last executing test programs: 19m51.517799219s ago: executing program 3 (id=9): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 19m50.275221639s ago: executing program 1 (id=12): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090000000000000000000000850000002a000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 19m49.571442707s ago: executing program 1 (id=13): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000580)=@xdp={0x2c, 0x5865, r4, 0x3e}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x40084) 19m49.034381168s ago: executing program 3 (id=16): socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) close(0xffffffffffffffff) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000100)={0x3b, 0x4, '\x00', [@pad1, @calipso={0x7, 0x20, {0x0, 0x6, 0x4, 0x1ff, [0xfffffffffffffff8, 0x6, 0x2]}}]}, 0x30) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) sendto$inet6(0xffffffffffffffff, &(0x7f0000000ec0)="990242", 0x3, 0x4044001, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 19m48.639296841s ago: executing program 1 (id=19): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00'}, 0x10) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 19m48.361460585s ago: executing program 2 (id=21): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="a000000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="03150000800000007800128008000100767469006c00028008000600f2ffffff08000600010000000800030000000000080002000200000008000400e0000002080003000500000008000100", @ANYRES32, @ANYBLOB="08000500"], 0xa0}, 0x1, 0x0, 0x0, 0x2000d818}, 0x0) 19m48.356768432s ago: executing program 0 (id=22): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 19m48.159972265s ago: executing program 1 (id=23): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f00000000c0)=0x8004, 0x4) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="180000005600010602000000000000000700000000ff"], 0x18}], 0x1}, 0x0) 19m48.022382665s ago: executing program 0 (id=24): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0xe) listen(r0, 0x3) 19m47.978343042s ago: executing program 3 (id=25): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000540)="89e7ee0c7cdad9b4b47380c988cafb", 0xf}, {&(0x7f0000000100)="36d1ce1e6d25a81a70ff16f304874ef539", 0x11}], 0x2) 19m47.672035813s ago: executing program 1 (id=26): r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) socket(0x10, 0x803, 0x0) pipe(&(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x2, 0x2, 0xbfdffffc}, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) unshare(0x28000600) r3 = creat(&(0x7f0000000340)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000005c0)=0x20) ftruncate(0xffffffffffffffff, 0xee72) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000240)={0x1, 0x1, &(0x7f0000000280)=[r2], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000000c0), 0x0, 0x1}) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000000)=@rc={0x1f, @none, 0xc5}, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)="4d009622e040b26b51cd818bd7bd7765eb8deca31704450f6f1a3d1f5b2adda95654a2c7f78dd1d76a5934bbb43b786bffc13515b3f90316c78a71639db38ca96e81e85bbbcd92cbe2b3243c1dec2b9e", 0x50}, {&(0x7f00000002c0)="7fda79a3edf5190249475aef2c7ae0b919de43b3a78eb1a14eb8fbfdca6a7a1e7c5cb5952299af8157dda31e16b0cfcad27ba29a46707ef135aa35461b334d735ea8b9d17bece51a0ba3b123b7132329c862d97c0b6f496643d21759ec3702529ec9cf1b1089efb4092b382b912ac7ec7c950959008d012a4ef46574c86b2ea5404b2ca5f53616e972cbe5bed2e68d21000a771a", 0x94}], 0x2}, 0x28840) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600a000014001000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef40900046048471b35ff00001fb791643a5ee4ce1b14d6d930dfe10000000001001000730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92", 0xd8}], 0x1}, 0x4) 19m47.643359987s ago: executing program 2 (id=27): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new user:syz 000000000000000020'], 0x2a, 0xfffffffffffffffc) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f00000001c0)="f495d232", 0x4) 19m47.51516422s ago: executing program 0 (id=28): socket$xdp(0x2c, 0x3, 0x0) ioctl$VHOST_VDPA_SET_STATUS(0xffffffffffffffff, 0x4001af72, &(0x7f0000000300)=0x9) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = syz_open_dev$video(0x0, 0x7, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getpid() ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f00000000c0)={0x0, 0x5, "00f400", 0x9, 0xf8}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) socket$kcm(0x29, 0x5, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00') preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000100)=""/68, 0x44}], 0x1, 0x92, 0x0) write(r2, &(0x7f0000000040)="05000000010000", 0x7) 19m47.404549602s ago: executing program 2 (id=29): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{}, [@TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2, {0xfffffffe}}]}}}]}, 0x6c}}, 0x0) 19m47.192431661s ago: executing program 0 (id=30): splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="040e1a000310"], 0xf) 19m46.922238127s ago: executing program 1 (id=31): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0xdada}, @val={0x3, 0x3, 0xd04, 0x800, 0x8, 0x30}, @ipv4=@dccp={{0x5, 0x4, 0x0, 0xe, 0x24, 0x65, 0x0, 0x2, 0x21, 0x0, @remote, @loopback}, {{0x4e24, 0x4e22, 0x4, 0x1, 0xc, 0x0, 0x0, 0x9, 0x2, "e7ea2a", 0x9, "7f768b"}}}}, 0x32) 19m45.895052058s ago: executing program 0 (id=34): unshare(0x2a020400) unshare(0x22020400) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) 19m45.64443102s ago: executing program 0 (id=35): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @broadcast}}) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setresuid(0x0, 0xee00, 0x0) syz_clone3(&(0x7f0000000380)={0x20080, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0xffffffffffffffff], 0x1}, 0x58) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffc}}) ioctl$FICLONE(r1, 0x40049409, r1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'rose0\x00', {0x2, 0x4e22, @loopback}}) r2 = openat$sndseq(0xffffff9c, &(0x7f0000000140), 0x210000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r2, 0xc0bc5310, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'batadv_slave_1\x00', 0x0}) r4 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x100000000000000, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x4000, 0x0, 0x0, [], 0x2, 0x0, 0x0}, 0xe0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f00000000c0)={'veth0_virt_wifi\x00', {0x2, 0x4e20, @broadcast}}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r3, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 19m35.317110428s ago: executing program 3 (id=38): r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000092ecc620ac05c2773aeb010203010902240001000020000904c40102fffd01800905020210020200000905820200"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000100)=ANY=[@ANYRES8=r0, @ANYRES16=r0, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0}) 19m35.315942469s ago: executing program 2 (id=39): r0 = syz_open_dev$video(&(0x7f00000000c0), 0x8d7, 0x101000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0x2, @vbi={0x7f, 0x3, 0x10001, 0x43353039, [0x0, 0x81], [0x8, 0x6], 0x13a}}) 19m35.162498181s ago: executing program 2 (id=40): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="05000000010000", 0x7) 19m35.091982431s ago: executing program 2 (id=41): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000ec0)={0x20, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) 19m33.95286921s ago: executing program 3 (id=42): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x48}}, 0x0) 19m33.862471207s ago: executing program 3 (id=43): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x7e, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x4, 0x40f57}]}, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x10}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @multicast1}}]}, {0x49}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) syz_emit_ethernet(0xffffffffffffff68, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRES32, @ANYBLOB], 0x48) socket$nl_generic(0x10, 0x3, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0x5) r5 = socket$vsock_stream(0x28, 0x1, 0x0) writev(r5, &(0x7f00000002c0), 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 19m31.836624371s ago: executing program 32 (id=31): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0xdada}, @val={0x3, 0x3, 0xd04, 0x800, 0x8, 0x30}, @ipv4=@dccp={{0x5, 0x4, 0x0, 0xe, 0x24, 0x65, 0x0, 0x2, 0x21, 0x0, @remote, @loopback}, {{0x4e24, 0x4e22, 0x4, 0x1, 0xc, 0x0, 0x0, 0x9, 0x2, "e7ea2a", 0x9, "7f768b"}}}}, 0x32) 19m30.176417831s ago: executing program 33 (id=35): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @broadcast}}) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setresuid(0x0, 0xee00, 0x0) syz_clone3(&(0x7f0000000380)={0x20080, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0xffffffffffffffff], 0x1}, 0x58) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffc}}) ioctl$FICLONE(r1, 0x40049409, r1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'rose0\x00', {0x2, 0x4e22, @loopback}}) r2 = openat$sndseq(0xffffff9c, &(0x7f0000000140), 0x210000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r2, 0xc0bc5310, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'batadv_slave_1\x00', 0x0}) r4 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x100000000000000, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x4000, 0x0, 0x0, [], 0x2, 0x0, 0x0}, 0xe0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f00000000c0)={'veth0_virt_wifi\x00', {0x2, 0x4e20, @broadcast}}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r3, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 19m19.809501441s ago: executing program 34 (id=41): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000ec0)={0x20, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) 19m18.806527114s ago: executing program 35 (id=43): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x7e, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x4, 0x40f57}]}, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x10}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @multicast1}}]}, {0x49}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) syz_emit_ethernet(0xffffffffffffff68, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRES32, @ANYBLOB], 0x48) socket$nl_generic(0x10, 0x3, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0x5) r5 = socket$vsock_stream(0x28, 0x1, 0x0) writev(r5, &(0x7f00000002c0), 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 18m30.56609495s ago: executing program 4 (id=125): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x841, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_open_dev$sndctrl(&(0x7f0000004080), 0x2, 0x800000) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, 0x0, 0x24000002) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8080000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x140) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r3, 0x1}) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000000c0)={0x2, 0x200000, 0x0, r3, 0x8}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18m30.267588662s ago: executing program 4 (id=126): syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, 0x0, 0x4040) 18m30.004128735s ago: executing program 4 (id=127): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001"], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 18m29.874797402s ago: executing program 4 (id=128): socket$xdp(0x2c, 0x3, 0x0) ioctl$VHOST_VDPA_SET_STATUS(0xffffffffffffffff, 0x4001af72, &(0x7f0000000300)=0x9) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = syz_open_dev$video(0x0, 0x7, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getpid() ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f00000000c0)={0x0, 0x5, "00f400", 0x9, 0xf8}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) socket$kcm(0x29, 0x5, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00') preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000100)=""/68, 0x44}], 0x1, 0x92, 0x0) write(r2, &(0x7f0000000040)="05000000010000", 0x7) shmctl$SHM_INFO(0x0, 0xe, 0x0) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x5000) r4 = shmget(0x1, 0x8000, 0x54000000, &(0x7f0000ff8000/0x8000)=nil) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) shmctl$SHM_LOCK(r4, 0xb) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="041817aaaaaaaaaa10"], 0x1a) mremap(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x2000, 0x7, &(0x7f0000ff8000/0x2000)=nil) open$dir(&(0x7f0000000340)='./file0\x00', 0x400c0, 0x106) shmctl$IPC_RMID(r4, 0x0) 18m29.524228303s ago: executing program 4 (id=129): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) r1 = syz_io_uring_setup(0x38a9, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x0, 0xfffffffe}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r0}) io_uring_enter(r1, 0x44fd, 0x3, 0x1, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r4}, 0x10) rt_sigsuspend(&(0x7f0000000040)={[0xfffffffffffbfefd]}, 0x8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) 18m28.547950565s ago: executing program 4 (id=130): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)="9e4aa4c07d192c34f0ab28f8dc69582227b99a06a74bede44e623b5f0e09bc13ff7292a6f773766ad22ae8cb1923ebb34a178002c68646ae1806883e6312b9fc5e88185d3c3f06ef", 0x48, 0x41, &(0x7f0000000180)={0xa, 0x4e23, 0x8001, @loopback, 0xe}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000000)={0x32}, 0x8) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1) 18m13.151855797s ago: executing program 36 (id=130): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)="9e4aa4c07d192c34f0ab28f8dc69582227b99a06a74bede44e623b5f0e09bc13ff7292a6f773766ad22ae8cb1923ebb34a178002c68646ae1806883e6312b9fc5e88185d3c3f06ef", 0x48, 0x41, &(0x7f0000000180)={0xa, 0x4e23, 0x8001, @loopback, 0xe}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000000)={0x32}, 0x8) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1) 13.03592613s ago: executing program 5 (id=3841): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x24) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@mpls_delroute={0xa0, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_NEWDST={0x84, 0x12}]}, 0xa0}}, 0x0) 11.740436456s ago: executing program 5 (id=3844): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$tipc(0x1e, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r4, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) 10.642437429s ago: executing program 7 (id=3846): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0x0) r2 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000500)="14", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r2, &(0x7f0000000240)=""/112, 0x349b7f55) 10.559791802s ago: executing program 6 (id=3847): setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x50}]}, &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) sendto$inet6(r0, &(0x7f0000005280)='_', 0x1, 0x20044040, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @private2={0xfc, 0x2, '\x00', 0xfc}, 0x5}, 0x1c) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080)={0x209d, 0x0, 0x4, 0xfffffff9}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x7f, 0x0, &(0x7f0000001180)) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000005300), 0x8000, 0x0) ioctl$IOMMU_GET_HW_INFO(r4, 0x3b8a, &(0x7f0000005400)={0x28, 0x0, 0x0, 0xaa, &(0x7f0000005340)=""/170}) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 10.559474154s ago: executing program 5 (id=3848): syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) io_setup(0x3f, &(0x7f0000000140)) r0 = timerfd_create(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x9, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000000085"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f0000000000)=0x3) 9.286562973s ago: executing program 7 (id=3849): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000003800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x5c, 0x160, 0xd0, 0x3e0, 0x1e0, 0x228, 0x25a, 0x1e0, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [0x0, 0x1fe], 'veth0_to_batadv\x00', 'batadv_slave_0\x00', {}, {0xff}}, 0x5002, 0xa8, 0xd0, 0x52020000, {0x0, 0x6802000000000000}}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@dev, @mcast1, [], [], 'virt_wifi0\x00', 'lo\x00', {}, {}, 0x89}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x7, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) 9.22423526s ago: executing program 6 (id=3850): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000000680)="4137a29b582bd471798f15f967e7f8118e1abf61ebd7d146a12a42f6ffd2340daaa8dcf6da818cc0efac75e8c35abbde7a18e0226b424f5557c71db5d327baccef203377178ddb12221cdaf45711a2535ae87e6ab62ecba71b6f2ac0f6c9ead0ec52116d305204537900daaad0d6e4dd9d3ad654711b72964f28b8b5d231d709bf3cd4a0477ef446e7da5eaa15cc39e9c57d89217e33a93e080000000000000086448a8e871cf560229a3cc36317ac47bae1596458badc9ebde2c707dea2e18f859e20f7595cce0a88485e5223b2c8fc383e37cbbfe8353e2a8eb6dc65d76746a31d8f206f3152176a502d3e582a31933e40cff645d93afca045741f99af1cba5b3b6dd6c2edd5e6c4505ae594aa23cbc8a143512180028d9b3984a2517ac9a15154460ff0f654df3f8cf1c13455cb5f440a67de7a6dad269c76e2625c35222985a47aa3b920d97dea05c43bc937361d33781f8057097ca11a9d90eea3d8ae56f0e57f3a6f32f8786e165305301a3d86367337d2651a27b8c222f349491648ba165a6ed9a1e5e5397a1ee963651c2d9c79d6d5b34941375b6b53abcc7882c4e57a63de2e32c30e41030f24ae6efee9e3446eab3b5407cc20f581095dde95241e3853c4864ea7ecd07888956d9375b9ef74be4454d7693b53ed6bd0644cd93945b2eb35a6ac7c34aa11facf27ca4463e2bb1eef7126a982f0de190da6ca5b992c9fecf37053894f4b8001fa9902cb9544f8394c96faa2767c0af169cf7c3e0c49d962d47061f788999120bc2144d3bdd4cd8dc5c6f00b10958416318ef9ea9b4f2e2f92ad6ce8f2f0a6022a753acf1b3247", 0x251}], 0x1}}], 0x1, 0x4000001) shutdown(r0, 0x1) 8.983867016s ago: executing program 7 (id=3852): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/153, 0x99}, &(0x7f00000001c0)=0x40) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r7, 0xc1004110, &(0x7f0000000000)={0x0, [0x6, 0xffff1337, 0x3], [{0x0, 0x0, 0x0, 0x1}, {0x35, 0x39}, {0x2b9, 0x2}, {0x800000, 0x4}, {0xfffd}, {0x1ff}, {0x3, 0x1000}, {}, {}, {}, {}, {0x0, 0xe68b}], 0xc}) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f00000010c0)=""/201, 0xc9) sendmsg$nl_xfrm(r1, 0x0, 0x4040000) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 8.983511985s ago: executing program 6 (id=3853): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default trusted:syz 000000000096'], 0x2d, 0xfffffffffffffff9) r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f0000000000)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, r0) 8.790137699s ago: executing program 6 (id=3854): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000440)=0x91) mlockall(0x2) r3 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_G_AUDOUT(r3, 0x80345631, &(0x7f0000000100)) socket$pppoe(0x18, 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r4 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r4, &(0x7f0000ff1000/0x3000)=nil, 0x400c) mremap(&(0x7f0000ff1000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) 7.755851978s ago: executing program 7 (id=3856): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) writev(0xffffffffffffffff, &(0x7f0000000140), 0x0) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) 7.6873902s ago: executing program 5 (id=3857): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300), 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f00000013c0)=0xc7f) recvmsg$can_raw(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/197, 0xc5}], 0x1}, 0x1) sendmmsg$unix(r1, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="81", 0x1}], 0x1, 0x0, 0x0, 0x200000c4}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}], 0x2, 0x841) 7.641326944s ago: executing program 9 (id=3858): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="b400000000090000dd0a00000000000073013b00000000009500000000000000425e494e53a90f38f870e056"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 6.800346994s ago: executing program 5 (id=3859): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000001600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0xff6}], 0x1}, 0x208000}], 0x2, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 6.700158128s ago: executing program 9 (id=3861): setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x50}]}, &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) sendto$inet6(r0, &(0x7f0000005280)='_', 0x1, 0x20044040, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @private2={0xfc, 0x2, '\x00', 0xfc}, 0x5}, 0x1c) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080)={0x209d, 0x0, 0x4, 0xfffffff9}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x7f, 0x0, &(0x7f0000001180)) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000005300), 0x8000, 0x0) ioctl$IOMMU_GET_HW_INFO(r4, 0x3b8a, &(0x7f0000005400)={0x28, 0x0, 0x0, 0xaa, &(0x7f0000005340)=""/170}) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 4.430342769s ago: executing program 8 (id=3862): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000003800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x5c, 0x160, 0xd0, 0x3e0, 0x1e0, 0x228, 0x25a, 0x1e0, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [0x0, 0x1fe], 'veth0_to_batadv\x00', 'batadv_slave_0\x00', {}, {0xff}}, 0x5002, 0xa8, 0xd0, 0x52020000, {0x0, 0x6802000000000000}}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@dev, @mcast1, [], [], 'virt_wifi0\x00', 'lo\x00', {}, {}, 0x89}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x7, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) 4.388539101s ago: executing program 9 (id=3863): write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20000080) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xb1, 0xbd, 0x2f, 0x8, 0x47d, 0x5003, 0x2f8c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0x58, 0xb7}}]}}]}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x1, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9}, {}, 0x0, 0x0, 0x0, 0x1, 0x3}}, 0xb8}}, 0x4000) 4.221379558s ago: executing program 8 (id=3864): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TCSETSF(r0, 0x5404, 0x0) 4.203618432s ago: executing program 5 (id=3865): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10) 3.931619607s ago: executing program 7 (id=3866): pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RGETLOCK(r1, &(0x7f0000000040)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, r2, 0xfffffffffffffc01, 0x0) tee(r0, r2, 0x60000000000, 0x0) 3.930270578s ago: executing program 8 (id=3867): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) 3.797876413s ago: executing program 8 (id=3868): syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) io_setup(0x3f, &(0x7f0000000140)) r0 = timerfd_create(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x9, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000000085"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f0000000000)=0x3) 3.661637163s ago: executing program 7 (id=3869): syz_open_dev$vim2m(0x0, 0x47b, 0x2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 2.735329862s ago: executing program 9 (id=3870): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300), 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f00000013c0)=0xc7f) recvmsg$can_raw(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/197, 0xc5}], 0x1}, 0x1) sendmmsg$unix(r1, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="81", 0x1}], 0x1, 0x0, 0x0, 0x200000c4}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}], 0x2, 0x841) 2.624611687s ago: executing program 8 (id=3871): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5, 0x0, 0x1e0000}, 0x18) keyctl$instantiate(0xc, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="6e657720646566617500002074727573746564aaaf7bb320303030303030303030303030303030303337323400e96d72917316b228108c56176cf9bf2cd0137293489cbd47963334da4d7268403a5c7c49b0e315ac98cb6e962ded0637c5be0f0b65160bf5d78fcfb63827a87f8acbe3dae71133e40d9eb3ce56a63648c255866523fc157388ba2c16b495126268d7afdb0eb74620769e1601"], 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) sendmsg$IPSET_CMD_ADD(r1, 0x0, 0x4000084) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) read$FUSE(0xffffffffffffffff, &(0x7f00000009c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)={0x70, r8, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20044001}, 0x10) quotactl_fd$Q_GETQUOTA(r6, 0xffffffff80000702, r7, &(0x7f00000004c0)) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r11 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r11, @ANYRES32=r10, @ANYBLOB='\a'], 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@map=r11, 0x7, 0x0, 0x8, &(0x7f0000000180)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r9, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x20040800}, 0x40000) 2.471763204s ago: executing program 9 (id=3872): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0x0) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000500)="14", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) 2.423363624s ago: executing program 6 (id=3873): setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x50}]}, &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) sendto$inet6(r0, &(0x7f0000005280)='_', 0x1, 0x20044040, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @private2={0xfc, 0x2, '\x00', 0xfc}, 0x5}, 0x1c) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080)={0x209d, 0x0, 0x4, 0xfffffff9}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x7f, 0x0, &(0x7f0000001180)) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000005300), 0x8000, 0x0) ioctl$IOMMU_GET_HW_INFO(r4, 0x3b8a, &(0x7f0000005400)={0x28, 0x0, 0x0, 0xaa, &(0x7f0000005340)=""/170}) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 1.64641638s ago: executing program 8 (id=3874): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket(0x2c, 0x3, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000280)=0x497, 0x4) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f00000005c0)={0x2000a210}) epoll_wait(r4, &(0x7f0000001e40)=[{}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000b70400000800"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r5}, 0x18) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x440, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2a0, 0x310, 0x0, {0x200003ae, 0x7f00}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4a0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket(0xa, 0x1, 0x0) bind$inet6(r8, 0x0, 0x0) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000880)={0x478, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, "", [@nested={0x465, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @nested={0x375, 0x64, 0x0, 0x1, [@nested={0x8d, 0x121, 0x0, 0x1, [@generic="d9b45c1c72ea0f6ec741f650e5d8f1c76e4d6e6f78dffc221296c2686a3b0e577e85e2", @generic="d42ec6795d0f76e5ed0f31909e6bed6e29fb89f169f2f3f03481b87cf2a83e3bc132072ed4ee7ab77002f80ddf0b8c819b047e1a70ad821d12b62ac2e3a2ccd666b54ee507ea702cd16bf1df7c22f67f542e5f0d71bc806d3888", @typed={0x8, 0xfa, 0x0, 0x0, @fd=r9}, @nested={0x4, 0x1d}]}, @generic="180187793ce4954a2d0c6394198efd86259a455b383d61a34aed593c5da530877c3102231ea96aa5cefb6c2d99b6fadffd0e3bd891225e8c0d45e6019a16c008707e0724a0a436faaabd146ae5a60224ca6e64f9e38c4349e259ac91811a57b5f522ff05f1d163c4dacf64f522205c5db52d49b537c72f55ceba4e254b869c565f44022a586f05577e8c09b75b68", @nested={0x15d, 0xf, 0x0, 0x1, [@typed={0xc, 0x63, 0x0, 0x0, @u64=0x92}, @generic="796c3d3cc1f3db290ab3ff8af9998d01a9067f3cebdf5f818852b98b44e11fd441db5f6ccaf5833e192b4dca10fdf86450cae212660821bc12a1c14800e1893737f187022031f06b8d0f53b1090720f9f986853c93b418a7611f89d950d13b469a32796fe9d499cf7fd95151ff157e7e60ea88c4d6be9376ea4b50d5bd551481c915564cb2c452ed234ea4a800df8f95d198d2da935b789495ea7bb9ce6531ae7e6abf36751dba41809d5b16363323", @generic="9d22bafd4ac33962ab17d0d990f22e0ce4779bac24155d82f05498da6c9fa05cee888ef71b4755c9931b0200f564a52cdcc89114643ffd15fb495cd1bbb51ebd9f651e6ad3b3473949c0e79dcb948e0d4396e8c8a09ba50decb89def4523931fc20ba6e7ab5647f65f5ba45c278eec780cb651cd9c4ca1dc794060194b5f6e02947c12ad911895f1c0c5eee9b25581c2b4f2", @typed={0x8, 0x5e, 0x0, 0x0, @fd=r9}, @nested={0x4, 0x30}]}, @typed={0xc, 0x56, 0x0, 0x0, @u64=0x612}, @generic="9be5988ac7e6c600f858942c82ef4d7c77bfba65771ba00de19128a03c62e9da0b3c25b55d77d4fe391e5bf2c4f26765f2b97dac92878d7af76787185bb0974ed91f6eca2911a9e8acad1767dcbd9d79ab6a0b85fb14de992cd6e5e37de6b8124e5d48f2c1d72f096a5c56860a86b9f9fbbdbc7b2b9d51ad19e0622ab5a6f8d6b1cc6c9a818e3f35e38a040ec20a67e01fd19c4e7aeec0aaff72b5a9d741322173944adf6083eaef73219b7836a273bca0050a48f7ab0b1d3987685684dbadb948310fa921c234927837c51fb4c75ad64d3ec1c778bd999d1239979c32dcc34e69e684fd4b3b80"]}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x478}], 0x1}, 0x0) 386.986134ms ago: executing program 9 (id=3875): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000001600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0xff6}], 0x1}, 0x208000}], 0x2, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 0s ago: executing program 6 (id=3876): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) writev(0xffffffffffffffff, &(0x7f0000000140), 0x0) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) kernel console output (not intermixed with test programs): [ 551.414917][ T9886] netlink: 12 bytes leftover after parsing attributes in process `syz.7.994'. [ 551.524965][ T9888] netlink: 4 bytes leftover after parsing attributes in process `syz.7.994'. [ 551.703004][ T9890] netlink: 4 bytes leftover after parsing attributes in process `syz.8.996'. [ 551.744926][ T9888] bond3 (unregistering): Released all slaves [ 555.237754][ T9937] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1011'. [ 555.300364][ T9938] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1011'. [ 561.617790][T10015] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1040'. [ 561.665611][T10020] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1043'. [ 561.686114][T10021] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1040'. [ 563.020921][T10021] bond1 (unregistering): Released all slaves [ 563.775652][T10059] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1056'. [ 563.856413][T10063] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 563.856413][T10063] The task syz.5.1057 (10063) triggered the difference, watch for misbehavior. [ 564.344491][T10073] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1062'. [ 564.411485][T10073] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 565.613200][T10103] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1074'. [ 565.665597][T10107] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1074'. [ 565.733832][T10109] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1074'. [ 565.850442][T10109] bond1 (unregistering): Released all slaves [ 568.617213][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.617290][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 578.177310][T10214] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1113'. [ 582.255069][T10245] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 582.257847][T10245] team0: Port device batadv1 added [ 584.495134][T10262] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1127'. [ 586.483121][T10290] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1140'. [ 586.646743][T10293] syz.7.1141 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 587.611167][T10299] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1143'. [ 587.839778][T10299] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 588.897413][T10327] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1151'. [ 590.182686][T10340] 9pnet_fd: p9_fd_create_unix (10340): problem connecting socket: ./file0: -111 [ 590.251193][T10343] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1157'. [ 590.256127][T10344] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1158'. [ 590.397825][T10343] bond5 (unregistering): Released all slaves [ 591.742067][T10363] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1163'. [ 594.950592][T10407] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1179'. [ 596.788624][T10434] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1192'. [ 598.228672][T10457] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1203'. [ 598.486965][T10461] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1204'. [ 600.588740][T10500] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1221'. [ 600.661635][T10505] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1221'. [ 600.710939][T10508] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1221'. [ 600.787866][T10508] bond1 (unregistering): Released all slaves [ 601.063216][T10514] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1226'. [ 601.638379][T10520] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 601.638409][T10520] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 601.642631][T10520] vhci_hcd vhci_hcd.0: Device attached [ 602.403230][T10520] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(10) [ 602.403260][T10520] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 602.403675][T10520] vhci_hcd vhci_hcd.0: Device attached [ 602.415099][T10520] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(12) [ 602.415145][T10520] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 602.448492][T10520] vhci_hcd vhci_hcd.0: Device attached [ 602.508285][ T10] usb 45-1: new low-speed USB device number 4 using vhci_hcd [ 602.550829][T10520] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(17) [ 602.550860][T10520] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 602.551017][T10534] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(13) [ 602.551039][T10534] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 602.551399][T10534] vhci_hcd vhci_hcd.0: Device attached [ 602.551600][T10542] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(20) [ 602.551622][T10542] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 602.551716][T10542] vhci_hcd vhci_hcd.0: Device attached [ 602.553003][T10534] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 602.810093][T10520] vhci_hcd vhci_hcd.0: Device attached [ 602.863574][T10551] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1232'. [ 602.910968][T10520] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 602.914443][T10551] ip6gretap0: entered promiscuous mode [ 602.916302][T10520] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 603.049885][T10520] vhci_hcd vhci_hcd.0: port 0 already used [ 603.059321][T10544] vhci_hcd: connection closed [ 603.060440][T10523] vhci_hcd: connection reset by peer [ 603.063797][T10528] vhci_hcd: connection closed [ 603.064387][ T69] vhci_hcd vhci_hcd.6: stop threads [ 603.064414][ T69] vhci_hcd vhci_hcd.6: release socket [ 603.064661][ T69] vhci_hcd vhci_hcd.6: disconnect device [ 603.064961][ T69] vhci_hcd vhci_hcd.6: stop threads [ 603.064976][ T69] vhci_hcd vhci_hcd.6: release socket [ 603.065198][ T69] vhci_hcd vhci_hcd.6: disconnect device [ 603.065497][ T69] vhci_hcd vhci_hcd.6: stop threads [ 603.065512][ T69] vhci_hcd vhci_hcd.6: release socket [ 603.065715][ T69] vhci_hcd vhci_hcd.6: disconnect device [ 603.068977][T10538] vhci_hcd: connection closed [ 603.138190][T10545] vhci_hcd: connection closed [ 603.238228][ T12] vhci_hcd vhci_hcd.6: stop threads [ 603.238252][ T12] vhci_hcd vhci_hcd.6: release socket [ 603.238344][ T12] vhci_hcd vhci_hcd.6: disconnect device [ 603.328265][ T12] vhci_hcd vhci_hcd.6: stop threads [ 603.328288][ T12] vhci_hcd vhci_hcd.6: release socket [ 603.328380][ T12] vhci_hcd vhci_hcd.6: disconnect device [ 603.372047][T10536] vhci_hcd: connection closed [ 603.373096][ T176] vhci_hcd vhci_hcd.6: stop threads [ 603.373122][ T176] vhci_hcd vhci_hcd.6: release socket [ 603.373369][ T176] vhci_hcd vhci_hcd.6: disconnect device [ 603.389937][T10551] ip6gretap0: left promiscuous mode [ 607.298969][ T7535] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 608.539963][ T7535] usb 7-1: Using ep0 maxpacket: 32 [ 608.638368][ T10] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 608.898857][ T7535] usb 7-1: config 0 has an invalid interface number: 119 but max is 0 [ 608.898883][ T7535] usb 7-1: config 0 has no interface number 0 [ 608.898916][ T7535] usb 7-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 608.898932][ T7535] usb 7-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 608.898951][ T7535] usb 7-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 608.898971][ T7535] usb 7-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 608.898988][ T7535] usb 7-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 608.902173][ T7535] usb 7-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 608.902200][ T7535] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.902218][ T7535] usb 7-1: Product: syz [ 608.902232][ T7535] usb 7-1: Manufacturer: syz [ 608.902245][ T7535] usb 7-1: SerialNumber: syz [ 609.164096][ T7535] usb 7-1: config 0 descriptor?? [ 609.165070][T10610] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 609.185037][ T7535] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.119/input/input12 [ 609.595444][ T7535] usb 7-1: USB disconnect, device number 3 [ 610.284262][T10643] veth4: entered promiscuous mode [ 610.284291][T10643] veth4: entered allmulticast mode [ 610.646657][ T8536] usb usb46-port1: attempt power cycle [ 612.222701][ T8536] usb usb46-port1: unable to enumerate USB device [ 613.319303][T10684] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1276'. [ 617.186248][T10727] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1294'. [ 617.598565][T10736] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1300'. [ 619.560497][T10760] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1309'. [ 620.316743][T10774] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1313'. [ 620.821098][T10787] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1319'. [ 620.985611][T10788] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1319'. [ 621.135582][T10795] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1321'. [ 621.521240][ T5887] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 621.668266][ T5887] usb 6-1: Using ep0 maxpacket: 32 [ 621.681279][ T5887] usb 6-1: config 0 has an invalid interface number: 119 but max is 0 [ 621.681391][ T5887] usb 6-1: config 0 has no interface number 0 [ 621.681529][ T5887] usb 6-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 621.681586][ T5887] usb 6-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 621.681654][ T5887] usb 6-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 621.681728][ T5887] usb 6-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 621.681795][ T5887] usb 6-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 621.691328][ T5887] usb 6-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 621.691419][ T5887] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.691474][ T5887] usb 6-1: Product: syz [ 621.691521][ T5887] usb 6-1: Manufacturer: syz [ 621.691557][ T5887] usb 6-1: SerialNumber: syz [ 621.765715][ T5887] usb 6-1: config 0 descriptor?? [ 621.768605][T10798] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 621.861303][ T5887] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.119/input/input13 [ 621.916210][T10818] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1334'. [ 622.012845][ C0] bcm5974 6-1:0.119: trackpad urb failed: -1 [ 622.280764][ T5887] usb 6-1: USB disconnect, device number 2 [ 627.682865][T10871] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1353'. [ 627.735389][T10875] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1353'. [ 629.896182][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.896285][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 631.507950][T10922] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1371'. [ 631.572364][T10923] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1371'. [ 635.577110][T10971] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1389'. [ 635.652552][T10977] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1389'. [ 638.767783][T11022] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1406'. [ 638.843442][T11025] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1406'. [ 640.366666][T11038] veth6: entered promiscuous mode [ 640.366696][T11038] veth6: entered allmulticast mode [ 641.168333][ T9833] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 641.321920][ T9833] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 641.325114][ T9833] usb 10-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 641.325146][ T9833] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.325168][ T9833] usb 10-1: Product: syz [ 641.325184][ T9833] usb 10-1: Manufacturer: syz [ 641.325200][ T9833] usb 10-1: SerialNumber: syz [ 641.469754][ T9833] usb 10-1: config 0 descriptor?? [ 641.485953][ T9833] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 641.998151][ T9833] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 641.998344][ T9833] gspca_pac7302 10-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 642.885043][T11071] bond1: entered promiscuous mode [ 642.907689][T11071] 8021q: adding VLAN 0 to HW filter on device bond1 [ 643.013365][T11076] 8021q: adding VLAN 0 to HW filter on device bond2 [ 643.015835][T11076] bond2: entered promiscuous mode [ 643.016714][T11076] bond1: (slave bond2): Enslaving as an active interface with an up link [ 643.082646][T11071] macsec1: entered promiscuous mode [ 643.082673][T11071] macsec1: entered allmulticast mode [ 643.264656][ T7962] usb 10-1: USB disconnect, device number 7 [ 652.280719][T11142] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 652.284988][T11142] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1444'. [ 657.161438][T11183] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10) [ 657.161468][T11183] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 657.161570][T11183] vhci_hcd vhci_hcd.0: Device attached [ 657.197393][T11183] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(12) [ 657.197422][T11183] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 657.197497][T11183] vhci_hcd vhci_hcd.0: Device attached [ 657.229070][T11183] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(14) [ 657.229099][T11183] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 657.229236][T11183] vhci_hcd vhci_hcd.0: Device attached [ 657.278569][T11183] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(16) [ 657.278598][T11183] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 657.278722][T11183] vhci_hcd vhci_hcd.0: Device attached [ 657.285487][T11183] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(18) [ 657.285517][T11183] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 657.285626][T11183] vhci_hcd vhci_hcd.0: Device attached [ 657.335878][T11183] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(20) [ 657.335952][T11183] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 657.336338][T11183] vhci_hcd vhci_hcd.0: Device attached [ 657.366178][T11183] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 657.367311][T11183] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 657.384791][T11183] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 657.418235][ T5801] usb 45-1: new low-speed USB device number 5 using vhci_hcd [ 657.431789][T11183] vhci_hcd vhci_hcd.0: port 0 already used [ 657.501574][T11200] vhci_hcd: connection closed [ 657.501710][T11197] vhci_hcd: connection closed [ 657.516088][ T71] vhci_hcd vhci_hcd.6: stop threads [ 657.516121][ T71] vhci_hcd vhci_hcd.6: release socket [ 657.516281][ T71] vhci_hcd vhci_hcd.6: disconnect device [ 657.516452][ T71] vhci_hcd vhci_hcd.6: stop threads [ 657.516467][ T71] vhci_hcd vhci_hcd.6: release socket [ 657.516678][ T71] vhci_hcd vhci_hcd.6: disconnect device [ 657.516745][T11193] vhci_hcd: connection closed [ 657.534462][T11191] vhci_hcd: connection closed [ 657.535360][T11189] vhci_hcd: connection closed [ 657.535512][T11186] vhci_hcd: connection reset by peer [ 657.536355][ T71] vhci_hcd vhci_hcd.6: stop threads [ 657.536406][ T71] vhci_hcd vhci_hcd.6: release socket [ 657.536586][ T71] vhci_hcd vhci_hcd.6: disconnect device [ 657.554605][ T71] vhci_hcd vhci_hcd.6: stop threads [ 657.554631][ T71] vhci_hcd vhci_hcd.6: release socket [ 657.554671][ T71] vhci_hcd vhci_hcd.6: disconnect device [ 657.554886][ T71] vhci_hcd vhci_hcd.6: stop threads [ 657.554900][ T71] vhci_hcd vhci_hcd.6: release socket [ 657.554936][ T71] vhci_hcd vhci_hcd.6: disconnect device [ 657.557862][ T71] vhci_hcd vhci_hcd.6: stop threads [ 657.557904][ T71] vhci_hcd vhci_hcd.6: release socket [ 657.557999][ T71] vhci_hcd vhci_hcd.6: disconnect device [ 662.708281][ T5801] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 662.839173][T11300] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1469'. [ 663.456714][T11300] bond3 (unregistering): Released all slaves [ 663.668453][ T9527] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 663.766890][T11307] ip6gre1: entered promiscuous mode [ 663.766912][T11307] ip6gre1: entered allmulticast mode [ 663.818211][ T9527] usb 6-1: Using ep0 maxpacket: 32 [ 663.824507][ T9527] usb 6-1: config 0 has an invalid interface number: 119 but max is 0 [ 663.824537][ T9527] usb 6-1: config 0 has no interface number 0 [ 663.824584][ T9527] usb 6-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 663.824607][ T9527] usb 6-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 663.824635][ T9527] usb 6-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 663.824662][ T9527] usb 6-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 663.824687][ T9527] usb 6-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 663.827256][ T9527] usb 6-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 663.827285][ T9527] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.827306][ T9527] usb 6-1: Product: syz [ 663.827321][ T9527] usb 6-1: Manufacturer: syz [ 663.827337][ T9527] usb 6-1: SerialNumber: syz [ 663.883960][ T9527] usb 6-1: config 0 descriptor?? [ 663.917882][T11313] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 663.981991][ T9527] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.119/input/input14 [ 664.275784][ T5936] usb usb46-port1: attempt power cycle [ 664.542764][ T9527] usb 6-1: USB disconnect, device number 3 [ 664.850011][ T5936] usb usb46-port1: unable to enumerate USB device [ 666.949929][T11346] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 666.962462][T11346] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1481'. [ 670.847952][T11376] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10) [ 670.847982][T11376] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 670.853515][T11376] vhci_hcd vhci_hcd.0: Device attached [ 670.878806][T11376] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(12) [ 670.878834][T11376] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 670.878978][T11376] vhci_hcd vhci_hcd.0: Device attached [ 670.885401][T11376] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(14) [ 670.885430][T11376] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 670.885572][T11376] vhci_hcd vhci_hcd.0: Device attached [ 670.908491][T11376] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(16) [ 670.908581][T11376] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 670.908976][T11376] vhci_hcd vhci_hcd.0: Device attached [ 671.098155][ T9007] usb 43-1: new low-speed USB device number 3 using vhci_hcd [ 671.184472][T11391] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 671.453931][T11391] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 671.533024][T11391] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 672.043693][T11378] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(21) [ 672.043722][T11378] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 672.043911][T11378] vhci_hcd vhci_hcd.0: Device attached [ 672.044221][T11376] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(18) [ 672.044244][T11376] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 672.044349][T11376] vhci_hcd vhci_hcd.0: Device attached [ 672.329246][T11376] vhci_hcd vhci_hcd.0: port 0 already used [ 673.183934][T11389] vhci_hcd: connection closed [ 673.188293][T11395] vhci_hcd: connection closed [ 673.189617][ T69] vhci_hcd vhci_hcd.5: stop threads [ 673.189654][ T69] vhci_hcd vhci_hcd.5: release socket [ 673.189750][ T69] vhci_hcd vhci_hcd.5: disconnect device [ 673.198121][ T69] vhci_hcd vhci_hcd.5: stop threads [ 673.198142][ T69] vhci_hcd vhci_hcd.5: release socket [ 673.198414][ T69] vhci_hcd vhci_hcd.5: disconnect device [ 673.215520][T11387] vhci_hcd: connection closed [ 673.216456][T11385] vhci_hcd: connection closed [ 673.217415][T11383] vhci_hcd: connection closed [ 673.218190][T11381] vhci_hcd: connection reset by peer [ 673.231674][ T6374] vhci_hcd vhci_hcd.5: stop threads [ 673.231727][ T6374] vhci_hcd vhci_hcd.5: release socket [ 673.231923][ T6374] vhci_hcd vhci_hcd.5: disconnect device [ 673.303298][ T6374] vhci_hcd vhci_hcd.5: stop threads [ 673.303324][ T6374] vhci_hcd vhci_hcd.5: release socket [ 673.303399][ T6374] vhci_hcd vhci_hcd.5: disconnect device [ 673.306048][ T6374] vhci_hcd vhci_hcd.5: stop threads [ 673.306064][ T6374] vhci_hcd vhci_hcd.5: release socket [ 673.306102][ T6374] vhci_hcd vhci_hcd.5: disconnect device [ 673.306404][ T6374] vhci_hcd vhci_hcd.5: stop threads [ 673.306419][ T6374] vhci_hcd vhci_hcd.5: release socket [ 673.306457][ T6374] vhci_hcd vhci_hcd.5: disconnect device [ 675.643583][T11438] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1507'. [ 675.707839][T11437] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 675.761907][T11437] team0: Port device batadv2 added [ 675.763316][T11438] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 675.858396][ T867] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 676.010198][ T867] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 676.010218][ T867] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 676.011645][ T867] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 676.011673][ T867] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 676.011694][ T867] usb 8-1: SerialNumber: syz [ 676.198430][ T9007] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 676.376252][T11435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 676.376837][T11435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 676.660105][ T867] usb 8-1: unknown interface protocol 0x17, assuming v1 [ 676.660125][ T867] usb 8-1: 0:2 : does not exist [ 676.862518][T11460] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(10) [ 676.862550][T11460] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 676.863099][T11460] vhci_hcd vhci_hcd.0: Device attached [ 676.874083][T11463] vhci_hcd vhci_hcd.0: pdev(9) rhport(1) sockfd(13) [ 676.874111][T11463] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 676.874185][T11463] vhci_hcd vhci_hcd.0: Device attached [ 676.945658][T11460] vhci_hcd vhci_hcd.0: pdev(9) rhport(2) sockfd(12) [ 676.947061][T11460] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 676.947169][T11460] vhci_hcd vhci_hcd.0: Device attached [ 676.960330][ T37] audit: type=1326 audit(1767619956.665:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11454 comm="syz.6.1513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d80bf749 code=0x7ffc0000 [ 676.960388][ T37] audit: type=1326 audit(1767619956.695:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11454 comm="syz.6.1513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fc7d80bf749 code=0x7ffc0000 [ 676.960443][ T37] audit: type=1326 audit(1767619956.695:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11454 comm="syz.6.1513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d80bf749 code=0x7ffc0000 [ 676.960825][ T37] audit: type=1326 audit(1767619956.705:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11454 comm="syz.6.1513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7d80bf749 code=0x7ffc0000 [ 676.960961][ T37] audit: type=1326 audit(1767619956.705:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11454 comm="syz.6.1513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d80bf749 code=0x7ffc0000 [ 676.961090][ T37] audit: type=1326 audit(1767619956.705:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11454 comm="syz.6.1513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fc7d80bf749 code=0x7ffc0000 [ 676.961211][ T37] audit: type=1326 audit(1767619956.705:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11454 comm="syz.6.1513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d80bf749 code=0x7ffc0000 [ 676.961338][ T37] audit: type=1326 audit(1767619956.705:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11454 comm="syz.6.1513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc7d80bf749 code=0x7ffc0000 [ 676.961456][ T37] audit: type=1326 audit(1767619956.705:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11454 comm="syz.6.1513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d80bf749 code=0x7ffc0000 [ 676.961605][ T37] audit: type=1326 audit(1767619956.705:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11454 comm="syz.6.1513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc7d80bf749 code=0x7ffc0000 [ 677.012428][T11463] vhci_hcd vhci_hcd.0: pdev(9) rhport(3) sockfd(17) [ 677.012456][T11463] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 677.012519][T11463] vhci_hcd vhci_hcd.0: Device attached [ 677.065931][T11460] vhci_hcd vhci_hcd.0: pdev(9) rhport(4) sockfd(16) [ 677.065954][T11460] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 677.066297][T11460] vhci_hcd vhci_hcd.0: Device attached [ 677.081067][T11460] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 677.082099][T11460] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 677.083040][T11460] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 677.274106][T11463] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(19) [ 677.274190][T11463] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 677.274676][T11463] vhci_hcd vhci_hcd.0: Device attached [ 677.334514][ T867] usb 8-1: USB disconnect, device number 17 [ 677.406776][T11474] vhci_hcd: connection closed [ 677.407239][T11472] vhci_hcd: connection closed [ 677.419745][ T6327] vhci_hcd vhci_hcd.9: stop threads [ 677.419764][ T6327] vhci_hcd vhci_hcd.9: release socket [ 677.420021][ T6327] vhci_hcd vhci_hcd.9: disconnect device [ 677.420236][ T6327] vhci_hcd vhci_hcd.9: stop threads [ 677.420247][ T6327] vhci_hcd vhci_hcd.9: release socket [ 677.420391][ T6327] vhci_hcd vhci_hcd.9: disconnect device [ 677.428855][ T5887] usb 51-1: new low-speed USB device number 6 using vhci_hcd [ 677.539078][T11469] vhci_hcd: connection closed [ 677.540997][ T4958] vhci_hcd vhci_hcd.9: stop threads [ 677.541016][ T4958] vhci_hcd vhci_hcd.9: release socket [ 677.541185][ T4958] vhci_hcd vhci_hcd.9: disconnect device [ 677.542459][T11467] vhci_hcd: connection closed [ 677.543924][T11464] vhci_hcd: connection closed [ 677.544186][T11462] vhci_hcd: connection reset by peer [ 677.546001][ T7323] vhci_hcd vhci_hcd.9: stop threads [ 677.546049][ T7323] vhci_hcd vhci_hcd.9: release socket [ 677.546223][ T7323] vhci_hcd vhci_hcd.9: disconnect device [ 677.546457][ T7323] vhci_hcd vhci_hcd.9: stop threads [ 677.546468][ T7323] vhci_hcd vhci_hcd.9: release socket [ 677.546610][ T7323] vhci_hcd vhci_hcd.9: disconnect device [ 677.546823][ T7323] vhci_hcd vhci_hcd.9: stop threads [ 677.546834][ T7323] vhci_hcd vhci_hcd.9: release socket [ 677.547024][ T7323] vhci_hcd vhci_hcd.9: disconnect device [ 677.618596][ T9527] usb usb44-port1: attempt power cycle [ 678.091830][T11377] udevd[11377]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 678.099737][T11479] veth2: entered promiscuous mode [ 678.099755][T11479] veth2: entered allmulticast mode [ 678.595038][ T9527] usb usb44-port1: unable to enumerate USB device [ 680.778510][T11501] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1522'. [ 680.892254][T11505] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1523'. [ 681.289933][T11509] kAFS: No cell specified [ 681.560447][ T9833] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 681.771304][ T9833] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 681.771334][ T9833] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 681.773562][ T9833] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 681.773591][ T9833] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 681.773621][ T9833] usb 8-1: SerialNumber: syz [ 681.971021][T11514] veth2: entered promiscuous mode [ 681.971049][T11514] veth2: entered allmulticast mode [ 682.075397][T11510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 682.229698][T11510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 682.518359][ T5887] vhci_hcd vhci_hcd.9: vhci_device speed not set [ 682.675541][ T9833] usb 8-1: unknown interface protocol 0x17, assuming v1 [ 682.675571][ T9833] usb 8-1: 0:2 : does not exist [ 682.792480][ T9833] usb 8-1: USB disconnect, device number 18 [ 682.857974][T11526] netlink: 104 bytes leftover after parsing attributes in process `syz.9.1534'. [ 683.392729][T11377] udevd[11377]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 683.616000][T11536] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1535'. [ 684.128984][ T5936] usb usb52-port1: attempt power cycle [ 684.403696][T11541] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 684.458667][ T3512] netdevsim netdevsim9 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 684.458723][ T3512] netdevsim netdevsim9 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 684.458764][ T3512] netdevsim netdevsim9 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 684.458804][ T3512] netdevsim netdevsim9 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 684.605605][T11550] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(10) [ 684.605636][T11550] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 684.683071][T11553] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(13) [ 684.683103][T11553] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 684.703931][T11561] netlink: 'syz.6.1542': attribute type 10 has an invalid length. [ 684.703957][T11561] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1542'. [ 684.704020][T11561] dummy0: entered promiscuous mode [ 684.704871][T11561] bridge0: port 3(dummy0) entered blocking state [ 684.705102][T11561] bridge0: port 3(dummy0) entered disabled state [ 684.705299][T11561] dummy0: entered allmulticast mode [ 684.719039][T11554] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(16) [ 684.719068][T11554] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 684.726349][T11554] vhci_hcd vhci_hcd.0: Device attached [ 684.726547][T11550] vhci_hcd vhci_hcd.0: Device attached [ 684.726701][T11553] vhci_hcd vhci_hcd.0: Device attached [ 684.730408][T11561] bridge0: port 3(dummy0) entered blocking state [ 684.730576][T11561] bridge0: port 3(dummy0) entered forwarding state [ 684.907091][ T5936] usb usb52-port1: unable to enumerate USB device [ 684.937996][T11565] vhci_hcd vhci_hcd.0: pdev(7) rhport(3) sockfd(12) [ 684.938120][T11565] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 684.938189][T11565] vhci_hcd vhci_hcd.0: Device attached [ 684.978275][T11550] vhci_hcd vhci_hcd.0: pdev(7) rhport(4) sockfd(18) [ 684.978305][T11550] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 684.978387][T11550] vhci_hcd vhci_hcd.0: Device attached [ 684.999756][T11550] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(20) [ 684.999783][T11550] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 684.999884][T11550] vhci_hcd vhci_hcd.0: Device attached [ 685.033326][T11550] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 685.070852][T11550] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 685.071946][T11550] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 685.089807][T11550] vhci_hcd vhci_hcd.0: port 0 already used [ 685.161278][T11579] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1545'. [ 685.438236][ T5936] usb 47-1: new low-speed USB device number 2 using vhci_hcd [ 686.123996][T11571] vhci_hcd: connection closed [ 686.124595][T11568] vhci_hcd: connection closed [ 686.125289][T11566] vhci_hcd: connection closed [ 686.126543][T11552] vhci_hcd: connection reset by peer [ 686.128363][T11557] vhci_hcd: connection closed [ 686.149115][T11558] vhci_hcd: connection closed [ 686.151359][ T58] vhci_hcd vhci_hcd.7: stop threads [ 686.151385][ T58] vhci_hcd vhci_hcd.7: release socket [ 686.154622][ T58] vhci_hcd vhci_hcd.7: disconnect device [ 686.157352][ T58] vhci_hcd vhci_hcd.7: stop threads [ 686.157371][ T58] vhci_hcd vhci_hcd.7: release socket [ 686.157604][ T58] vhci_hcd vhci_hcd.7: disconnect device [ 686.157901][ T58] vhci_hcd vhci_hcd.7: stop threads [ 686.157916][ T58] vhci_hcd vhci_hcd.7: release socket [ 686.222432][ T58] vhci_hcd vhci_hcd.7: disconnect device [ 686.222793][ T58] vhci_hcd vhci_hcd.7: stop threads [ 686.222810][ T58] vhci_hcd vhci_hcd.7: release socket [ 686.222883][ T58] vhci_hcd vhci_hcd.7: disconnect device [ 686.223190][ T58] vhci_hcd vhci_hcd.7: stop threads [ 686.223205][ T58] vhci_hcd vhci_hcd.7: release socket [ 686.223243][ T58] vhci_hcd vhci_hcd.7: disconnect device [ 686.223696][ T58] vhci_hcd vhci_hcd.7: stop threads [ 686.223712][ T58] vhci_hcd vhci_hcd.7: release socket [ 686.223776][ T58] vhci_hcd vhci_hcd.7: disconnect device [ 687.775558][T11601] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1553'. [ 689.569821][T11615] ip6gre1: entered promiscuous mode [ 689.569849][T11615] ip6gre1: entered allmulticast mode [ 690.308255][ T9833] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 690.690648][ T9833] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 690.690678][ T9833] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 690.692197][ T9833] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 690.692225][ T9833] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 690.692246][ T9833] usb 7-1: SerialNumber: syz [ 690.740041][ T5936] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 690.941916][T11624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 690.946290][T11624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 691.047308][T11633] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1565'. [ 691.247986][ T9833] usb 7-1: unknown interface protocol 0x17, assuming v1 [ 691.263425][ T9833] usb 7-1: 0:2 : does not exist [ 691.341828][ T9833] usb 7-1: USB disconnect, device number 4 [ 691.343625][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.343735][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.476148][T11377] udevd[11377]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 692.009905][ T10] usb usb48-port1: attempt power cycle [ 692.013592][T11658] veth2: entered promiscuous mode [ 692.013623][T11658] veth2: entered allmulticast mode [ 692.205921][T11663] netlink: 'syz.8.1576': attribute type 10 has an invalid length. [ 692.205944][T11663] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1576'. [ 692.230372][T11665] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1577'. [ 692.611035][ T10] usb usb48-port1: unable to enumerate USB device [ 692.806849][T11688] veth2: entered promiscuous mode [ 692.806877][T11688] veth2: entered allmulticast mode [ 692.838184][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 693.003171][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 693.003202][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 693.004502][ T10] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 693.004530][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 693.004552][ T10] usb 6-1: SerialNumber: syz [ 693.263377][T11684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 693.263965][T11684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 693.381468][ T10] usb 6-1: unknown interface protocol 0x17, assuming v1 [ 693.381497][ T10] usb 6-1: 0:2 : does not exist [ 693.488917][ T10] usb 6-1: USB disconnect, device number 4 [ 693.659007][T11377] udevd[11377]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 694.023691][T11706] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1593'. [ 695.019436][T11732] veth8: entered promiscuous mode [ 695.019464][T11732] veth8: entered allmulticast mode [ 695.231214][ T44] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 695.390047][ T44] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 695.390076][ T44] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 695.391623][ T44] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 695.391651][ T44] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 695.391673][ T44] usb 10-1: SerialNumber: syz [ 695.680285][T11729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 695.681794][T11729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 695.757156][ T44] usb 10-1: unknown interface protocol 0x17, assuming v1 [ 695.757185][ T44] usb 10-1: 0:2 : does not exist [ 695.800573][ T44] usb 10-1: USB disconnect, device number 8 [ 695.926418][T11742] udevd[11742]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 696.343136][T11750] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10) [ 696.343166][T11750] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 696.347168][T11750] vhci_hcd vhci_hcd.0: Device attached [ 696.382411][T11750] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(12) [ 696.382441][T11750] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 696.382498][T11750] vhci_hcd vhci_hcd.0: Device attached [ 696.387804][T11750] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(14) [ 696.387832][T11750] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 696.388365][T11750] vhci_hcd vhci_hcd.0: Device attached [ 696.453299][T11750] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(16) [ 696.453321][T11750] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 696.453649][T11750] vhci_hcd vhci_hcd.0: Device attached [ 696.455769][T11750] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(18) [ 696.455787][T11750] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 696.456022][T11750] vhci_hcd vhci_hcd.0: Device attached [ 696.504086][T11750] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(20) [ 696.504114][T11750] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 696.504370][T11750] vhci_hcd vhci_hcd.0: Device attached [ 696.507551][T11750] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 696.523414][T11750] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 696.569138][T11750] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 696.581373][T11750] vhci_hcd vhci_hcd.0: port 0 already used [ 696.588158][ T44] usb 45-1: new low-speed USB device number 6 using vhci_hcd [ 696.853877][T11764] vhci_hcd: connection closed [ 696.854384][ T2238] vhci_hcd vhci_hcd.6: stop threads [ 696.854411][ T2238] vhci_hcd vhci_hcd.6: release socket [ 696.854453][ T2238] vhci_hcd vhci_hcd.6: disconnect device [ 696.855620][T11762] vhci_hcd: connection closed [ 696.856136][T11760] vhci_hcd: connection closed [ 696.856550][ T2238] vhci_hcd vhci_hcd.6: stop threads [ 696.856569][ T2238] vhci_hcd vhci_hcd.6: release socket [ 696.856811][ T2238] vhci_hcd vhci_hcd.6: disconnect device [ 696.910889][T11756] vhci_hcd: connection closed [ 696.915817][ T6327] vhci_hcd vhci_hcd.6: stop threads [ 696.915844][ T6327] vhci_hcd vhci_hcd.6: release socket [ 696.916309][ T6327] vhci_hcd vhci_hcd.6: disconnect device [ 696.941893][T11754] vhci_hcd: connection closed [ 696.945855][T11751] vhci_hcd: connection reset by peer [ 696.959395][ T6327] vhci_hcd vhci_hcd.6: stop threads [ 696.959419][ T6327] vhci_hcd vhci_hcd.6: release socket [ 696.973095][ T6327] vhci_hcd vhci_hcd.6: disconnect device [ 696.973460][ T6327] vhci_hcd vhci_hcd.6: stop threads [ 696.973477][ T6327] vhci_hcd vhci_hcd.6: release socket [ 696.973707][ T6327] vhci_hcd vhci_hcd.6: disconnect device [ 697.012586][ T6327] vhci_hcd vhci_hcd.6: stop threads [ 697.012614][ T6327] vhci_hcd vhci_hcd.6: release socket [ 697.012847][ T6327] vhci_hcd vhci_hcd.6: disconnect device [ 697.722864][T11797] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1622'. [ 697.785879][T11809] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1622'. [ 697.860767][T11813] kAFS: No cell specified [ 698.773950][T11835] veth4: entered promiscuous mode [ 698.773977][T11835] veth4: entered allmulticast mode [ 700.450604][T11862] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1642'. [ 701.079701][T11878] netlink: 'syz.6.1649': attribute type 10 has an invalid length. [ 701.079724][T11878] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1649'. [ 701.718529][ T44] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 701.926181][T11896] bond5 (unregistering): Released all slaves [ 702.407720][T11900] macsec1: entered promiscuous mode [ 702.407749][T11900] macsec1: entered allmulticast mode [ 702.539239][T11913] netlink: 'syz.6.1663': attribute type 10 has an invalid length. [ 702.539262][T11913] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1663'. [ 704.656077][T11940] kAFS: No cell specified [ 706.408169][T11971] 9p: Bad value for 'rfdno' [ 707.904870][T12001] 9p: Bad value for 'rfdno' [ 712.705936][T12030] 9p: Bad value for 'rfdno' [ 713.548222][ T10] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 713.768276][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 713.773520][ T10] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 713.773554][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 713.776587][ T10] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 713.776616][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.776637][ T10] usb 8-1: Product: syz [ 713.776653][ T10] usb 8-1: Manufacturer: syz [ 713.776668][ T10] usb 8-1: SerialNumber: syz [ 713.915454][T12055] veth6: entered promiscuous mode [ 713.915482][T12055] veth6: entered allmulticast mode [ 714.644480][ T10] usb 8-1: config 0 descriptor?? [ 714.657380][ T10] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 714.657475][ T10] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class) [ 714.787825][T12063] 9p: Bad value for 'rfdno' [ 715.296380][ T10] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 715.297095][ T10] em28xx 8-1:0.0: Config register raw data: 0xfffffffb [ 715.902866][ T10] em28xx 8-1:0.0: Unknown AC97 audio processor detected! [ 715.903533][ T10] em28xx 8-1:0.0: couldn't setup AC97 register 2 [ 715.904354][ T10] em28xx 8-1:0.0: couldn't setup AC97 register 4 [ 715.904981][ T10] em28xx 8-1:0.0: couldn't setup AC97 register 6 [ 716.518740][ T10] em28xx 8-1:0.0: couldn't setup AC97 register 56 [ 716.535895][ T10] usb 8-1: USB disconnect, device number 19 [ 719.020307][ T37] kauditd_printk_skb: 22 callbacks suppressed [ 719.020328][ T37] audit: type=1326 audit(1767619998.925:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12145 comm="syz.6.1760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d80bf749 code=0x7ffc0000 [ 719.028127][ T37] audit: type=1326 audit(1767619998.925:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12145 comm="syz.6.1760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fc7d80bf749 code=0x7ffc0000 [ 719.028187][ T37] audit: type=1326 audit(1767619998.925:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12145 comm="syz.6.1760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d80bf749 code=0x7ffc0000 [ 719.028235][ T37] audit: type=1326 audit(1767619998.925:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12145 comm="syz.6.1760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7d80bf749 code=0x7ffc0000 [ 719.028283][ T37] audit: type=1326 audit(1767619998.925:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12145 comm="syz.6.1760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d80bf749 code=0x7ffc0000 [ 719.028331][ T37] audit: type=1326 audit(1767619998.925:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12145 comm="syz.6.1760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fc7d80bf749 code=0x7ffc0000 [ 719.028377][ T37] audit: type=1326 audit(1767619998.925:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12145 comm="syz.6.1760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d80bf749 code=0x7ffc0000 [ 719.028426][ T37] audit: type=1326 audit(1767619998.925:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12145 comm="syz.6.1760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc7d80bf749 code=0x7ffc0000 [ 719.028475][ T37] audit: type=1326 audit(1767619998.925:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12145 comm="syz.6.1760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d80bf749 code=0x7ffc0000 [ 719.028524][ T37] audit: type=1326 audit(1767619998.925:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12145 comm="syz.6.1760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc7d80bf749 code=0x7ffc0000 [ 723.141687][T12218] 9pnet_fd: Insufficient options for proto=fd [ 724.682346][T12246] 9pnet_fd: Insufficient options for proto=fd [ 727.750503][T12287] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1819'. [ 727.954486][T12287] bond7 (unregistering): Released all slaves [ 727.999437][T12298] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1821'. [ 729.916004][ T9833] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 730.102035][ T9833] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 730.102064][ T9833] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 730.137312][ T9833] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 730.137344][ T9833] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 730.137366][ T9833] usb 8-1: SerialNumber: syz [ 730.402387][T12337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 730.405228][T12337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 730.488300][T12359] netlink: 96 bytes leftover after parsing attributes in process `syz.8.1848'. [ 730.492737][ T9833] usb 8-1: unknown interface protocol 0x17, assuming v1 [ 730.492762][ T9833] usb 8-1: 0:2 : does not exist [ 730.649063][ T9833] usb 8-1: USB disconnect, device number 20 [ 731.003854][T12205] udevd[12205]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 731.928510][ T8536] usb 8-1: new full-speed USB device number 21 using dummy_hcd [ 732.091106][ T8536] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 732.115383][ T8536] usb 8-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 732.115417][ T8536] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.115439][ T8536] usb 8-1: Product: syz [ 732.115461][ T8536] usb 8-1: Manufacturer: syz [ 732.115477][ T8536] usb 8-1: SerialNumber: syz [ 732.164253][ T8536] usb 8-1: config 0 descriptor?? [ 732.210004][ T8536] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 732.988895][ T8536] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 732.988986][ T8536] gspca_pac7302 8-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 733.027265][ T8536] usb 8-1: USB disconnect, device number 21 [ 734.044908][T12441] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 734.156073][T12444] veth8: entered promiscuous mode [ 734.156100][T12444] veth8: entered allmulticast mode [ 736.398253][ T8489] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 736.562591][ T8489] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 736.562619][ T8489] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 736.563923][ T8489] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 736.563951][ T8489] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 736.563971][ T8489] usb 8-1: SerialNumber: syz [ 736.843296][T12479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 736.857814][T12479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 736.914864][ T8489] usb 8-1: unknown interface protocol 0x17, assuming v1 [ 736.914892][ T8489] usb 8-1: 0:2 : does not exist [ 736.978337][ T8489] usb 8-1: USB disconnect, device number 22 [ 737.105864][T12205] udevd[12205]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 737.489428][T12507] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 742.899430][ T9527] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 743.110151][ T9527] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 743.113732][ T9527] usb 7-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 743.113763][ T9527] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.113784][ T9527] usb 7-1: Product: syz [ 743.113800][ T9527] usb 7-1: Manufacturer: syz [ 743.113815][ T9527] usb 7-1: SerialNumber: syz [ 743.131228][ T9527] usb 7-1: config 0 descriptor?? [ 743.412620][ T9527] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 744.196480][ T9527] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 744.196558][ T9527] gspca_pac7302 7-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 744.237575][ T9527] usb 7-1: USB disconnect, device number 5 [ 744.260617][T12615] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 744.300882][T12615] team0: Port device batadv1 added [ 746.864779][T12667] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1969'. [ 750.739557][T12721] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1992'. [ 750.781872][ T5809] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 750.786360][ T5809] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 750.805744][ T5809] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 750.815012][ T5809] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 750.827555][ T5809] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 752.928253][ T5809] Bluetooth: hci0: command tx timeout [ 753.089713][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 753.089788][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 754.496776][T12720] chnl_net:caif_netlink_parms(): no params data found [ 755.008226][ T5809] Bluetooth: hci0: command tx timeout [ 757.441304][ T5809] Bluetooth: hci0: command tx timeout [ 758.919786][T11798] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.488680][ T5809] Bluetooth: hci0: command tx timeout [ 759.550894][T12865] netlink: 892 bytes leftover after parsing attributes in process `syz.9.2048'. [ 759.629801][T11798] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.717960][T12720] bridge0: port 1(bridge_slave_0) entered blocking state [ 759.724708][T12720] bridge0: port 1(bridge_slave_0) entered disabled state [ 759.724979][T12720] bridge_slave_0: entered allmulticast mode [ 759.748649][T12720] bridge_slave_0: entered promiscuous mode [ 759.759455][T12720] bridge0: port 2(bridge_slave_1) entered blocking state [ 759.774196][T12720] bridge0: port 2(bridge_slave_1) entered disabled state [ 759.774466][T12720] bridge_slave_1: entered allmulticast mode [ 759.777387][T12720] bridge_slave_1: entered promiscuous mode [ 760.455745][T11798] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.430925][T11798] bond0: (slave netdevsim0): Releasing backup interface [ 763.135963][T11798] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.244461][T12927] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2072'. [ 763.344461][T12720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 763.368607][T12720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 764.622972][T12720] team0: Port device team_slave_0 added [ 764.634556][T12720] team0: Port device team_slave_1 added [ 765.084259][T12720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 765.084278][T12720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 765.084308][T12720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 765.173914][T12720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 765.173934][T12720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 765.173966][T12720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 766.384196][T12720] hsr_slave_0: entered promiscuous mode [ 766.385762][T12720] hsr_slave_1: entered promiscuous mode [ 766.394350][T12720] debugfs: 'hsr0' already exists in 'hsr' [ 766.394427][T12720] Cannot create hsr debugfs directory [ 766.429578][T11798] dummy0: left allmulticast mode [ 766.443661][T11798] bridge0: port 3(dummy0) entered disabled state [ 766.510396][T11798] bridge_slave_1: left allmulticast mode [ 766.510419][T11798] bridge_slave_1: left promiscuous mode [ 766.510683][T11798] bridge0: port 2(bridge_slave_1) entered disabled state [ 770.547304][T13048] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2119'. [ 771.550446][T11798] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 771.646343][T11798] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 771.694451][T11798] bond0 (unregistering): Released all slaves [ 772.584534][T11798] bond1 (unregistering): Released all slaves [ 772.602679][T11798] bond2 (unregistering): Released all slaves [ 772.620025][T11798] bond3 (unregistering): Released all slaves [ 772.638450][T11798] bond4 (unregistering): Released all slaves [ 773.412471][T13048] bond3: entered promiscuous mode [ 773.413187][T13048] 8021q: adding VLAN 0 to HW filter on device bond3 [ 773.606631][T11798] tipc: Left network mode [ 774.604197][T13146] 9pnet_fd: Insufficient options for proto=fd [ 775.478172][ T9833] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 776.330397][ T9833] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 776.330426][ T9833] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 776.337077][ T9833] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 776.337106][ T9833] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 776.337128][ T9833] usb 7-1: SerialNumber: syz [ 776.648483][T13156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 776.649093][T13156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 776.940549][ T9833] usb 7-1: unknown interface protocol 0x17, assuming v1 [ 776.940576][ T9833] usb 7-1: 0:2 : does not exist [ 777.012089][ T9833] usb 7-1: USB disconnect, device number 6 [ 777.172524][T13157] udevd[13157]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 777.498987][T11798] hsr_slave_0: left promiscuous mode [ 777.598154][T11798] hsr_slave_1: left promiscuous mode [ 777.599151][T11798] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 777.599177][T11798] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 777.870817][T11798] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 777.870847][T11798] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 779.516220][T11798] veth1_macvtap: left promiscuous mode [ 779.516336][T11798] veth0_macvtap: left promiscuous mode [ 779.517900][T11798] veth1_vlan: left promiscuous mode [ 779.540916][T11798] veth0_vlan: left promiscuous mode [ 780.603820][ T9007] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 781.071408][ T9007] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 781.071437][ T9007] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 781.072999][ T9007] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 781.073029][ T9007] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 781.073050][ T9007] usb 8-1: SerialNumber: syz [ 781.117366][T13254] netlink: 'syz.9.2203': attribute type 10 has an invalid length. [ 781.117423][T13254] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2203'. [ 781.347256][T13220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 781.363604][T13220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 784.489506][T11798] team0 (unregistering): Port device team_slave_1 removed [ 784.840069][T11798] team0 (unregistering): Port device team_slave_0 removed [ 786.231791][ T9007] usb 8-1: unknown interface protocol 0x17, assuming v1 [ 786.231818][ T9007] usb 8-1: 0:2 : does not exist [ 787.976188][ T9007] usb 8-1: USB disconnect, device number 23 [ 788.289956][T13438] sctp: [Deprecated]: syz.6.2290 (pid 13438) Use of struct sctp_assoc_value in delayed_ack socket option. [ 788.289956][T13438] Use struct sctp_sack_info instead [ 790.038338][T13488] netlink: 1752 bytes leftover after parsing attributes in process `syz.9.2311'. [ 791.208200][ T806] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 791.358112][ T806] usb 10-1: Using ep0 maxpacket: 32 [ 791.362790][ T806] usb 10-1: config 0 has no interfaces? [ 791.365842][ T806] usb 10-1: New USB device found, idVendor=0cf3, idProduct=817a, bcdDevice=eb.19 [ 791.365870][ T806] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.365890][ T806] usb 10-1: Product: syz [ 791.365905][ T806] usb 10-1: Manufacturer: syz [ 791.365920][ T806] usb 10-1: SerialNumber: syz [ 791.474572][ T806] usb 10-1: config 0 descriptor?? [ 791.683987][ T806] usb 10-1: USB disconnect, device number 9 [ 793.344617][T12720] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 793.414315][T12720] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 793.583475][T12720] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 793.672594][T12720] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 794.712090][T12720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 794.872453][T12720] 8021q: adding VLAN 0 to HW filter on device team0 [ 795.714363][ T6374] bridge0: port 1(bridge_slave_0) entered blocking state [ 795.714586][ T6374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 796.577298][ T8505] bridge0: port 2(bridge_slave_1) entered blocking state [ 796.577449][ T8505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 796.968238][ T8536] IPVS: starting estimator thread 0... [ 797.058712][T13592] IPVS: using max 11 ests per chain, 26400 per kthread [ 797.919292][T13604] netlink: 1752 bytes leftover after parsing attributes in process `syz.9.2346'. [ 798.440649][T12720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 799.653786][T12720] veth0_vlan: entered promiscuous mode [ 799.891342][T12720] veth1_vlan: entered promiscuous mode [ 801.022352][T12720] veth0_macvtap: entered promiscuous mode [ 801.046730][T12720] veth1_macvtap: entered promiscuous mode [ 801.149306][T13665] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2361'. [ 801.199962][T13665] ip6gre2: entered promiscuous mode [ 801.199991][T13665] ip6gre2: entered allmulticast mode [ 801.238018][T12720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 801.456025][T12720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 801.498744][T11792] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.501229][T11792] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.501274][T11792] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.501314][T11792] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.036864][T13684] netlink: 'syz.7.2367': attribute type 10 has an invalid length. [ 802.036892][T13684] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2367'. [ 802.201718][T13684] dummy0: entered promiscuous mode [ 802.203971][T13684] bridge0: port 3(dummy0) entered blocking state [ 802.204109][T13684] bridge0: port 3(dummy0) entered disabled state [ 802.204279][T13684] dummy0: entered allmulticast mode [ 802.353336][T13684] bridge0: port 3(dummy0) entered blocking state [ 802.383168][T13684] bridge0: port 3(dummy0) entered forwarding state [ 803.014588][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 803.014612][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 804.413198][T11792] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 804.413220][T11792] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 804.925548][T13732] netlink: 'syz.8.2381': attribute type 10 has an invalid length. [ 804.925573][T13732] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2381'. [ 804.925611][T13732] dummy0: entered promiscuous mode [ 804.926612][T13732] bridge0: port 3(dummy0) entered blocking state [ 804.957649][T13732] bridge0: port 3(dummy0) entered disabled state [ 804.957924][T13732] dummy0: entered allmulticast mode [ 805.013303][T13732] bridge0: port 3(dummy0) entered blocking state [ 805.013485][T13732] bridge0: port 3(dummy0) entered forwarding state [ 805.603491][ T5804] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 806.143450][ T5804] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 806.178843][ T5804] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 806.515468][ T5804] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 806.516579][ T5804] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 808.612684][ T5809] Bluetooth: hci1: command tx timeout [ 808.907361][ T8536] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 809.218144][ T8536] usb 9-1: Using ep0 maxpacket: 32 [ 809.225785][ T8536] usb 9-1: unable to get BOS descriptor or descriptor too short [ 809.228967][ T8536] usb 9-1: config 128 has an invalid interface number: 127 but max is 3 [ 809.228995][ T8536] usb 9-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 809.229016][ T8536] usb 9-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 809.229040][ T8536] usb 9-1: config 128 has no interface number 0 [ 809.229798][ T8536] usb 9-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 809.229818][ T8536] usb 9-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 809.229834][ T8536] usb 9-1: config 128 interface 127 has no altsetting 0 [ 809.329841][ T8536] usb 9-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 809.329874][ T8536] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.329889][ T8536] usb 9-1: Product: syz [ 809.329899][ T8536] usb 9-1: Manufacturer: syz [ 809.329910][ T8536] usb 9-1: SerialNumber: syz [ 809.574948][T13767] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2391'. [ 809.750714][T13767] bond4: entered promiscuous mode [ 809.751153][T13767] 8021q: adding VLAN 0 to HW filter on device bond4 [ 809.755056][ T8536] usb 9-1: USB disconnect, device number 2 [ 809.989880][T13693] udevd[13693]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 810.704662][ T5809] Bluetooth: hci1: command tx timeout [ 811.299375][T13737] chnl_net:caif_netlink_parms(): no params data found [ 812.778488][ T5809] Bluetooth: hci1: command tx timeout [ 812.820596][T13737] bridge0: port 1(bridge_slave_0) entered blocking state [ 812.820821][T13737] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.821078][T13737] bridge_slave_0: entered allmulticast mode [ 812.823923][T13737] bridge_slave_0: entered promiscuous mode [ 812.892142][T13737] bridge0: port 2(bridge_slave_1) entered blocking state [ 812.892277][T13737] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.892511][T13737] bridge_slave_1: entered allmulticast mode [ 812.895434][T13737] bridge_slave_1: entered promiscuous mode [ 813.386894][T13737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 813.732467][T13737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 813.762362][T13814] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2405'. [ 814.096495][T13814] bond5: entered promiscuous mode [ 814.096895][T13814] 8021q: adding VLAN 0 to HW filter on device bond5 [ 814.222129][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.222182][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.563424][T13737] team0: Port device team_slave_0 added [ 814.692393][T13737] team0: Port device team_slave_1 added [ 814.849093][ T5809] Bluetooth: hci1: command tx timeout [ 815.223732][T13824] ip6gre1: entered promiscuous mode [ 815.223761][T13824] ip6gre1: entered allmulticast mode [ 815.261098][T13737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 815.261126][T13737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 815.261157][T13737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 815.318113][T13737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 815.318131][T13737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 815.318160][T13737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 816.043196][T13737] hsr_slave_0: entered promiscuous mode [ 816.081653][T13737] hsr_slave_1: entered promiscuous mode [ 816.087925][T13737] debugfs: 'hsr0' already exists in 'hsr' [ 816.089125][T13737] Cannot create hsr debugfs directory [ 818.278585][T13849] netlink: 860 bytes leftover after parsing attributes in process `syz.6.2416'. [ 818.381439][T13853] netlink: 860 bytes leftover after parsing attributes in process `syz.6.2416'. [ 818.741320][T13857] ip6gre2: entered promiscuous mode [ 818.741350][T13857] ip6gre2: entered allmulticast mode [ 821.879283][T13737] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.605136][T13886] process 'syz.8.2427' launched './file1' with NULL argv: empty string added [ 824.114399][T13737] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.261118][T13892] veth1_to_bond: entered allmulticast mode [ 824.261216][T13892] veth1_to_bond: left allmulticast mode [ 824.529383][T13895] netlink: 860 bytes leftover after parsing attributes in process `syz.8.2431'. [ 824.634596][T13899] netlink: 860 bytes leftover after parsing attributes in process `syz.8.2431'. [ 824.889070][T13737] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.194280][T13737] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.340727][T13906] comedi comedi3: comedi_config --init_data is deprecated [ 828.691410][T13921] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 829.114278][T13737] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 829.169822][T13737] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 829.265137][T13737] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 829.556272][T13737] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 830.850641][T13737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 830.954592][T13737] 8021q: adding VLAN 0 to HW filter on device team0 [ 831.024737][T11785] bridge0: port 1(bridge_slave_0) entered blocking state [ 831.024988][T11785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 831.089469][T11785] bridge0: port 2(bridge_slave_1) entered blocking state [ 831.100414][T11785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 831.588276][ T5809] Bluetooth: hci0: Malformed LE Event: 0x0b [ 831.876846][T13737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 834.374628][T13737] veth0_vlan: entered promiscuous mode [ 834.480679][T13737] veth1_vlan: entered promiscuous mode [ 835.290904][T13737] veth0_macvtap: entered promiscuous mode [ 835.321417][T13737] veth1_macvtap: entered promiscuous mode [ 835.518465][T13737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 835.552261][T13737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 835.584935][T11794] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.585201][T11794] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.585242][T11794] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.585281][T11794] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.522675][T11798] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 838.522698][T11798] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 838.688216][ T9527] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 838.873905][ T9527] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 838.873934][ T9527] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 838.875899][ T9527] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 838.875930][ T9527] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 838.875953][ T9527] usb 10-1: SerialNumber: syz [ 839.150561][T11807] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 839.150583][T11807] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 839.186651][T14023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 839.187225][T14023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 839.281265][ T9527] usb 10-1: unknown interface protocol 0x17, assuming v1 [ 839.281288][ T9527] usb 10-1: 0:2 : does not exist [ 839.322192][ T9527] usb 10-1: USB disconnect, device number 10 [ 839.462711][T14026] udevd[14026]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 839.984026][T14045] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.2382'. [ 848.982605][T14135] veth10: entered promiscuous mode [ 848.982633][T14135] veth10: entered allmulticast mode [ 854.725616][ T44] IPVS: starting estimator thread 0... [ 854.818206][T14202] IPVS: using max 10 ests per chain, 24000 per kthread [ 859.633537][T14248] veth10: entered promiscuous mode [ 859.633566][T14248] veth10: entered allmulticast mode [ 861.048388][T14261] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2539'. [ 867.889620][T14308] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 867.901241][T14310] veth12: entered promiscuous mode [ 867.901268][T14310] veth12: entered allmulticast mode [ 870.212358][T14326] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 870.228222][T14326] block device autoloading is deprecated and will be removed. [ 874.202839][T14356] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 876.408915][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 876.408991][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 878.266988][T14405] veth12: entered promiscuous mode [ 878.267018][T14405] veth12: entered allmulticast mode [ 878.928101][ T5809] Bluetooth: hci0: command 0x0406 tx timeout [ 885.006827][T14475] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2608'. [ 885.087757][T14475] bond1: entered promiscuous mode [ 885.094809][T14475] 8021q: adding VLAN 0 to HW filter on device bond1 [ 885.333370][T14479] 8021q: adding VLAN 0 to HW filter on device bond2 [ 885.350603][T14479] bond2: entered promiscuous mode [ 885.382504][T14479] bond1: (slave bond2): Enslaving as an active interface with an up link [ 891.121722][T14533] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2626'. [ 891.170081][T14533] bond1: entered promiscuous mode [ 891.170633][T14533] 8021q: adding VLAN 0 to HW filter on device bond1 [ 892.518167][T14533] 8021q: adding VLAN 0 to HW filter on device bond2 [ 892.523036][T14533] bond2: entered promiscuous mode [ 892.526258][T14533] bond1: (slave bond2): Enslaving as an active interface with an up link [ 896.669209][T14778] syzkaller0: entered promiscuous mode [ 896.669238][T14778] syzkaller0: entered allmulticast mode [ 896.846145][T14778] tipc: Enabled bearer , priority 0 [ 896.881380][T14777] tipc: Resetting bearer [ 897.260667][T14792] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2635'. [ 897.850854][T14777] tipc: Disabling bearer [ 900.039077][T14812] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2643'. [ 900.254933][T14812] bond7: entered promiscuous mode [ 900.255535][T14812] 8021q: adding VLAN 0 to HW filter on device bond7 [ 900.359527][T14815] 8021q: adding VLAN 0 to HW filter on device bond8 [ 900.363879][T14815] bond8: entered promiscuous mode [ 900.364724][T14815] bond7: (slave bond8): Enslaving as an active interface with an up link [ 901.104699][T14838] sch_fq: defrate 4294967295 ignored. [ 904.688291][T14871] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2662'. [ 904.817031][T14869] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 904.822840][T14869] team0: Port device batadv1 added [ 905.025087][T14871] bond9: entered promiscuous mode [ 905.038503][T14871] 8021q: adding VLAN 0 to HW filter on device bond9 [ 905.249279][T14873] 8021q: adding VLAN 0 to HW filter on device bond10 [ 905.270023][T14873] bond10: entered promiscuous mode [ 905.274372][T14873] bond9: (slave bond10): Enslaving as an active interface with an up link [ 908.751200][T14917] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2675'. [ 914.088246][T14955] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2687'. [ 915.259389][T14966] netlink: 'syz.7.2690': attribute type 10 has an invalid length. [ 915.259414][T14966] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2690'. [ 917.638381][T14989] netlink: 68 bytes leftover after parsing attributes in process `syz.9.2700'. [ 918.243498][T15004] netlink: 'syz.5.2706': attribute type 10 has an invalid length. [ 918.243525][T15004] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2706'. [ 918.243564][T15004] dummy0: entered promiscuous mode [ 918.244458][T15004] bridge0: port 3(dummy0) entered blocking state [ 918.245236][T15004] bridge0: port 3(dummy0) entered disabled state [ 918.245552][T15004] dummy0: entered allmulticast mode [ 919.193735][T15004] bridge0: port 3(dummy0) entered blocking state [ 919.193909][T15004] bridge0: port 3(dummy0) entered forwarding state [ 919.402481][T15011] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2712'. [ 924.074644][T15059] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2724'. [ 929.179288][ T5804] Bluetooth: hci1: command 0x0406 tx timeout [ 930.573651][T15148] netlink: 'syz.7.2753': attribute type 10 has an invalid length. [ 930.573678][T15148] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2753'. [ 934.014989][T15171] 9p: Bad value for 'port' [ 934.978590][ T5945] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 935.361794][ T5945] usb 7-1: config 8 has an invalid interface number: 80 but max is 0 [ 935.361981][ T5945] usb 7-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 935.362004][ T5945] usb 7-1: config 8 has no interface number 0 [ 935.362054][ T5945] usb 7-1: config 8 interface 80 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 935.362100][ T5945] usb 7-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 935.362126][ T5945] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.473941][ T5945] usb 7-1: NFC: intf ffff88803d724000 id ffffffff8deca480 [ 937.431345][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 937.431423][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 937.456895][ T10] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 937.818111][ T10] usb 10-1: Using ep0 maxpacket: 8 [ 937.823017][ T10] usb 10-1: config index 0 descriptor too short (expected 5924, got 36) [ 937.823055][ T10] usb 10-1: config 250 has an invalid interface number: 228 but max is -1 [ 937.823079][ T10] usb 10-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 937.823099][ T10] usb 10-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 937.823122][ T10] usb 10-1: config 250 has no interface number 0 [ 937.823177][ T10] usb 10-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 937.823207][ T10] usb 10-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 937.823233][ T10] usb 10-1: config 250 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 937.823262][ T10] usb 10-1: config 250 interface 228 has no altsetting 0 [ 937.831621][ T10] usb 10-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 937.831653][ T10] usb 10-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 937.831675][ T10] usb 10-1: Product: syz [ 937.831692][ T10] usb 10-1: SerialNumber: syz [ 937.997692][ T10] hub 10-1:250.228: bad descriptor, ignoring hub [ 937.997736][ T10] hub 10-1:250.228: probe with driver hub failed with error -5 [ 938.039277][ T9833] usb 7-1: USB disconnect, device number 7 [ 940.237967][ T10] usb 10-1: reset high-speed USB device number 11 using dummy_hcd [ 941.304575][T15259] netlink: 'syz.6.2794': attribute type 10 has an invalid length. [ 941.304600][T15259] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2794'. [ 941.377996][ T10] usb 10-1: USB disconnect, device number 11 [ 941.574406][T15269] netlink: 51 bytes leftover after parsing attributes in process `syz.6.2799'. [ 942.314075][T15283] netlink: 'syz.7.2805': attribute type 11 has an invalid length. [ 942.314101][T15283] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2805'. [ 943.183044][T15294] netlink: 'syz.8.2810': attribute type 10 has an invalid length. [ 943.183070][T15294] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2810'. [ 945.866372][T15337] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2824'. [ 949.528652][T15371] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2836'. [ 949.528693][T15371] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2836'. [ 950.836743][T15394] netlink: 7 bytes leftover after parsing attributes in process `syz.5.2845'. [ 951.453461][T15403] netlink: 'syz.9.2849': attribute type 1 has an invalid length. [ 951.453484][T15403] netlink: 224 bytes leftover after parsing attributes in process `syz.9.2849'. [ 958.100060][T15495] netlink: 1688 bytes leftover after parsing attributes in process `syz.6.2883'. [ 970.229981][T15605] sctp: [Deprecated]: syz.6.2919 (pid 15605) Use of struct sctp_assoc_value in delayed_ack socket option. [ 970.229981][T15605] Use struct sctp_sack_info instead [ 985.853890][T15718] veth14: entered promiscuous mode [ 985.853918][T15718] veth14: entered allmulticast mode [ 986.606928][T15729] nftables ruleset with unbound chain [ 990.412221][T15761] veth16: entered promiscuous mode [ 990.412250][T15761] veth16: entered allmulticast mode [ 991.786262][T15784] netlink: zone id is out of range [ 991.786288][T15784] netlink: zone id is out of range [ 993.342312][T15796] veth4: entered promiscuous mode [ 993.342340][T15796] veth4: entered allmulticast mode [ 996.696855][T15834] netlink: 4456 bytes leftover after parsing attributes in process `syz.9.2995'. [ 998.715723][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.715802][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.848181][T15847] sctp: [Deprecated]: syz.6.2998 (pid 15847) Use of struct sctp_assoc_value in delayed_ack socket option. [ 998.848181][T15847] Use struct sctp_sack_info instead [ 1000.091008][T15859] netlink: 7 bytes leftover after parsing attributes in process `syz.7.3002'. [ 1004.163716][T15895] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 1004.163746][T15895] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1004.163939][T15895] vhci_hcd vhci_hcd.0: Device attached [ 1004.332468][T15906] sctp: [Deprecated]: syz.9.3016 (pid 15906) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1004.332468][T15906] Use struct sctp_sack_info instead [ 1004.428064][ T5888] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1004.578084][ T5888] usb 8-1: Using ep0 maxpacket: 16 [ 1004.579033][ T5888] usb 8-1: too many configurations: 60, using maximum allowed: 8 [ 1004.580569][ T5888] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1004.580594][ T5888] usb 8-1: config 0 has no interfaces? [ 1004.582052][ T5888] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1004.582075][ T5888] usb 8-1: config 0 has no interfaces? [ 1004.583507][ T5888] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1004.583531][ T5888] usb 8-1: config 0 has no interfaces? [ 1004.584969][ T5888] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1004.584994][ T5888] usb 8-1: config 0 has no interfaces? [ 1004.586438][ T5888] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1004.586462][ T5888] usb 8-1: config 0 has no interfaces? [ 1004.688579][ T5888] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1004.688610][ T5888] usb 8-1: config 0 has no interfaces? [ 1004.690210][ T5888] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1004.690242][ T5888] usb 8-1: config 0 has no interfaces? [ 1004.695247][ T5888] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1004.695273][ T5888] usb 8-1: config 0 has no interfaces? [ 1004.751756][ T5888] usb 8-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9 [ 1004.751789][ T5888] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204 [ 1004.751812][ T5888] usb 8-1: Product: syz [ 1004.751828][ T5888] usb 8-1: Manufacturer: syz [ 1004.751843][ T5888] usb 8-1: SerialNumber: syz [ 1004.805577][ T5888] usb 8-1: config 0 descriptor?? [ 1004.844205][T11118] usb 47-1: new low-speed USB device number 3 using vhci_hcd [ 1004.972070][T15919] netlink: 7 bytes leftover after parsing attributes in process `syz.5.3021'. [ 1005.848148][T15897] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 1005.870655][ T1333] vhci_hcd vhci_hcd.7: stop threads [ 1005.870681][ T1333] vhci_hcd vhci_hcd.7: release socket [ 1005.900877][ T1333] vhci_hcd vhci_hcd.7: disconnect device [ 1005.908210][T15919] netlink: 7 bytes leftover after parsing attributes in process `syz.5.3021'. [ 1005.932801][ T806] usb 8-1: USB disconnect, device number 24 [ 1007.179509][T15950] syz.7.3033 uses obsolete (PF_INET,SOCK_PACKET) [ 1010.228090][T11118] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 1011.210395][T16000] netlink: 7 bytes leftover after parsing attributes in process `syz.6.3051'. [ 1012.168943][T16000] netlink: 7 bytes leftover after parsing attributes in process `syz.6.3051'. [ 1013.277586][T16021] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3060'. [ 1015.438190][T16045] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3070'. [ 1015.781198][T16051] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3072'. [ 1016.398400][ T9833] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1016.567287][ T9833] usb 10-1: Using ep0 maxpacket: 8 [ 1016.575631][ T9833] usb 10-1: config 0 has an invalid interface number: 84 but max is 0 [ 1016.575662][ T9833] usb 10-1: config 0 has no interface number 0 [ 1016.575712][ T9833] usb 10-1: config 0 interface 84 altsetting 246 has an endpoint descriptor with address 0xFA, changing to 0x8A [ 1016.575744][ T9833] usb 10-1: config 0 interface 84 altsetting 246 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 1016.575773][ T9833] usb 10-1: config 0 interface 84 altsetting 246 has an endpoint descriptor with address 0xC8, changing to 0x88 [ 1016.575802][ T9833] usb 10-1: config 0 interface 84 altsetting 246 endpoint 0xE has invalid wMaxPacketSize 0 [ 1016.575827][ T9833] usb 10-1: config 0 interface 84 has no altsetting 0 [ 1016.648082][ T9833] usb 10-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=46.08 [ 1016.648115][ T9833] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.648137][ T9833] usb 10-1: Product: syz [ 1016.648153][ T9833] usb 10-1: Manufacturer: syz [ 1016.648175][ T9833] usb 10-1: SerialNumber: syz [ 1016.705362][ T9833] usb 10-1: config 0 descriptor?? [ 1017.473118][ T9833] comedi comedi5: Endpoint has wrong direction [ 1017.473144][ T9833] dt9812 10-1:0.84: driver 'dt9812' failed to auto-configure device. [ 1017.545642][T16079] netlink: 27 bytes leftover after parsing attributes in process `syz.6.3080'. [ 1017.583299][ T9833] usb 10-1: USB disconnect, device number 12 [ 1018.038411][T16083] netlink: 65043 bytes leftover after parsing attributes in process `syz.6.3084'. [ 1021.581825][T16118] netlink: 27 bytes leftover after parsing attributes in process `syz.8.3095'. [ 1024.022628][T16155] netlink: 68 bytes leftover after parsing attributes in process `syz.9.3107'. [ 1024.247590][T16159] netlink: 27 bytes leftover after parsing attributes in process `syz.5.3109'. [ 1025.195197][T14775] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1025.578207][T14775] usb 7-1: Using ep0 maxpacket: 16 [ 1025.580790][T14775] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 102, changing to 7 [ 1025.580825][T14775] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 10030, setting to 1024 [ 1025.584575][T14775] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1025.584605][T14775] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.584628][T14775] usb 7-1: Product: syz [ 1025.584644][T14775] usb 7-1: Manufacturer: syz [ 1025.584660][T14775] usb 7-1: SerialNumber: syz [ 1025.656741][T14775] usb 7-1: config 0 descriptor?? [ 1025.680597][T14775] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1025.680637][T14775] em28xx 7-1:0.0: DVB interface 0 found: isoc [ 1026.122357][T14775] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1027.568459][T14775] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1027.568509][T14775] em28xx 7-1:0.0: board has no eeprom [ 1028.157977][T14775] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1028.158009][T14775] em28xx 7-1:0.0: dvb set to isoc mode. [ 1028.158116][ T5888] em28xx 7-1:0.0: Binding DVB extension [ 1028.210683][T14775] usb 7-1: USB disconnect, device number 8 [ 1028.212957][T14775] em28xx 7-1:0.0: Disconnecting em28xx [ 1028.780255][ T5888] em28xx 7-1:0.0: Registering input extension [ 1028.782152][T14775] em28xx 7-1:0.0: Closing input extension [ 1028.821225][T16196] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3120'. [ 1028.901442][T14775] em28xx 7-1:0.0: Freeing device [ 1029.584872][T16204] netlink: 27 bytes leftover after parsing attributes in process `syz.6.3122'. [ 1033.261135][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1033.262024][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1033.287735][T16237] netlink: 68 bytes leftover after parsing attributes in process `syz.9.3132'. [ 1033.602423][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1033.602658][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1034.126261][T16228] ceph: No mds server is up or the cluster is laggy [ 1035.277594][T16242] netlink: 27 bytes leftover after parsing attributes in process `syz.9.3135'. [ 1035.608043][ T5945] libceph: connect (1)[c::]:6789 error -101 [ 1035.608270][ T5945] libceph: mon0 (1)[c::]:6789 connect error [ 1037.029823][T16266] netlink: 65043 bytes leftover after parsing attributes in process `syz.8.3141'. [ 1040.384864][T16299] netlink: 65043 bytes leftover after parsing attributes in process `syz.5.3154'. [ 1042.348072][ T806] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 1042.393046][T16336] netlink: 65043 bytes leftover after parsing attributes in process `syz.6.3167'. [ 1043.827468][ T806] usb 9-1: config 201 has an invalid interface number: 249 but max is 0 [ 1043.827498][ T806] usb 9-1: config 201 has no interface number 0 [ 1043.827545][ T806] usb 9-1: config 201 interface 249 has no altsetting 0 [ 1043.857232][ T806] usb 9-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df [ 1043.857264][ T806] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.857284][ T806] usb 9-1: Product: syz [ 1043.879058][T16343] sch_fq: defrate 4294967295 ignored. [ 1043.894303][ T806] usb 9-1: Manufacturer: syz [ 1043.894323][ T806] usb 9-1: SerialNumber: syz [ 1044.341325][ T5809] Bluetooth: hci0: unexpected event for opcode 0x1003 [ 1044.530273][ T806] ath6kl: Failed to submit usb control message: -71 [ 1044.530336][ T806] ath6kl: unable to send the bmi data to the device: -71 [ 1044.530359][ T806] ath6kl: Unable to send get target info: -71 [ 1044.595166][ T806] ath6kl: Failed to init ath6kl core: -71 [ 1044.717293][ T806] ath6kl_usb 9-1:201.249: probe with driver ath6kl_usb failed with error -71 [ 1045.251581][ T806] usb 9-1: USB disconnect, device number 3 [ 1048.418981][T16391] sch_fq: defrate 4294967295 ignored. [ 1048.447528][ T5809] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1048.448583][ T5809] Bluetooth: hci0: Injecting HCI hardware error event [ 1048.451005][ T5804] Bluetooth: hci0: hardware error 0x00 [ 1050.018475][ T9170] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1050.246022][ T9170] usb 10-1: Using ep0 maxpacket: 16 [ 1050.424074][ T9170] usb 10-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 1050.424106][ T9170] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.424127][ T9170] usb 10-1: Product: syz [ 1050.424142][ T9170] usb 10-1: Manufacturer: syz [ 1050.424158][ T9170] usb 10-1: SerialNumber: syz [ 1050.621867][ T5804] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1051.798943][ T9170] usb 10-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 1051.853735][ T9170] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1051.854390][ T9170] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 1051.854454][ T9170] usb 10-1: media controller created [ 1051.982728][ T9170] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1052.242083][ T9170] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1053.483915][ T9170] dvb_usb_gl861 10-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 1053.504627][ T9170] usb 10-1: USB disconnect, device number 13 [ 1053.649272][T16434] sch_fq: defrate 4294967295 ignored. [ 1057.342324][T16474] netlink: 27 bytes leftover after parsing attributes in process `syz.7.3216'. [ 1059.989984][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.990059][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1060.036639][T16514] netlink: 27 bytes leftover after parsing attributes in process `syz.9.3232'. [ 1060.704004][ T5809] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1060.758559][ T5809] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1060.761416][ T5809] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1060.763073][ T5809] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1060.763878][ T5809] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1063.088027][ T5804] Bluetooth: hci2: command tx timeout [ 1063.531865][T16516] chnl_net:caif_netlink_parms(): no params data found [ 1063.666258][T16553] netlink: 27 bytes leftover after parsing attributes in process `syz.9.3243'. [ 1065.093851][T16564] netlink: 68 bytes leftover after parsing attributes in process `syz.9.3245'. [ 1065.140278][T16516] bridge0: port 1(bridge_slave_0) entered blocking state [ 1065.148249][T16516] bridge0: port 1(bridge_slave_0) entered disabled state [ 1065.148994][T16516] bridge_slave_0: entered allmulticast mode [ 1065.168116][ T5804] Bluetooth: hci2: command tx timeout [ 1065.181023][T16516] bridge_slave_0: entered promiscuous mode [ 1065.215533][T16516] bridge0: port 2(bridge_slave_1) entered blocking state [ 1065.228828][T16516] bridge0: port 2(bridge_slave_1) entered disabled state [ 1065.229117][T16516] bridge_slave_1: entered allmulticast mode [ 1065.236112][T16516] bridge_slave_1: entered promiscuous mode [ 1068.557820][ T5804] Bluetooth: hci2: command tx timeout [ 1068.631257][T16516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1068.902232][T16516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1069.339339][T16516] team0: Port device team_slave_0 added [ 1069.352857][T16516] team0: Port device team_slave_1 added [ 1069.548045][ T7962] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 1069.654444][T16516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1069.654463][T16516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1069.654493][T16516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1069.665752][T16516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1069.665800][T16516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1069.665882][T16516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1069.882045][ T7962] usb 6-1: config 201 has an invalid interface number: 249 but max is 0 [ 1069.882076][ T7962] usb 6-1: config 201 has no interface number 0 [ 1069.882110][ T7962] usb 6-1: config 201 interface 249 has no altsetting 0 [ 1069.921030][ T7962] usb 6-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df [ 1069.921061][ T7962] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.921082][ T7962] usb 6-1: Product: syz [ 1069.921097][ T7962] usb 6-1: Manufacturer: syz [ 1069.921112][ T7962] usb 6-1: SerialNumber: syz [ 1070.254285][T16612] netlink: 7 bytes leftover after parsing attributes in process `syz.9.3254'. [ 1070.842728][ T5804] Bluetooth: hci2: command tx timeout [ 1070.946229][ T7962] ath6kl: Failed to submit usb control message: -71 [ 1070.946281][ T7962] ath6kl: unable to send the bmi data to the device: -71 [ 1070.946296][ T7962] ath6kl: Unable to send get target info: -71 [ 1070.981947][ T7962] ath6kl: Failed to init ath6kl core: -71 [ 1070.982541][ T7962] ath6kl_usb 6-1:201.249: probe with driver ath6kl_usb failed with error -71 [ 1071.075484][ T7962] usb 6-1: USB disconnect, device number 5 [ 1071.301244][T16516] hsr_slave_0: entered promiscuous mode [ 1071.302780][T16516] hsr_slave_1: entered promiscuous mode [ 1071.303810][T16516] debugfs: 'hsr0' already exists in 'hsr' [ 1071.303835][T16516] Cannot create hsr debugfs directory [ 1075.916465][T16516] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.583643][T16516] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1078.444275][T16516] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.070072][T16516] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.517153][T16705] netlink: 7 bytes leftover after parsing attributes in process `syz.9.3291'. [ 1079.628371][T16705] netlink: 7 bytes leftover after parsing attributes in process `syz.9.3291'. [ 1081.711801][T16516] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1081.824646][T16516] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1082.153761][T16516] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1083.088930][T16516] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1084.038577][T16516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1084.192920][T16516] 8021q: adding VLAN 0 to HW filter on device team0 [ 1084.243866][T14149] bridge0: port 1(bridge_slave_0) entered blocking state [ 1084.244235][T14149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1084.279747][T14148] bridge0: port 2(bridge_slave_1) entered blocking state [ 1084.287485][T14148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1085.467472][T16770] netlink: 27 bytes leftover after parsing attributes in process `syz.6.3311'. [ 1086.002446][T16516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1090.042245][T16516] veth0_vlan: entered promiscuous mode [ 1090.112016][T16516] veth1_vlan: entered promiscuous mode [ 1090.248969][T16516] veth0_macvtap: entered promiscuous mode [ 1090.266224][T16516] veth1_macvtap: entered promiscuous mode [ 1090.371021][T16516] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1090.443995][T16516] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1090.521905][T14158] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.540109][T14158] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.542847][T11792] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.571623][T11792] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.664708][T11794] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1092.664733][T11794] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1094.072217][T11792] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1094.072240][T11792] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1096.248143][ T7535] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 1097.869501][ T7535] usb 6-1: config 201 has an invalid interface number: 249 but max is 0 [ 1097.869534][ T7535] usb 6-1: config 201 has no interface number 0 [ 1097.869569][ T7535] usb 6-1: config 201 interface 249 has no altsetting 0 [ 1097.872729][ T7535] usb 6-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df [ 1097.872759][ T7535] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.872782][ T7535] usb 6-1: Product: syz [ 1097.872798][ T7535] usb 6-1: Manufacturer: syz [ 1097.872814][ T7535] usb 6-1: SerialNumber: syz [ 1098.261068][ T5804] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 1098.308941][ T7535] ath6kl: Failed to submit usb control message: -71 [ 1098.308994][ T7535] ath6kl: unable to send the bmi data to the device: -71 [ 1098.309011][ T7535] ath6kl: Unable to send get target info: -71 [ 1098.339254][ T7535] ath6kl: Failed to init ath6kl core: -71 [ 1098.339863][ T7535] ath6kl_usb 6-1:201.249: probe with driver ath6kl_usb failed with error -71 [ 1098.396983][ T7535] usb 6-1: USB disconnect, device number 6 [ 1102.288233][ T5804] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1102.289253][ T5804] Bluetooth: hci1: Injecting HCI hardware error event [ 1102.291990][ T5809] Bluetooth: hci1: hardware error 0x00 [ 1102.379020][T16914] blktrace: Concurrent blktraces are not allowed on loop16 [ 1106.433748][ T5809] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1106.969713][ T37] kauditd_printk_skb: 19 callbacks suppressed [ 1106.969732][ T37] audit: type=1326 audit(1767620386.875:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16954 comm="syz.6.3366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d80bf749 code=0x7ffc0000 [ 1106.971646][ T37] audit: type=1326 audit(1767620386.875:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16954 comm="syz.6.3366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d80bf749 code=0x7ffc0000 [ 1106.973900][ T37] audit: type=1326 audit(1767620386.875:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16954 comm="syz.6.3366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7fc7d80bf749 code=0x7ffc0000 [ 1106.974322][ T37] audit: type=1326 audit(1767620386.875:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16954 comm="syz.6.3366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d80bf749 code=0x7ffc0000 [ 1106.974610][ T37] audit: type=1326 audit(1767620386.875:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16954 comm="syz.6.3366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d80bf749 code=0x7ffc0000 [ 1107.267768][T16961] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 1111.500313][ T37] audit: type=1326 audit(1767620391.405:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17000 comm="syz.6.3379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d80bf749 code=0x7ffc0000 [ 1111.502697][ T37] audit: type=1326 audit(1767620391.405:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17000 comm="syz.6.3379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d80bf749 code=0x7ffc0000 [ 1111.502755][ T37] audit: type=1326 audit(1767620391.405:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17000 comm="syz.6.3379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fc7d80bf749 code=0x7ffc0000 [ 1111.502801][ T37] audit: type=1326 audit(1767620391.405:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17000 comm="syz.6.3379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d80bf749 code=0x7ffc0000 [ 1111.502850][ T37] audit: type=1326 audit(1767620391.405:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17000 comm="syz.6.3379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d80bf749 code=0x7ffc0000 [ 1114.699441][ T5804] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1114.704056][ T5804] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1114.723277][ T5804] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1114.725362][ T5804] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1114.743140][ T5804] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1116.848108][ T5809] Bluetooth: hci4: command tx timeout [ 1118.345878][T17055] netlink: 7 bytes leftover after parsing attributes in process `syz.5.3395'. [ 1118.401645][T17055] netlink: 7 bytes leftover after parsing attributes in process `syz.5.3395'. [ 1118.892204][T17027] chnl_net:caif_netlink_parms(): no params data found [ 1118.928025][ T5809] Bluetooth: hci4: command tx timeout [ 1121.534981][ T5809] Bluetooth: hci4: command tx timeout [ 1121.552969][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.553047][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1123.578686][ T5809] Bluetooth: hci4: command tx timeout [ 1124.299309][T17027] bridge0: port 1(bridge_slave_0) entered blocking state [ 1124.299447][T17027] bridge0: port 1(bridge_slave_0) entered disabled state [ 1124.299725][T17027] bridge_slave_0: entered allmulticast mode [ 1124.380357][T17027] bridge_slave_0: entered promiscuous mode [ 1124.408690][T17027] bridge0: port 2(bridge_slave_1) entered blocking state [ 1124.408858][T17027] bridge0: port 2(bridge_slave_1) entered disabled state [ 1124.409069][T17027] bridge_slave_1: entered allmulticast mode [ 1124.417950][T17095] netlink: 7 bytes leftover after parsing attributes in process `syz.7.3406'. [ 1124.461999][T17027] bridge_slave_1: entered promiscuous mode [ 1124.539483][T17095] netlink: 7 bytes leftover after parsing attributes in process `syz.7.3406'. [ 1125.646588][T17027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1125.687405][T17027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1126.172235][T17027] team0: Port device team_slave_0 added [ 1126.186532][T17027] team0: Port device team_slave_1 added [ 1126.453526][T17027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1126.453539][T17027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1126.453559][T17027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1126.509096][T17027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1126.509115][T17027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1126.509143][T17027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1127.090618][T17118] orangefs_devreq_open: device cannot be opened in blocking mode [ 1129.154096][T17137] netlink: 7 bytes leftover after parsing attributes in process `syz.6.3419'. [ 1129.170759][T17137] netlink: 7 bytes leftover after parsing attributes in process `syz.6.3419'. [ 1129.171264][T17027] hsr_slave_0: entered promiscuous mode [ 1129.204198][T17027] hsr_slave_1: entered promiscuous mode [ 1129.207741][T17027] debugfs: 'hsr0' already exists in 'hsr' [ 1129.207768][T17027] Cannot create hsr debugfs directory [ 1130.039179][T17158] trusted_key: encrypted_key: insufficient parameters specified [ 1135.063719][T17027] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1135.063756][T17027] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1135.398602][T17217] netlink: 7 bytes leftover after parsing attributes in process `syz.8.3430'. [ 1135.554919][T17217] netlink: 7 bytes leftover after parsing attributes in process `syz.8.3430'. [ 1135.814748][T17027] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1135.814796][T17027] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1136.417740][T17227] trusted_key: encrypted_key: insufficient parameters specified [ 1137.377388][T17027] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1137.377427][T17027] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1142.687532][T17027] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.687561][T17027] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1144.997047][T17288] blktrace: Concurrent blktraces are not allowed on loop16 [ 1147.421080][ T37] kauditd_printk_skb: 32 callbacks suppressed [ 1147.421101][ T37] audit: type=1800 audit(1767620427.285:325): pid=17301 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.5.3453" name="bus" dev="tmpfs" ino=1066 res=0 errno=0 [ 1147.711691][T17027] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1147.774522][T17027] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1148.122016][T17027] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1149.273634][T17027] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1149.871046][T17027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1150.052529][T17027] 8021q: adding VLAN 0 to HW filter on device team0 [ 1150.122423][ T1210] bridge0: port 1(bridge_slave_0) entered blocking state [ 1150.122540][ T1210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1150.142770][ T1210] bridge0: port 2(bridge_slave_1) entered blocking state [ 1150.172186][ T1210] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1155.265002][T17027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1155.462065][T17368] blktrace: Concurrent blktraces are not allowed on loop16 [ 1157.680482][T17027] veth0_vlan: entered promiscuous mode [ 1157.736020][T17027] veth1_vlan: entered promiscuous mode [ 1158.217472][T17027] veth0_macvtap: entered promiscuous mode [ 1158.264647][T17027] veth1_macvtap: entered promiscuous mode [ 1158.334726][T17027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1158.387718][T17027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1158.494667][T14068] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1158.494722][T14068] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1158.494763][T14068] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1158.494802][T14068] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1159.321168][T11790] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1159.321191][T11790] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1159.627890][T14068] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1159.627913][T14068] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1159.714836][T17404] trusted_key: encrypted_key: insufficient parameters specified [ 1162.539016][T17442] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1162.539106][T17442] CIFS: Unable to determine destination address [ 1163.376597][T17446] trusted_key: encrypted_key: insufficient parameters specified [ 1168.501401][T17478] trusted_key: encrypted_key: insufficient parameters specified [ 1168.848737][T17481] CIFS: Unable to determine destination address [ 1171.435571][T17516] trusted_key: encrypted_key: insufficient parameters specified [ 1172.884737][T17533] CIFS: Unable to determine destination address [ 1173.660037][T17536] blktrace: Concurrent blktraces are not allowed on loop14 [ 1174.295005][T17547] trusted_key: encrypted_key: insufficient parameters specified [ 1178.173147][T17575] trusted_key: encrypted_key: insufficient parameters specified [ 1179.339728][T17582] CIFS: Unable to determine destination address [ 1183.080398][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1183.080472][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1184.978436][T17620] trusted_key: encrypted_key: insufficient parameters specified [ 1185.355398][ T5809] Bluetooth: hci2: command 0x0406 tx timeout [ 1185.498411][T17623] CIFS: Unable to determine destination address [ 1192.932022][T17668] CIFS: Unable to determine destination address [ 1195.598656][T17698] CIFS: Unable to determine destination address [ 1200.803686][ T5888] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1200.952798][ T5804] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 1201.021020][ T5888] usb 9-1: New USB device found, idVendor=0545, idProduct=808b, bcdDevice=31.ad [ 1201.021055][ T5888] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1201.072460][ T5888] usb 9-1: config 0 descriptor?? [ 1201.100560][ T5888] gspca_main: tv8532-2.14.0 probing 0545:808b [ 1202.207861][T17745] CIFS: Unable to determine destination address [ 1202.879845][ T5888] usb 9-1: USB disconnect, device number 4 [ 1202.948786][T17751] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3585'. [ 1202.948862][T17751] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3585'. [ 1207.415096][ T5809] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1207.415490][ T5809] Bluetooth: hci2: Injecting HCI hardware error event [ 1207.435510][ T5804] Bluetooth: hci2: hardware error 0x00 [ 1210.540225][T17809] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3606'. [ 1211.585278][ T5804] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1212.121916][T17820] netlink: 'syz.6.3606': attribute type 2 has an invalid length. [ 1220.754546][T17890] CIFS: Unable to determine destination address [ 1222.299607][T17901] tipc: Started in network mode [ 1222.299643][T17901] tipc: Node identity ac1414aa, cluster identity 4711 [ 1222.334055][T17901] tipc: Enabled bearer , priority 10 [ 1222.368605][ T5804] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1222.372402][ T5804] Bluetooth: hci4: Injecting HCI hardware error event [ 1222.379144][ T5809] Bluetooth: hci4: hardware error 0x00 [ 1222.453243][T17905] tipc: Enabled bearer , priority 0 [ 1222.503200][ T5804] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 1224.618004][ T8536] tipc: Node number set to 2886997162 [ 1226.528459][ T5804] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1226.529002][ T5804] Bluetooth: hci3: Injecting HCI hardware error event [ 1226.548934][ T5804] Bluetooth: hci3: hardware error 0x00 [ 1226.614613][ T5809] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1226.855477][T17968] trusted_key: encrypted_key: insufficient parameters specified [ 1228.929919][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1229.154717][T17982] CIFS: Unable to determine destination address [ 1229.649102][ T5804] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1231.249510][T17991] tipc: Started in network mode [ 1231.249548][T17991] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 1231.249740][T17991] tipc: Enabled bearer , priority 0 [ 1232.247948][ T5886] tipc: Node number set to 11578026 [ 1232.704153][T18008] trusted_key: encrypted_key: insufficient parameters specified [ 1237.383906][T18037] CIFS: Unable to determine destination address [ 1238.890680][T18051] trusted_key: encrypted_key: insufficient parameters specified [ 1242.574166][T18085] CIFS: Unable to determine destination address [ 1244.302892][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1244.302969][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1246.737849][T18121] CIFS: Unable to determine destination address [ 1250.281770][T18170] CIFS: Unable to determine destination address [ 1251.467560][T18180] netlink: 'syz.5.3714': attribute type 1 has an invalid length. [ 1253.566027][T18208] tipc: Started in network mode [ 1253.566062][T18208] tipc: Node identity ac1414aa, cluster identity 4711 [ 1253.566956][T18208] tipc: Enabled bearer , priority 10 [ 1254.480359][T18205] CIFS: Unable to determine destination address [ 1254.649389][T17909] tipc: Node number set to 2886997162 [ 1257.877152][T18242] tipc: Started in network mode [ 1257.877185][T18242] tipc: Node identity ac1414aa, cluster identity 4711 [ 1257.887633][T18242] tipc: Enabled bearer , priority 10 [ 1258.097653][T16420] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 1258.407826][T16420] usb 8-1: device descriptor read/64, error -71 [ 1259.034157][T16420] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1259.036762][ T7544] tipc: Node number set to 2886997162 [ 1259.318204][T16420] usb 8-1: device descriptor read/64, error -71 [ 1260.100376][T16420] usb usb8-port1: attempt power cycle [ 1260.602123][T16420] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1260.618831][T16420] usb 8-1: device descriptor read/8, error -71 [ 1260.746689][T18269] CIFS: Unable to determine destination address [ 1260.969692][T16420] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1261.287990][T16420] usb 8-1: device descriptor read/8, error -71 [ 1261.403559][T16420] usb usb8-port1: unable to enumerate USB device [ 1262.069997][T18285] tipc: Enabling of bearer rejected, already enabled [ 1264.429096][T18318] tipc: Enabling of bearer rejected, already enabled [ 1264.748801][T18324] CIFS: Unable to determine destination address [ 1268.057882][ T37] audit: type=1326 audit(1767620547.955:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18332 comm="syz.6.3770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d80bf749 code=0x7ffc0000 [ 1268.064731][ T37] audit: type=1326 audit(1767620547.955:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18332 comm="syz.6.3770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fc7d80bf749 code=0x7ffc0000 [ 1268.064783][ T37] audit: type=1326 audit(1767620547.955:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18332 comm="syz.6.3770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d80bf749 code=0x7ffc0000 [ 1268.064889][ T37] audit: type=1326 audit(1767620547.955:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18332 comm="syz.6.3770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7d80bf749 code=0x7ffc0000 [ 1268.064939][ T37] audit: type=1326 audit(1767620547.955:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18332 comm="syz.6.3770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d80bf749 code=0x7ffc0000 [ 1268.064989][ T37] audit: type=1326 audit(1767620547.955:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18332 comm="syz.6.3770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fc7d80bf749 code=0x7ffc0000 [ 1268.065034][ T37] audit: type=1326 audit(1767620547.955:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18332 comm="syz.6.3770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d80bf749 code=0x7ffc0000 [ 1268.065080][ T37] audit: type=1326 audit(1767620547.955:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18332 comm="syz.6.3770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc7d80bf749 code=0x7ffc0000 [ 1268.065131][ T37] audit: type=1326 audit(1767620547.955:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18332 comm="syz.6.3770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d80bf749 code=0x7ffc0000 [ 1268.065181][ T37] audit: type=1326 audit(1767620547.955:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18332 comm="syz.6.3770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc7d80bf749 code=0x7ffc0000 [ 1270.683787][T18360] tipc: Enabling of bearer rejected, already enabled [ 1271.148563][T18369] blktrace: Concurrent blktraces are not allowed on loop18 [ 1271.289514][T18370] CIFS: Unable to determine destination address [ 1276.419430][T18418] blktrace: Concurrent blktraces are not allowed on loop14 [ 1278.792822][T18446] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3797'. [ 1281.839241][ T37] kauditd_printk_skb: 19 callbacks suppressed [ 1281.839266][ T37] audit: type=1326 audit(2000000003.070:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18471 comm="syz.9.3806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36e575f749 code=0x7ffc0000 [ 1281.841295][ T37] audit: type=1326 audit(2000000003.070:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18471 comm="syz.9.3806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36e575f749 code=0x7ffc0000 [ 1281.841711][ T37] audit: type=1326 audit(2000000003.070:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18471 comm="syz.9.3806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f36e575f749 code=0x7ffc0000 [ 1281.842354][ T37] audit: type=1326 audit(2000000003.070:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18471 comm="syz.9.3806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36e575f749 code=0x7ffc0000 [ 1281.855747][ T37] audit: type=1326 audit(2000000003.070:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18471 comm="syz.9.3806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36e575f749 code=0x7ffc0000 [ 1281.855805][ T37] audit: type=1326 audit(2000000003.070:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18471 comm="syz.9.3806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f36e575f749 code=0x7ffc0000 [ 1281.855981][ T37] audit: type=1326 audit(2000000003.070:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18471 comm="syz.9.3806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36e575f749 code=0x7ffc0000 [ 1281.856106][ T37] audit: type=1326 audit(2000000003.070:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18471 comm="syz.9.3806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36e575f749 code=0x7ffc0000 [ 1281.856223][ T37] audit: type=1326 audit(2000000003.070:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18471 comm="syz.9.3806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f36e575f749 code=0x7ffc0000 [ 1281.856349][ T37] audit: type=1326 audit(2000000003.070:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18471 comm="syz.9.3806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36e575f749 code=0x7ffc0000 [ 1284.187191][T18494] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3811'. [ 1288.531277][T18528] tmpfs: Bad value for 'mpol' [ 1294.644071][T18565] netlink: 'syz.8.3835': attribute type 5 has an invalid length. [ 1295.773796][T18580] blktrace: Concurrent blktraces are not allowed on loop18 [ 1301.731939][T18628] trusted_key: encrypted_key: insufficient parameters specified [ 1305.298025][ T9833] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1305.482310][ T9833] usb 10-1: Using ep0 maxpacket: 8 [ 1305.497156][ T9833] usb 10-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1305.497186][ T9833] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1305.497207][ T9833] usb 10-1: Product: syz [ 1305.497222][ T9833] usb 10-1: Manufacturer: syz [ 1305.497237][ T9833] usb 10-1: SerialNumber: syz [ 1305.551916][ T9833] usb 10-1: config 0 descriptor?? [ 1305.604437][ T9833] gspca_main: se401-2.14.0 probing 047d:5003 [ 1305.753044][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.753121][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1306.908296][T18681] trusted_key: encrypted_key: insufficient parameters specified [ 1307.706076][ T9833] gspca_se401: read req failed req 0x06 error -19 [ 1307.736086][ T9833] usb 10-1: USB disconnect, device number 14 [ 1309.888567][T16420] ------------[ cut here ]------------ [ 1309.888584][T16420] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 1309.888609][T16420] WARNING: drivers/gpu/drm/drm_vblank.c:1318 at drm_wait_one_vblank+0x39a/0x5c0, CPU#1: kworker/1:15/16420 [ 1309.888826][T16420] Modules linked in: [ 1309.888866][T16420] CPU: 1 UID: 0 PID: 16420 Comm: kworker/1:15 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1309.888897][T16420] Tainted: [L]=SOFTLOCKUP [ 1309.888904][T16420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1309.888920][T16420] Workqueue: events drm_fb_helper_damage_work [ 1309.889004][T16420] RIP: 0010:drm_wait_one_vblank+0x587/0x5c0 [ 1309.889030][T16420] Code: 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 ba d4 f6 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 8b 4c 24 04 <67> 48 0f b9 3a e9 d5 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f [ 1309.889051][T16420] RSP: 0018:ffffc900068e7860 EFLAGS: 00010246 [ 1309.889069][T16420] RAX: 1ffff1100487c200 RBX: ffffffff8ee5b070 RCX: 0000000000000000 [ 1309.889086][T16420] RDX: ffffffff8b569b80 RSI: ffffffff8b584ca0 RDI: ffffffff8ee5b070 [ 1309.889103][T16420] RBP: ffffc900068e7948 R08: 0000000000000000 R09: 0000000000000000 [ 1309.889117][T16420] R10: dffffc0000000000 R11: fffffbfff1db66ef R12: ffffffff8b584ca0 [ 1309.889133][T16420] R13: ffff8880243e1000 R14: 1ffff92000d1cf10 R15: ffffffff8b569b80 [ 1309.889150][T16420] FS: 0000000000000000(0000) GS:ffff888126def000(0000) knlGS:0000000000000000 [ 1309.889168][T16420] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1309.889183][T16420] CR2: 00007fc7d8e456c0 CR3: 0000000074f3c000 CR4: 00000000003526f0 [ 1309.889202][T16420] Call Trace: [ 1309.889215][T16420] [ 1309.889231][T16420] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 1309.889254][T16420] ? rt_spin_unlock+0x150/0x200 [ 1309.889393][T16420] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1309.889455][T16420] ? rt_spin_unlock+0x161/0x200 [ 1309.889489][T16420] ? drm_vblank_get+0x147/0x260 [ 1309.889523][T16420] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 1309.889565][T16420] drm_fb_helper_damage_work+0xc9/0x650 [ 1309.889751][T16420] ? process_scheduled_works+0x9ef/0x1770 [ 1309.889822][T16420] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 1309.889856][T16420] ? process_scheduled_works+0x9ef/0x1770 [ 1309.889881][T16420] ? process_scheduled_works+0x9ef/0x1770 [ 1309.889910][T16420] process_scheduled_works+0xad1/0x1770 [ 1309.889974][T16420] ? __pfx_process_scheduled_works+0x10/0x10 [ 1309.889998][T16420] ? do_raw_spin_lock+0x121/0x290 [ 1309.890045][T16420] worker_thread+0x8a0/0xda0 [ 1309.890089][T16420] ? __kthread_parkme+0x7b/0x200 [ 1309.890131][T16420] kthread+0x711/0x8a0 [ 1309.890165][T16420] ? __pfx_worker_thread+0x10/0x10 [ 1309.890190][T16420] ? __pfx_kthread+0x10/0x10 [ 1309.890218][T16420] ? rt_spin_unlock+0x150/0x200 [ 1309.890254][T16420] ? rt_spin_unlock+0x161/0x200 [ 1309.890282][T16420] ? __pfx_kthread+0x10/0x10 [ 1309.890316][T16420] ret_from_fork+0x510/0xa50 [ 1309.890364][T16420] ? __pfx_ret_from_fork+0x10/0x10 [ 1309.890387][T16420] ? __switch_to+0xc9e/0x1480 [ 1309.890427][T16420] ? __pfx_kthread+0x10/0x10 [ 1309.890463][T16420] ret_from_fork_asm+0x1a/0x30 [ 1309.890546][T16420] [ 1309.890581][T16420] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1309.890602][T16420] CPU: 1 UID: 0 PID: 16420 Comm: kworker/1:15 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1309.890638][T16420] Tainted: [L]=SOFTLOCKUP [ 1309.890646][T16420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1309.890662][T16420] Workqueue: events drm_fb_helper_damage_work [ 1309.890689][T16420] Call Trace: [ 1309.890699][T16420] [ 1309.890708][T16420] vpanic+0x1e0/0x670 [ 1309.890754][T16420] panic+0xb9/0xc0 [ 1309.890787][T16420] ? __pfx_panic+0x10/0x10 [ 1309.890829][T16420] ? ret_from_fork_asm+0x1a/0x30 [ 1309.890870][T16420] __warn+0x317/0x4b0 [ 1309.890900][T16420] ? drm_wait_one_vblank+0x39a/0x5c0 [ 1309.890929][T16420] ? drm_wait_one_vblank+0x39a/0x5c0 [ 1309.890954][T16420] __report_bug+0x288/0x500 [ 1309.891082][T16420] ? drm_wait_one_vblank+0x39a/0x5c0 [ 1309.891117][T16420] ? __pfx___report_bug+0x10/0x10 [ 1309.891166][T16420] ? drm_wait_one_vblank+0x58c/0x5c0 [ 1309.891189][T16420] ? drm_wait_one_vblank+0x587/0x5c0 [ 1309.891225][T16420] report_bug_entry+0x19a/0x290 [ 1309.891264][T16420] ? drm_wait_one_vblank+0x587/0x5c0 [ 1309.891287][T16420] ? drm_wait_one_vblank+0x58c/0x5c0 [ 1309.891311][T16420] handle_bug+0xca/0x200 [ 1309.891361][T16420] exc_invalid_op+0x1a/0x50 [ 1309.891389][T16420] asm_exc_invalid_op+0x1a/0x20 [ 1309.891427][T16420] RIP: 0010:drm_wait_one_vblank+0x587/0x5c0 [ 1309.891454][T16420] Code: 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 ba d4 f6 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 8b 4c 24 04 <67> 48 0f b9 3a e9 d5 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f [ 1309.891474][T16420] RSP: 0018:ffffc900068e7860 EFLAGS: 00010246 [ 1309.891493][T16420] RAX: 1ffff1100487c200 RBX: ffffffff8ee5b070 RCX: 0000000000000000 [ 1309.891510][T16420] RDX: ffffffff8b569b80 RSI: ffffffff8b584ca0 RDI: ffffffff8ee5b070 [ 1309.891527][T16420] RBP: ffffc900068e7948 R08: 0000000000000000 R09: 0000000000000000 [ 1309.891542][T16420] R10: dffffc0000000000 R11: fffffbfff1db66ef R12: ffffffff8b584ca0 [ 1309.891568][T16420] R13: ffff8880243e1000 R14: 1ffff92000d1cf10 R15: ffffffff8b569b80 [ 1309.891614][T16420] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 1309.891638][T16420] ? rt_spin_unlock+0x150/0x200 [ 1309.891669][T16420] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1309.891701][T16420] ? rt_spin_unlock+0x161/0x200 [ 1309.891736][T16420] ? drm_vblank_get+0x147/0x260 [ 1309.891765][T16420] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 1309.891807][T16420] drm_fb_helper_damage_work+0xc9/0x650 [ 1309.891837][T16420] ? process_scheduled_works+0x9ef/0x1770 [ 1309.891870][T16420] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 1309.891902][T16420] ? process_scheduled_works+0x9ef/0x1770 [ 1309.891928][T16420] ? process_scheduled_works+0x9ef/0x1770 [ 1309.891958][T16420] process_scheduled_works+0xad1/0x1770 [ 1309.892020][T16420] ? __pfx_process_scheduled_works+0x10/0x10 [ 1309.892046][T16420] ? do_raw_spin_lock+0x121/0x290 [ 1309.892092][T16420] worker_thread+0x8a0/0xda0 [ 1309.892138][T16420] ? __kthread_parkme+0x7b/0x200 [ 1309.892179][T16420] kthread+0x711/0x8a0 [ 1309.892217][T16420] ? __pfx_worker_thread+0x10/0x10 [ 1309.892245][T16420] ? __pfx_kthread+0x10/0x10 [ 1309.892275][T16420] ? rt_spin_unlock+0x150/0x200 [ 1309.892310][T16420] ? rt_spin_unlock+0x161/0x200 [ 1309.892338][T16420] ? __pfx_kthread+0x10/0x10 [ 1309.892373][T16420] ret_from_fork+0x510/0xa50 [ 1309.892403][T16420] ? __pfx_ret_from_fork+0x10/0x10 [ 1309.892425][T16420] ? __switch_to+0xc9e/0x1480 [ 1309.892465][T16420] ? __pfx_kthread+0x10/0x10 [ 1309.892500][T16420] ret_from_fork_asm+0x1a/0x30 [ 1309.892565][T16420] [ 1309.893170][T16420] Kernel Offset: disabled