last executing test programs: 27m44.711214295s ago: executing program 32 (id=80): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x5}], 0xefb6e798ff0ec5, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r3, &(0x7f0000000300)="89", 0x1) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x87, @private=0xa010101, 0x4e24, 0x1, 'none\x00', 0x5, 0x32bd, 0x9}, {@loopback, 0x4e25, 0x2, 0xfffffffe, 0x8, 0x12d5c}}, 0x44) write$tun(0xffffffffffffffff, &(0x7f00000001c0)={@val={0x0, 0x15}, @val={0x6, 0x3, 0xda46, 0x2, 0x5, 0x5}, @mpls={[{0xff}, {0xf84, 0x0, 0x1}, {0x9f5c, 0x0, 0x1}], @ipv6=@udp={0x5, 0x6, "05e30a", 0x63, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, {[@hopopts={0x87, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x81, 0x6bd3}}]}], {0x4e20, 0x4e23, 0x4b, 0x0, @opaque="8320c4e62931c288088b6985c4181607ea380687ccfdbc7563b63065d46be1d380bf3300cfb4887e4495581e9601fa869d318a42a42e210451853322450c4e0c78b734"}}}}}, 0xa5) 24m57.883443186s ago: executing program 5 (id=634): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000001c0)="2e0f01c866b9800000c00f326635000400000f300f20e06635800000000f22e0360fc77df3ff9e0000f2d99806000fa7c0b800008ed866db440026da02", 0x3d}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x0, 0xdddd1000}, {'\x00', "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e80900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700"}}) 24m56.82963122s ago: executing program 5 (id=638): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000070000000200000007"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, r0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 24m56.392387437s ago: executing program 5 (id=641): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x5b03, 0x0) 24m52.491378125s ago: executing program 5 (id=649): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000304ffffffff0000000000000400", @ANYRES32=0x0, @ANYBLOB="0003000002800000140012800a00010069706f6962000000", @ANYRES8=r0, @ANYBLOB='t'], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) 24m52.276621978s ago: executing program 5 (id=650): syz_open_dev$ndb(0x0, 0x0, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r2, &(0x7f0000000140)='connect aa:aa:aa:aa:aa:10 1', 0x1b) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020}, 0x229) socket$kcm(0x29, 0x5, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="000000001151f62a918a0e44b3e6c90f7c83c106a45291dcb2208f297990b393aaf777e09c78d39ea9a99ff58810c4cd8a383287acaa77dd1760ccede265afa64cf63d9c113b0242398e0d9b6790b037bcb25e6cab6bcd34a3f7aff91997ee5552f7f6cad946fe0f69fc435aa36245534c3cae23f611459442f87e327c76f84aff83df59c2376899b70d2c227c65c767a837c804e93f575bdc51e28d91fb1c8bbdde99e916f1cb670d9cebe7485c6ea36f6298c9408efdf189650cdfe79fddac4fabee87ac941ba53a9393991b27ad118b2bd3023dce000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) request_key(&(0x7f0000002080)='pkcs7_test\x00', &(0x7f0000001580)={'syz', 0x2}, &(0x7f00000015c0)='syz', 0x0) 24m47.82238207s ago: executing program 5 (id=662): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, 0x0, 0x0, 0x5) io_submit(0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000412ff8)="3665a1", 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020}, 0x2020) 24m33.627599723s ago: executing program 33 (id=660): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000304ffffffff0000000000000400", @ANYRES32=0x0, @ANYBLOB="0003000002800000140012800a00010069706f696200000004000280", @ANYRES8=r0, @ANYBLOB='t'], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) 24m32.77051218s ago: executing program 34 (id=662): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, 0x0, 0x0, 0x5) io_submit(0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000412ff8)="3665a1", 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020}, 0x2020) 22m45.484349627s ago: executing program 1 (id=953): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000180)=0xd13, 0x4) recvmmsg(r0, &(0x7f0000006580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=""/17, 0x11}, 0x5}], 0x1, 0x45833af92e4a39ff, 0x0) 22m43.157781589s ago: executing program 1 (id=957): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000005400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=""/4101, 0x1005}}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000005100)=[{0x0}, {&(0x7f0000004f40)=""/101, 0x65}]}}], 0x3, 0x40012001, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 22m42.435462992s ago: executing program 1 (id=962): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r3, 0x0, 0x20, 0x24080040, &(0x7f0000000280)={0xa, 0xe20, 0xfffffffc, @mcast1}, 0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xc, 0xc, 0x0, 0xffffffffffffffff, 0x400000}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5}, 0xc) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="0100feffffff00000000010000000c000200ffffffff000000010c000200ffff0000000000869f274a5c38040d2f547ee3f7358e68000c0004000200000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000304000000000000000006000000", @ANYRES32=0x0, @ANYBLOB="a5ffad8800000000280012800a00010063616e"], 0x48}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$TIPC_NL_NODE_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="070700001da06bc548a235a1b787ccefa27112ada3aff9ef7d43bde17c226a75a8d1d9cae1ef1d", @ANYRES16=0x0, @ANYBLOB="000229bd7000fddbdf250d000000"], 0x14}, 0x1, 0x0, 0x0, 0x4002000}, 0x40080) r8 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_inet_SIOCADDRT(r8, 0x890b, &(0x7f0000000340)={0x0, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3e}}, {0x2, 0x4e21, @loopback}, 0x6d, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x3, 0xc34}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x0, r9}, 0x18) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x20008004) sendmsg$RDMA_NLDEV_CMD_DELLINK(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r11, 0x35, 0x0, 0x6, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYBLOB="30000000eb4b1e9991d601000000", @ANYRES64=r0, @ANYRES32, @ANYBLOB, @ANYRES64=r12], 0x20) r14 = bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000007c0)=ANY=[@ANYRES32, @ANYRES32=r10, @ANYBLOB='7\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00', @ANYRES32=r14, @ANYBLOB="0add7b60ff3a0ab9cc5195438752ed98a528dfb099bc50c71545f260e634a48859e2c6cae3382b7dee", @ANYRES64=r12], 0x20) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x10002, 0x4, 0x5, 0x1000, 0x1, 0xffff2d79, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x24, 0x0, 0x3}, 0x50) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r15, @ANYRES32, @ANYRES8=r3, @ANYRES32, @ANYRES32, @ANYRES32=r13, @ANYBLOB="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"], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000980)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="330000001000000000", @ANYRES32, @ANYBLOB="62ed65926024aa7cb06aec03efc7ff5a5fa776560a99be9c032e1226c2854225442a17def16899facbfe1ab054a3d18d62f7505e15290b14098915339b325161f85388324c67fa994f31dcdde9ff6895963d6c2a1744b2231bf221e6bf46c6bf55c40eed68856a08a2843d69d781130a6ae51e5f9361a8326a0df80bbcc72f555d5333ffa66a2fd666bf76f62d298782b676d317583bc5c4d07e7ea4282b8712e16f44650baf1bbf55d7b3e482cbaa30eaa0fe4d7108bd200d7551f530c61f1b6cee823c2562c47c4260cc9ff5cb2c59d85f648d5739f24ff20003d1a7f2a946db182b3d0053b9aa1823324c496df7827923dc0c7ddcdaf4bea29b28fefc316b71de18a6232347534fc34ad43fef3c7b", @ANYRES64=r12], 0x20) 22m42.158858297s ago: executing program 1 (id=965): socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0xfffefffe}, &(0x7f0000000100)=0x0, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) 22m41.751494163s ago: executing program 1 (id=970): socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x9, 0xffffffff}, 0x0) r2 = fsopen(&(0x7f0000000040)='cgroup\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) socket$alg(0x26, 0x5, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9b944d1e381fed329742e239cb13cf2af711d48d2f15b3118abd8fd087f117830209a631f9dfbec5cbbbb2216a2d87dfb0d7dd906125a10053c8e288ac4445ff0e999d423cc250e", 0x57}], 0x1, 0x0, 0x0, 0x240001d1}], 0x1, 0x45) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='status\x00') sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r3, 0x0, 0x8001) socket$rxrpc(0x21, 0x2, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000070900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000040) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket(0x10, 0x2, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x28, "0000000000000000000100ff00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x22040005}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x8000000, 0x4, 0x370, 0xffffffff, 0x1d0, 0x0, 0x1d0, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffff00, 0xff000000, 0xff, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'macvlan0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x15}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x6, {0x1}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x2000010}}}}, {{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xffffff00, 0xff], [0x0, 0xffffff00, 0xf97f1f27bc0fd003, 0xff000000], 'bridge_slave_0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x11, 0x80, 0x2, 0x6a}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0xff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x419) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r9, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001500), 0x0, 0xc040) 22m37.114617399s ago: executing program 1 (id=980): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x5}], 0xefb6e798ff0ec5, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r3, &(0x7f0000000300)="89", 0x1) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x87, @private=0xa010101, 0x4e24, 0x1, 'none\x00', 0x5, 0x32bd, 0x9}, {@loopback, 0x4e25, 0x2, 0xfffffffe, 0x8, 0x12d5c}}, 0x44) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r4, &(0x7f00000001c0)={@val={0x0, 0x15}, @val={0x6, 0x3, 0xda46, 0x2, 0x5, 0x5}, @mpls={[{0xff}, {0x8}, {0xf84, 0x0, 0x1}, {0x9f5c, 0x0, 0x1}], @ipv6=@udp={0x5, 0x6, "05e30a", 0xeb, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, {[@dstopts={0x8, 0xb, '\x00', [@hao={0xc9, 0x10, @private2}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim, @generic={0x44, 0x22, "c33587b08c0067462c0fd1e9fb74e2ec49fa2ddebc655271bf09bcd749b1e12aefdd"}, @jumbo={0xc2, 0x4, 0x6}, @hao={0xc9, 0x10, @mcast1}, @enc_lim={0x4, 0x1, 0x1}]}, @hopopts={0x87, 0x5, '\x00', [@calipso={0x7, 0x28, {0x0, 0x8, 0x81, 0x6bd3, [0x7f, 0x7, 0xf, 0x5]}}]}], {0x4e20, 0x4e23, 0x4b, 0x0, @opaque="8320c4e62931c288088b6985c4181607ea380687ccfdbc7563b63065d46be1d380bf3300cfb4887e4495581e9601fa869d318a42a42e210451853322450c4e0c78b734"}}}}}, 0x131) 22m20.854244012s ago: executing program 35 (id=980): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x5}], 0xefb6e798ff0ec5, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r3, &(0x7f0000000300)="89", 0x1) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x87, @private=0xa010101, 0x4e24, 0x1, 'none\x00', 0x5, 0x32bd, 0x9}, {@loopback, 0x4e25, 0x2, 0xfffffffe, 0x8, 0x12d5c}}, 0x44) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r4, &(0x7f00000001c0)={@val={0x0, 0x15}, @val={0x6, 0x3, 0xda46, 0x2, 0x5, 0x5}, @mpls={[{0xff}, {0x8}, {0xf84, 0x0, 0x1}, {0x9f5c, 0x0, 0x1}], @ipv6=@udp={0x5, 0x6, "05e30a", 0xeb, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, {[@dstopts={0x8, 0xb, '\x00', [@hao={0xc9, 0x10, @private2}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim, @generic={0x44, 0x22, "c33587b08c0067462c0fd1e9fb74e2ec49fa2ddebc655271bf09bcd749b1e12aefdd"}, @jumbo={0xc2, 0x4, 0x6}, @hao={0xc9, 0x10, @mcast1}, @enc_lim={0x4, 0x1, 0x1}]}, @hopopts={0x87, 0x5, '\x00', [@calipso={0x7, 0x28, {0x0, 0x8, 0x81, 0x6bd3, [0x7f, 0x7, 0xf, 0x5]}}]}], {0x4e20, 0x4e23, 0x4b, 0x0, @opaque="8320c4e62931c288088b6985c4181607ea380687ccfdbc7563b63065d46be1d380bf3300cfb4887e4495581e9601fa869d318a42a42e210451853322450c4e0c78b734"}}}}}, 0x131) 12m51.287495777s ago: executing program 3 (id=2837): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000001000)=ANY=[], 0x0}, 0x94) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) 12m49.753330932s ago: executing program 3 (id=2840): sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x4000000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000480), 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000007c0)={0xa, 0x2, 0x0, @empty, 0x80000001}, 0x1c) 12m46.011173209s ago: executing program 3 (id=2844): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xc1c42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004400)=@getchain={0x24, 0x66, 0xfff1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xe, 0xfff2}, {0x9, 0xfff1}, {0xffff, 0xa}}}, 0x24}}, 0x800) 12m44.409254401s ago: executing program 3 (id=2847): syz_usb_connect(0x3, 0x4f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e45aa5205b109917e9360102030109023d0001000000000904ef0404ff010100090502020800d0000909050800ff030700060705a9"], 0x0) 12m39.679709251s ago: executing program 3 (id=2856): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0), 0x0) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)}, 0xcc000) read$msr(r1, &(0x7f0000000580)=""/245, 0xf5) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000010, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000004380)="ad56c6c5820fae9d6dcd3292ea2b74dc", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r4) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) 12m37.415522134s ago: executing program 3 (id=2860): socket$unix(0x1, 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x1, 0xe, 0xffffffff}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) r3 = socket$netlink(0x10, 0x3, 0xf) ioctl$INCFS_IOC_CREATE_FILE(r3, 0xc058671e, &(0x7f0000000540)={{}, {0xc5}, 0x22, 0x0, 0x0, &(0x7f0000000240)='./cgroup\x00', &(0x7f00000002c0)='./cgroup\x00', &(0x7f00000003c0)="7e13750ab80320fc64480ef4917c86105d7f9f9da1c3898da30fe14c8bb33afd12d6d99a8a56c86656566c9e462487db8a2b2f0b0575988b00413191868db89272050b2c3e6b3326f6f04f54983ec54c71b54717a1d867acfdbd9ab920d5f90f20fc9b7b3882005c122998e32dd96ba21cfc135b9530313b4d03a6b59f3bda5b8916145548dc8b3d53a88311ac9fe894adddb5f761abe1a88a73c49387cfd5b9f0c5fa243cd590cb6d0dde9107857f55e00a865736db0cc603ba550f6abc", 0xbe, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0xf9b}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) setxattr$incfs_metadata(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), 0x0, 0x0, 0x2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000040)={0x3, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="b70000000000000007000000000000009500000000000000a9171809f8dcf159569d5475991f7de1a0d0c119cfcf6b98741c23fb7f8d3002ec85db75af955427e91496087a51a0a78f269a9e216a0d0177c4fe3552396a180330807a5b6e8c79aa92038c78d1f16c1323f0e0c8d45c641a21757847cb22230e4321cc3581e40c62c4defee8cffe359cfeef7f58fffdb48647d28ae810f6d22d20271e9e88e94aa6982bf48356652b08e2fbd404e41e0058aae0478fbe542b648421d1b4486a542a7d478fbe6b5e000000293853f9c68e235184b7ad5b6c4fe70ec8320500db0db7fda3da6171a05509ffecef2cb9802d4f36c9a1ce46d3b355fec188ccfc2f0fc89e164561fb06ee9a0153981a47b5de9edd3536d5534f9a699f73b2c9341d2d05043748ce1f4577ed76cdf5b3c697089daa4abda69a8c0c992404610a6be9e103c972459065dec0488e85a6a0418fc87dd8019ef7bb4ef4fa6ee08d81797570578f2e8198e687012f25a69a90e7515e35f8abbddfa96c3f0485f01f0e9e144a2bd31c1b594c50de7c9efd826f1e19b7bd89ca4052b1985287bd13957a48467e0eeddf564d175bf4340885b63976df609806c3b2a3667539dfd66a7400000000003be6026e60205f761ce85cdf75cdb95ca5d32b5bf87eed4184d49f8f48181ef2419efe82ebb18ee55772d562b3b49551714e805a5211a3f4e8e703c03e23b2074bc573dbb66d59e269b722637c4a2efb5241cae2f14774609ad91d66724c438455dc4fcf0b4c8fc235f6c190b4c82bb2556d1fbcd4468369e98e900c743162ce2c7e60610acf0c8e4ba94a7e7127c7de0e6c35acecee1b8434fdca4579f9ebc6a515f7d910b466eb583fb0a7e65fbecb2b8ee0e9da33afb88aa5da8da3a5e0e58fcb48de6f165826b046a8951a47e040bd419d0efa0f54e8e3694085a7bde6f6494968d8200000000000"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r5, r5, 0x0, 0x200000) 12m21.217975365s ago: executing program 36 (id=2860): socket$unix(0x1, 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x1, 0xe, 0xffffffff}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) r3 = socket$netlink(0x10, 0x3, 0xf) ioctl$INCFS_IOC_CREATE_FILE(r3, 0xc058671e, &(0x7f0000000540)={{}, {0xc5}, 0x22, 0x0, 0x0, &(0x7f0000000240)='./cgroup\x00', &(0x7f00000002c0)='./cgroup\x00', &(0x7f00000003c0)="7e13750ab80320fc64480ef4917c86105d7f9f9da1c3898da30fe14c8bb33afd12d6d99a8a56c86656566c9e462487db8a2b2f0b0575988b00413191868db89272050b2c3e6b3326f6f04f54983ec54c71b54717a1d867acfdbd9ab920d5f90f20fc9b7b3882005c122998e32dd96ba21cfc135b9530313b4d03a6b59f3bda5b8916145548dc8b3d53a88311ac9fe894adddb5f761abe1a88a73c49387cfd5b9f0c5fa243cd590cb6d0dde9107857f55e00a865736db0cc603ba550f6abc", 0xbe, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0xf9b}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) setxattr$incfs_metadata(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), 0x0, 0x0, 0x2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000040)={0x3, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r5, r5, 0x0, 0x200000) 10m14.4758094s ago: executing program 7 (id=3034): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000feffffff0c00000014000180080003000300000008000100", @ANYRES32, @ANYRESOCT=0x0], 0x40}}, 0x0) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) 10m13.072075044s ago: executing program 7 (id=3035): socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003f40)=[{{0x0, 0x0, 0x0}, 0xeb8}, {{0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000440)=""/28, 0x1c}], 0x1}, 0x2d}], 0x2, 0x2120, 0x0) fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x1f, 0x18, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b4003a000001", 0x38}], 0x1}, 0x0) 10m11.673625009s ago: executing program 7 (id=3038): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={0x40040, 0xd2, 0xf}, 0x18) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='./file0\x00') r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={0x0}, 0x1, 0x0, 0x0, 0x20008809}, 0x20008090) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$alg(0x26, 0x5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003f40)=[{{0x0, 0x0, 0x0}, 0xeb8}, {{0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000440)=""/28, 0x1c}], 0x1}, 0x2d}], 0x2, 0x2120, 0x0) fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) stat(&(0x7f0000001540)='./file0\x00', &(0x7f0000001580)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x1f, 0x18, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f00000000c0), 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e21, 0x1f0268bc, @empty, 0x6}}, 0x0, 0x5, 0x3fc, 0x1, 0x12, 0x4, 0x80}, 0x9c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 10m4.272015516s ago: executing program 7 (id=3049): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r1 = getpid() syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='syscall\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) unshare(0xe060400) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, r1, 0x0, 0x0, 'syz1\x00', 0x0}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/shm\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000002bc0)={0x2020}, 0x2020) lseek(r4, 0xfffffffffffffff5, 0x1) 9m57.0753018s ago: executing program 7 (id=3063): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 9m55.398957503s ago: executing program 7 (id=3065): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000100)=""/88, 0x58}, {&(0x7f0000000340)=""/174, 0xae}], 0x2, 0x2, 0x1) 9m38.882626749s ago: executing program 37 (id=3065): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000100)=""/88, 0x58}, {&(0x7f0000000340)=""/174, 0xae}], 0x2, 0x2, 0x1) 5m45.745170027s ago: executing program 2 (id=3460): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x8, &(0x7f0000000180)="fc", 0x1) getsockopt$inet_opts(r3, 0x0, 0x9, 0x0, &(0x7f00000000c0)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) shmat(r4, &(0x7f0000ff9000/0x1000)=nil, 0x5000) 5m44.527483249s ago: executing program 2 (id=3462): r0 = fsopen(0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 5m44.274169284s ago: executing program 2 (id=3463): r0 = openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000180)={0x40040, 0xd2, 0xf}, 0x18) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$alg(0x26, 0x5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003f40)=[{{0x0, 0x0, 0x0}, 0xeb8}, {{0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000440)=""/28, 0x1c}], 0x1}, 0x2d}], 0x2, 0x2120, 0x0) fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) stat(&(0x7f0000001540)='./file0\x00', &(0x7f0000001580)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x1f, 0x18, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f00000000c0), 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e21, 0x1f0268bc, @empty, 0x6}}, 0x0, 0x5, 0x3fc, 0x1, 0x12, 0x4, 0x80}, 0x9c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 5m43.282155229s ago: executing program 2 (id=3467): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') setrlimit(0xd, &(0x7f0000000280)={0xc800, 0x10000}) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000b80)=""/247, 0xf7}], 0x1, 0x0, 0x62) 5m43.081751795s ago: executing program 2 (id=3469): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x0, 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 5m40.997297916s ago: executing program 2 (id=3471): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000001000)=ANY=[], 0x0}, 0x94) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e24, 0x92, @dev={0xfe, 0x80, '\x00', 0xa}, 0x4}, 0x1c) 5m25.408229515s ago: executing program 38 (id=3471): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000001000)=ANY=[], 0x0}, 0x94) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e24, 0x92, @dev={0xfe, 0x80, '\x00', 0xa}, 0x4}, 0x1c) 14.215103344s ago: executing program 4 (id=4402): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, 0x0) 13.594324923s ago: executing program 4 (id=4406): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400000004000000120000"], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) 13.101060811s ago: executing program 8 (id=4410): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x10, 0x3, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xc226}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r1, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 11.651063655s ago: executing program 8 (id=4415): pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0xe, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 11.449691026s ago: executing program 8 (id=4418): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) syz_clone(0x2085000, 0x0, 0x0, 0x0, 0x0, 0x0) 11.232906966s ago: executing program 9 (id=4422): socket$unix(0x1, 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000000c0)=0x8000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x1, 0xe, 0xffffffff}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) r3 = socket$netlink(0x10, 0x3, 0xf) ioctl$INCFS_IOC_CREATE_FILE(r3, 0xc058671e, &(0x7f0000000540)={{}, {0xc5}, 0x22, 0x0, 0x0, &(0x7f0000000240)='./cgroup\x00', &(0x7f00000002c0)='./cgroup\x00', &(0x7f00000003c0), 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0xf9b}) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) setxattr$incfs_metadata(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), 0x0, 0x0, 0x2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000040)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={0x0}) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x34, &(0x7f0000000040)=r7, 0x4) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f0000000dc0)={0x0, 0x0}) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x8040ae9f, &(0x7f0000000380)=@arm64) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r5, 0xc01064bd, &(0x7f0000000340)={&(0x7f00000005c0)="f14d60fffdc69e1716669af2d70823325f0213672f81fffdc0697c0f382cd286cd5e2d44f8d596ba47df2943580b0cc5721f09ce144a5c80b77f6356dd85f4f0954b97024a5af4c7665359a36ae8306f3b022360e605bcfa339f1991f681", 0x5e}) sendfile(r9, r9, 0x0, 0x200000) 11.083032005s ago: executing program 8 (id=4423): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_io_uring_setup(0x47a8, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0xffffffffffffffa0, 0xfa00, {0xffffffffffffffff, 0x10c}}, 0xfffffd88) 8.914430301s ago: executing program 8 (id=4426): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x10, 0x3, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xc226}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r1, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 8.297670424s ago: executing program 9 (id=4430): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x47a8, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x7676, &(0x7f0000000100)={0x0, 0x22e7, 0x100, 0x3, 0x10f, 0x0, r3}, 0x0, 0x0) io_uring_enter(r3, 0x369a, 0x0, 0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e24, 0x3, @loopback, 0x2}}, 0xfffffffc, 0x4, 0x2, 0x7, 0x45, 0x2, 0x9}, &(0x7f00000000c0)=0x9c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0xab, @loopback, 0x10001}, 0x1c) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @loopback, 0x23}, 0x1c) sendmmsg(r4, &(0x7f0000001e00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)='3', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000006c0)="87e8ae1a40dca7f0ff2478efce8e1c831a44e5b275dc913413ade883c7809f2e7d", 0x21}], 0x1}}], 0x2, 0x0) r5 = dup(r4) r6 = socket(0xa, 0x3, 0xff) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0x4000002}, 0x1c) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f00001fb000/0x3000)=nil, 0x3000, 0x37ffff2, 0x13, r7, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000001c0)={@random="cfb14e407d33", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x38, 0x3a, 0x1, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x8001, {0x2, 0x6, '\x00', 0x9, 0xff, 0x0, @loopback, @loopback, [@fragment={0x3b, 0x0, 0xe, 0x0, 0x0, 0x3, 0x65}]}}}}}}}, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f00000000c0)={0x7, 0xffffffffffffffa0, 0xfa00, {0xffffffffffffffff, 0x10c}}, 0xfffffd88) 7.410619213s ago: executing program 6 (id=4432): accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000580)) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket(0xa, 0x3, 0xff) syz_emit_ethernet(0x4e, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) setpgid(0x0, r0) close(r3) 7.32313191s ago: executing program 4 (id=4433): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff0000/0xe000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = io_uring_setup(0x7042, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc0}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 7.243179559s ago: executing program 9 (id=4435): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4040) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7676, &(0x7f0000000100)={0x0, 0x22e7, 0x100, 0x3, 0x10f}, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x369a, 0x0, 0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e24, 0x3, @loopback, 0x2}}, 0xfffffffc, 0x4, 0x2, 0x7, 0x45, 0x2, 0x9}, &(0x7f00000000c0)=0x9c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0xab, @loopback, 0x10001}, 0x1c) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @loopback, 0x23}, 0x1c) sendmmsg(r4, &(0x7f0000001e00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)='3', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000006c0)="87e8ae1a40dca7f0ff2478efce8e1c831a44e5b275dc913413ade883c7809f2e7d", 0x21}], 0x1}}], 0x2, 0x0) dup(r4) r5 = socket(0xa, 0x3, 0xff) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0x4000002}, 0x1c) mmap(&(0x7f00001fb000/0x3000)=nil, 0x3000, 0x37ffff2, 0x13, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000001c0)={@random="cfb14e407d33", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x38, 0x3a, 0x1, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x8001, {0x2, 0x6, '\x00', 0x9, 0xff, 0x0, @loopback, @loopback, [@fragment={0x3b, 0x0, 0xe, 0x0, 0x0, 0x3, 0x65}]}}}}}}}, 0x0) 7.239862369s ago: executing program 8 (id=4436): socket$packet(0x11, 0x2, 0x300) socket$inet(0x2, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x1800, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x46) socket$inet(0x2, 0x5, 0x7) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000500), &(0x7f0000000080)=0x8) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xc, 0x4, 0xffffbe0000000001, 0x8, 0xffffffff}, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000380)=@fragment={0x2c, 0x0, 0x6, 0x1, 0x0, 0x12, 0x66}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x3f, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) socket$kcm(0x10, 0x100000000002, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) syz_open_dev$video4linux(&(0x7f0000000080), 0x9, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r8, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040041}, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x40, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7ff, 0x76}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x22}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x65}]}, 0x40}}, 0x4) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x20, 0x10, 0x503, 0x2000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20a42}}, 0x20}}, 0x0) 5.711048921s ago: executing program 6 (id=4438): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="000000000000000001"], 0x50) 5.586443228s ago: executing program 0 (id=4440): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3d, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0xffffffff, 0x7f, 0xa9, 0x4d, 0x6, 0x5c, 0xb2, 0x15, 0x9, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x3, 0x0, 0x5, 0xe661, 0x4, 0x7, 0x20003, 0x6, 0x4c74, 0xdd27, 0x242, 0x3, 0xa, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0xffffffff, 0x8, 0x8000, 0x1, 0x3c], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xf6ec, 0x129432f6, 0xc8, 0x200000f1, 0xe, 0x2bf, 0x6c7, 0xfffffffe, 0xfffffffc, 0x5, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x1001, 0x66abcbd2, 0xea4, 0x0, 0x1ff, 0x7, 0x7fff, 0x6, 0x400, 0x6, 0x6, 0x9, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4dc, 0x381, 0x5, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x8, 0xa, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x2, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0xffffffff, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6cff, 0x6, 0x20000007, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x14, 0x1000, 0x5, 0xb1, 0x2, 0xbf, 0xa004, 0x3, 0x7ff, 0x12b, 0x4, 0x8, 0xa, 0xffffffff, 0x9, 0x7, 0x120000, 0x200807ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb35, 0x7, 0xb, 0x5, 0x9, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa61d, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0x1, 0xf40, 0x6, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) r3 = syz_open_dev$sndpcmp(&(0x7f0000000300), 0x1, 0x2040) mmap$snddsp_control(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x2000008, 0x2012, r3, 0x83000000) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, 0x0, 0x0) sendmmsg$inet(r4, &(0x7f0000003cc0)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="140000000000000000000000070000009404000000000000812df57e5733f2a8eee5aa4cf24d4eb07fe9c8e6e2de2a64f38849fc63ab3336f9ead84f732064ef8ac6437e5c9bc537c4746c1745c5bd20988d5ffec7f293badc76552bdde7aefb1a1c5b2f7dc38f5bd9670cea87da6e7edd1b25006b3d7c42a010885679e36d9a4e4054b069b9277a85685055c0b8d4e86ab10562b8038f612e516d779c4b5c1900426b7bc6a12a5a3de9526a916d14523c9e164e9b5340d375d054ebe06c0e7a799e8df21b36e57474cdd16918bf05cd0a80addfc7681880a34831aca2"], 0x18}}], 0x1, 0x44008004) write$binfmt_misc(r4, &(0x7f0000000300), 0xfdef) 5.528487709s ago: executing program 9 (id=4441): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000002480), 0x80, 0x0) ioctl$PTP_SYS_OFFSET(r0, 0x43403d05, 0x0) 5.3471025s ago: executing program 4 (id=4442): accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000580)) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket(0xa, 0x3, 0xff) syz_emit_ethernet(0x4e, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) setpgid(0x0, r0) close(r3) 5.306515783s ago: executing program 6 (id=4443): bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ppoll(0x0, 0x0, &(0x7f0000000300)={0x0, 0xff}, 0x0, 0x0) 5.265918305s ago: executing program 0 (id=4444): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400000004000000120000"], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) 3.844203847s ago: executing program 9 (id=4445): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000080)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x50) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r5, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, 0x0, 0x0, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x15, 0x105, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10, 0x0, 0x2}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x6e6bb5, 0x0, 0x0, 0x3, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x810}, 0x0) 3.57467104s ago: executing program 4 (id=4446): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4040) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7676, &(0x7f0000000100)={0x0, 0x22e7, 0x100, 0x3, 0x10f}, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x369a, 0x0, 0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e24, 0x3, @loopback, 0x2}}, 0xfffffffc, 0x4, 0x2, 0x7, 0x45, 0x2, 0x9}, &(0x7f00000000c0)=0x9c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0xab, @loopback, 0x10001}, 0x1c) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @loopback, 0x23}, 0x1c) sendmmsg(r4, &(0x7f0000001e00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)='3', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000006c0)="87e8ae1a40dca7f0ff2478efce8e1c831a44e5b275dc913413ade883c7809f2e7d", 0x21}], 0x1}}], 0x2, 0x0) dup(r4) r5 = socket(0xa, 0x3, 0xff) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0x4000002}, 0x1c) mmap(&(0x7f00001fb000/0x3000)=nil, 0x3000, 0x37ffff2, 0x13, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000001c0)={@random="cfb14e407d33", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x38, 0x3a, 0x1, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x8001, {0x2, 0x6, '\x00', 0x9, 0xff, 0x0, @loopback, @loopback, [@fragment={0x3b, 0x0, 0xe, 0x0, 0x0, 0x3, 0x65}]}}}}}}}, 0x0) 3.2809353s ago: executing program 6 (id=4447): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0xff2e) r2 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000000)) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x10}) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) write(r1, 0x0, 0x0) 3.011073805s ago: executing program 0 (id=4448): accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000580)) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket(0xa, 0x3, 0xff) syz_emit_ethernet(0x4e, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x1, 0x1000}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) setpgid(0x0, r0) close(r3) 1.781584832s ago: executing program 4 (id=4449): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone3(&(0x7f0000001200)={0x40100080, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0}, 0x58) munlockall() mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) 463.433527ms ago: executing program 0 (id=4450): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mq_open(&(0x7f0000000400)='ns\xbf\x12\xe1\v\xc8E\xe0\x80r\x917kj\x9cL\xceZ\x99\xf8Q%\xde\xef\xf2\xa7\xd2\xab\x97\xc2e\'\xfc\x10\x850\x10_\\KA\x97\xb7.[O\xd56\xec^F\xdfT\xda\x9817\"\xf5h\xa4\xf8\a\x9e\xce\xa9&\xffq\xebA\x98\x96n\x17|\xc9xR\\0\xd5\x8c=J\x85\\u\xb2\\\xedB4\xb5z\xbb\xee\xbd\x96\x19\xd3\x98\xeb\xe8\xc1u\x8b\xf8hc\x81#\r\xe8\xf8%\xd9\x7f\r\x12M\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfc\xa7\x14t\x9feN\x93\x89\x9f\xbfX*\xec\x00\x00\x00\x00', 0x40, 0x44, 0x0) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0xe, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 457.97314ms ago: executing program 6 (id=4451): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 199.150412ms ago: executing program 0 (id=4452): sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="90000000051405012cbd7000fbdbdf0100000000000800030000000015fd00012ce379"], 0x90}, 0x1, 0x0, 0x0, 0x20040081}, 0x40010) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0xf170, 0xa1d, 0x8, 0x5, 0x0, 0x3, 0x2, 0x0, 0xfffffffffffffffc], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 198.815207ms ago: executing program 6 (id=4453): r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0xdc, 0x82) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000440)=ANY=[@ANYBLOB]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = syz_open_dev$evdev(0x0, 0x19c5498e, 0x103902) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x80, 0x0, 0x4}, 0x0, 0x0) dup2(r1, r1) syz_io_uring_submit(0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000040)=""/185) openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) close(0x3) 102.78071ms ago: executing program 9 (id=4454): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="000000000000000001"], 0x50) 0s ago: executing program 0 (id=4455): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r3, 0x47fa, 0x0, 0x0, 0x0, 0x0) unshare(0x22020600) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000000c0)) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@cgroup, r7, 0x37, 0x2030}, 0x20) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r2, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="b000000016007f029e78f6030f7a0a762353bfb89fd8c902317bab30f89f080aaaaeb9d8091c815dcf03e14e877733fff4fe20a5be870f576b162e7de2d02673e789a4950c9cdc206e086fd0dc8ca9afcd9d522ac78876a4595146add31b35355848794ca3f8b38aef1e114ab9fb0200000000000000a3b0c81c6f8144e74fe13b80ca46c1a6c04ad73c9d44b605", 0x8e}, {0x0}], 0x2}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): er [ 992.841689][T15343] loop6: detected capacity change from 0 to 524288000 [ 993.128728][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.128809][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1002.512991][T15384] tipc: Enabled bearer , priority 0 [ 1002.513987][T15384] syzkaller0: entered promiscuous mode [ 1002.514011][T15384] syzkaller0: entered allmulticast mode [ 1002.550472][T15384] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2785'. [ 1002.554872][T15384] tipc: Resetting bearer [ 1002.621467][T15383] tipc: Resetting bearer [ 1002.968682][T15383] tipc: Disabling bearer [ 1003.056376][T15395] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2800'. [ 1003.273371][T15398] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2801'. [ 1011.356451][T15448] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2814'. [ 1011.557850][ T918] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 1012.586156][ T918] usb 7-1: config 0 has no interfaces? [ 1012.586195][ T918] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1012.586218][ T918] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.633939][ T918] usb 7-1: config 0 descriptor?? [ 1014.384201][ T918] usb 7-1: USB disconnect, device number 15 [ 1016.029796][ T5880] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 1016.198100][ T5880] usb 9-1: Using ep0 maxpacket: 16 [ 1016.201548][ T5880] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1016.201579][ T5880] usb 9-1: config 0 has no interfaces? [ 1016.205909][ T5880] usb 9-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1016.205944][ T5880] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.205966][ T5880] usb 9-1: Product: syz [ 1016.205981][ T5880] usb 9-1: Manufacturer: syz [ 1016.205996][ T5880] usb 9-1: SerialNumber: syz [ 1016.410612][ T5880] usb 9-1: config 0 descriptor?? [ 1018.038278][ T918] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 1018.211404][ T918] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1018.211424][ T918] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1018.211458][ T918] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1018.211472][ T918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.230257][ T918] usb 4-1: config 0 descriptor?? [ 1018.261512][ T918] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1018.261567][ T918] dvb-usb: bulk message failed: -22 (3/0) [ 1018.280913][ T918] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1018.283652][ T918] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1018.283723][ T918] usb 4-1: media controller created [ 1018.294537][ T918] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1018.324999][ T918] dvb-usb: bulk message failed: -22 (6/0) [ 1018.325092][ T918] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1018.495335][ T918] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input36 [ 1018.530394][ T918] dvb-usb: schedule remote query interval to 150 msecs. [ 1018.530424][ T918] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1018.565970][ T5900] usb 9-1: USB disconnect, device number 35 [ 1019.956413][ T918] dvb-usb: bulk message failed: -22 (1/0) [ 1019.956453][ T918] dvb-usb: error while querying for an remote control event. [ 1020.057223][T15478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1020.084452][T15478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1020.109532][ T5900] dvb-usb: bulk message failed: -22 (1/0) [ 1020.109577][ T5900] dvb-usb: error while querying for an remote control event. [ 1020.252963][T15499] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2826'. [ 1020.267860][ T5900] dvb-usb: bulk message failed: -22 (1/0) [ 1020.267897][ T5900] dvb-usb: error while querying for an remote control event. [ 1021.676346][ T5900] dvb-usb: bulk message failed: -22 (1/0) [ 1021.676385][ T5900] dvb-usb: error while querying for an remote control event. [ 1021.827860][ T5900] dvb-usb: bulk message failed: -22 (1/0) [ 1021.827899][ T5900] dvb-usb: error while querying for an remote control event. [ 1021.987777][ T5900] dvb-usb: bulk message failed: -22 (1/0) [ 1021.987818][ T5900] dvb-usb: error while querying for an remote control event. [ 1022.147881][ T5900] dvb-usb: bulk message failed: -22 (1/0) [ 1022.147921][ T5900] dvb-usb: error while querying for an remote control event. [ 1022.243268][ T5900] usb 4-1: USB disconnect, device number 31 [ 1022.465081][ T5900] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1024.597821][ T918] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1025.887811][ T918] usb 7-1: Using ep0 maxpacket: 32 [ 1025.894404][ T918] usb 7-1: config 0 has an invalid interface number: 239 but max is 0 [ 1025.894426][ T918] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1025.894437][ T918] usb 7-1: config 0 has no interface number 0 [ 1025.894464][ T918] usb 7-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 1025.894479][ T918] usb 7-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1025.894493][ T918] usb 7-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 1025.894508][ T918] usb 7-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1025.894520][ T918] usb 7-1: config 0 interface 239 altsetting 4 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1025.894535][ T918] usb 7-1: config 0 interface 239 has no altsetting 0 [ 1025.898487][ T918] usb 7-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 1025.898516][ T918] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.898534][ T918] usb 7-1: Product: syz [ 1025.898547][ T918] usb 7-1: Manufacturer: syz [ 1025.898560][ T918] usb 7-1: SerialNumber: syz [ 1025.997847][T15154] usb 8-1: new full-speed USB device number 36 using dummy_hcd [ 1026.099697][ T918] usb 7-1: config 0 descriptor?? [ 1026.102408][T15515] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1026.173143][T15154] usb 8-1: config 0 has no interfaces? [ 1026.173201][T15154] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1026.173226][T15154] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.206867][T15154] usb 8-1: config 0 descriptor?? [ 1026.312473][T15154] usb 7-1: USB disconnect, device number 16 [ 1026.807728][ T5880] usb 8-1: USB disconnect, device number 36 [ 1030.678382][ T5880] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1035.607856][T10483] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1036.413214][T10483] usb 4-1: Using ep0 maxpacket: 32 [ 1036.415766][T10483] usb 4-1: config 0 has an invalid interface number: 239 but max is 0 [ 1036.415796][T10483] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1036.415813][T10483] usb 4-1: config 0 has no interface number 0 [ 1036.415860][T10483] usb 4-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 1036.415887][T10483] usb 4-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1036.415910][T10483] usb 4-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 1036.415935][T10483] usb 4-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1036.415956][T10483] usb 4-1: config 0 interface 239 altsetting 4 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1036.415981][T10483] usb 4-1: config 0 interface 239 has no altsetting 0 [ 1036.427200][T10483] usb 4-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 1036.427239][T10483] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.427257][T10483] usb 4-1: Product: syz [ 1036.427270][T10483] usb 4-1: Manufacturer: syz [ 1036.427284][T10483] usb 4-1: SerialNumber: syz [ 1036.471560][T10483] usb 4-1: config 0 descriptor?? [ 1036.474689][T15577] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1036.784961][ T5880] usb 4-1: USB disconnect, device number 32 [ 1039.207826][T10483] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1039.363928][T10483] usb 7-1: Using ep0 maxpacket: 16 [ 1039.366246][T10483] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1039.366275][T10483] usb 7-1: config 0 has no interfaces? [ 1039.386841][T10483] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1039.386877][T10483] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.333164][T10483] usb 7-1: Product: syz [ 1040.333186][T10483] usb 7-1: Manufacturer: syz [ 1040.333201][T10483] usb 7-1: SerialNumber: syz [ 1040.389482][T10483] usb 7-1: config 0 descriptor?? [ 1041.027398][T15154] usb 7-1: USB disconnect, device number 18 [ 1047.317993][ T5880] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 1049.178423][ T5880] usb 8-1: Using ep0 maxpacket: 16 [ 1049.182367][ T5880] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1049.182396][ T5880] usb 8-1: config 0 has no interfaces? [ 1049.186914][ T5880] usb 8-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1049.187824][ T5880] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.187847][ T5880] usb 8-1: Product: syz [ 1049.187861][ T5880] usb 8-1: Manufacturer: syz [ 1049.187875][ T5880] usb 8-1: SerialNumber: syz [ 1049.217273][ T5880] usb 8-1: config 0 descriptor?? [ 1051.394463][T15154] usb 8-1: USB disconnect, device number 37 [ 1054.827328][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.842576][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1058.630639][ T5801] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1058.764070][ T5801] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1058.778281][ T5801] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1058.832930][ T5801] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1058.833657][ T5801] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1060.877964][ T5114] Bluetooth: hci4: command tx timeout [ 1061.173185][T15715] chnl_net:caif_netlink_parms(): no params data found [ 1062.987978][ T5114] Bluetooth: hci4: command tx timeout [ 1063.041377][T15736] loop6: detected capacity change from 0 to 524288000 [ 1063.885114][T15715] bridge0: port 1(bridge_slave_0) entered blocking state [ 1063.885265][T15715] bridge0: port 1(bridge_slave_0) entered disabled state [ 1063.885466][T15715] bridge_slave_0: entered allmulticast mode [ 1063.913025][T15715] bridge_slave_0: entered promiscuous mode [ 1063.929682][T15715] bridge0: port 2(bridge_slave_1) entered blocking state [ 1063.932115][T15715] bridge0: port 2(bridge_slave_1) entered disabled state [ 1063.932380][T15715] bridge_slave_1: entered allmulticast mode [ 1063.961309][T15715] bridge_slave_1: entered promiscuous mode [ 1064.235899][T15715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1064.272710][T15715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1064.548332][T15715] team0: Port device team_slave_0 added [ 1064.553612][T15715] team0: Port device team_slave_1 added [ 1064.557807][T15154] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 1064.717820][T15154] usb 8-1: Using ep0 maxpacket: 16 [ 1064.720238][T15154] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1064.720266][T15154] usb 8-1: config 0 has no interfaces? [ 1064.732117][T15154] usb 8-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1064.732148][T15154] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.732168][T15154] usb 8-1: Product: syz [ 1064.732182][T15154] usb 8-1: Manufacturer: syz [ 1064.732196][T15154] usb 8-1: SerialNumber: syz [ 1064.848120][T15154] usb 8-1: config 0 descriptor?? [ 1065.037806][ T5114] Bluetooth: hci4: command tx timeout [ 1065.180546][T15715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1065.180562][T15715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1065.180577][T15715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1066.808491][T15715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1066.808506][T15715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1066.808523][T15715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1067.119186][ T5114] Bluetooth: hci4: command tx timeout [ 1068.330323][T15715] hsr_slave_0: entered promiscuous mode [ 1068.332449][T15715] hsr_slave_1: entered promiscuous mode [ 1068.333092][T15715] debugfs: 'hsr0' already exists in 'hsr' [ 1068.333109][T15715] Cannot create hsr debugfs directory [ 1068.405682][T15154] usb 8-1: USB disconnect, device number 38 [ 1072.272554][T15715] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1072.411311][T15715] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1072.417279][T15808] loop6: detected capacity change from 0 to 524288000 [ 1072.754196][T15813] binder: BINDER_SET_CONTEXT_MGR already set [ 1072.754241][T15813] binder: 15810:15813 ioctl 4018620d 2000000002c0 returned -16 [ 1072.760234][T15813] binder: 15810:15813 ioctl b703 0 returned -22 [ 1073.609823][T15715] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1073.749757][T15715] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1077.324588][T15715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1077.478940][T15715] 8021q: adding VLAN 0 to HW filter on device team0 [ 1077.523917][ T5992] bridge0: port 1(bridge_slave_0) entered blocking state [ 1077.537853][ T5992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1077.643967][ T757] bridge0: port 2(bridge_slave_1) entered blocking state [ 1077.644324][ T757] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1078.401748][T15715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1078.589602][T15858] kernel read not supported for file /file0 (pid: 15858 comm: syz.8.2903) [ 1078.605239][ T37] audit: type=1800 audit(1770880153.886:179): pid=15858 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.8.2903" name="file0" dev="mqueue" ino=50076 res=0 errno=0 [ 1082.387818][T10487] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1082.697158][T10487] usb 7-1: Using ep0 maxpacket: 16 [ 1082.772916][T10487] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1082.772964][T10487] usb 7-1: New USB device found, idVendor=0dfc, idProduct=0101, bcdDevice= 0.00 [ 1082.772988][T10487] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1082.810983][T10487] usb 7-1: config 0 descriptor?? [ 1082.895370][T10487] usb 7-1: can't set config #0, error -71 [ 1082.915483][T10487] usb 7-1: USB disconnect, device number 19 [ 1083.637831][T10487] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1083.787840][T10487] usb 7-1: Using ep0 maxpacket: 32 [ 1083.790346][T10487] usb 7-1: config 0 has an invalid interface number: 239 but max is 0 [ 1083.790374][T10487] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1083.790394][T10487] usb 7-1: config 0 has no interface number 0 [ 1083.790442][T10487] usb 7-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 1083.790468][T10487] usb 7-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1083.790495][T10487] usb 7-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 1083.790521][T10487] usb 7-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024 [ 1083.790548][T10487] usb 7-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024 [ 1083.790571][T10487] usb 7-1: config 0 interface 239 altsetting 4 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1083.790599][T10487] usb 7-1: config 0 interface 239 has no altsetting 0 [ 1083.792838][T10487] usb 7-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 1083.792854][T10487] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.792865][T10487] usb 7-1: Product: syz [ 1083.792874][T10487] usb 7-1: Manufacturer: syz [ 1083.792882][T10487] usb 7-1: SerialNumber: syz [ 1084.042307][T10487] usb 7-1: config 0 descriptor?? [ 1084.043592][T15894] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1084.044077][T15894] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1084.182739][T15715] veth0_vlan: entered promiscuous mode [ 1084.203144][T15715] veth1_vlan: entered promiscuous mode [ 1084.304411][ T31] usb 7-1: USB disconnect, device number 20 [ 1084.353022][T15715] veth0_macvtap: entered promiscuous mode [ 1084.373470][T15715] veth1_macvtap: entered promiscuous mode [ 1084.415575][T15715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1084.447833][T15715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1084.481485][T14390] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.488314][T14390] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.511802][T14390] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.514922][T14390] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1086.044269][ T757] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1086.044294][ T757] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1086.250405][T15911] loop6: detected capacity change from 0 to 524288000 [ 1086.470990][T15925] kernel read not supported for file /file0 (pid: 15925 comm: syz.6.2916) [ 1087.193012][ T37] audit: type=1800 audit(1770880161.776:180): pid=15925 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.2916" name="file0" dev="mqueue" ino=50485 res=0 errno=0 [ 1089.069000][ T5992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1089.069018][ T5992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1092.037897][ T5880] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 1092.387893][ T5880] usb 9-1: Using ep0 maxpacket: 16 [ 1092.390478][ T5880] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1092.390503][ T5880] usb 9-1: New USB device found, idVendor=0dfc, idProduct=0101, bcdDevice= 0.00 [ 1092.390518][ T5880] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1092.393875][ T5880] usb 9-1: config 0 descriptor?? [ 1094.066400][ T5880] usbhid 9-1:0.0: can't add hid device: -71 [ 1094.066539][ T5880] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1094.149940][ T5880] usb 9-1: USB disconnect, device number 36 [ 1096.480493][T10487] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1096.535501][T15975] kernel read not supported for file /file0 (pid: 15975 comm: syz.8.2926) [ 1096.542133][ T37] audit: type=1800 audit(1770880171.826:181): pid=15975 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.8.2926" name="file0" dev="mqueue" ino=50601 res=0 errno=0 [ 1097.427759][T10487] usb 5-1: config 0 has no interfaces? [ 1097.430115][T10487] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1097.430183][T10487] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.430195][T10487] usb 5-1: Product: syz [ 1097.430204][T10487] usb 5-1: Manufacturer: syz [ 1097.430212][T10487] usb 5-1: SerialNumber: syz [ 1097.496660][T10487] usb 5-1: config 0 descriptor?? [ 1097.724154][T15971] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2925'. [ 1097.754594][T10487] usb 5-1: USB disconnect, device number 38 [ 1098.277808][T10487] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1099.474384][T10487] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1099.474423][T10487] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1099.474446][T10487] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1099.474492][T10487] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1099.474517][T10487] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.575416][T10487] usb 7-1: config 0 descriptor?? [ 1101.270899][T15995] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2932'. [ 1102.240473][T10487] usbhid 7-1:0.0: can't add hid device: -71 [ 1102.240752][T10487] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1102.256724][T10487] usb 7-1: USB disconnect, device number 21 [ 1105.040984][T16020] kernel read not supported for file /file0 (pid: 16020 comm: syz.9.2937) [ 1105.042378][ T37] audit: type=1800 audit(1770880180.336:182): pid=16020 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.9.2937" name="file0" dev="mqueue" ino=51660 res=0 errno=0 [ 1108.467760][T10487] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1108.630660][T10487] usb 5-1: config 0 has no interfaces? [ 1108.635355][T10487] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1108.635375][T10487] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.635388][T10487] usb 5-1: Product: syz [ 1108.635396][T10487] usb 5-1: Manufacturer: syz [ 1108.635404][T10487] usb 5-1: SerialNumber: syz [ 1108.639874][T10487] usb 5-1: config 0 descriptor?? [ 1108.853725][T16041] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2942'. [ 1108.854786][ T808] usb 5-1: USB disconnect, device number 39 [ 1110.487903][T10487] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1110.650531][T10487] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1110.650567][T10487] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1110.650592][T10487] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1110.650618][T10487] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1110.650631][T10487] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1110.655341][T10487] usb 5-1: config 0 descriptor?? [ 1111.826535][T10487] hid_parser_main: 10 callbacks suppressed [ 1111.826554][T10487] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 1111.826572][T10487] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 1111.826587][T10487] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 1111.826601][T10487] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 1111.826615][T10487] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 1111.826630][T10487] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 1111.826644][T10487] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 1111.826658][T10487] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 1111.826673][T10487] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 1111.826688][T10487] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 1111.961018][T10487] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1112.204697][ T808] usb 5-1: USB disconnect, device number 40 [ 1115.962801][T16096] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2955'. [ 1116.952752][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.956086][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1136.981079][T16172] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2972'. [ 1143.597919][ T5900] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1144.847786][ T5900] usb 5-1: Using ep0 maxpacket: 32 [ 1144.850696][ T5900] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1144.850724][ T5900] usb 5-1: config 0 has no interfaces? [ 1144.850756][ T5900] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1144.850780][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1144.869709][ T5900] usb 5-1: config 0 descriptor?? [ 1145.040548][T10487] usb 5-1: USB disconnect, device number 41 [ 1147.128336][T16224] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2984'. [ 1149.834474][T16238] binder: BINDER_SET_CONTEXT_MGR already set [ 1149.834516][T16238] binder: 16231:16238 ioctl 4018620d 2000000002c0 returned -16 [ 1155.106831][T16279] kernel read not supported for file /file0 (pid: 16279 comm: syz.4.2996) [ 1155.154493][ T37] audit: type=1800 audit(1770880230.406:183): pid=16279 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.2996" name="file0" dev="mqueue" ino=52354 res=0 errno=0 [ 1164.328148][T16327] binder: BINDER_SET_CONTEXT_MGR already set [ 1164.328317][T16327] binder: 16320:16327 ioctl 4018620d 2000000002c0 returned -16 [ 1165.289635][T16329] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3009'. [ 1171.650180][T16368] binder: BINDER_SET_CONTEXT_MGR already set [ 1171.650255][T16368] binder: 16361:16368 ioctl 4018620d 2000000002c0 returned -16 [ 1175.161352][T16393] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3021'. [ 1177.529923][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.530020][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.867926][T16403] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3025'. [ 1179.628522][T16411] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3026'. [ 1179.628540][T16411] openvswitch: netlink: Flow actions attr not present in new flow. [ 1179.636889][T16411] bridge4: entered promiscuous mode [ 1179.706258][T16411] netlink: 'syz.7.3026': attribute type 2 has an invalid length. [ 1179.707239][T16411] netlink: 'syz.7.3026': attribute type 12 has an invalid length. [ 1184.620855][T16446] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3034'. [ 1184.731292][T16436] Bluetooth: hci4: command 0x0406 tx timeout [ 1185.807808][T16449] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3035'. [ 1186.198848][T16454] binder: BINDER_SET_CONTEXT_MGR already set [ 1186.198892][T16454] binder: 16451:16454 ioctl 4018620d 2000000002c0 returned -16 [ 1187.361346][T15154] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1187.510238][T15154] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1187.510262][T15154] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1187.510275][T15154] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1187.510301][T15154] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1187.510315][T15154] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1187.513616][T15154] usb 5-1: config 0 descriptor?? [ 1187.939780][T15154] hid_parser_main: 5 callbacks suppressed [ 1187.939798][T15154] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 1187.939816][T15154] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 1187.939831][T15154] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 1187.939845][T15154] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 1187.939860][T15154] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 1187.939874][T15154] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 1187.939892][T15154] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 1187.939906][T15154] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 1187.939920][T15154] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 1187.939934][T15154] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 1188.064112][T15154] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1188.337445][ T5881] usb 5-1: USB disconnect, device number 42 [ 1188.455900][T16465] fido_id[16465]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 1194.435737][T16500] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3048'. [ 1197.404772][T16520] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3052'. [ 1199.947257][T16529] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3055'. [ 1201.219606][T16542] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3060'. [ 1205.282119][T16564] kernel read not supported for file /file0 (pid: 16564 comm: syz.9.3066) [ 1205.308673][ T37] audit: type=1800 audit(1770880280.576:184): pid=16564 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.9.3066" name="file0" dev="mqueue" ino=52880 res=0 errno=0 [ 1206.902635][T16570] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3069'. [ 1216.216409][T16619] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3082'. [ 1221.919326][T16436] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1221.924026][T16436] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1221.945434][T16436] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1221.976298][T16436] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1221.977137][T16436] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1223.059940][T16645] chnl_net:caif_netlink_parms(): no params data found [ 1224.158319][T16436] Bluetooth: hci1: command tx timeout [ 1225.433466][T16645] bridge0: port 1(bridge_slave_0) entered blocking state [ 1225.448113][T16645] bridge0: port 1(bridge_slave_0) entered disabled state [ 1225.448404][T16645] bridge_slave_0: entered allmulticast mode [ 1225.451667][T16645] bridge_slave_0: entered promiscuous mode [ 1225.493402][T16645] bridge0: port 2(bridge_slave_1) entered blocking state [ 1225.493635][T16645] bridge0: port 2(bridge_slave_1) entered disabled state [ 1225.493866][T16645] bridge_slave_1: entered allmulticast mode [ 1225.496924][T16645] bridge_slave_1: entered promiscuous mode [ 1225.637513][T16645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1226.394318][T16436] Bluetooth: hci1: command tx timeout [ 1227.710309][T16688] binder: BINDER_SET_CONTEXT_MGR already set [ 1227.710353][T16688] binder: 16680:16688 ioctl 4018620d 2000000002c0 returned -16 [ 1228.487796][T16436] Bluetooth: hci1: command tx timeout [ 1228.736157][T16693] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3095'. [ 1229.892810][T16645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1230.079133][T16645] team0: Port device team_slave_0 added [ 1230.136790][T16645] team0: Port device team_slave_1 added [ 1230.558474][T16436] Bluetooth: hci1: command tx timeout [ 1231.661447][T16645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1231.661462][T16645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1231.661479][T16645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1231.719031][T16645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1231.719049][T16645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1231.719074][T16645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1233.699005][T16645] hsr_slave_0: entered promiscuous mode [ 1233.699973][T16645] hsr_slave_1: entered promiscuous mode [ 1233.700665][T16645] debugfs: 'hsr0' already exists in 'hsr' [ 1233.700690][T16645] Cannot create hsr debugfs directory [ 1239.158547][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.158853][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1243.212215][T16768] binder: BINDER_SET_CONTEXT_MGR already set [ 1243.212258][T16768] binder: 16765:16768 ioctl 4018620d 2000000002c0 returned -16 [ 1250.138622][T16823] binder: BINDER_SET_CONTEXT_MGR already set [ 1250.138677][T16823] binder: 16819:16823 ioctl 4018620d 2000000002c0 returned -16 [ 1250.953628][T16645] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1251.098136][T16645] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1251.179040][T16645] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1251.729384][T16645] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1252.831142][T16645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1252.971041][T16645] 8021q: adding VLAN 0 to HW filter on device team0 [ 1253.130190][ T1121] bridge0: port 1(bridge_slave_0) entered blocking state [ 1253.130278][ T1121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1253.251322][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 1253.251563][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1255.235427][T16645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1256.868022][T16645] veth0_vlan: entered promiscuous mode [ 1256.920319][T16645] veth1_vlan: entered promiscuous mode [ 1257.183829][T16645] veth0_macvtap: entered promiscuous mode [ 1257.230475][T16645] veth1_macvtap: entered promiscuous mode [ 1257.311753][T16645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1258.562740][T16645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1258.677962][ T757] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1258.678292][ T757] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1258.679557][ T757] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1258.679844][ T757] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1261.027746][ T5859] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1261.200580][ T5859] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1261.200617][ T5859] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1261.200640][ T5859] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1261.200693][ T5859] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1261.200717][ T5859] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1261.310327][ T5859] usb 7-1: config 0 descriptor?? [ 1262.591731][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1262.591755][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1262.761407][ T5859] hid_parser_main: 5 callbacks suppressed [ 1262.761434][ T5859] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 1262.761463][ T5859] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 1262.761490][ T5859] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 1262.761515][ T5859] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 1262.761540][ T5859] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 1262.822586][ T5859] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1263.202875][T16938] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3141'. [ 1264.085257][ T5859] usb 7-1: USB disconnect, device number 22 [ 1264.100369][ T1121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1264.100393][ T1121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1265.512807][T16944] fido_id[16944]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1266.954276][T16959] tipc: Started in network mode [ 1266.954309][T16959] tipc: Node identity f6952106d784, cluster identity 4711 [ 1266.954546][T16959] tipc: Enabled bearer , priority 0 [ 1266.955608][T16959] syzkaller0: entered promiscuous mode [ 1266.955631][T16959] syzkaller0: entered allmulticast mode [ 1267.044289][T16953] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3144'. [ 1267.067855][T16953] tipc: Resetting bearer [ 1267.130658][T16952] tipc: Resetting bearer [ 1268.299079][T16952] tipc: Disabling bearer [ 1270.225191][T10487] tipc: Node number set to 554770694 [ 1273.395032][ T10] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1273.582708][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1273.582745][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1273.582768][ T10] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1273.582813][ T10] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1273.582837][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1273.599832][ T10] usb 10-1: config 0 descriptor?? [ 1274.972319][ T10] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 1274.972357][ T10] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 1274.972463][ T10] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 1274.972490][ T10] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 1274.972514][ T10] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 1275.016901][ T10] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1275.130377][ T10] usb 10-1: USB disconnect, device number 2 [ 1275.664461][T17021] fido_id[17021]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1300.326464][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.326545][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1307.607695][ T10] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1311.157823][ T5859] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1311.223875][ T5114] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1311.261366][ T5114] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1311.263984][ T5114] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1311.290326][ T5114] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1311.295594][ T5114] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1311.340354][ T5859] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1311.340391][ T5859] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1311.340413][ T5859] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1311.340454][ T5859] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1311.340477][ T5859] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1311.515242][ T5859] usb 7-1: config 0 descriptor?? [ 1313.101458][ T5859] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 1313.101485][ T5859] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 1313.101500][ T5859] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 1313.101515][ T5859] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 1313.101529][ T5859] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 1313.101544][ T5859] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 1313.101558][ T5859] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 1313.101573][ T5859] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 1313.101587][ T5859] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 1313.101602][ T5859] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 1313.227480][ T5859] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1313.388252][T15154] usb 7-1: USB disconnect, device number 23 [ 1313.520488][T16436] Bluetooth: hci5: command tx timeout [ 1313.663706][ T69] bridge_slave_1: left allmulticast mode [ 1313.663730][ T69] bridge_slave_1: left promiscuous mode [ 1313.663918][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 1313.754268][T17251] fido_id[17251]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1313.795059][ T69] bridge_slave_0: left allmulticast mode [ 1313.795092][ T69] bridge_slave_0: left promiscuous mode [ 1313.795413][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 1315.597886][T16436] Bluetooth: hci5: command tx timeout [ 1317.688051][T16436] Bluetooth: hci5: command tx timeout [ 1317.900726][T17274] fuse: Unknown parameter 'group_id00000000000000000000' [ 1320.608057][T16436] Bluetooth: hci5: command tx timeout [ 1321.231328][ T69] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1326.987785][ T69] bond0 (unregistering): left promiscuous mode [ 1326.987812][ T69] bond_slave_0: left promiscuous mode [ 1326.988085][ T69] bond_slave_1: left promiscuous mode [ 1327.048968][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1327.147746][ T5881] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1327.175132][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1327.284077][ T69] bond0 (unregistering): Released all slaves [ 1327.320591][ T69] bond1 (unregistering): Released all slaves [ 1327.409712][ T69] bond2 (unregistering): Released all slaves [ 1327.512295][ T69] bond3 (unregistering): Released all slaves [ 1330.077885][ T5881] usb 7-1: device descriptor read/64, error -71 [ 1330.328023][ T5881] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1330.657804][ T69] team0: left promiscuous mode [ 1330.657831][ T69] team_slave_0: left promiscuous mode [ 1330.658344][ T69] team_slave_1: left promiscuous mode [ 1330.870086][ T69] hsr_slave_0: left promiscuous mode [ 1330.908067][ T69] hsr_slave_1: left promiscuous mode [ 1330.916825][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1330.945496][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1330.981442][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1330.981476][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1331.810825][ T69] veth1_macvtap: left promiscuous mode [ 1331.810934][ T69] veth0_macvtap: left promiscuous mode [ 1331.811995][ T69] veth1_vlan: left promiscuous mode [ 1331.820501][ T69] veth0_vlan: left promiscuous mode [ 1333.829696][ T5859] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 1334.148156][ T5859] usb 9-1: Using ep0 maxpacket: 32 [ 1334.304106][ T5859] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1334.304138][ T5859] usb 9-1: config 0 has no interfaces? [ 1334.305050][ T5859] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1334.305079][ T5859] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1334.860847][ T5859] usb 9-1: config 0 descriptor?? [ 1335.172594][T17383] Bluetooth: MGMT ver 1.23 [ 1337.837834][ T5881] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1339.500922][ T69] team0 (unregistering): Port device team_slave_1 removed [ 1339.740056][ T69] team0 (unregistering): Port device team_slave_0 removed [ 1342.259291][ T5859] usb 9-1: USB disconnect, device number 37 [ 1343.105890][T17237] chnl_net:caif_netlink_parms(): no params data found [ 1343.668411][T17237] bridge0: port 1(bridge_slave_0) entered blocking state [ 1343.668530][T17237] bridge0: port 1(bridge_slave_0) entered disabled state [ 1343.668675][T17237] bridge_slave_0: entered allmulticast mode [ 1343.670240][T17237] bridge_slave_0: entered promiscuous mode [ 1343.715167][T17237] bridge0: port 2(bridge_slave_1) entered blocking state [ 1343.715314][T17237] bridge0: port 2(bridge_slave_1) entered disabled state [ 1343.715606][T17237] bridge_slave_1: entered allmulticast mode [ 1343.771921][T17237] bridge_slave_1: entered promiscuous mode [ 1344.311623][T17237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1344.335559][T17237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1344.949202][T17237] team0: Port device team_slave_0 added [ 1344.969815][T17237] team0: Port device team_slave_1 added [ 1345.208103][T17237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1345.208123][T17237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1345.208152][T17237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1345.299205][T17237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1345.299219][T17237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1345.299235][T17237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1346.784736][T17237] hsr_slave_0: entered promiscuous mode [ 1346.785762][T17237] hsr_slave_1: entered promiscuous mode [ 1346.819068][T17237] debugfs: 'hsr0' already exists in 'hsr' [ 1346.819089][T17237] Cannot create hsr debugfs directory [ 1348.961560][T16436] Bluetooth: hci1: command 0x0406 tx timeout [ 1350.501786][T17237] netdevsim netdevsim4 netdevsim0 (unregistering): left promiscuous mode [ 1352.941819][T17237] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1353.011971][T17237] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1353.096596][T17237] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1353.154737][T17237] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1353.782335][T17237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1353.940153][T17237] 8021q: adding VLAN 0 to HW filter on device team0 [ 1353.976054][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 1353.976139][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1354.201754][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 1354.215659][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1355.702405][ T5859] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1359.220154][T17237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1359.372670][T17538] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3262'. [ 1359.404497][T17538] vlan2: entered promiscuous mode [ 1359.404522][T17538] team0: entered promiscuous mode [ 1359.404544][T17538] team_slave_0: entered promiscuous mode [ 1359.404785][T17538] team_slave_1: entered promiscuous mode [ 1360.027976][T17554] tipc: Started in network mode [ 1360.027999][T17554] tipc: Node identity 6ab96497d678, cluster identity 4711 [ 1360.028120][T17554] tipc: Enabled bearer , priority 0 [ 1360.028735][T17554] syzkaller0: entered promiscuous mode [ 1360.028749][T17554] syzkaller0: entered allmulticast mode [ 1360.034223][T17554] netlink: 44 bytes leftover after parsing attributes in process `syz.9.3265'. [ 1360.076966][T17554] tipc: Resetting bearer [ 1360.297172][T17550] tipc: Resetting bearer [ 1360.572775][T17550] tipc: Disabling bearer [ 1360.981560][T17237] veth0_vlan: entered promiscuous mode [ 1362.049201][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.049284][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.060930][T17237] veth1_vlan: entered promiscuous mode [ 1362.337750][T17237] veth0_macvtap: entered promiscuous mode [ 1362.361928][T17237] veth1_macvtap: entered promiscuous mode [ 1362.441150][T17237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1362.484831][T17237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1362.527426][ T1121] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1362.553903][ T1121] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1362.574547][T15418] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1362.614656][T15418] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1363.262095][T10354] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1363.262119][T10354] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1364.658182][T17243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1364.658205][T17243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1364.677629][T10487] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 1371.059641][T17631] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3286'. [ 1376.823693][T17667] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3297'. [ 1382.517621][T15154] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1382.798970][T17723] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3310'. [ 1389.577629][T15154] usb 9-1: new full-speed USB device number 39 using dummy_hcd [ 1389.811720][T15154] usb 9-1: device descriptor read/64, error -71 [ 1390.153772][T17768] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3323'. [ 1390.948598][T15154] usb 9-1: new full-speed USB device number 40 using dummy_hcd [ 1391.152663][T15154] usb 9-1: device descriptor read/64, error -71 [ 1391.257981][T15154] usb usb9-port1: attempt power cycle [ 1391.716967][T15154] usb 9-1: new full-speed USB device number 41 using dummy_hcd [ 1391.748778][T15154] usb 9-1: device descriptor read/8, error -71 [ 1391.987661][T15154] usb 9-1: new full-speed USB device number 42 using dummy_hcd [ 1392.010239][T15154] usb 9-1: device descriptor read/8, error -71 [ 1392.118295][T15154] usb usb9-port1: unable to enumerate USB device [ 1392.788066][ T5880] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 1394.015334][ T5880] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1394.015373][ T5880] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1394.015397][ T5880] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1394.015443][ T5880] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1394.015467][ T5880] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1394.119802][ T5880] usb 9-1: config 0 descriptor?? [ 1395.050387][ T5880] hid_parser_main: 5 callbacks suppressed [ 1395.050413][ T5880] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 1395.050442][ T5880] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 1395.050467][ T5880] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 1395.050493][ T5880] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 1395.050517][ T5880] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 1395.228796][ T5880] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1397.068999][T16479] usb 9-1: USB disconnect, device number 43 [ 1399.026347][T16479] usb 9-1: new full-speed USB device number 44 using dummy_hcd [ 1399.167693][T16479] usb 9-1: device descriptor read/64, error -71 [ 1399.417729][T16479] usb 9-1: new full-speed USB device number 45 using dummy_hcd [ 1399.547746][T16479] usb 9-1: device descriptor read/64, error -71 [ 1399.661205][T16479] usb usb9-port1: attempt power cycle [ 1399.997756][T16479] usb 9-1: new full-speed USB device number 46 using dummy_hcd [ 1400.018481][T16479] usb 9-1: device descriptor read/8, error -71 [ 1401.347750][T16479] usb 9-1: new full-speed USB device number 47 using dummy_hcd [ 1402.009202][T16479] usb 9-1: device not accepting address 47, error -71 [ 1402.011702][T16479] usb usb9-port1: unable to enumerate USB device [ 1402.797785][T16479] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 1406.517805][T15154] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1406.670278][T15154] usb 7-1: Using ep0 maxpacket: 32 [ 1406.673429][T15154] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1406.673461][T15154] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1406.673473][T15154] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1406.676097][T15154] usb 7-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1406.676124][T15154] usb 7-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1406.676141][T15154] usb 7-1: Product: syz [ 1406.676149][T15154] usb 7-1: Manufacturer: syz [ 1406.676157][T15154] usb 7-1: SerialNumber: syz [ 1406.801705][T15154] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input37 [ 1409.078012][T17581] usb 7-1: USB disconnect, device number 26 [ 1409.257632][T15154] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1409.360802][T17581] appletouch 7-1:1.0: input: appletouch disconnected [ 1409.407627][T15154] usb 3-1: Using ep0 maxpacket: 32 [ 1409.409883][T15154] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1409.409918][T15154] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1409.409940][T15154] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1409.414015][T15154] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1409.414045][T15154] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1409.414066][T15154] usb 3-1: Product: syz [ 1409.414080][T15154] usb 3-1: Manufacturer: syz [ 1409.414095][T15154] usb 3-1: SerialNumber: syz [ 1409.561101][T10487] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 1409.620412][T15154] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input38 [ 1409.687644][T10487] usb 10-1: device descriptor read/64, error -71 [ 1409.959360][T10487] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 1410.987460][T10487] usb 10-1: device descriptor read/64, error -71 [ 1411.722283][T10487] usb usb10-port1: attempt power cycle [ 1411.736611][ T5882] usb 3-1: USB disconnect, device number 4 [ 1411.897767][T16479] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1411.901020][ T5882] appletouch 3-1:1.0: input: appletouch disconnected [ 1412.080551][T10487] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 1412.110583][T16479] usb 5-1: Using ep0 maxpacket: 32 [ 1412.505095][T16479] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1412.505162][T16479] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1412.505187][T16479] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1412.569686][T16479] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1412.569742][T16479] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1412.569762][T16479] usb 5-1: Product: syz [ 1412.569774][T16479] usb 5-1: Manufacturer: syz [ 1412.569788][T16479] usb 5-1: SerialNumber: syz [ 1413.184855][T16479] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input39 [ 1413.695985][T10487] usb 10-1: device descriptor read/8, error -71 [ 1415.750911][ T5882] usb 5-1: USB disconnect, device number 44 [ 1415.878832][T15154] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1416.047624][ T5882] appletouch 5-1:1.0: input: appletouch disconnected [ 1416.048110][T15154] usb 3-1: Using ep0 maxpacket: 32 [ 1416.052717][T15154] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1416.052742][T15154] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1416.052755][T15154] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1416.055251][T15154] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1416.055276][T15154] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1416.055288][T15154] usb 3-1: Product: syz [ 1416.055297][T15154] usb 3-1: Manufacturer: syz [ 1416.055305][T15154] usb 3-1: SerialNumber: syz [ 1416.198030][T15154] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input40 [ 1416.583600][T17945] fuse: Invalid rootmode [ 1418.075106][ T5882] usb 3-1: USB disconnect, device number 5 [ 1418.290791][ T5882] appletouch 3-1:1.0: input: appletouch disconnected [ 1419.693172][T17986] fuse: Invalid rootmode [ 1420.558349][ T5882] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1423.203813][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.203921][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.441319][T18027] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3398'. [ 1432.467678][ T808] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1433.823564][ T808] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1433.823602][ T808] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1433.823627][ T808] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1433.823673][ T808] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1433.823697][ T808] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1433.917113][ T808] usb 10-1: config 0 descriptor?? [ 1434.027741][T15154] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1434.385344][ T808] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 1434.395594][ T808] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 1434.395637][ T808] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 1434.395664][ T808] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 1434.395698][ T808] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 1434.395723][ T808] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 1434.395747][ T808] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 1434.395763][ T808] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 1434.395778][ T808] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 1434.395794][ T808] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 1434.523080][ T808] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1434.733529][ T808] usb 10-1: USB disconnect, device number 9 [ 1435.041342][T18119] fido_id[18119]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1435.768556][ T5801] Bluetooth: hci5: command 0x0406 tx timeout [ 1435.841630][T18124] binder: BINDER_SET_CONTEXT_MGR already set [ 1435.841648][T18124] binder: 18121:18124 ioctl 4018620d 2000000002c0 returned -16 [ 1436.997669][ T5882] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1437.247706][ T5882] usb 10-1: Using ep0 maxpacket: 16 [ 1437.552238][ T5882] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1437.552268][ T5882] usb 10-1: New USB device found, idVendor=0dfc, idProduct=0101, bcdDevice= 0.00 [ 1437.552283][ T5882] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1437.625848][ T5882] usb 10-1: config 0 descriptor?? [ 1443.007786][ T808] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 1443.163844][ T808] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1443.163876][ T808] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1443.163901][ T808] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1443.164017][ T808] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1443.164032][ T808] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1443.287144][ T808] usb 9-1: config 0 descriptor?? [ 1443.782115][ T808] hid_parser_main: 5 callbacks suppressed [ 1443.782405][ T808] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 1443.782447][ T808] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 1443.782474][ T808] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 1443.782499][ T808] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 1443.782911][ T808] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 1443.782940][ T808] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 1443.782965][ T808] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 1443.782990][ T808] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 1443.783243][ T808] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 1443.783271][ T808] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 1443.961975][ T808] plantronics 0003:047F:FFFF.001E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1443.987122][ T808] usb 9-1: USB disconnect, device number 49 [ 1444.078942][ T5882] usbhid 10-1:0.0: can't add hid device: -32 [ 1444.079027][ T5882] usbhid 10-1:0.0: probe with driver usbhid failed with error -32 [ 1444.309170][T18174] fido_id[18174]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1448.308399][ T5882] usb 10-1: USB disconnect, device number 10 [ 1454.356525][T18248] 9p: Bad value for 'wfdno' [ 1461.748719][T10487] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1473.848688][ T808] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 1473.987627][ T808] usb 5-1: device descriptor read/64, error -71 [ 1474.012853][ T5801] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1474.031890][ T5801] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1474.033702][ T5801] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1474.034994][ T5801] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1474.035878][ T5801] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1474.267658][ T808] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 1474.401089][ T808] usb 5-1: device descriptor read/64, error -71 [ 1474.508186][ T808] usb usb5-port1: attempt power cycle [ 1474.867796][ T808] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 1474.910348][ T808] usb 5-1: device descriptor read/8, error -71 [ 1475.387674][ T808] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 1476.507639][ T5801] Bluetooth: hci3: command tx timeout [ 1476.511037][ T808] usb 5-1: device descriptor read/8, error -71 [ 1476.585916][T18369] chnl_net:caif_netlink_parms(): no params data found [ 1477.080846][ T808] usb usb5-port1: unable to enumerate USB device [ 1478.831175][ T5801] Bluetooth: hci3: command tx timeout [ 1478.967656][T10487] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 1481.881335][ T5801] Bluetooth: hci3: command tx timeout [ 1482.134721][T15114] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1482.174598][T18369] bridge0: port 1(bridge_slave_0) entered blocking state [ 1482.174678][T18369] bridge0: port 1(bridge_slave_0) entered disabled state [ 1482.174949][T18369] bridge_slave_0: entered allmulticast mode [ 1482.184289][T18369] bridge_slave_0: entered promiscuous mode [ 1482.278890][T18369] bridge0: port 2(bridge_slave_1) entered blocking state [ 1482.280159][T18369] bridge0: port 2(bridge_slave_1) entered disabled state [ 1482.280431][T18369] bridge_slave_1: entered allmulticast mode [ 1482.283198][T18369] bridge_slave_1: entered promiscuous mode [ 1482.418795][T18369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1482.423409][T18369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1483.047574][T18421] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3508'. [ 1483.921861][T15114] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1484.065827][ T5801] Bluetooth: hci3: command tx timeout [ 1484.441906][T18369] team0: Port device team_slave_0 added [ 1484.450450][T18369] team0: Port device team_slave_1 added [ 1484.547611][T10487] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 1484.647571][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.647676][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.743984][T10487] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1484.744023][T10487] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1484.744047][T10487] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1484.744094][T10487] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1484.744119][T10487] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1484.831072][T10487] usb 9-1: config 0 descriptor?? [ 1484.884500][T15114] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1485.208099][T15154] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 1485.260737][T10487] hid_parser_main: 5 callbacks suppressed [ 1485.260763][T10487] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 1485.260793][T10487] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 1485.260819][T10487] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 1485.260845][T10487] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 1485.260870][T10487] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 1485.260896][T10487] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 1485.260922][T10487] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 1485.260947][T10487] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 1485.260973][T10487] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 1485.260998][T10487] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 1485.337572][T15154] usb 5-1: device descriptor read/64, error -71 [ 1485.378943][T10487] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1485.470100][T15114] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1485.522405][T17918] usb 9-1: USB disconnect, device number 51 [ 1485.573080][T18369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1485.573101][T18369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1485.573130][T18369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1485.577725][T15154] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 1485.606403][T18369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1485.606421][T18369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1485.606445][T18369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1485.707733][T15154] usb 5-1: device descriptor read/64, error -71 [ 1486.691760][T18431] fido_id[18431]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1487.066679][T15154] usb usb5-port1: attempt power cycle [ 1487.289744][T18369] hsr_slave_0: entered promiscuous mode [ 1487.294313][T18369] hsr_slave_1: entered promiscuous mode [ 1487.296798][T18369] debugfs: 'hsr0' already exists in 'hsr' [ 1487.296829][T18369] Cannot create hsr debugfs directory [ 1487.357801][ T8698] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1487.427713][T15154] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 1487.462602][T15154] usb 5-1: device descriptor read/8, error -71 [ 1487.709519][T15154] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 1487.731828][T15154] usb 5-1: device descriptor read/8, error -71 [ 1487.838341][T15154] usb usb5-port1: unable to enumerate USB device [ 1489.060383][T17918] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1489.373946][T17918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1489.379641][T17918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1489.382035][T17918] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1489.385699][T17918] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1489.386686][T17918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1489.752058][T17918] usb 5-1: config 0 descriptor?? [ 1489.779628][T15114] bridge_slave_1: left allmulticast mode [ 1489.779662][T15114] bridge_slave_1: left promiscuous mode [ 1489.779923][T15114] bridge0: port 2(bridge_slave_1) entered disabled state [ 1490.102686][T15114] bridge_slave_0: left allmulticast mode [ 1490.102788][T15114] bridge_slave_0: left promiscuous mode [ 1490.105343][T15114] bridge0: port 1(bridge_slave_0) entered disabled state [ 1490.349081][T17918] hid_parser_main: 5 callbacks suppressed [ 1490.349100][T17918] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 1490.349118][T17918] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 1490.349132][T17918] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 1490.349147][T17918] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 1490.349162][T17918] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 1490.450084][T17918] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1491.643331][T10487] usb 5-1: USB disconnect, device number 54 [ 1493.278892][ T808] usb 9-1: new full-speed USB device number 52 using dummy_hcd [ 1493.437693][ T808] usb 9-1: device descriptor read/64, error -71 [ 1493.677624][ T808] usb 9-1: new full-speed USB device number 53 using dummy_hcd [ 1493.708839][T15114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1493.769113][T15114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1493.807672][ T808] usb 9-1: device descriptor read/64, error -71 [ 1493.821180][T15114] bond0 (unregistering): Released all slaves [ 1493.919311][ T808] usb usb9-port1: attempt power cycle [ 1495.197765][T17918] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1495.237689][ T808] usb 9-1: new full-speed USB device number 54 using dummy_hcd [ 1495.258858][ T808] usb 9-1: device descriptor read/8, error -71 [ 1495.539601][ T808] usb 9-1: new full-speed USB device number 55 using dummy_hcd [ 1495.559259][ T808] usb 9-1: device descriptor read/8, error -71 [ 1495.674562][ T808] usb usb9-port1: unable to enumerate USB device [ 1495.827693][ T808] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1495.987060][ T808] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1495.987160][ T808] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1495.987184][ T808] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1495.987231][ T808] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1495.987256][ T808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1496.068385][ T808] usb 5-1: config 0 descriptor?? [ 1496.587044][ T808] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 1496.587142][ T808] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 1496.587178][ T808] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 1496.587204][ T808] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 1496.587230][ T808] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 1496.828374][ T808] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1496.852994][ T808] usb 5-1: USB disconnect, device number 55 [ 1498.229102][T18506] fido_id[18506]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1503.417652][ T808] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1503.571201][ T808] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1503.571240][ T808] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1503.571263][ T808] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1503.571307][ T808] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1503.571332][ T808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1504.523243][ T808] usb 5-1: config 0 descriptor?? [ 1506.504718][ T808] usb 5-1: can't set config #0, error -71 [ 1506.515376][ T808] usb 5-1: USB disconnect, device number 56 [ 1508.156579][T15114] hsr_slave_0: left promiscuous mode [ 1508.187850][T15114] hsr_slave_1: left promiscuous mode [ 1508.189257][T15114] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1508.189287][T15114] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1508.318371][T15114] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1508.318403][T15114] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1508.572995][T18616] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3562'. [ 1508.603332][T15114] veth1_macvtap: left promiscuous mode [ 1508.603406][T15114] veth0_macvtap: left promiscuous mode [ 1508.603560][T15114] veth1_vlan: left promiscuous mode [ 1508.603665][T15114] veth0_vlan: left promiscuous mode [ 1509.667665][T17581] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1509.858640][T17581] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1509.858677][T17581] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1509.858699][T17581] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1509.858745][T17581] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1509.858770][T17581] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1509.870054][T17581] usb 5-1: config 0 descriptor?? [ 1510.359262][T17581] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 1510.359301][T17581] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 1510.359327][T17581] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 1510.359353][T17581] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 1510.359376][T17581] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 1510.419012][T17581] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1513.561512][ T808] usb 5-1: USB disconnect, device number 57 [ 1515.687734][T17581] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 1516.002284][T15114] team0 (unregistering): Port device team_slave_1 removed [ 1516.288478][T15114] team0 (unregistering): Port device team_slave_0 removed [ 1519.140635][T18672] trusted_key: encrypted_key: insufficient parameters specified [ 1519.803466][T18369] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1520.086632][T18369] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1520.165877][T18369] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1520.269758][T18369] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1522.761428][T18369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1524.535514][T18369] 8021q: adding VLAN 0 to HW filter on device team0 [ 1524.590160][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 1524.590518][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1524.680202][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 1524.680386][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1525.910391][T18369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1526.157856][T18369] veth0_vlan: entered promiscuous mode [ 1526.200979][T18369] veth1_vlan: entered promiscuous mode [ 1526.483127][T18369] veth0_macvtap: entered promiscuous mode [ 1527.103589][T18369] veth1_macvtap: entered promiscuous mode [ 1527.280941][T18369] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1527.340942][T18369] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1527.393527][T10354] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1527.394120][T10354] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1527.394404][T10354] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1527.394643][T10354] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1528.937879][T18789] syzkaller0: entered promiscuous mode [ 1528.937909][T18789] syzkaller0: entered allmulticast mode [ 1529.004497][T18789] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3606'. [ 1529.897728][T15114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1529.897752][T15114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1531.411339][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1531.411364][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1534.346515][ T5114] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1534.362603][ T5114] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1534.364354][ T5114] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1534.365894][ T5114] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1534.366970][ T5114] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1536.567971][ T5801] Bluetooth: hci1: command tx timeout [ 1536.617776][T18845] syzkaller0: entered promiscuous mode [ 1536.617805][T18845] syzkaller0: entered allmulticast mode [ 1536.645706][T18849] netlink: 44 bytes leftover after parsing attributes in process `syz.9.3618'. [ 1537.908963][T10354] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1538.160156][T18882] trusted_key: encrypted_key: insufficient parameters specified [ 1538.490321][T10354] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1538.637843][ T5801] Bluetooth: hci1: command tx timeout [ 1539.420528][T10354] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1539.813922][T18906] syzkaller0: entered promiscuous mode [ 1539.813943][T18906] syzkaller0: entered allmulticast mode [ 1539.831579][T18906] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3634'. [ 1540.205573][T18921] F2FS-fs: Conflicting test_dummy_encryption options [ 1540.364372][T10354] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1540.717772][ T5801] Bluetooth: hci1: command tx timeout [ 1542.107062][T18833] chnl_net:caif_netlink_parms(): no params data found [ 1542.797890][ T5801] Bluetooth: hci1: command tx timeout [ 1545.052950][T18833] bridge0: port 1(bridge_slave_0) entered blocking state [ 1545.053173][T18833] bridge0: port 1(bridge_slave_0) entered disabled state [ 1545.053464][T18833] bridge_slave_0: entered allmulticast mode [ 1545.092234][T18833] bridge_slave_0: entered promiscuous mode [ 1545.143583][T18833] bridge0: port 2(bridge_slave_1) entered blocking state [ 1545.143759][T18833] bridge0: port 2(bridge_slave_1) entered disabled state [ 1545.144091][T18833] bridge_slave_1: entered allmulticast mode [ 1545.178395][T18833] bridge_slave_1: entered promiscuous mode [ 1545.371823][T18970] F2FS-fs: Conflicting test_dummy_encryption options [ 1545.612468][T10354] bridge_slave_1: left allmulticast mode [ 1545.612504][T10354] bridge_slave_1: left promiscuous mode [ 1545.612798][T10354] bridge0: port 2(bridge_slave_1) entered disabled state [ 1545.707406][T10354] bridge_slave_0: left allmulticast mode [ 1545.708701][T10354] bridge_slave_0: left promiscuous mode [ 1545.709021][T10354] bridge0: port 1(bridge_slave_0) entered disabled state [ 1546.254196][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.254276][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.308480][ T10] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1547.092150][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1547.092189][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1547.092212][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1547.092256][ T10] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1547.092280][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1547.100801][ T10] usb 7-1: config 0 descriptor?? [ 1547.521155][ T10] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 1547.521193][ T10] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 1547.521219][ T10] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 1547.521245][ T10] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 1547.521271][ T10] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 1547.521297][ T10] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 1547.521323][ T10] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 1547.521349][ T10] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 1547.521374][ T10] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 1547.521399][ T10] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 1547.624008][ T10] plantronics 0003:047F:FFFF.0023: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1547.821516][ T10] usb 7-1: USB disconnect, device number 28 [ 1547.891468][T19010] fido_id[19010]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1549.200731][T19027] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3658'. [ 1549.485871][T19030] F2FS-fs: Conflicting test_dummy_encryption options [ 1549.802033][T19037] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3660'. [ 1549.802060][T19037] openvswitch: netlink: Flow actions attr not present in new flow. [ 1550.891438][T10354] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1550.957615][T10354] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1551.015262][T10354] bond0 (unregistering): Released all slaves [ 1551.062585][T18833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1551.592554][T19037] bridge2: entered promiscuous mode [ 1551.594130][T19036] netlink: 'syz.8.3660': attribute type 2 has an invalid length. [ 1551.594608][T19038] netlink: 'syz.8.3660': attribute type 12 has an invalid length. [ 1551.646418][T18833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1552.172953][T19065] F2FS-fs: Conflicting test_dummy_encryption options [ 1553.211957][T19092] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3676'. [ 1553.211986][T19092] openvswitch: netlink: Flow actions attr not present in new flow. [ 1554.320985][T18833] team0: Port device team_slave_0 added [ 1554.480848][T19092] bridge1: entered promiscuous mode [ 1554.643963][T19098] netlink: 'syz.4.3676': attribute type 2 has an invalid length. [ 1554.644110][T19099] netlink: 'syz.4.3676': attribute type 12 has an invalid length. [ 1554.783258][T18833] team0: Port device team_slave_1 added [ 1555.422933][T10354] hsr_slave_0: left promiscuous mode [ 1555.490577][T10354] hsr_slave_1: left promiscuous mode [ 1555.491789][T10354] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1555.491817][T10354] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1555.543480][T10354] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1555.543510][T10354] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1555.586944][T19114] F2FS-fs: Conflicting test_dummy_encryption options [ 1555.777279][T10354] veth1_macvtap: left promiscuous mode [ 1555.777399][T10354] veth0_macvtap: left promiscuous mode [ 1555.811026][T10354] veth1_vlan: left promiscuous mode [ 1555.811231][T10354] veth0_vlan: left promiscuous mode [ 1556.367578][T10487] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1556.521278][T10487] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1556.521318][T10487] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1556.521341][T10487] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1556.521385][T10487] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1556.521408][T10487] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1556.607796][T10487] usb 10-1: config 0 descriptor?? [ 1557.067301][T10487] hid_parser_main: 5 callbacks suppressed [ 1557.067329][T10487] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 1557.067359][T10487] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 1557.067385][T10487] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 1557.068317][T10487] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 1557.068358][T10487] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 1557.068384][T10487] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 1557.068407][T10487] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 1557.068454][T10487] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 1557.068477][T10487] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 1557.068501][T10487] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 1557.131939][T10487] plantronics 0003:047F:FFFF.0024: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1557.329919][T17918] usb 10-1: USB disconnect, device number 13 [ 1557.429295][T19141] fido_id[19141]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1557.854222][T19151] F2FS-fs: Conflicting test_dummy_encryption options [ 1558.241560][T19161] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3696'. [ 1561.152602][T19205] F2FS-fs: Conflicting test_dummy_encryption options [ 1563.238460][T10354] team0 (unregistering): Port device team_slave_1 removed [ 1563.504053][T19228] F2FS-fs: Conflicting test_dummy_encryption options [ 1563.528928][T10354] team0 (unregistering): Port device team_slave_0 removed [ 1566.119324][T18833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1566.119346][T18833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1566.119375][T18833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1566.282379][T18833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1566.282398][T18833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1566.282424][T18833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1567.932066][T18833] hsr_slave_0: entered promiscuous mode [ 1567.932926][T18833] hsr_slave_1: entered promiscuous mode [ 1567.933532][T18833] debugfs: 'hsr0' already exists in 'hsr' [ 1567.933548][T18833] Cannot create hsr debugfs directory [ 1568.508604][T19264] F2FS-fs: Conflicting test_dummy_encryption options [ 1569.118641][T19281] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3731'. [ 1573.591554][T19303] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3738'. [ 1573.768966][T19311] F2FS-fs: Conflicting test_dummy_encryption options [ 1574.627771][T19329] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3743'. [ 1577.231062][T19356] F2FS-fs: Conflicting test_dummy_encryption options [ 1578.501293][T19377] syzkaller0: entered promiscuous mode [ 1578.501311][T19377] syzkaller0: entered allmulticast mode [ 1578.503574][T19377] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3753'. [ 1581.119876][T18833] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1581.159691][T18833] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1581.187136][T19398] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3757'. [ 1581.252428][T18833] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1581.296481][T18833] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1582.026033][T18833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1582.076485][T18833] 8021q: adding VLAN 0 to HW filter on device team0 [ 1582.120820][ T1121] bridge0: port 1(bridge_slave_0) entered blocking state [ 1582.120963][ T1121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1583.224012][ T1121] bridge0: port 2(bridge_slave_1) entered blocking state [ 1583.224168][ T1121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1583.430280][T19423] F2FS-fs: Conflicting test_dummy_encryption options [ 1584.495072][T18833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1584.818886][T19455] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3762'. [ 1586.308265][T18833] veth0_vlan: entered promiscuous mode [ 1589.116878][ T5992] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1589.293881][T19485] F2FS-fs: Conflicting test_dummy_encryption options [ 1589.694668][T18833] veth1_vlan: entered promiscuous mode [ 1591.304104][ T5992] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1593.308165][ T5992] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1593.407243][T18833] veth0_macvtap: entered promiscuous mode [ 1593.462976][T18833] veth1_macvtap: entered promiscuous mode [ 1593.568912][T19531] F2FS-fs: Conflicting test_dummy_encryption options [ 1594.052925][ T5992] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1595.131366][ T5114] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1595.139894][ T5114] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1595.148514][ T5114] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1595.154631][ T5114] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1595.168776][ T5114] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1596.919056][ T5992] hsr0: left allmulticast mode [ 1596.919081][ T5992] hsr_slave_0: left allmulticast mode [ 1596.919101][ T5992] hsr_slave_1: left allmulticast mode [ 1596.919460][ T5992] hsr0: left promiscuous mode [ 1596.919771][ T5992] bridge0: port 3(hsr0) entered disabled state [ 1597.031417][ T5992] bridge_slave_1: left allmulticast mode [ 1597.031439][ T5992] bridge_slave_1: left promiscuous mode [ 1597.031616][ T5992] bridge0: port 2(bridge_slave_1) entered disabled state [ 1597.279711][ T5801] Bluetooth: hci3: command tx timeout [ 1597.390096][ T5992] bridge_slave_0: left allmulticast mode [ 1597.390129][ T5992] bridge_slave_0: left promiscuous mode [ 1597.390510][ T5992] bridge0: port 1(bridge_slave_0) entered disabled state [ 1598.438469][T19585] F2FS-fs: Conflicting test_dummy_encryption options [ 1599.357704][ T5801] Bluetooth: hci3: command tx timeout [ 1599.488377][ T5992] bond3 (unregistering): (slave gretap1): Releasing active interface [ 1601.447634][ T5801] Bluetooth: hci3: command tx timeout [ 1602.720021][T19613] F2FS-fs: Conflicting test_dummy_encryption options [ 1603.197688][ T31] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1603.372806][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 1603.376721][ T31] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1603.376750][ T31] usb 5-1: New USB device found, idVendor=0dfc, idProduct=0101, bcdDevice= 0.00 [ 1603.376763][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1603.449199][ T31] usb 5-1: config 0 descriptor?? [ 1603.517657][ T5801] Bluetooth: hci3: command tx timeout [ 1603.538291][ T5992] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1603.664980][ T5992] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1603.701827][ T5992] bond0 (unregistering): Released all slaves [ 1603.746278][ T5992] bond1 (unregistering): Released all slaves [ 1603.950524][ T5992] bond2 (unregistering): Released all slaves [ 1604.025352][T19631] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3811'. [ 1604.124487][ T5992] bond3 (unregistering): Released all slaves [ 1604.170360][ T5992] bond4 (unregistering): Released all slaves [ 1604.223759][ T5992] bond5 (unregistering): Released all slaves [ 1604.294682][ T5992] bond6 (unregistering): Released all slaves [ 1604.390983][ T5992] bond7 (unregistering): Released all slaves [ 1605.235638][ T5992] tipc: Left network mode [ 1606.679194][ T5900] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1606.837799][ T5900] usb 7-1: Using ep0 maxpacket: 32 [ 1606.839945][ T5900] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1606.839981][ T5900] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1606.840004][ T5900] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1606.842552][ T5900] usb 7-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1606.842584][ T5900] usb 7-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1606.842605][ T5900] usb 7-1: Product: syz [ 1606.842619][ T5900] usb 7-1: Manufacturer: syz [ 1606.842633][ T5900] usb 7-1: SerialNumber: syz [ 1607.043149][ T5900] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input41 [ 1607.547007][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.547180][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.297674][ T5900] usb 7-1: USB disconnect, device number 29 [ 1608.887843][ T31] usbhid 5-1:0.0: can't add hid device: -32 [ 1608.888777][ T31] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 1609.791693][ T5900] appletouch 7-1:1.0: input: appletouch disconnected [ 1610.097604][ T10] usb 9-1: new high-speed USB device number 57 using dummy_hcd [ 1610.248502][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 1610.250699][ T10] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1610.250732][ T10] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1610.250754][ T10] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1610.253245][ T10] usb 9-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1610.253274][ T10] usb 9-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1610.253286][ T10] usb 9-1: Product: syz [ 1610.253294][ T10] usb 9-1: Manufacturer: syz [ 1610.253302][ T10] usb 9-1: SerialNumber: syz [ 1610.285173][ T10] input: appletouch as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/input/input42 [ 1610.459878][ T5992] hsr_slave_0: left promiscuous mode [ 1610.499918][ T5992] hsr_slave_1: left promiscuous mode [ 1610.500562][ T5992] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1610.500580][ T5992] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1610.591429][ T5992] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1610.591451][ T5992] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1610.745816][ T10] usb 5-1: USB disconnect, device number 58 [ 1610.855894][ T5992] veth1_macvtap: left promiscuous mode [ 1610.856009][ T5992] veth0_macvtap: left promiscuous mode [ 1610.856282][ T5992] veth1_vlan: left promiscuous mode [ 1610.856478][ T5992] veth0_vlan: left promiscuous mode [ 1611.759326][ T10] usb 9-1: USB disconnect, device number 57 [ 1611.818884][ T5992] pim6reg (unregistering): left allmulticast mode [ 1612.074885][ T10] appletouch 9-1:1.0: input: appletouch disconnected [ 1615.785721][T19699] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3826'. [ 1616.587580][ T8698] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1616.608939][ T5992] team_slave_1 (unregistering): left allmulticast mode [ 1616.649973][ T5992] team0 (unregistering): Port device team_slave_1 removed [ 1616.779195][ T8698] usb 7-1: Using ep0 maxpacket: 16 [ 1616.821444][ T8698] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1616.821474][ T8698] usb 7-1: New USB device found, idVendor=0dfc, idProduct=0101, bcdDevice= 0.00 [ 1616.821488][ T8698] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1616.854071][ T8698] usb 7-1: config 0 descriptor?? [ 1616.920738][ T5992] team_slave_0 (unregistering): left allmulticast mode [ 1616.958427][ T5992] team0 (unregistering): Port device team_slave_0 removed [ 1620.408313][T19554] chnl_net:caif_netlink_parms(): no params data found [ 1622.448440][ T8698] usbhid 7-1:0.0: can't add hid device: -32 [ 1622.448576][ T8698] usbhid 7-1:0.0: probe with driver usbhid failed with error -32 [ 1622.758583][T19554] bridge0: port 1(bridge_slave_0) entered blocking state [ 1622.758730][T19554] bridge0: port 1(bridge_slave_0) entered disabled state [ 1622.759035][T19554] bridge_slave_0: entered allmulticast mode [ 1622.808294][T19554] bridge_slave_0: entered promiscuous mode [ 1622.837627][T19554] bridge0: port 2(bridge_slave_1) entered blocking state [ 1622.837769][T19554] bridge0: port 2(bridge_slave_1) entered disabled state [ 1622.838046][T19554] bridge_slave_1: entered allmulticast mode [ 1622.876804][T19554] bridge_slave_1: entered promiscuous mode [ 1623.153834][T19554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1623.169068][ T10] usb 7-1: USB disconnect, device number 30 [ 1623.221790][T19554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1624.567528][ T8698] usb 9-1: new high-speed USB device number 58 using dummy_hcd [ 1624.576051][T19554] team0: Port device team_slave_0 added [ 1624.635184][T19554] team0: Port device team_slave_1 added [ 1626.439058][T19768] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1626.452146][T19554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1626.452161][T19554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1626.452178][T19554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1626.462461][T19554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1626.462479][T19554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1626.462505][T19554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1628.784939][ T5882] usb 9-1: new high-speed USB device number 59 using dummy_hcd [ 1629.444055][T19554] hsr_slave_0: entered promiscuous mode [ 1629.445047][T19554] hsr_slave_1: entered promiscuous mode [ 1629.487522][ T5882] usb 9-1: Using ep0 maxpacket: 16 [ 1629.507209][ T5882] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1629.507258][ T5882] usb 9-1: New USB device found, idVendor=0dfc, idProduct=0101, bcdDevice= 0.00 [ 1629.507282][ T5882] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1629.605439][ T5882] usb 9-1: config 0 descriptor?? [ 1630.627820][ T8698] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1630.758114][ T8698] usb 5-1: device descriptor read/64, error -71 [ 1630.997607][ T8698] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1631.179494][ T8698] usb 5-1: device descriptor read/64, error -71 [ 1631.299937][ T8698] usb usb5-port1: attempt power cycle [ 1631.647602][ T8698] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1631.685685][ T8698] usb 5-1: device descriptor read/8, error -71 [ 1631.947664][ T8698] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1631.981753][ T8698] usb 5-1: device descriptor read/8, error -71 [ 1632.088030][ T8698] usb usb5-port1: unable to enumerate USB device [ 1634.978146][T15154] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1635.129508][ T5882] usbhid 9-1:0.0: can't add hid device: -32 [ 1635.129686][ T5882] usbhid 9-1:0.0: probe with driver usbhid failed with error -32 [ 1636.459486][ T5992] bridge_slave_1: left allmulticast mode [ 1636.459512][ T5992] bridge_slave_1: left promiscuous mode [ 1636.459788][ T5992] bridge0: port 2(bridge_slave_1) entered disabled state [ 1636.598829][ T5992] bridge_slave_0: left allmulticast mode [ 1636.598852][ T5992] bridge_slave_0: left promiscuous mode [ 1636.599033][ T5992] bridge0: port 1(bridge_slave_0) entered disabled state [ 1637.174730][T10487] usb 9-1: USB disconnect, device number 59 [ 1638.088472][ T5992] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1638.149493][ T5992] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1638.198028][ T5992] bond0 (unregistering): Released all slaves [ 1640.195699][ T5992] hsr_slave_0: left promiscuous mode [ 1640.228373][T16479] usb 9-1: new high-speed USB device number 60 using dummy_hcd [ 1640.277358][ T5992] hsr_slave_1: left promiscuous mode [ 1640.278732][ T5992] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1640.318541][ T5992] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1640.387559][T16479] usb 9-1: Using ep0 maxpacket: 16 [ 1640.391005][T16479] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1640.391049][T16479] usb 9-1: New USB device found, idVendor=0dfc, idProduct=0101, bcdDevice= 0.00 [ 1640.391074][T16479] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1640.420112][T16479] usb 9-1: config 0 descriptor?? [ 1641.063341][ T5992] veth1_macvtap: left promiscuous mode [ 1641.063456][ T5992] veth0_macvtap: left promiscuous mode [ 1641.093353][ T5992] veth1_vlan: left promiscuous mode [ 1641.093627][ T5992] veth0_vlan: left promiscuous mode [ 1645.760520][T16479] usbhid 9-1:0.0: can't add hid device: -32 [ 1645.760661][T16479] usbhid 9-1:0.0: probe with driver usbhid failed with error -32 [ 1649.628122][T19995] F2FS-fs: Conflicting test_dummy_encryption options [ 1650.229610][ T5992] team0 (unregistering): Port device team_slave_1 removed [ 1650.528696][ T5992] team0 (unregistering): Port device team_slave_0 removed [ 1652.934359][T19989] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3896'. [ 1652.935191][T19984] syzkaller0: entered promiscuous mode [ 1652.935217][T19984] syzkaller0: entered allmulticast mode [ 1652.991528][ T8698] usb 9-1: USB disconnect, device number 60 [ 1654.765620][ T5114] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1654.784501][ T5114] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1654.808557][ T5114] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1654.838204][ T5114] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1654.896041][ T5114] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1658.277958][ T8698] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1658.500800][ T8698] usb 10-1: Using ep0 maxpacket: 32 [ 1658.511023][ T5801] Bluetooth: hci1: command tx timeout [ 1658.576529][ T8698] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1658.576569][ T8698] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1658.576592][ T8698] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1658.580960][ T8698] usb 10-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1658.580993][ T8698] usb 10-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1658.581014][ T8698] usb 10-1: Product: syz [ 1658.581028][ T8698] usb 10-1: Manufacturer: syz [ 1658.581043][ T8698] usb 10-1: SerialNumber: syz [ 1658.826523][ T8698] input: appletouch as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/input/input43 [ 1659.317706][ T5881] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1659.497533][ T5881] usb 7-1: Using ep0 maxpacket: 16 [ 1659.502202][ T5881] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1659.502245][ T5881] usb 7-1: New USB device found, idVendor=0dfc, idProduct=0101, bcdDevice= 0.00 [ 1659.502268][ T5881] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1659.568166][ T5881] usb 7-1: config 0 descriptor?? [ 1660.094222][T16479] usb 10-1: USB disconnect, device number 14 [ 1660.124693][T20035] chnl_net:caif_netlink_parms(): no params data found [ 1660.342924][T16479] appletouch 10-1:1.0: input: appletouch disconnected [ 1660.568808][ T5801] Bluetooth: hci1: command tx timeout [ 1660.846127][T20092] syzkaller0: entered promiscuous mode [ 1660.846158][T20092] syzkaller0: entered allmulticast mode [ 1660.980294][T20096] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3919'. [ 1660.980744][ T5992] bridge_slave_1: left allmulticast mode [ 1660.980764][ T5992] bridge_slave_1: left promiscuous mode [ 1660.981230][ T5992] bridge0: port 2(bridge_slave_1) entered disabled state [ 1661.080185][ T5992] bridge_slave_0: left allmulticast mode [ 1661.080220][ T5992] bridge_slave_0: left promiscuous mode [ 1661.080516][ T5992] bridge0: port 1(bridge_slave_0) entered disabled state [ 1662.637593][ T5801] Bluetooth: hci1: command tx timeout [ 1663.723217][ T5992] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1663.800425][ T5992] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1663.997162][ T5992] bond0 (unregistering): Released all slaves [ 1664.723062][ T5801] Bluetooth: hci1: command tx timeout [ 1664.882087][ T5881] usbhid 7-1:0.0: can't add hid device: -32 [ 1664.882170][ T5881] usbhid 7-1:0.0: probe with driver usbhid failed with error -32 [ 1665.107846][ T5992] hsr_slave_0: left promiscuous mode [ 1665.150262][ T5992] hsr_slave_1: left promiscuous mode [ 1665.151409][ T5992] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1665.242683][ T5992] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1665.256402][T15154] usb 7-1: USB disconnect, device number 32 [ 1668.755875][ T5992] team0 (unregistering): Port device team_slave_1 removed [ 1669.028489][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.028573][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.386608][T16479] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1670.177549][T16479] usb 5-1: Using ep0 maxpacket: 16 [ 1670.180012][T16479] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1670.180054][T16479] usb 5-1: New USB device found, idVendor=0dfc, idProduct=0101, bcdDevice= 0.00 [ 1670.180080][T16479] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1670.318607][T16479] usb 5-1: config 0 descriptor?? [ 1671.349005][ T5992] team0 (unregistering): Port device team_slave_0 removed [ 1673.298876][T16479] usbhid 5-1:0.0: can't add hid device: -71 [ 1673.299013][T16479] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1673.348246][T16479] usb 5-1: USB disconnect, device number 63 [ 1674.018411][T20035] bridge0: port 1(bridge_slave_0) entered blocking state [ 1674.021838][T20035] bridge0: port 1(bridge_slave_0) entered disabled state [ 1674.022120][T20035] bridge_slave_0: entered allmulticast mode [ 1674.050918][T20035] bridge_slave_0: entered promiscuous mode [ 1674.071261][T20035] bridge0: port 2(bridge_slave_1) entered blocking state [ 1674.077879][T20035] bridge0: port 2(bridge_slave_1) entered disabled state [ 1674.078159][T20035] bridge_slave_1: entered allmulticast mode [ 1674.154922][T20035] bridge_slave_1: entered promiscuous mode [ 1674.244342][T20250] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3951'. [ 1674.477425][T20035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1674.503925][T20035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1674.709902][T20035] team0: Port device team_slave_0 added [ 1674.714180][T20035] team0: Port device team_slave_1 added [ 1674.874075][T20035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1674.874094][T20035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1674.874115][T20035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1674.882196][T20035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1674.882213][T20035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1674.882237][T20035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1675.647683][T17581] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1675.807925][T17581] usb 5-1: Using ep0 maxpacket: 16 [ 1675.816804][T20035] hsr_slave_0: entered promiscuous mode [ 1675.846149][T20035] hsr_slave_1: entered promiscuous mode [ 1675.858038][T17581] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1675.858082][T17581] usb 5-1: New USB device found, idVendor=0dfc, idProduct=0101, bcdDevice= 0.00 [ 1675.858106][T17581] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1675.895276][T17581] usb 5-1: config 0 descriptor?? [ 1678.013512][T20302] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3962'. [ 1680.475502][T20035] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1680.651044][T20035] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1681.701831][T20035] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1681.919371][T17581] usbhid 5-1:0.0: can't add hid device: -32 [ 1681.919512][T17581] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 1682.064619][T20035] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1682.207580][ T31] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1683.348385][T16479] usb 5-1: USB disconnect, device number 64 [ 1683.556178][T20035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1683.700151][T20035] 8021q: adding VLAN 0 to HW filter on device team0 [ 1683.750423][T15420] bridge0: port 1(bridge_slave_0) entered blocking state [ 1683.750724][T15420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1683.824873][ T1121] bridge0: port 2(bridge_slave_1) entered blocking state [ 1683.846201][ T1121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1686.497531][ T5900] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1686.650437][T20035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1686.657538][ T5900] usb 10-1: Using ep0 maxpacket: 16 [ 1686.678514][ T5900] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1686.678548][ T5900] usb 10-1: New USB device found, idVendor=0dfc, idProduct=0101, bcdDevice= 0.00 [ 1686.678562][ T5900] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1686.684182][ T5900] usb 10-1: config 0 descriptor?? [ 1687.323264][T20035] veth0_vlan: entered promiscuous mode [ 1687.394943][T20035] veth1_vlan: entered promiscuous mode [ 1688.526095][T20035] veth0_macvtap: entered promiscuous mode [ 1688.590788][T20035] veth1_macvtap: entered promiscuous mode [ 1688.814640][T20035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1688.854241][T20035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1688.948575][ T1015] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1688.954773][T15419] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1688.955256][T15419] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1688.955587][T15419] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1691.075876][T20425] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3987'. [ 1691.075903][T20425] openvswitch: netlink: Flow actions attr not present in new flow. [ 1691.344915][T20425] bridge3: entered promiscuous mode [ 1691.383609][T20430] netlink: 'syz.8.3987': attribute type 2 has an invalid length. [ 1691.885502][T17510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1691.885526][T17510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1691.947764][T20425] netlink: 'syz.8.3987': attribute type 12 has an invalid length. [ 1691.999331][ T5900] usbhid 10-1:0.0: can't add hid device: -32 [ 1691.999473][ T5900] usbhid 10-1:0.0: probe with driver usbhid failed with error -32 [ 1692.377230][ T757] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1692.377253][ T757] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1692.698062][T20446] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3990'. [ 1692.700412][ T5900] usb 10-1: USB disconnect, device number 15 [ 1697.680230][T20517] syzkaller0: entered promiscuous mode [ 1697.680376][T20517] syzkaller0: entered allmulticast mode [ 1698.842370][T20521] netlink: 44 bytes leftover after parsing attributes in process `syz.9.4003'. [ 1699.988560][T20546] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4010'. [ 1699.988588][T20546] openvswitch: netlink: Flow actions attr not present in new flow. [ 1700.986257][T20546] bridge1: entered promiscuous mode [ 1701.240113][T20551] netlink: 'syz.6.4010': attribute type 12 has an invalid length. [ 1702.007818][T10483] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1702.177541][T10483] usb 10-1: Using ep0 maxpacket: 8 [ 1702.180477][T10483] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 1702.180540][T10483] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1702.180562][T10483] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1702.180587][T10483] usb 10-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1702.180608][T10483] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1702.180652][T10483] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1702.180677][T10483] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1702.308950][T10483] usbtmc 10-1:16.0: bulk endpoints not found [ 1703.062516][T20602] syzkaller0: entered promiscuous mode [ 1703.062536][T20602] syzkaller0: entered allmulticast mode [ 1703.087315][T20602] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4023'. [ 1704.748392][T15154] usb 10-1: USB disconnect, device number 16 [ 1710.941425][T20710] fuse: Bad value for 'fd' [ 1711.254686][T20721] binder: 20718:20721 ioctl 4018620d 0 returned -22 [ 1712.581699][T20726] syzkaller0: entered promiscuous mode [ 1712.581728][T20726] syzkaller0: entered allmulticast mode [ 1712.631429][T20726] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4054'. [ 1721.179410][T15154] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1721.410266][T20836] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4078'. [ 1723.206630][T20852] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4083'. [ 1729.044406][T20936] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4104'. [ 1729.044426][T20936] openvswitch: netlink: Flow actions attr not present in new flow. [ 1729.105832][T20936] bridge1: entered promiscuous mode [ 1729.186120][T20936] netlink: 'syz.9.4104': attribute type 2 has an invalid length. [ 1729.187894][T20936] netlink: 'syz.9.4104': attribute type 12 has an invalid length. [ 1730.405258][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.406458][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1735.009810][T21063] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4149'. [ 1735.009839][T21063] openvswitch: netlink: Flow actions attr not present in new flow. [ 1735.131166][T21063] bridge2: entered promiscuous mode [ 1735.380600][T21068] netlink: 'syz.4.4149': attribute type 2 has an invalid length. [ 1737.258375][T21129] fuse: Bad value for 'fd' [ 1738.844584][T21188] fuse: Bad value for 'fd' [ 1743.179597][ T5114] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1743.207598][ T5114] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1743.218107][ T5114] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1743.238667][ T5114] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1743.239323][ T5114] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1746.056547][ T5801] Bluetooth: hci3: command tx timeout [ 1747.605656][T21276] chnl_net:caif_netlink_parms(): no params data found [ 1748.033535][T21337] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4240'. [ 1748.033553][T21337] openvswitch: netlink: Flow actions attr not present in new flow. [ 1748.085423][T21337] bridge2: entered promiscuous mode [ 1748.103727][ T5801] Bluetooth: hci3: command tx timeout [ 1748.116485][T21276] bridge0: port 1(bridge_slave_0) entered blocking state [ 1748.116657][T21276] bridge0: port 1(bridge_slave_0) entered disabled state [ 1748.116961][T21276] bridge_slave_0: entered allmulticast mode [ 1748.120514][T21276] bridge_slave_0: entered promiscuous mode [ 1748.151266][T21339] netlink: 'syz.6.4240': attribute type 2 has an invalid length. [ 1748.154476][T21276] bridge0: port 2(bridge_slave_1) entered blocking state [ 1748.154613][T21276] bridge0: port 2(bridge_slave_1) entered disabled state [ 1748.154896][T21276] bridge_slave_1: entered allmulticast mode [ 1748.178498][T21276] bridge_slave_1: entered promiscuous mode [ 1748.221765][T21337] netlink: 'syz.6.4240': attribute type 12 has an invalid length. [ 1748.370906][T21276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1748.381245][T21276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1748.437420][ T5900] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1748.607546][ T5900] usb 5-1: Using ep0 maxpacket: 16 [ 1748.607644][T21276] team0: Port device team_slave_0 added [ 1748.612803][T21276] team0: Port device team_slave_1 added [ 1748.618946][ T5900] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1748.618974][ T5900] usb 5-1: config 0 has no interfaces? [ 1748.623527][ T5900] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1748.623555][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1748.623574][ T5900] usb 5-1: Product: syz [ 1748.623587][ T5900] usb 5-1: Manufacturer: syz [ 1748.623600][ T5900] usb 5-1: SerialNumber: syz [ 1748.633199][ T5900] usb 5-1: config 0 descriptor?? [ 1749.336746][T21276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1749.336767][T21276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1749.336783][T21276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1749.401690][T21276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1749.401703][T21276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1749.401720][T21276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1749.820185][T21276] hsr_slave_0: entered promiscuous mode [ 1749.841777][T21276] hsr_slave_1: entered promiscuous mode [ 1749.843602][T21276] debugfs: 'hsr0' already exists in 'hsr' [ 1749.843629][T21276] Cannot create hsr debugfs directory [ 1750.157996][ T5801] Bluetooth: hci3: command tx timeout [ 1750.742757][T21276] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1751.145124][T21276] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1751.204199][ T5900] usb 5-1: USB disconnect, device number 66 [ 1752.416764][ T5801] Bluetooth: hci3: command tx timeout [ 1753.857997][T21276] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1754.487568][T21276] netdevsim netdevsim8 netdevsim0 (unregistering): left promiscuous mode [ 1754.493253][T21276] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1758.277870][T21276] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1758.442091][T21276] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1758.535108][T21276] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1758.632926][T21276] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1759.313178][T21276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1759.408576][T21276] 8021q: adding VLAN 0 to HW filter on device team0 [ 1759.420072][T20408] bridge0: port 1(bridge_slave_0) entered blocking state [ 1759.420223][T20408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1759.460701][ T5992] bridge0: port 2(bridge_slave_1) entered blocking state [ 1759.461142][ T5992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1761.173654][T21276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1764.057715][T21276] veth0_vlan: entered promiscuous mode [ 1764.107245][T21276] veth1_vlan: entered promiscuous mode [ 1764.385553][T21276] veth0_macvtap: entered promiscuous mode [ 1764.404453][T21276] veth1_macvtap: entered promiscuous mode [ 1764.694947][T21276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1765.790606][T21276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1766.097489][T16988] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1766.280649][ T5992] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1766.672665][ T5992] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1766.675167][ T5992] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1768.482913][T14390] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1768.482939][T14390] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1768.623824][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1768.623847][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1776.503502][T21707] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4350'. [ 1776.503532][T21707] openvswitch: netlink: Flow actions attr not present in new flow. [ 1776.614192][T21707] bridge2: entered promiscuous mode [ 1776.650172][T21710] netlink: 'syz.9.4350': attribute type 2 has an invalid length. [ 1776.669278][T21710] netlink: 'syz.9.4350': attribute type 12 has an invalid length. [ 1778.562634][ T5114] Bluetooth: hci1: command 0x0406 tx timeout [ 1782.388425][T21797] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4386'. [ 1782.388451][T21797] openvswitch: netlink: Flow actions attr not present in new flow. [ 1782.450362][T21797] bridge3: entered promiscuous mode [ 1782.452284][T21796] netlink: 'syz.9.4386': attribute type 2 has an invalid length. [ 1782.455020][T21796] netlink: 'syz.9.4386': attribute type 12 has an invalid length. [ 1791.858922][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.859003][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1798.777847][T21993] BUG: kernel NULL pointer dereference, address: 0000000000000010 [ 1798.777872][T21993] #PF: supervisor read access in kernel mode [ 1798.777885][T21993] #PF: error_code(0x0000) - not-present page [ 1798.777897][T21993] PGD 800000004e52a067 P4D 800000004e52a067 PUD 0 [ 1798.777928][T21993] Oops: Oops: 0000 [#1] SMP KASAN PTI [ 1798.777954][T21993] CPU: 1 UID: 0 PID: 21993 Comm: vhost-21991 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1798.777983][T21993] Tainted: [L]=SOFTLOCKUP [ 1798.777991][T21993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1798.778004][T21993] RIP: 0010:kcov_remote_start+0x2a1/0x710 [ 1798.778042][T21993] Code: 5e 8d 4c 8b b8 18 44 29 92 bd 00 00 04 00 eb 4f 41 8b ae a4 00 00 00 49 c7 c7 40 96 c2 8d 4d 8b 3f 49 81 ff 40 96 c2 8d 74 4c <41> 39 6f 10 75 ee 4c 89 ff e8 01 70 db 02 84 c0 74 0e 49 8b 07 49 [ 1798.778061][T21993] RSP: 0018:ffffc9000d76fcb0 EFLAGS: 00010207 [ 1798.778078][T21993] RAX: 0000000000000000 RBX: ffff88802f1a5a00 RCX: 0000000000000000 [ 1798.778093][T21993] RDX: 000000005108b000 RSI: 0000000000000001 RDI: ffffffff8b861520 [ 1798.778106][T21993] RBP: 0000000000100000 R08: ffffffff8b14a050 R09: ffffffff8dbcd480 [ 1798.778121][T21993] R10: dffffc0000000000 R11: fffffbfff1e9250f R12: 0000000000000002 [ 1798.778135][T21993] R13: 0000000000000001 R14: ffff888036a03a00 R15: 0000000000000000 [ 1798.778149][T21993] FS: 00007f650a4b66c0(0000) GS:ffff888126695000(0000) knlGS:0000000000000000 [ 1798.778167][T21993] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1798.778181][T21993] CR2: 0000000000000010 CR3: 000000002cd60000 CR4: 00000000003526f0 [ 1798.778201][T21993] Call Trace: [ 1798.778209][T21993] [ 1798.778219][T21993] vhost_run_work_list+0x129/0x1e0 [ 1798.778246][T21993] ? __pfx_vhost_run_work_list+0x10/0x10 [ 1798.778266][T21993] vhost_task_fn+0x2ef/0x4a0 [ 1798.778301][T21993] ? __pfx_vhost_task_fn+0x10/0x10 [ 1798.778338][T21993] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1798.778361][T21993] ? rt_spin_unlock+0x14f/0x200 [ 1798.778383][T21993] ? rt_spin_unlock+0x160/0x200 [ 1798.778402][T21993] ? __pfx_vhost_task_fn+0x10/0x10 [ 1798.778432][T21993] ret_from_fork+0x51e/0xb90 [ 1798.778460][T21993] ? __pfx_ret_from_fork+0x10/0x10 [ 1798.778484][T21993] ? __switch_to+0xc7d/0x1400 [ 1798.778515][T21993] ? __pfx_vhost_task_fn+0x10/0x10 [ 1798.778546][T21993] ret_from_fork_asm+0x1a/0x30 [ 1798.778584][T21993] [ 1798.778591][T21993] Modules linked in: [ 1798.778605][T21993] CR2: 0000000000000010 [ 1798.778616][T21993] ---[ end trace 0000000000000000 ]--- [ 1798.778627][T21993] RIP: 0010:kcov_remote_start+0x2a1/0x710 [ 1798.778658][T21993] Code: 5e 8d 4c 8b b8 18 44 29 92 bd 00 00 04 00 eb 4f 41 8b ae a4 00 00 00 49 c7 c7 40 96 c2 8d 4d 8b 3f 49 81 ff 40 96 c2 8d 74 4c <41> 39 6f 10 75 ee 4c 89 ff e8 01 70 db 02 84 c0 74 0e 49 8b 07 49 [ 1798.778675][T21993] RSP: 0018:ffffc9000d76fcb0 EFLAGS: 00010207 [ 1798.778692][T21993] RAX: 0000000000000000 RBX: ffff88802f1a5a00 RCX: 0000000000000000 [ 1798.778706][T21993] RDX: 000000005108b000 RSI: 0000000000000001 RDI: ffffffff8b861520 [ 1798.778720][T21993] RBP: 0000000000100000 R08: ffffffff8b14a050 R09: ffffffff8dbcd480 [ 1798.778736][T21993] R10: dffffc0000000000 R11: fffffbfff1e9250f R12: 0000000000000002 [ 1798.778749][T21993] R13: 0000000000000001 R14: ffff888036a03a00 R15: 0000000000000000 [ 1798.778761][T21993] FS: 00007f650a4b66c0(0000) GS:ffff888126695000(0000) knlGS:0000000000000000 [ 1798.778778][T21993] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1798.778792][T21993] CR2: 0000000000000010 CR3: 000000002cd60000 CR4: 00000000003526f0 [ 1798.778813][T21993] Kernel panic - not syncing: Fatal exception [ 1798.779363][T21993] Kernel Offset: disabled