-1: config 0 has no interfaces? [ 931.844880][ T5695] usb 5-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 931.877431][ T5695] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 931.893135][ T5695] usb 5-1: config 0 descriptor?? [ 932.323383][ T5726] usb 5-1: USB disconnect, device number 46 [ 933.162708][T16896] tipc: Enabled bearer , priority 0 [ 933.247056][T16895] tipc: Disabling bearer [ 933.630666][T16906] netlink: 'syz.2.2869': attribute type 21 has an invalid length. [ 933.646701][T16906] netlink: 'syz.2.2869': attribute type 1 has an invalid length. [ 933.656826][T16909] netlink: 'syz.1.2871': attribute type 1 has an invalid length. [ 933.664836][T16906] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2869'. [ 933.726532][T16909] bond1: entered promiscuous mode [ 933.734612][T16909] 8021q: adding VLAN 0 to HW filter on device bond1 [ 934.153411][T16927] syzkaller0: entered promiscuous mode [ 934.159283][T16927] syzkaller0: entered allmulticast mode [ 934.498597][T16940] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2882'. [ 934.507958][ T5695] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 934.671349][T16946] syzkaller0: entered promiscuous mode [ 934.679135][T16946] syzkaller0: entered allmulticast mode [ 934.685010][ T5695] usb 5-1: config 0 has no interfaces? [ 934.699041][ T5695] usb 5-1: config 0 has no interfaces? [ 934.724685][ T5695] usb 5-1: config 0 has no interfaces? [ 934.730875][ T5695] usb 5-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 934.749769][ T5695] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.773596][ T5695] usb 5-1: config 0 descriptor?? [ 934.852246][T16950] netlink: 'syz.0.2887': attribute type 1 has an invalid length. [ 934.900880][T16950] bond2: entered promiscuous mode [ 934.907841][T16950] 8021q: adding VLAN 0 to HW filter on device bond2 [ 935.133787][ T5709] usb 5-1: USB disconnect, device number 47 [ 935.154922][T16956] tipc: Enabled bearer , priority 0 [ 935.218880][T16955] tipc: Disabling bearer [ 935.508364][T16962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2893'. [ 935.579228][ T5637] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 935.593045][ T5637] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 935.606239][ T5637] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 935.615765][ T5637] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 935.624516][ T5637] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 935.678244][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 935.686487][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 935.697324][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 935.708083][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 935.722064][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 936.117470][T16976] netlink: 380 bytes leftover after parsing attributes in process `syz.1.2896'. [ 936.649846][ T807] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 936.707670][T16970] bridge0: port 1(bridge_slave_0) entered blocking state [ 936.715043][T16970] bridge0: port 1(bridge_slave_0) entered disabled state [ 936.722363][T16970] bridge_slave_0: entered allmulticast mode [ 936.730420][T16970] bridge_slave_0: entered promiscuous mode [ 936.739477][T16970] bridge0: port 2(bridge_slave_1) entered blocking state [ 936.747072][T16970] bridge0: port 2(bridge_slave_1) entered disabled state [ 936.754525][T16970] bridge_slave_1: entered allmulticast mode [ 936.762944][T16970] bridge_slave_1: entered promiscuous mode [ 936.769830][ T5726] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 936.799785][ T807] usb 2-1: Using ep0 maxpacket: 8 [ 936.808808][T16970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 936.823386][ T807] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 936.824667][T16970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 936.852200][ T807] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 936.867793][ T807] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 936.893547][ T807] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 936.898216][T16970] team0: Port device team_slave_0 added [ 936.914624][T16970] team0: Port device team_slave_1 added [ 936.923054][ T5726] usb 3-1: config 0 has no interfaces? [ 936.930250][ T807] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 936.953659][ T5726] usb 3-1: config 0 has no interfaces? [ 936.966083][ T5726] usb 3-1: config 0 has no interfaces? [ 936.975793][ T807] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 936.978697][T16970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 936.985911][ T5726] usb 3-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 937.001597][ T807] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.021523][T16970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 937.022192][ T5726] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.049206][T16970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 937.077693][T16970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 937.090142][T16970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 937.128476][ T5726] usb 3-1: config 0 descriptor?? [ 937.156739][T16970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 937.236008][ T807] usb 2-1: GET_CAPABILITIES returned 0 [ 937.241722][ T807] usbtmc 2-1:16.0: can't read capabilities [ 937.323468][T16970] hsr_slave_0: entered promiscuous mode [ 937.333382][T16970] hsr_slave_1: entered promiscuous mode [ 937.351932][T16970] debugfs: 'hsr0' already exists in 'hsr' [ 937.357818][T16970] Cannot create hsr debugfs directory [ 937.496733][ T807] usb 2-1: USB disconnect, device number 44 [ 937.567937][ T5726] usb 3-1: USB disconnect, device number 38 [ 937.791250][ T5637] Bluetooth: hci5: command tx timeout [ 937.806418][T16970] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 937.909115][T16970] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.005296][T16970] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.297374][T16970] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.395080][T17028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2914'. [ 938.586948][T17030] netlink: 380 bytes leftover after parsing attributes in process `syz.2.2915'. [ 938.817656][T16970] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 938.828820][T17037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2918'. [ 938.837407][T16970] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 938.846033][T16970] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 938.859644][T16970] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 938.868751][T16970] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 938.882072][T16970] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 938.900826][T16970] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 938.927556][T16970] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 939.121495][T16970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 939.194993][T16970] 8021q: adding VLAN 0 to HW filter on device team0 [ 939.219930][ T807] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 939.243999][T15997] bridge0: port 1(bridge_slave_0) entered blocking state [ 939.251280][T15997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 939.324921][ T3096] bridge0: port 2(bridge_slave_1) entered blocking state [ 939.332275][ T3096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 939.379929][ T807] usb 3-1: Using ep0 maxpacket: 32 [ 939.388922][ T807] usb 3-1: unable to get BOS descriptor or descriptor too short [ 939.404157][ T807] usb 3-1: config 14 has an invalid interface number: 228 but max is 0 [ 939.418076][ T807] usb 3-1: config 14 has no interface number 0 [ 939.436188][ T807] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 939.470201][ T807] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 939.501486][ T807] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 939.530972][ T807] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 939.557299][ T807] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 939.590196][ T807] usb 3-1: config 14 interface 228 has no altsetting 0 [ 939.609637][ T807] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 939.629924][ T807] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.641322][ T807] usb 3-1: Product: syz [ 939.650439][ T807] usb 3-1: Manufacturer: syz [ 939.668482][ T807] usb 3-1: SerialNumber: syz [ 939.747837][T16970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 939.868159][ T5637] Bluetooth: hci5: command tx timeout [ 940.054346][T16970] veth0_vlan: entered promiscuous mode [ 940.098751][T16970] veth1_vlan: entered promiscuous mode [ 940.177776][ T807] legousbtower 3-1:14.228: interrupt endpoints not found [ 940.264113][T16970] veth0_macvtap: entered promiscuous mode [ 940.328470][T16970] veth1_macvtap: entered promiscuous mode [ 940.458509][T16970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 940.567743][T16970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 940.672312][T15997] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.716956][T15997] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.774466][T15997] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.812578][T15997] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.093066][T16000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 941.114339][T16000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 941.162088][T16000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 941.171711][T16000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 941.845206][T17075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2928'. [ 941.940494][ T5637] Bluetooth: hci5: command tx timeout [ 942.874412][ T807] usb 3-1: USB disconnect, device number 39 [ 943.602500][T17095] tipc: Enabling of bearer rejected, failed to enable media [ 943.906357][T17100] syzkaller0: entered promiscuous mode [ 943.930331][T17100] syzkaller0: entered allmulticast mode [ 944.009447][T17106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2940'. [ 944.020128][ T5637] Bluetooth: hci5: command tx timeout [ 944.695702][T17126] batadv0: entered promiscuous mode [ 944.713892][T17126] batadv_slave_0: entered promiscuous mode [ 944.730012][T17126] batadv_slave_0: left promiscuous mode [ 944.742483][T17126] batadv0: left promiscuous mode [ 945.362646][T17135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2953'. [ 945.576814][T17139] netlink: 'syz.0.2954': attribute type 21 has an invalid length. [ 945.621606][T17139] netlink: 'syz.0.2954': attribute type 1 has an invalid length. [ 945.650391][T17139] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2954'. [ 945.681713][T17141] syzkaller0: entered promiscuous mode [ 945.700440][T17141] syzkaller0: entered allmulticast mode [ 946.081773][T17147] batadv0: entered promiscuous mode [ 946.114294][T17147] batadv_slave_0: entered promiscuous mode [ 946.150805][T17147] batadv_slave_0: left promiscuous mode [ 946.176595][T17147] batadv0: left promiscuous mode [ 946.278132][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 946.291245][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 946.300842][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 946.314422][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 946.324635][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 946.865488][T17165] netlink: 'syz.1.2963': attribute type 21 has an invalid length. [ 946.986219][T10679] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.148545][T17165] netlink: 'syz.1.2963': attribute type 1 has an invalid length. [ 947.175949][T17165] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2963'. [ 947.433606][T17171] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2964'. [ 947.447075][T17172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2965'. [ 947.477368][T10679] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.746747][T10679] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.076118][T17189] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2970'. [ 948.263251][T10679] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.420107][ T5637] Bluetooth: hci0: command tx timeout [ 948.693634][ T5747] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 948.893256][ T5747] usb 2-1: config 0 has no interfaces? [ 948.920887][ T5747] usb 2-1: config 0 has no interfaces? [ 948.941703][ T5747] usb 2-1: config 0 has no interfaces? [ 948.961190][ T5747] usb 2-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 948.994295][ T5747] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 949.044539][ T5747] usb 2-1: config 0 descriptor?? [ 949.400180][ T5747] usb 2-1: USB disconnect, device number 45 [ 950.500146][ T5637] Bluetooth: hci0: command tx timeout [ 950.966266][T17227] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2977'. [ 951.126602][T10679] bond1 (unregistering): (slave geneve2): Releasing backup interface [ 951.425273][T10679] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 951.494923][T10679] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 951.521058][T10679] bond0 (unregistering): Released all slaves [ 951.591381][T10679] bond1 (unregistering): Released all slaves [ 952.133431][ T5298] 8021q: adding VLAN 0 to HW filter on device eth1 [ 952.163405][T10679] tipc: Left network mode [ 952.169338][T17154] bridge0: port 1(bridge_slave_0) entered blocking state [ 952.191726][T17154] bridge0: port 1(bridge_slave_0) entered disabled state [ 952.212580][T17154] bridge_slave_0: entered allmulticast mode [ 952.234147][T17154] bridge_slave_0: entered promiscuous mode [ 952.283621][T17154] bridge0: port 2(bridge_slave_1) entered blocking state [ 952.303084][T17154] bridge0: port 2(bridge_slave_1) entered disabled state [ 952.319012][T17243] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2981'. [ 952.338746][T17154] bridge_slave_1: entered allmulticast mode [ 952.357055][T17154] bridge_slave_1: entered promiscuous mode [ 952.467800][T17246] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2982'. [ 952.581946][ T5637] Bluetooth: hci0: command tx timeout [ 952.932653][T17154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 953.001531][T17248] batadv0: entered promiscuous mode [ 953.044921][T17248] batadv_slave_0: entered promiscuous mode [ 953.062735][T17255] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2985'. [ 953.069346][T17248] batadv_slave_0: left promiscuous mode [ 953.137273][T17248] batadv0: left promiscuous mode [ 953.311473][T17154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 953.793367][T17154] team0: Port device team_slave_0 added [ 953.833763][T17154] team0: Port device team_slave_1 added [ 954.029004][T17154] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 954.056515][T17154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 954.155207][T17154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 954.232693][T10679] hsr_slave_0: left promiscuous mode [ 954.252902][T10679] hsr_slave_1: left promiscuous mode [ 954.272943][T10679] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 954.279333][T17285] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2993'. [ 954.294242][T10679] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 954.316535][T10679] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 954.333643][T10679] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 954.662084][ T5637] Bluetooth: hci0: command tx timeout [ 955.188440][T10679] team0 (unregistering): Port device team_slave_1 removed [ 955.215923][T10679] team0 (unregistering): Port device team_slave_0 removed [ 955.437039][T17154] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 955.445606][T17154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 955.472340][T17154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 955.542031][T17299] tipc: Enabling of bearer rejected, failed to enable media [ 955.583553][ T5298] 8021q: adding VLAN 0 to HW filter on device eth2 [ 955.801123][T17154] hsr_slave_0: entered promiscuous mode [ 955.812039][T17317] netlink: 'syz.0.2998': attribute type 21 has an invalid length. [ 955.823052][T17154] hsr_slave_1: entered promiscuous mode [ 955.830145][T17062] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 955.838409][T17154] debugfs: 'hsr0' already exists in 'hsr' [ 955.846692][T17154] Cannot create hsr debugfs directory [ 955.856188][T17317] netlink: 'syz.0.2998': attribute type 1 has an invalid length. [ 955.883304][T17317] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2998'. [ 956.165170][T17062] usb 4-1: unable to get BOS descriptor or descriptor too short [ 956.204899][T17062] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 956.218689][T17062] usb 4-1: can't read configurations, error -71 [ 957.611728][T17362] batadv0: entered promiscuous mode [ 957.629354][T17362] batadv_slave_0: entered promiscuous mode [ 957.644779][T17362] batadv_slave_0: left promiscuous mode [ 957.659412][T17362] batadv0: left promiscuous mode [ 957.724111][T17154] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 957.744960][T17154] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 957.763537][T17154] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 957.804755][T17154] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 957.840997][T17154] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 957.873478][T17154] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 957.892742][T17154] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 957.931506][T17154] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 958.393263][T17154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 958.549300][T17154] 8021q: adding VLAN 0 to HW filter on device team0 [ 958.606812][ T3096] bridge0: port 1(bridge_slave_0) entered blocking state [ 958.614089][ T3096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 958.674855][ T3096] bridge0: port 2(bridge_slave_1) entered blocking state [ 958.682111][ T3096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 959.043573][T17154] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 959.318629][T17401] bond1: entered promiscuous mode [ 959.346334][T17401] 8021q: adding VLAN 0 to HW filter on device bond1 [ 959.449550][T17403] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 959.489109][T17403] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 959.518523][T17403] bond1: (slave ipvlan2): Error -95 calling set_mac_address [ 959.719324][T17154] veth0_vlan: entered promiscuous mode [ 959.801930][T17154] veth1_vlan: entered promiscuous mode [ 959.877039][T17409] batadv0: entered promiscuous mode [ 959.905906][T17409] batadv_slave_0: entered promiscuous mode [ 959.922435][T17409] batadv_slave_0: left promiscuous mode [ 959.936724][T17409] batadv0: left promiscuous mode [ 960.198900][T17154] veth0_macvtap: entered promiscuous mode [ 960.253458][T17154] veth1_macvtap: entered promiscuous mode [ 960.393948][T17154] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 960.471983][T17154] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 960.558949][ T3096] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.609426][ T3096] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.681080][ T3096] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.735364][ T3096] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 961.290097][ T3096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 961.339367][ T3096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 961.599851][ T3096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 961.618152][ T3096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 963.095739][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 963.113921][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 963.126346][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 963.142796][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 963.155830][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 964.001182][T17469] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3029'. [ 964.400524][T16004] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.220614][ T5637] Bluetooth: hci3: command tx timeout [ 965.235914][T16004] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.361907][T17489] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3033'. [ 965.428809][T17482] batadv0: entered promiscuous mode [ 965.456881][T17482] batadv_slave_0: entered promiscuous mode [ 965.475495][T17482] batadv_slave_0: left promiscuous mode [ 965.501424][T17482] batadv0: left promiscuous mode [ 965.673601][T16004] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.770818][T17498] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3035'. [ 965.789794][ T5747] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 965.879319][T17500] batadv0: entered promiscuous mode [ 965.900262][T17500] batadv_slave_0: entered promiscuous mode [ 965.914374][T17500] batadv_slave_0: left promiscuous mode [ 965.930881][T17500] batadv0: left promiscuous mode [ 965.957019][ T5747] usb 4-1: Using ep0 maxpacket: 32 [ 965.976873][ T5747] usb 4-1: unable to get BOS descriptor or descriptor too short [ 966.002769][ T5747] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 966.017246][ T5747] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 966.036247][ T5747] usb 4-1: config 14 has no interface number 0 [ 966.045237][ T5747] usb 4-1: config 14 has no interface number 1 [ 966.051840][ T5747] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 966.065465][ T5747] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 966.077989][ T5747] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 966.090635][ T5747] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 966.116073][ T5747] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 966.139588][ T5747] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 966.171886][ T5747] usb 4-1: config 14 interface 57 has no altsetting 0 [ 966.188319][ T5747] usb 4-1: config 14 interface 228 has no altsetting 0 [ 966.203688][ T5747] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 966.235806][ T5747] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.253071][ T5747] usb 4-1: Product: syz [ 966.265200][ T5747] usb 4-1: Manufacturer: syz [ 966.276627][ T5747] usb 4-1: SerialNumber: syz [ 966.378231][T16004] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.775065][ T5747] legousbtower 4-1:14.57: interrupt endpoints not found [ 966.917311][T17517] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3038'. [ 967.106051][T17518] bridge0: port 3(ipvlan2) entered blocking state [ 967.127707][T17518] bridge0: port 3(ipvlan2) entered disabled state [ 967.145465][T17518] ipvlan2: entered allmulticast mode [ 967.159867][T17518] bridge0: entered allmulticast mode [ 967.187714][ T5747] legousbtower 4-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 967.239934][T17518] ipvlan2: left allmulticast mode [ 967.263528][T17518] bridge0: left allmulticast mode [ 967.270718][ T5747] legousbtower 4-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 967.301791][ T5637] Bluetooth: hci3: command tx timeout [ 967.398187][T16004] bridge_slave_1: left allmulticast mode [ 967.428609][T16004] bridge_slave_1: left promiscuous mode [ 967.450407][T16004] bridge0: port 2(bridge_slave_1) entered disabled state [ 967.495983][T16004] bridge_slave_0: left allmulticast mode [ 967.525127][T16004] bridge_slave_0: left promiscuous mode [ 967.549448][T16004] bridge0: port 1(bridge_slave_0) entered disabled state [ 967.937196][T17376] net_ratelimit: 67 callbacks suppressed [ 967.937229][T17376] Set syz1 is full, maxelem 65536 reached [ 968.135077][ T807] usb 4-1: USB disconnect, device number 43 [ 968.198992][ T807] legousbtower 4-1:14.228: LEGO USB Tower #-160 now disconnected [ 968.203001][T17542] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3043'. [ 968.541432][T16004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 968.553480][T16004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 968.567894][T16004] bond0 (unregistering): Released all slaves [ 968.594540][T16004] bond1 (unregistering): Released all slaves [ 968.633397][ T5298] 8021q: adding VLAN 0 to HW filter on device eth1 [ 968.813443][T16004] tipc: Left network mode [ 968.815667][T17458] bridge0: port 1(bridge_slave_0) entered blocking state [ 968.825598][T17458] bridge0: port 1(bridge_slave_0) entered disabled state [ 968.832998][T17458] bridge_slave_0: entered allmulticast mode [ 968.840855][T17458] bridge_slave_0: entered promiscuous mode [ 968.854510][T17458] bridge0: port 2(bridge_slave_1) entered blocking state [ 968.884518][T17458] bridge0: port 2(bridge_slave_1) entered disabled state [ 968.912903][T17458] bridge_slave_1: entered allmulticast mode [ 968.940618][T17458] bridge_slave_1: entered promiscuous mode [ 969.142369][T17458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 969.199984][T17458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 969.382838][ T5637] Bluetooth: hci3: command tx timeout [ 969.397694][T17458] team0: Port device team_slave_0 added [ 969.421407][ T807] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 969.460149][T17458] team0: Port device team_slave_1 added [ 969.602578][ T807] usb 1-1: Using ep0 maxpacket: 32 [ 969.636674][ T807] usb 1-1: unable to get BOS descriptor or descriptor too short [ 969.671200][ T807] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 969.713256][ T807] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 969.731414][T17458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 969.747353][ T807] usb 1-1: config 14 has no interface number 0 [ 969.767986][T17458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 969.802021][ T807] usb 1-1: config 14 has no interface number 1 [ 969.815344][ T807] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 969.843844][ T807] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 969.864591][T17458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 969.897481][ T807] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 969.939853][T17458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 969.957667][ T807] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 969.987984][T17458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 970.026702][ T807] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 970.068390][ T807] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 970.102951][T17458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 970.126507][ T807] usb 1-1: config 14 interface 57 has no altsetting 0 [ 970.171947][ T807] usb 1-1: config 14 interface 228 has no altsetting 0 [ 970.228451][ T807] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 970.283274][ T807] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.318240][ T807] usb 1-1: Product: syz [ 970.353705][ T807] usb 1-1: Manufacturer: syz [ 970.379279][ T807] usb 1-1: SerialNumber: syz [ 970.461142][T16004] hsr_slave_0: left promiscuous mode [ 970.496985][T16004] hsr_slave_1: left promiscuous mode [ 970.534628][T16004] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 970.565487][T16004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 970.607422][T16004] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 970.646113][T16004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 970.784357][T16004] veth1_macvtap: left promiscuous mode [ 970.817434][T16004] veth0_macvtap: left promiscuous mode [ 970.846739][T16004] veth1_vlan: left promiscuous mode [ 970.863659][ T807] legousbtower 1-1:14.57: interrupt endpoints not found [ 970.876567][T16004] veth0_vlan: left promiscuous mode [ 971.264701][ T807] legousbtower 1-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 971.327187][ T807] legousbtower 1-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 971.460088][ T5637] Bluetooth: hci3: command tx timeout [ 971.801443][T16004] team0 (unregistering): Port device team_slave_1 removed [ 971.843553][T16004] team0 (unregistering): Port device team_slave_0 removed [ 972.141342][ T24] usb 1-1: USB disconnect, device number 47 [ 972.186936][ T24] legousbtower 1-1:14.228: LEGO USB Tower #-160 now disconnected [ 972.356788][T17458] hsr_slave_0: entered promiscuous mode [ 972.366922][T17458] hsr_slave_1: entered promiscuous mode [ 972.377339][T17458] debugfs: 'hsr0' already exists in 'hsr' [ 972.384390][T17458] Cannot create hsr debugfs directory [ 972.405087][ T5298] 8021q: adding VLAN 0 to HW filter on device eth2 [ 972.567539][T17594] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3055'. [ 973.017609][T16004] IPVS: stop unused estimator thread 0... [ 973.277620][T17610] netlink: 'syz.0.3060': attribute type 21 has an invalid length. [ 973.309629][T17610] netlink: 'syz.0.3060': attribute type 1 has an invalid length. [ 973.321044][T17610] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3060'. [ 974.737563][T17458] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 974.802544][T17458] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 974.841970][T17458] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 974.899040][T17458] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 974.942443][T17458] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 975.017951][T17458] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 975.058956][T17458] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 975.128928][T17458] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 975.783984][T17458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 975.871841][T17458] 8021q: adding VLAN 0 to HW filter on device team0 [ 975.915136][T15997] bridge0: port 1(bridge_slave_0) entered blocking state [ 975.922423][T15997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 975.991007][T15997] bridge0: port 2(bridge_slave_1) entered blocking state [ 975.998348][T15997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 976.414816][T17458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 976.537064][T17656] netlink: 'syz.4.3068': attribute type 21 has an invalid length. [ 976.572759][T17656] netlink: 'syz.4.3068': attribute type 1 has an invalid length. [ 976.606760][T17656] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3068'. [ 976.641333][T17458] veth0_vlan: entered promiscuous mode [ 976.714406][T17458] veth1_vlan: entered promiscuous mode [ 976.880071][T17458] veth0_macvtap: entered promiscuous mode [ 976.940812][T17458] veth1_macvtap: entered promiscuous mode [ 977.041660][T17458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 977.105254][T17458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 977.162215][T16006] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.194671][T16006] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.247655][T10679] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.282246][T10679] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.598631][T16006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 977.647127][T16006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 977.842408][T10679] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 977.899744][T10679] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 979.352733][T17691] syzkaller0: entered promiscuous mode [ 979.386406][T17691] syzkaller0: entered allmulticast mode [ 980.349465][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 980.361472][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 980.373873][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 980.385760][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 980.394310][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 981.080465][ T5747] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 981.131263][T17723] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3081'. [ 981.242750][ T5747] usb 2-1: config 0 has no interfaces? [ 981.251168][ T5747] usb 2-1: config 0 has no interfaces? [ 981.264355][ T5747] usb 2-1: config 0 has no interfaces? [ 981.284305][ T5747] usb 2-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 981.299865][ T5747] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 981.346051][ T5747] usb 2-1: config 0 descriptor?? [ 981.571776][T17727] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3082'. [ 981.654516][ T5747] usb 2-1: USB disconnect, device number 46 [ 982.529796][ T5637] Bluetooth: hci1: command tx timeout [ 982.872306][T17705] bridge0: port 1(bridge_slave_0) entered blocking state [ 982.895740][T17705] bridge0: port 1(bridge_slave_0) entered disabled state [ 982.911467][T17705] bridge_slave_0: entered allmulticast mode [ 982.950905][T17705] bridge_slave_0: entered promiscuous mode [ 983.021567][T17705] bridge0: port 2(bridge_slave_1) entered blocking state [ 983.059918][T17705] bridge0: port 2(bridge_slave_1) entered disabled state [ 983.071860][T17705] bridge_slave_1: entered allmulticast mode [ 983.098855][T17705] bridge_slave_1: entered promiscuous mode [ 983.160087][T17764] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3089'. [ 983.304334][T17705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 983.378546][T17705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 983.475297][T17770] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3091'. [ 983.686018][T17705] team0: Port device team_slave_0 added [ 983.735574][T17705] team0: Port device team_slave_1 added [ 983.955029][T17705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 983.990916][T17705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 984.089805][T17705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 984.155969][T17705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 984.191089][T17705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 984.293917][T17705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 984.559473][T17789] netlink: 'syz.1.3099': attribute type 21 has an invalid length. [ 984.582360][ T5637] Bluetooth: hci1: command tx timeout [ 984.668409][T17705] hsr_slave_0: entered promiscuous mode [ 984.706388][T17705] hsr_slave_1: entered promiscuous mode [ 984.749384][T17705] debugfs: 'hsr0' already exists in 'hsr' [ 984.789764][T17705] Cannot create hsr debugfs directory [ 984.877432][T17789] netlink: 'syz.1.3099': attribute type 1 has an invalid length. [ 984.917831][T17789] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3099'. [ 984.951555][T17792] syzkaller0: entered promiscuous mode [ 984.970002][T17792] syzkaller0: entered allmulticast mode [ 985.364275][T17626] Set syz1 is full, maxelem 65536 reached [ 985.401961][T17796] netlink: 'syz.0.3100': attribute type 1 has an invalid length. [ 985.554246][T17800] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3101'. [ 985.575306][T17796] bond1: entered promiscuous mode [ 985.581204][T17796] 8021q: adding VLAN 0 to HW filter on device bond1 [ 986.086754][T17808] syzkaller0: entered promiscuous mode [ 986.114494][T17808] syzkaller0: entered allmulticast mode [ 986.330574][T17819] netlink: 'syz.1.3109': attribute type 21 has an invalid length. [ 986.616094][T17705] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 986.645335][T17705] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.661638][ T5637] Bluetooth: hci1: command tx timeout [ 986.746442][T17819] netlink: 'syz.1.3109': attribute type 1 has an invalid length. [ 986.767983][T17828] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3113'. [ 986.802748][T17819] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3109'. [ 987.003764][T17705] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 987.029567][T17705] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.111399][T17830] batman_adv: batadv0: Adding interface: dummy0 [ 987.146888][T17830] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 987.275877][T17830] batman_adv: batadv0: Interface activated: dummy0 [ 987.447681][T17705] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 987.468654][T17705] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.598865][T17846] syzkaller0: entered promiscuous mode [ 987.625380][T17846] syzkaller0: entered allmulticast mode [ 987.813209][T17705] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 987.864526][T17705] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.159344][T17859] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3126'. [ 988.497315][T17867] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3129'. [ 988.740366][ T5637] Bluetooth: hci1: command tx timeout [ 988.817740][T17705] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 988.849533][T17705] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 988.883945][T17705] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 988.927207][T17705] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 988.984317][T17705] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 989.042630][T17705] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 989.097858][T17705] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 989.155784][T17705] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 989.474193][T17894] netlink: 'syz.1.3137': attribute type 21 has an invalid length. [ 990.013520][T17894] netlink: 'syz.1.3137': attribute type 1 has an invalid length. [ 990.071185][T17894] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3137'. [ 990.297927][T17904] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3140'. [ 990.407171][T17705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 990.497737][T17705] 8021q: adding VLAN 0 to HW filter on device team0 [ 990.566329][T16004] bridge0: port 1(bridge_slave_0) entered blocking state [ 990.573536][T16004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 990.627481][T16004] bridge0: port 2(bridge_slave_1) entered blocking state [ 990.634699][T16004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 991.084329][T17705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 991.314333][T17705] veth0_vlan: entered promiscuous mode [ 991.354865][T17705] veth1_vlan: entered promiscuous mode [ 991.438080][T17705] veth0_macvtap: entered promiscuous mode [ 991.492491][T17705] veth1_macvtap: entered promiscuous mode [ 991.561549][T17705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 991.602752][T17705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 991.656742][T15997] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.678040][T15997] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.718262][T15997] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.752542][T15997] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.079868][T16000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 992.119306][T16000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 992.271233][T16000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 992.291420][T16000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 992.902484][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.910312][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.993820][T17955] netlink: 'syz.0.3160': attribute type 21 has an invalid length. [ 993.039581][T17955] netlink: 'syz.0.3160': attribute type 1 has an invalid length. [ 993.087148][T17955] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3160'. [ 993.704043][T17966] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3165'. [ 993.898986][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 993.916624][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 993.925958][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 993.944760][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 993.954523][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 994.190094][T17978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3170'. [ 994.667952][T17990] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3176'. [ 994.897452][T17995] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3178'. [ 995.498039][T18020] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3188'. [ 995.656865][ T5695] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 995.752969][T17974] bridge0: port 1(bridge_slave_0) entered blocking state [ 995.760499][T17974] bridge0: port 1(bridge_slave_0) entered disabled state [ 995.768681][T17974] bridge_slave_0: entered allmulticast mode [ 995.778302][T17974] bridge_slave_0: entered promiscuous mode [ 995.796599][T17974] bridge0: port 2(bridge_slave_1) entered blocking state [ 995.805486][T17974] bridge0: port 2(bridge_slave_1) entered disabled state [ 995.815583][T17974] bridge_slave_1: entered allmulticast mode [ 995.824404][T17974] bridge_slave_1: entered promiscuous mode [ 995.860822][ T5695] usb 2-1: Using ep0 maxpacket: 8 [ 995.883053][ T5695] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 995.924204][ T5695] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 995.952817][ T5695] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 995.973050][ T5695] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 996.020050][ T5637] Bluetooth: hci4: command tx timeout [ 996.038927][ T5695] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 996.066393][T17974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 996.070378][T18033] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3191'. [ 996.092705][ T5695] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 996.125128][T17974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 996.312082][T17974] team0: Port device team_slave_0 added [ 996.361187][T17974] team0: Port device team_slave_1 added [ 996.414614][ T5695] usb 2-1: usb_control_msg returned -32 [ 996.438217][ T5695] usbtmc 2-1:16.0: can't read capabilities [ 996.524801][ T5695] usb 2-1: USB disconnect, device number 47 [ 996.591537][T17974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 996.627770][T17974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 996.723767][T17974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 996.764109][T18037] netlink: 'syz.2.3193': attribute type 21 has an invalid length. [ 996.779044][T17974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 996.806567][T17974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 996.885429][T17974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 996.925649][T18037] netlink: 'syz.2.3193': attribute type 1 has an invalid length. [ 996.946966][T18037] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3193'. [ 997.135598][T17974] hsr_slave_0: entered promiscuous mode [ 997.147359][T17974] hsr_slave_1: entered promiscuous mode [ 997.155722][T17974] debugfs: 'hsr0' already exists in 'hsr' [ 997.161898][T17974] Cannot create hsr debugfs directory [ 997.259249][T18042] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3195'. [ 997.699421][T18052] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3199'. [ 997.793080][T17974] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.101341][ T5637] Bluetooth: hci4: command tx timeout [ 998.149402][T17974] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.308348][T18064] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3204'. [ 998.574679][T18070] netlink: 'syz.3.3207': attribute type 21 has an invalid length. [ 998.916046][T18079] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3209'. [ 1000.185511][ T5637] Bluetooth: hci4: command tx timeout [ 1001.419428][T18070] netlink: 'syz.3.3207': attribute type 1 has an invalid length. [ 1001.427408][T18070] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3207'. [ 1001.729016][T17974] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.972682][T17974] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.260431][ T5637] Bluetooth: hci4: command tx timeout [ 1002.582837][T18104] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3219'. [ 1002.600261][T18105] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3220'. [ 1002.622421][T17974] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1002.703958][T17974] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1002.712510][T17974] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1002.741519][T17974] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1002.769868][T17974] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1002.798104][T17974] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1002.850961][T17974] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1002.865683][T17974] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1003.854722][T18127] netlink: 'syz.0.3229': attribute type 21 has an invalid length. [ 1005.827441][T18127] netlink: 'syz.0.3229': attribute type 1 has an invalid length. [ 1005.835645][T18127] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3229'. [ 1005.984221][T17974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1006.029587][T17974] 8021q: adding VLAN 0 to HW filter on device team0 [ 1006.046470][T18137] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3231'. [ 1006.062470][T16006] bridge0: port 1(bridge_slave_0) entered blocking state [ 1006.069761][T16006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1006.103168][T16000] bridge0: port 2(bridge_slave_1) entered blocking state [ 1006.110441][T16000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1006.324304][T17974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1006.446310][T17974] veth0_vlan: entered promiscuous mode [ 1006.489486][T17974] veth1_vlan: entered promiscuous mode [ 1006.600273][T17974] veth0_macvtap: entered promiscuous mode [ 1006.631661][T17974] veth1_macvtap: entered promiscuous mode [ 1006.714368][T17974] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1006.764427][T17974] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1006.805369][T16002] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.831733][T16002] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.847956][T16002] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.857962][T16002] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1007.084422][T16002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1007.103727][T16002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1007.194938][T15997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1007.242120][T15997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1007.497881][T18164] batman_adv: batadv0: Adding interface: dummy0 [ 1007.504666][T18164] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1007.564634][T18164] batman_adv: batadv0: Interface activated: dummy0 [ 1007.577208][T18169] netlink: 372 bytes leftover after parsing attributes in process `syz.1.3243'. [ 1007.853330][T18180] netlink: 'syz.1.3248': attribute type 21 has an invalid length. [ 1007.874920][T18180] netlink: 'syz.1.3248': attribute type 1 has an invalid length. [ 1007.892857][T18180] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3248'. [ 1008.364187][T18194] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1008.642773][T18198] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3253'. [ 1009.165499][T18208] netlink: 372 bytes leftover after parsing attributes in process `syz.2.3258'. [ 1009.345512][T18206] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3257'. [ 1009.385263][T18206] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3257'. [ 1009.933442][T18224] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3265'. [ 1010.494326][T18235] [ 1010.496735][T18235] ====================================================== [ 1010.503789][T18235] WARNING: possible circular locking dependency detected [ 1010.510859][T18235] syzkaller #0 Tainted: G L [ 1010.516866][T18235] ------------------------------------------------------ [ 1010.523921][T18235] syz.0.3270/18235 is trying to acquire lock: [ 1010.530021][T18235] ffff888057736e68 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x100/0xc50 [ 1010.541569][T18235] [ 1010.541569][T18235] but task is already holding lock: [ 1010.549314][T18235] ffff8880577372e0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x255/0x560 [ 1010.558581][T18235] [ 1010.558581][T18235] which lock already depends on the new lock. [ 1010.558581][T18235] [ 1010.568995][T18235] [ 1010.568995][T18235] the existing dependency chain (in reverse order) is: [ 1010.578023][T18235] [ 1010.578023][T18235] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 1010.585954][T18235] lock_sock_nested+0x41/0x100 [ 1010.591357][T18235] smc_listen_out+0x109/0x3e0 [ 1010.596591][T18235] smc_listen_work+0x813/0x13f0 [ 1010.601981][T18235] process_scheduled_works+0xb5d/0x1860 [ 1010.608067][T18235] worker_thread+0xa53/0xfc0 [ 1010.613190][T18235] kthread+0x389/0x470 [ 1010.617795][T18235] ret_from_fork+0x514/0xb70 [ 1010.622925][T18235] ret_from_fork_asm+0x1a/0x30 [ 1010.628229][T18235] [ 1010.628229][T18235] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 1010.638412][T18235] __lock_acquire+0x15a5/0x2cf0 [ 1010.643830][T18235] lock_acquire+0x106/0x350 [ 1010.648877][T18235] __flush_work+0x700/0xc50 [ 1010.653957][T18235] __cancel_work_sync+0xbe/0x110 [ 1010.659433][T18235] smc_clcsock_release+0x60/0xf0 [ 1010.664908][T18235] __smc_release+0x66b/0x7e0 [ 1010.670041][T18235] smc_close_non_accepted+0xd5/0x1f0 [ 1010.675868][T18235] smc_close_active+0xb67/0xf10 [ 1010.681256][T18235] __smc_release+0x8d/0x7e0 [ 1010.686305][T18235] smc_release+0x2ce/0x560 [ 1010.691279][T18235] sock_close+0xc3/0x240 [ 1010.696062][T18235] __fput+0x44f/0xa60 [ 1010.700591][T18235] task_work_run+0x1d9/0x270 [ 1010.705726][T18235] exit_to_user_mode_loop+0x193/0x680 [ 1010.711655][T18235] __do_fast_syscall_32+0x45b/0x6f0 [ 1010.717406][T18235] do_fast_syscall_32+0x33/0x70 [ 1010.722799][T18235] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1010.729674][T18235] [ 1010.729674][T18235] other info that might help us debug this: [ 1010.729674][T18235] [ 1010.739921][T18235] Possible unsafe locking scenario: [ 1010.739921][T18235] [ 1010.747395][T18235] CPU0 CPU1 [ 1010.752774][T18235] ---- ---- [ 1010.758152][T18235] lock(sk_lock-AF_SMC/1); [ 1010.762680][T18235] lock((work_completion)(&new_smc->smc_listen_work)); [ 1010.772156][T18235] lock(sk_lock-AF_SMC/1); [ 1010.779205][T18235] lock((work_completion)(&new_smc->smc_listen_work)); [ 1010.786159][T18235] [ 1010.786159][T18235] *** DEADLOCK *** [ 1010.786159][T18235] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1010.794318][T18235] 3 locks held by syz.0.3270/18235: [ 1010.799527][T18235] #0: ffff8880539b8240 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 1010.809854][T18235] #1: ffff8880577372e0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x255/0x560 [ 1010.819301][T18235] #2: ffffffff8e95cd20 (rcu_read_lock){....}-{1:3}, at: __flush_work+0x100/0xc50 [ 1010.828676][T18235] [ 1010.828676][T18235] stack backtrace: [ 1010.834606][T18235] CPU: 0 UID: 0 PID: 18235 Comm: syz.0.3270 Tainted: G L syzkaller #0 PREEMPT(full) [ 1010.834635][T18235] Tainted: [L]=SOFTLOCKUP [ 1010.834643][T18235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1010.834664][T18235] Call Trace: [ 1010.834672][T18235] [ 1010.834684][T18235] dump_stack_lvl+0xe8/0x150 [ 1010.834724][T18235] print_circular_bug+0x2e1/0x300 [ 1010.834747][T18235] check_noncircular+0x12e/0x150 [ 1010.834769][T18235] __lock_acquire+0x15a5/0x2cf0 [ 1010.834789][T18235] ? do_raw_spin_lock+0x12b/0x2f0 [ 1010.834816][T18235] ? __flush_work+0x100/0xc50 [ 1010.834833][T18235] lock_acquire+0x106/0x350 [ 1010.834848][T18235] ? __flush_work+0x100/0xc50 [ 1010.834869][T18235] ? __flush_work+0x100/0xc50 [ 1010.834887][T18235] __flush_work+0x700/0xc50 [ 1010.834903][T18235] ? __flush_work+0x100/0xc50 [ 1010.834920][T18235] ? __flush_work+0x100/0xc50 [ 1010.834942][T18235] ? __pfx___flush_work+0x10/0x10 [ 1010.834961][T18235] ? __pfx_wq_barrier_func+0x10/0x10 [ 1010.834984][T18235] ? __cancel_work_sync+0x5c/0x110 [ 1010.835017][T18235] __cancel_work_sync+0xbe/0x110 [ 1010.835037][T18235] smc_clcsock_release+0x60/0xf0 [ 1010.835056][T18235] __smc_release+0x66b/0x7e0 [ 1010.835079][T18235] ? __local_bh_enable_ip+0xd0/0x130 [ 1010.835096][T18235] smc_close_non_accepted+0xd5/0x1f0 [ 1010.835122][T18235] smc_close_active+0xb67/0xf10 [ 1010.835140][T18235] ? __pfx_sock_def_readable+0x10/0x10 [ 1010.835162][T18235] __smc_release+0x8d/0x7e0 [ 1010.835183][T18235] ? __local_bh_enable_ip+0xd0/0x130 [ 1010.835200][T18235] smc_release+0x2ce/0x560 [ 1010.835224][T18235] sock_close+0xc3/0x240 [ 1010.835242][T18235] ? __pfx_sock_close+0x10/0x10 [ 1010.835260][T18235] __fput+0x44f/0xa60 [ 1010.835283][T18235] task_work_run+0x1d9/0x270 [ 1010.835306][T18235] ? __pfx_task_work_run+0x10/0x10 [ 1010.835332][T18235] exit_to_user_mode_loop+0x193/0x680 [ 1010.835347][T18235] ? rcu_is_watching+0x15/0xb0 [ 1010.835365][T18235] ? do_fast_syscall_32+0x33/0x70 [ 1010.835383][T18235] __do_fast_syscall_32+0x45b/0x6f0 [ 1010.835401][T18235] ? do_fast_syscall_32+0x33/0x70 [ 1010.835417][T18235] ? lockdep_hardirqs_on+0x7a/0x110 [ 1010.835433][T18235] ? irqentry_exit+0x10f/0x8b0 [ 1010.835449][T18235] ? trace_irq_disable+0x3b/0x140 [ 1010.835473][T18235] do_fast_syscall_32+0x33/0x70 [ 1010.835490][T18235] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1010.835510][T18235] RIP: 0023:0xf7f8401c [ 1010.835528][T18235] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1010.835543][T18235] RSP: 002b:00000000f756fb1c EFLAGS: 00000206 ORIG_RAX: 00000000000001b4 [ 1010.835559][T18235] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e [ 1010.835569][T18235] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1010.835579][T18235] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1010.835588][T18235] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1010.835597][T18235] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1010.835613][T18235] [ 1011.684835][T16006] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.800877][T16006] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.918069][T16006] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.064829][T16006] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.139239][T16006] bridge_slave_1: left allmulticast mode [ 1012.145260][T16006] bridge_slave_1: left promiscuous mode [ 1012.151405][T16006] bridge0: port 2(bridge_slave_1) entered disabled state [ 1012.160171][T16006] bridge_slave_0: left allmulticast mode [ 1012.166845][T16006] bridge_slave_0: left promiscuous mode [ 1012.173440][T16006] bridge0: port 1(bridge_slave_0) entered disabled state [ 1012.267248][T16006] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1012.278844][T16006] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1012.288695][T16006] bond0 (unregistering): Released all slaves [ 1012.521481][T16006] hsr_slave_0: left promiscuous mode [ 1012.527455][T16006] hsr_slave_1: left promiscuous mode [ 1012.533548][T16006] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1012.541446][T16006] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1012.549339][T16006] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1012.556882][T16006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1012.566576][T16006] batman_adv: batadv0: Interface deactivated: dummy0 [ 1012.573580][T16006] batman_adv: batadv0: Removing interface: dummy0 [ 1012.585382][T16006] veth1_macvtap: left promiscuous mode [ 1012.591436][T16006] veth0_macvtap: left promiscuous mode [ 1012.597026][T16006] veth1_vlan: left promiscuous mode [ 1012.602990][T16006] veth0_vlan: left promiscuous mode [ 1012.726725][T16006] team0 (unregistering): Port device team_slave_1 removed [ 1012.741730][T16006] team0 (unregistering): Port device team_slave_0 removed [ 1012.794933][ T5298] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1013.128006][T16006] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.148365][ T5298] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1013.208980][T16006] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.255397][T16006] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.309222][T16006] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.478714][T16006] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.493183][ T5298] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1013.546496][T16006] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.617508][T16006] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.675127][T16006] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.764167][T16006] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.815194][T16006] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.832592][ T5298] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1013.858644][T16006] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.916316][T16006] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1014.015357][T16006] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1014.065390][T16006] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1014.137609][T16006] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1014.195203][T16006] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1014.212409][ T5298] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1014.281570][T16006] bridge_slave_1: left allmulticast mode [ 1014.287383][T16006] bridge_slave_1: left promiscuous mode [ 1014.294619][T16006] bridge0: port 2(bridge_slave_1) entered disabled state [ 1014.305782][T16006] bridge_slave_0: left allmulticast mode [ 1014.312823][T16006] bridge_slave_0: left promiscuous mode [ 1014.320194][T16006] bridge0: port 1(bridge_slave_0) entered disabled state [ 1014.331201][T16006] bridge_slave_1: left allmulticast mode [ 1014.336927][T16006] bridge_slave_1: left promiscuous mode [ 1014.345179][T16006] bridge0: port 2(bridge_slave_1) entered disabled state [ 1014.355002][T16006] bridge_slave_0: left allmulticast mode [ 1014.360948][T16006] bridge_slave_0: left promiscuous mode [ 1014.366716][T16006] bridge0: port 1(bridge_slave_0) entered disabled state [ 1014.377713][T16006] bridge_slave_1: left allmulticast mode [ 1014.383565][T16006] bridge_slave_1: left promiscuous mode [ 1014.389309][T16006] bridge0: port 2(bridge_slave_1) entered disabled state [ 1014.400486][T16006] bridge_slave_0: left allmulticast mode [ 1014.406290][T16006] bridge_slave_0: left promiscuous mode [ 1014.412430][T16006] bridge0: port 1(bridge_slave_0) entered disabled state [ 1014.424329][T16006] bridge_slave_1: left allmulticast mode [ 1014.430839][T16006] bridge_slave_1: left promiscuous mode [ 1014.436582][T16006] bridge0: port 2(bridge_slave_1) entered disabled state [ 1014.445865][T16006] bridge_slave_0: left allmulticast mode [ 1014.452150][T16006] bridge_slave_0: left promiscuous mode [ 1014.457895][T16006] bridge0: port 1(bridge_slave_0) entered disabled state [ 1014.674769][T16006] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1014.690349][T16006] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1014.700872][T16006] bond0 (unregistering): Released all slaves [ 1014.763431][T16006] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1014.774005][T16006] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1014.783629][T16006] bond0 (unregistering): Released all slaves [ 1014.876415][T16006] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1014.887089][T16006] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1014.896857][T16006] bond0 (unregistering): Released all slaves [ 1014.905644][T16006] bond1 (unregistering): Released all slaves [ 1015.063616][T16006] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1015.074080][T16006] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1015.083870][T16006] bond0 (unregistering): Released all slaves [ 1015.097569][ T5298] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1015.464188][ T5298] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1015.767264][T16006] hsr_slave_0: left promiscuous mode [ 1015.773313][T16006] hsr_slave_1: left promiscuous mode [ 1015.779153][T16006] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1015.787603][T16006] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1015.799056][T16006] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1015.806646][T16006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1015.817561][T16006] hsr_slave_0: left promiscuous mode [ 1015.823505][T16006] hsr_slave_1: left promiscuous mode [ 1015.829233][T16006] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1015.836961][T16006] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1015.844813][T16006] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1015.852740][T16006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1015.863823][T16006] hsr_slave_0: left promiscuous mode [ 1015.870815][T16006] hsr_slave_1: left promiscuous mode [ 1015.876584][T16006] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1015.884057][T16006] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1015.892132][T16006] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1015.899568][T16006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1015.909954][T16006] hsr_slave_0: left promiscuous mode [ 1015.915724][T16006] hsr_slave_1: left promiscuous mode [ 1015.922100][T16006] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1015.929509][T16006] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1015.937399][T16006] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1015.945366][T16006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1015.963379][T16006] veth1_macvtap: left promiscuous mode [ 1015.968929][T16006] veth0_macvtap: left promiscuous mode [ 1015.974640][T16006] veth1_vlan: left promiscuous mode [ 1015.980003][T16006] veth0_vlan: left promiscuous mode [ 1015.985988][T16006] veth1_macvtap: left promiscuous mode [ 1015.992223][T16006] veth0_macvtap: left promiscuous mode [ 1015.997753][T16006] veth1_vlan: left promiscuous mode [ 1016.003052][T16006] veth0_vlan: left promiscuous mode [ 1016.008981][T16006] veth1_macvtap: left promiscuous mode [ 1016.014561][T16006] veth0_macvtap: left promiscuous mode [ 1016.020412][T16006] veth1_vlan: left promiscuous mode [ 1016.025642][T16006] veth0_vlan: left promiscuous mode [ 1016.032090][T16006] veth1_macvtap: left promiscuous mode [ 1016.037627][T16006] veth0_macvtap: left promiscuous mode [ 1016.043235][T16006] veth1_vlan: left promiscuous mode [ 1016.048498][T16006] veth0_vlan: left promiscuous mode [ 1016.295354][T16006] team0 (unregistering): Port device team_slave_1 removed [ 1016.307080][T16006] team0 (unregistering): Port device team_slave_0 removed [ 1016.426391][T16006] team0 (unregistering): Port device team_slave_1 removed [ 1016.438439][T16006] team0 (unregistering): Port device team_slave_0 removed [ 1016.565521][T16006] team0 (unregistering): Port device team_slave_1 removed [ 1016.577333][T16006] team0 (unregistering): Port device team_slave_0 removed [ 1016.714328][T16006] team0 (unregistering): Port device team_slave_1 removed [ 1016.726149][T16006] team0 (unregistering): Port device team_slave_0 removed [ 1016.789190][ T5298] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1017.196910][ T5298] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1017.604472][ T5298] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1017.921217][ T5298] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1018.195138][ T5298] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1018.488478][ T5298] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1018.748549][ T5298] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1019.012933][ T5298] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1019.278713][ T5298] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1019.538702][ T5298] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1019.808158][ T5298] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1020.101775][ T5298] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1020.369325][ T5298] 8021q: adding VLAN 0 to HW filter on device eth20