last executing test programs: 3.875981539s ago: executing program 0 (id=242): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x5}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x200080c1, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x1000008}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg', 0x3) sendmmsg$inet6(r0, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="ce", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000340)="05", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000001580)="e3ad", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000001740)="5d8b", 0x2}], 0x1}}, {{&(0x7f0000000c00)={0xa, 0x4e22, 0x2, @empty, 0x100}, 0x1c, &(0x7f0000000ec0)=[{&(0x7f0000000e40)="acb2654c", 0x4}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x6, 0x48009) 3.83945786s ago: executing program 3 (id=243): ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc00c9207, &(0x7f0000000080)={0x0, 0x0, 0x7fff}) syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x80100) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_dev$usbfs(&(0x7f0000000080), 0x201, 0x440) syz_open_dev$mouse(0x0, 0x0, 0x2042) pselect6(0x40, &(0x7f0000000180)={0x6, 0x3, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7f, 0x104, 0x8000000000000001}, 0x0, &(0x7f0000000440)={0x3ff, 0x6, 0xae07, 0x9, 0xc, 0x15, 0x80000006, 0x8}, 0x0, 0x0) 3.748117932s ago: executing program 0 (id=244): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x80400, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) close(r0) 2.892730842s ago: executing program 3 (id=245): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x20000, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000003c0)={'pcl812\x00', [0x140, 0x10001, 0x1, 0xfffffffe, 0xba8, 0x10000, 0x7, 0x7, 0x1007, 0xc72d, 0x1, 0x20000012, 0xf8, 0x8, 0x4ce, 0x9e9a, 0x101, 0xc, 0x7, 0x8, 0x8000004, 0x0, 0xa82, 0x9, 0x3, 0x200000, 0xae, 0x100000, 0xf, 0x0, 0x1008]}) 2.892573552s ago: executing program 2 (id=246): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001600), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000001640)='connect aa:aa:aa:aa:aa:11 2', 0x1b) 2.892028912s ago: executing program 1 (id=247): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nfc(&(0x7f0000002380), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0x9080) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3}) 2.629595129s ago: executing program 3 (id=248): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x60, 0x0, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x4c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2a}}}}]}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40810}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000004, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x5, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x34, 0x0, 0x1, 0x0, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_TX={0x8}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x34}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.528056741s ago: executing program 2 (id=249): r0 = syz_open_dev$sg(&(0x7f0000000540), 0xb4, 0x42) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x0, 0xfffffffffffffffc, 0x0, 0x5, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1, 0x2, 0x2001, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000001c0)={0x28, 0x6, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3}) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x5393, &(0x7f00000001c0)=ANY=[]) 1.854498857s ago: executing program 1 (id=250): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x90}, 0x80) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 1.838967427s ago: executing program 2 (id=251): socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) getpid() r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7a, &(0x7f0000000080), &(0x7f0000000000)=0x8) 1.792647068s ago: executing program 0 (id=252): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000001440)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x2b, 0x20, 0x68, 0x0, 0x1, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, "11f3305280f125e6e11a9314"}}, 0x2e) 1.664041441s ago: executing program 1 (id=253): write(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[], 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x7) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x66dbf000) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) pselect6(0x40, &(0x7f0000000040)={0x9, 0x800, 0x2, 0x300, 0x0, 0x10000000, 0x0, 0x4}, 0x0, &(0x7f0000000100)={0xf2, 0x3, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x13f) openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/num_groups\x00', 0x1, 0x0) symlinkat(&(0x7f0000000880)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000008c0)='./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0\x00') 1.564397214s ago: executing program 1 (id=254): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2ac3c2d5fa4423c5ad1ddee97879c38bf8", 0x11}], 0x1, 0x0, 0xffffffffffffff12, 0x4000001}, 0x840) writev(r0, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvtap0\x00'}) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) 1.538299854s ago: executing program 2 (id=255): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_usb_connect(0x5, 0x58, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x29, &(0x7f0000000080)=@string={0x29, 0x3, "9ea7e3626153bf1be96d8e3a29336c2db83140898b8b3fdede0107fd28b0d10c8dbbf243cc0b51"}}]}) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000040)={0x6a, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 1.364106538s ago: executing program 1 (id=256): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000280)={'veth1\x00', &(0x7f0000000140)=@ethtool_gstrings={0x1b, 0x1}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a8880088ca4803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 1.363929108s ago: executing program 0 (id=257): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd3000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x0, 0xffffffffffffffff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x2e, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.257464421s ago: executing program 1 (id=258): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nfc(&(0x7f0000002380), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0x9080) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3}) 901.940769ms ago: executing program 2 (id=259): syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[], 0x0) nanosleep(0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pread64(r0, 0x0, 0x0, 0xd000) 724.026164ms ago: executing program 3 (id=260): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x121002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x2000010}, 0x20000000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000340)="6a1a226ae9ec41d1f856c95245b4db615da73e5db1e29f4e3f215455ee54afd5a7ed09be042bec2ad3ed5a78123d96a1f819e650b3db4dfde23a102cc41b57ada0", 0x41}, {&(0x7f0000000480)="11738e7ddf520e5de1521edb302d9ee8fa6714e7ac07a0099d142fa6613d3ff44b6259e319af23bd7c862fb2f878d6724f39671584ba8c27c3bfd6879bd99337e0357e65fb412e277cfa2989f7802d30ab88ed1c2b540be7de587cabd21583f7a02f861d98ea0f5ab276bf9a13e0b1826782133821b46432b2b07de22fa223e47a", 0x81}], 0x2}}], 0x1, 0x20040944) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000300)=@x86={0x1, 0x8, 0x2, 0x0, 0x4, 0x9, 0x3, 0x4, 0x1, 0x7, 0x0, 0x2, 0x0, 0xffffffc4, 0x7fffffff, 0xfe, 0xff, 0x40, 0x6, '\x00', 0x10, 0x2}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x40000072, 0x0, 0x2}]}) 503.882659ms ago: executing program 3 (id=261): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r0, 0x400448e6, 0x0) ioctl$sock_bt_hci(r0, 0x400448e6, 0x0) ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000080)) 320.523033ms ago: executing program 3 (id=262): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000002380), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0x9080) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) 273.901144ms ago: executing program 2 (id=263): socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7a, &(0x7f0000000080), &(0x7f0000000000)=0x8) 273.322804ms ago: executing program 0 (id=264): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x10, 0x5, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc}]}, @NFTA_CHAIN_ID={0x8}]}], {0x14, 0x10}}, 0x78}}, 0x0) 0s ago: executing program 0 (id=265): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect(0x3, 0x312, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.147' (ED25519) to the list of known hosts. [ 67.842395][ T5758] cgroup: Unknown subsys name 'net' [ 67.976902][ T5758] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.390723][ T5758] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.731440][ T5771] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.763851][ T5771] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.781578][ T5774] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.790206][ T5774] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.798027][ T5774] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.807733][ T5774] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.816029][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 70.823733][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.831640][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.839406][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.848816][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 70.854773][ T5777] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.856222][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.872270][ T5777] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.888280][ T5777] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.899666][ T5771] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.907773][ T5771] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.915904][ T5771] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.923882][ T5085] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.932367][ T5771] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.940607][ T5771] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 70.948019][ T5771] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.957356][ T5776] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 70.964866][ T5776] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.344430][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 71.357133][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 71.442785][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 71.473411][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 71.578692][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.590054][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.594244][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.597423][ T5772] bridge_slave_0: entered allmulticast mode [ 71.603656][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.611414][ T5772] bridge_slave_0: entered promiscuous mode [ 71.624177][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.633672][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.640922][ T5769] bridge_slave_0: entered allmulticast mode [ 71.647631][ T5769] bridge_slave_0: entered promiscuous mode [ 71.656493][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.663821][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.671084][ T5769] bridge_slave_1: entered allmulticast mode [ 71.677781][ T5769] bridge_slave_1: entered promiscuous mode [ 71.695876][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.703134][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.710764][ T5772] bridge_slave_1: entered allmulticast mode [ 71.717447][ T5772] bridge_slave_1: entered promiscuous mode [ 71.773660][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.780870][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.788004][ T5779] bridge_slave_0: entered allmulticast mode [ 71.795070][ T5779] bridge_slave_0: entered promiscuous mode [ 71.804193][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.811450][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.818626][ T5779] bridge_slave_1: entered allmulticast mode [ 71.825559][ T5779] bridge_slave_1: entered promiscuous mode [ 71.855051][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.896987][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.908191][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.917650][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.925341][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.933178][ T5775] bridge_slave_0: entered allmulticast mode [ 71.940289][ T5775] bridge_slave_0: entered promiscuous mode [ 71.948075][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.955658][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.962992][ T5775] bridge_slave_1: entered allmulticast mode [ 71.969769][ T5775] bridge_slave_1: entered promiscuous mode [ 71.978342][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.989590][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.017416][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.079314][ T5769] team0: Port device team_slave_0 added [ 72.088412][ T5772] team0: Port device team_slave_0 added [ 72.098343][ T5772] team0: Port device team_slave_1 added [ 72.106438][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.118892][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.139073][ T5769] team0: Port device team_slave_1 added [ 72.167400][ T5779] team0: Port device team_slave_0 added [ 72.209054][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.216244][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.242708][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.257432][ T5779] team0: Port device team_slave_1 added [ 72.264310][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.271521][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.297694][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.312002][ T5775] team0: Port device team_slave_0 added [ 72.318579][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.325648][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.351735][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.371852][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.378834][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.405184][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.433129][ T5775] team0: Port device team_slave_1 added [ 72.488393][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.495481][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.521639][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.534213][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.541373][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.567510][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.588830][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.596000][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.622071][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.633605][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.643289][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.671762][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.704890][ T5772] hsr_slave_0: entered promiscuous mode [ 72.712101][ T5772] hsr_slave_1: entered promiscuous mode [ 72.750034][ T5769] hsr_slave_0: entered promiscuous mode [ 72.756620][ T5769] hsr_slave_1: entered promiscuous mode [ 72.763398][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.772085][ T5769] Cannot create hsr debugfs directory [ 72.874683][ T5779] hsr_slave_0: entered promiscuous mode [ 72.881275][ T5779] hsr_slave_1: entered promiscuous mode [ 72.887506][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.895224][ T5779] Cannot create hsr debugfs directory [ 72.917711][ T5775] hsr_slave_0: entered promiscuous mode [ 72.924629][ T5775] hsr_slave_1: entered promiscuous mode [ 72.930967][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.938529][ T5775] Cannot create hsr debugfs directory [ 72.944841][ T51] Bluetooth: hci1: command tx timeout [ 72.951128][ T5776] Bluetooth: hci0: command tx timeout [ 73.020116][ T51] Bluetooth: hci3: command tx timeout [ 73.025812][ T51] Bluetooth: hci2: command tx timeout [ 73.262198][ T5772] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.279177][ T5772] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.305374][ T5772] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.314740][ T5772] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.356996][ T5769] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.371905][ T5769] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.389985][ T5769] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.401077][ T5769] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.485708][ T5779] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.496257][ T5779] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.511229][ T5779] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.527262][ T5779] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.648631][ T5775] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.659178][ T5775] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.679401][ T5775] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.688854][ T5775] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.717165][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.734290][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.772047][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.803299][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.810529][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.835802][ T1110] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.842992][ T1110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.876363][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.912032][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.919149][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.942523][ T186] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.949667][ T186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.988363][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.059419][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.075393][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.115122][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.122357][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.134552][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.141761][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.164765][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.198338][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.205601][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.264417][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.271657][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.404523][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.575069][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.591668][ T5772] veth0_vlan: entered promiscuous mode [ 74.639097][ T5772] veth1_vlan: entered promiscuous mode [ 74.716070][ T5769] veth0_vlan: entered promiscuous mode [ 74.747786][ T5772] veth0_macvtap: entered promiscuous mode [ 74.762520][ T5769] veth1_vlan: entered promiscuous mode [ 74.779228][ T5772] veth1_macvtap: entered promiscuous mode [ 74.818734][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.846588][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.858814][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.881181][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.898428][ T5772] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.908294][ T5772] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.917247][ T5772] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.926071][ T5772] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.985115][ T5769] veth0_macvtap: entered promiscuous mode [ 75.017574][ T5779] veth0_vlan: entered promiscuous mode [ 75.025118][ T51] Bluetooth: hci1: command tx timeout [ 75.030098][ T5776] Bluetooth: hci0: command tx timeout [ 75.049348][ T5769] veth1_macvtap: entered promiscuous mode [ 75.072310][ T5779] veth1_vlan: entered promiscuous mode [ 75.101126][ T5776] Bluetooth: hci2: command tx timeout [ 75.106582][ T5776] Bluetooth: hci3: command tx timeout [ 75.146698][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.158316][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.172383][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.187404][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.198093][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.210543][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.229636][ T5775] veth0_vlan: entered promiscuous mode [ 75.240878][ T5769] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.249639][ T5769] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.258913][ T5769] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.268427][ T5769] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.292864][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.313361][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.325462][ T5775] veth1_vlan: entered promiscuous mode [ 75.360202][ T5779] veth0_macvtap: entered promiscuous mode [ 75.411757][ T5779] veth1_macvtap: entered promiscuous mode [ 75.420412][ T186] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.428268][ T186] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.480115][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.487977][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.517310][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.529185][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.541672][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.553145][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.565012][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.598594][ T1128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.610031][ T5775] veth0_macvtap: entered promiscuous mode [ 75.617988][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.628947][ T1128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.636949][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.654710][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.700778][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.717502][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.733380][ T5779] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.745566][ T5779] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.755154][ T5779] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.764625][ T5779] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.788928][ T5826] binder: 5825:5826 ioctl c00c6211 0 returned -14 [ 75.946824][ T5775] veth1_macvtap: entered promiscuous mode [ 76.702309][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.833388][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.856320][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.867292][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.887594][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.902430][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.968492][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.970314][ T5836] Bluetooth: MGMT ver 1.22 [ 77.006769][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.032957][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.059115][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.080142][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.087880][ T5838] mmap: syz.1.2 (5838) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 77.099761][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.104197][ T51] Bluetooth: hci0: command tx timeout [ 77.118401][ T5776] Bluetooth: hci1: command tx timeout [ 77.118957][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.161955][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.179896][ T5776] Bluetooth: hci3: command tx timeout [ 77.185436][ T5776] Bluetooth: hci2: command tx timeout [ 77.212959][ T5775] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.222923][ T5775] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.231897][ T5775] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.240753][ T5775] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.296550][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.310709][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.408807][ T5843] netlink: 'syz.2.6': attribute type 49 has an invalid length. [ 77.534891][ T5843] ip6gretap0: entered promiscuous mode [ 77.555238][ T5843] ip6gretap0: entered allmulticast mode [ 77.656179][ T186] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.701437][ T186] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.740562][ T186] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.758848][ T186] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.791475][ T5847] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 77.977939][ T186] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.997262][ T186] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.184195][ T5776] Bluetooth: hci1: command tx timeout [ 79.189667][ T5776] Bluetooth: hci0: command tx timeout [ 79.260519][ T51] Bluetooth: hci3: command tx timeout [ 79.265980][ T5776] Bluetooth: hci2: command tx timeout [ 79.390889][ T5890] syz.2.9 uses obsolete (PF_INET,SOCK_PACKET) [ 79.971076][ T5909] warning: `syz.0.18' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 80.061874][ T5911] netlink: 16 bytes leftover after parsing attributes in process `syz.1.19'. [ 80.133485][ T5911] syz_tun: entered promiscuous mode [ 80.138969][ T5911] syz_tun: entered allmulticast mode [ 81.160078][ T5928] binder: 5927:5928 ioctl c00c6211 0 returned -14 [ 83.040068][ T5842] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 83.269978][ T5842] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.280744][ T5953] ======================================================= [ 83.280744][ T5953] WARNING: The mand mount option has been deprecated and [ 83.280744][ T5953] and is ignored by this kernel. Remove the mand [ 83.280744][ T5953] option from the mount to silence this warning. [ 83.280744][ T5953] ======================================================= [ 83.301740][ T5842] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 83.389766][ T5842] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.432420][ T5842] usb 1-1: config 0 descriptor?? [ 83.519460][ T5958] binder: 5956:5958 ioctl c0306201 0 returned -14 [ 83.661639][ T5842] usbhid 1-1:0.0: can't add hid device: -71 [ 83.667963][ T5842] usbhid: probe of 1-1:0.0 failed with error -71 [ 83.731281][ T5842] usb 1-1: USB disconnect, device number 2 [ 83.845524][ T5965] tipc: Started in network mode [ 83.861952][ T5965] tipc: Node identity 2007ff, cluster identity 4711 [ 83.880196][ T5965] tipc: Node number set to 2099199 [ 84.420979][ T5842] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 84.619867][ T5842] usb 1-1: Using ep0 maxpacket: 16 [ 84.631043][ T5842] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.649863][ T5842] usb 1-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice= 0.40 [ 84.658975][ T5842] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.680863][ T5842] usb 1-1: config 0 descriptor?? [ 84.909877][ T5842] appledisplay: Apple Cinema Display connected [ 85.115262][ T8] usb 1-1: USB disconnect, device number 3 [ 85.115320][ C1] usb 1-1: appledisplay_complete - usb_submit_urb failed with result -19 [ 85.135509][ T8] appledisplay: Apple Cinema Display disconnected [ 85.251545][ T5993] binder: BINDER_SET_CONTEXT_MGR already set [ 85.280515][ T5993] binder: 5992:5993 ioctl 4018620d 2000000002c0 returned -16 [ 85.558117][ T6000] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 85.565014][ T6000] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 85.590198][ T6000] vhci_hcd vhci_hcd.0: Device attached [ 85.645178][ T6000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.48'. [ 85.692353][ T6001] vhci_hcd: connection closed [ 85.707486][ T42] vhci_hcd: stop threads [ 85.722584][ T42] vhci_hcd: release socket [ 85.746875][ T42] vhci_hcd: disconnect device [ 85.792720][ T8] vhci_hcd: vhci_device speed not set [ 86.293430][ T6019] rt1719: probe of 0-0049 failed with error -5 [ 86.321798][ T6019] i2c i2c-0: new_device: Instantiated device rt1719 at 0x49 [ 86.393733][ T6023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.57'. [ 87.017952][ T23] cfg80211: failed to load regulatory.db [ 87.656039][ T5776] Bluetooth: hci0: failed to read key size for handle 200 [ 87.785926][ T6044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.65'. [ 87.819318][ T6040] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 87.826218][ T6040] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 87.844426][ T6040] vhci_hcd vhci_hcd.0: Device attached [ 87.893770][ T6041] vhci_hcd: connection closed [ 87.895391][ T1110] vhci_hcd: stop threads [ 87.912552][ T1110] vhci_hcd: release socket [ 87.923318][ T1110] vhci_hcd: disconnect device [ 87.950669][ T6049] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 88.198063][ T28] audit: type=1800 audit(1785001083.063:2): pid=6055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.70" name="idVendor" dev="configfs" ino=8721 res=0 errno=0 [ 88.201291][ T6055] file system registered [ 88.223364][ T28] audit: type=1800 audit(1785001083.073:3): pid=6055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.70" name="idProduct" dev="configfs" ino=8722 res=0 errno=0 [ 88.247722][ C0] vkms_vblank_simulate: vblank timer overrun [ 88.279903][ T5842] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 88.494572][ T5842] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 88.509889][ T5842] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.554523][ T5842] usb 3-1: config 0 descriptor?? [ 88.585924][ T5842] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 88.806225][ T5842] gspca_cpia1: usb_control_msg 05, error -71 [ 89.431239][ T5842] gspca_cpia1: usb_control_msg 01, error -71 [ 89.437485][ T5842] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 89.447384][ T5842] usb 3-1: USB disconnect, device number 2 [ 89.495244][ T6067] autofs4:pid:6067:autofs_fill_super: called with bogus options [ 90.956014][ T6087] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 90.962683][ T6087] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 90.984702][ T6087] vhci_hcd vhci_hcd.0: Device attached [ 91.039627][ T6087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.81'. [ 91.061007][ T6091] vhci_hcd: connection closed [ 91.062160][ T11] vhci_hcd: stop threads [ 91.121224][ T11] vhci_hcd: release socket [ 91.151324][ T11] vhci_hcd: disconnect device [ 91.199928][ T5842] vhci_hcd: vhci_device speed not set [ 92.581312][ T6121] binder: BINDER_SET_CONTEXT_MGR already set [ 92.639956][ T6121] binder: 6116:6121 ioctl 4018620d 2000000002c0 returned -16 [ 94.357760][ T6155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.97'. [ 95.414061][ T6169] binder: 6168:6169 ioctl c00c6211 0 returned -14 [ 100.849399][ T6202] binder: 6201:6202 ioctl c0306201 0 returned -14 [ 100.891463][ T6200] netlink: 28 bytes leftover after parsing attributes in process `syz.2.110'. [ 101.190581][ T6218] binder: 6217:6218 ioctl c00c6211 0 returned -14 [ 104.579465][ T6250] netlink: 28 bytes leftover after parsing attributes in process `syz.2.124'. [ 105.278188][ T6267] binder: 6266:6267 ioctl c00c6211 0 returned -14 [ 105.723488][ T6269] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 109.029999][ T5806] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 109.254841][ T5806] usb 2-1: New USB device found, idVendor=17ef, idProduct=61ae, bcdDevice= 0.00 [ 109.281979][ T5806] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.320096][ T5806] usb 2-1: config 0 descriptor?? [ 109.498053][ T6317] binder: 6315:6317 ioctl c00c6211 0 returned -14 [ 110.590564][ T5806] hid-generic 0003:17EF:61AE.0001: unknown main item tag 0x0 [ 110.598281][ T5806] hid-generic 0003:17EF:61AE.0001: unknown main item tag 0x0 [ 110.606168][ T5806] hid-generic 0003:17EF:61AE.0001: unknown main item tag 0x0 [ 110.613882][ T5806] hid-generic 0003:17EF:61AE.0001: unknown main item tag 0x0 [ 110.624366][ T5806] hid-generic 0003:17EF:61AE.0001: unknown main item tag 0x0 [ 110.633267][ T5806] hid-generic 0003:17EF:61AE.0001: unknown main item tag 0x0 [ 110.646729][ T5806] hid-generic 0003:17EF:61AE.0001: unknown main item tag 0x0 [ 110.654571][ T5806] hid-generic 0003:17EF:61AE.0001: unknown main item tag 0x0 [ 110.669189][ T5806] hid-generic 0003:17EF:61AE.0001: hidraw0: USB HID vf0.00 Device [HID 17ef:61ae] on usb-dummy_hcd.1-1/input0 [ 110.686405][ T5806] usb 2-1: USB disconnect, device number 2 [ 111.038225][ T6333] fido_id[6333]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 112.868986][ T6366] binder: 6365:6366 ioctl c00c6211 0 returned -14 [ 114.217224][ T6385] sg_write: data in/out 386878/136 bytes for SCSI command 0x0-- guessing data in; [ 114.217224][ T6385] program syz.1.163 not setting count and/or reply_len properly [ 114.349914][ T5808] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 114.574977][ T5808] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 114.619896][ T5808] usb 1-1: config 0 interface 0 has no altsetting 0 [ 114.649871][ T5808] usb 1-1: New USB device found, idVendor=05ac, idProduct=022b, bcdDevice= 0.00 [ 114.675390][ T5808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.707514][ T5808] usb 1-1: config 0 descriptor?? [ 114.733183][ T6381] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 115.523079][ T5808] apple 0003:05AC:022B.0002: unknown main item tag 0x0 [ 116.306844][ T5808] apple 0003:05AC:022B.0002: unknown main item tag 0x0 [ 116.314296][ T5808] apple 0003:05AC:022B.0002: unknown main item tag 0x0 [ 116.321509][ T5808] apple 0003:05AC:022B.0002: unknown main item tag 0x0 [ 116.330812][ T5808] apple 0003:05AC:022B.0002: unknown main item tag 0x0 [ 116.338222][ T5808] apple 0003:05AC:022B.0002: unknown main item tag 0x0 [ 116.347044][ T5808] apple 0003:05AC:022B.0002: unknown main item tag 0x0 [ 116.354297][ T5808] apple 0003:05AC:022B.0002: unknown main item tag 0x0 [ 116.361555][ T5808] apple 0003:05AC:022B.0002: unknown main item tag 0x0 [ 116.368840][ T5808] apple 0003:05AC:022B.0002: unknown main item tag 0x0 [ 116.376936][ T5808] apple 0003:05AC:022B.0002: unknown main item tag 0x0 [ 116.385724][ T5808] apple 0003:05AC:022B.0002: unknown main item tag 0x0 [ 116.394603][ T5808] apple 0003:05AC:022B.0002: unknown main item tag 0x0 [ 116.401851][ T5808] apple 0003:05AC:022B.0002: unknown main item tag 0x0 [ 116.408866][ T5808] apple 0003:05AC:022B.0002: unknown main item tag 0x0 [ 116.459855][ T5808] apple 0003:05AC:022B.0002: unknown main item tag 0x0 [ 116.490258][ T5808] apple 0003:05AC:022B.0002: unknown main item tag 0x0 [ 116.497196][ T5808] apple 0003:05AC:022B.0002: unknown main item tag 0x0 [ 116.558363][ T5808] apple 0003:05AC:022B.0002: unknown main item tag 0x0 [ 116.588757][ T5808] apple 0003:05AC:022B.0002: unknown main item tag 0x0 [ 116.750734][ T5808] apple 0003:05AC:022B.0002: unknown main item tag 0x0 [ 116.757685][ T5808] apple 0003:05AC:022B.0002: unknown main item tag 0x0 [ 116.806828][ T5808] apple 0003:05AC:022B.0002: unknown main item tag 0x0 [ 116.814030][ T5808] apple 0003:05AC:022B.0002: unknown main item tag 0x0 [ 116.821707][ T5808] apple 0003:05AC:022B.0002: unknown main item tag 0x0 [ 116.828778][ T5808] apple 0003:05AC:022B.0002: unknown main item tag 0x0 [ 116.836970][ T5808] apple 0003:05AC:022B.0002: unknown main item tag 0x0 [ 116.844170][ T5808] apple 0003:05AC:022B.0002: unknown main item tag 0x0 [ 116.851219][ T5808] apple 0003:05AC:022B.0002: unknown main item tag 0x0 [ 116.858115][ T5808] apple 0003:05AC:022B.0002: unknown main item tag 0x0 [ 116.865438][ T5808] apple 0003:05AC:022B.0002: unknown main item tag 0x0 [ 116.872490][ T5808] apple 0003:05AC:022B.0002: unknown main item tag 0x0 [ 116.879494][ T5808] apple 0003:05AC:022B.0002: unknown main item tag 0x0 [ 116.886687][ T5808] apple 0003:05AC:022B.0002: unknown main item tag 0x0 [ 116.894328][ T5808] apple 0003:05AC:022B.0002: unknown main item tag 0x0 [ 116.917942][ T5808] apple 0003:05AC:022B.0002: unknown main item tag 0x0 [ 116.935191][ T5808] apple 0003:05AC:022B.0002: unknown main item tag 0x0 [ 116.956978][ T5808] apple 0003:05AC:022B.0002: unknown main item tag 0x0 [ 116.975899][ T5808] apple 0003:05AC:022B.0002: unknown main item tag 0x0 [ 116.990718][ T5808] apple 0003:05AC:022B.0002: unknown main item tag 0x0 [ 117.022823][ T5808] apple 0003:05AC:022B.0002: hidraw0: USB HID v0.01 Device [HID 05ac:022b] on usb-dummy_hcd.0-1/input0 [ 117.042859][ T5808] usb 1-1: USB disconnect, device number 4 [ 117.409361][ T6418] fido_id[6418]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 120.347066][ T6460] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.613058][ T6460] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.665823][ T5776] Bluetooth: hci1: unexpected event 0x17 length: 4 < 6 [ 120.759842][ T5156] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 120.945851][ T6460] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.050071][ T8] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 121.295766][ T8] usb 1-1: unable to get BOS descriptor or descriptor too short [ 121.369434][ T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.460322][ T8] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 121.462242][ T6460] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.498702][ T8] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 121.527339][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.568469][ T8] usb 1-1: Product: syz [ 121.589092][ T8] usb 1-1: Manufacturer: syz [ 121.606266][ T8] usb 1-1: SerialNumber: syz [ 121.649309][ T8] usb 1-1: selecting invalid altsetting 1 [ 121.697339][ T8] usb 1-1: unit 6 not found! [ 121.745723][ T6460] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.763438][ T5156] usb 4-1: config 0 has no interfaces? [ 121.774330][ T6460] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.796488][ T6460] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.812232][ T5156] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 121.830299][ T5156] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 121.836048][ T6460] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.864187][ T5156] usb 4-1: Product: syz [ 121.875712][ T5156] usb 4-1: Manufacturer: syz [ 121.881159][ T5156] usb 4-1: SerialNumber: syz [ 121.904124][ T5156] usb 4-1: config 0 descriptor?? [ 122.143779][ T5156] usb 4-1: USB disconnect, device number 2 [ 122.259530][ T8] usb 1-1: 2:0: failed to get current value for ch 0 (-71) [ 122.378078][ T8] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 122.417350][ T8] usb 1-1: USB disconnect, device number 5 [ 122.449321][ T6405] udevd[6405]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 124.037605][ T6509] i2c i2c-0: new_device: Instantiated device hd3ss3220 at 0x47 [ 126.023920][ T6546] fuse: Bad value for 'fd' [ 127.806023][ T6565] netlink: 'syz.1.224': attribute type 11 has an invalid length. [ 127.814355][ T6565] netlink: 32 bytes leftover after parsing attributes in process `syz.1.224'. [ 128.037970][ T6572] dummy_hcd dummy_hcd.0: remove, state 4 [ 128.061726][ T6572] usb usb1: USB disconnect, device number 1 [ 128.138151][ T6572] dummy_hcd dummy_hcd.0: stopped [ 128.182456][ T6572] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 131.670138][ T6634] syzkaller1: entered promiscuous mode [ 131.712676][ T6634] syzkaller1: entered allmulticast mode [ 133.024681][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.031126][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.190540][ T6663] netlink: 'syz.0.264': attribute type 5 has an invalid length. [ 133.327855][ T6667] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 133.339605][ T6667] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 133.348054][ T6667] CPU: 0 PID: 6667 Comm: syz.0.265 Not tainted syzkaller #0 [ 133.355355][ T6667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 133.365441][ T6667] RIP: 0010:dummy_udc_start+0xcd/0x1e0 [ 133.370942][ T6667] Code: 41 83 ff 03 74 18 41 83 ff 05 0f 85 8e 00 00 00 e8 28 2d cd fa eb 0c e8 21 2d cd fa eb 05 e8 1a 2d cd fa 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 84 aa 25 fb 4d 8b 36 4c 89 f7 e8 [ 133.390572][ T6667] RSP: 0018:ffffc90018f77850 EFLAGS: 00010246 [ 133.396664][ T6667] RAX: 0000000000000000 RBX: ffff8880278ec050 RCX: 0000000000080000 [ 133.404679][ T6667] RDX: ffffc9000bdf9000 RSI: 000000000000450e RDI: 000000000000450f [ 133.412671][ T6667] RBP: ffff888025d1f000 R08: ffff888024005a00 R09: 0000000000000004 [ 133.420666][ T6667] R10: 0000000000000005 R11: 0000000000000002 R12: dffffc0000000000 [ 133.428652][ T6667] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000003 [ 133.436771][ T6667] FS: 00007fe3795f46c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 133.445724][ T6667] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 133.452325][ T6667] CR2: 00007fe378787000 CR3: 000000002dd89000 CR4: 00000000003506f0 [ 133.460318][ T6667] Call Trace: [ 133.463610][ T6667] [ 133.466553][ T6667] ? dummy_pullup+0x120/0x120 [ 133.471258][ T6667] gadget_bind_driver+0x390/0x770 [ 133.476307][ T6667] ? gadget_match_driver+0x130/0x130 [ 133.481611][ T6667] really_probe+0x247/0xae0 [ 133.486140][ T6667] ? pm_runtime_barrier+0x14b/0x1c0 [ 133.491363][ T6667] __driver_probe_device+0x1f5/0x390 [ 133.496678][ T6667] driver_probe_device+0x4f/0x420 [ 133.501730][ T6667] __driver_attach+0x444/0x6d0 [ 133.506528][ T6667] bus_for_each_dev+0x235/0x2b0 [ 133.511399][ T6667] ? driver_attach+0x50/0x50 [ 133.516010][ T6667] ? bus_remove_file+0x140/0x140 [ 133.520983][ T6667] ? do_raw_spin_unlock+0x121/0x230 [ 133.526221][ T6667] bus_add_driver+0x340/0x630 [ 133.530937][ T6667] driver_register+0x23a/0x310 [ 133.535721][ T6667] usb_gadget_register_driver_owner+0xf9/0x270 [ 133.541905][ T6667] raw_ioctl+0x1613/0x3d80 [ 133.546347][ T6667] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 133.552007][ T6667] ? tomoyo_path_number_perm+0x217/0x5e0 [ 133.557678][ T6667] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 133.563159][ T6667] ? make_qualifier+0x260/0x260 [ 133.568059][ T6667] ? __fget_files+0x28/0x460 [ 133.572674][ T6667] ? bpf_lsm_file_ioctl+0x9/0x10 [ 133.577631][ T6667] ? security_file_ioctl+0x80/0xa0 [ 133.582768][ T6667] ? make_qualifier+0x260/0x260 [ 133.587642][ T6667] __se_sys_ioctl+0xfd/0x170 [ 133.592256][ T6667] do_syscall_64+0x55/0xb0 [ 133.596692][ T6667] ? clear_bhb_loop+0x40/0x90 [ 133.601385][ T6667] ? clear_bhb_loop+0x40/0x90 [ 133.606080][ T6667] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 133.611990][ T6667] RIP: 0033:0x7fe37879db2b [ 133.616440][ T6667] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 133.636089][ T6667] RSP: 002b:00007fe3795f1f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 133.644557][ T6667] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fe37879db2b [ 133.652547][ T6667] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 133.660536][ T6667] RBP: 00007fe3795f2fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 133.668526][ T6667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.676515][ T6667] R13: 0000200000000000 R14: 0000000000000000 R15: 0000000000000000 [ 133.684513][ T6667] [ 133.687554][ T6667] Modules linked in: [ 133.691550][ C0] vkms_vblank_simulate: vblank timer overrun [ 133.723577][ T6667] ---[ end trace 0000000000000000 ]--- [ 133.729121][ T6667] RIP: 0010:dummy_udc_start+0xcd/0x1e0 [ 133.735280][ T6667] Code: 41 83 ff 03 74 18 41 83 ff 05 0f 85 8e 00 00 00 e8 28 2d cd fa eb 0c e8 21 2d cd fa eb 05 e8 1a 2d cd fa 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 84 aa 25 fb 4d 8b 36 4c 89 f7 e8 [ 133.755113][ T6667] RSP: 0018:ffffc90018f77850 EFLAGS: 00010246 [ 133.761288][ T6667] RAX: 0000000000000000 RBX: ffff8880278ec050 RCX: 0000000000080000 [ 133.783541][ T6667] RDX: ffffc9000bdf9000 RSI: 000000000000450e RDI: 000000000000450f [ 133.793221][ T6667] RBP: ffff888025d1f000 R08: ffff888024005a00 R09: 0000000000000004 [ 133.801885][ T6667] R10: 0000000000000005 R11: 0000000000000002 R12: dffffc0000000000 [ 133.810289][ T6667] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000003 [ 133.818352][ T6667] FS: 00007fe3795f46c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 133.830813][ T6667] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 133.837831][ T6667] CR2: 00007f18127eb580 CR3: 000000002dd89000 CR4: 00000000003506e0 [ 133.847935][ T6667] Kernel panic - not syncing: Fatal exception [ 133.854251][ T6667] Kernel Offset: disabled [ 133.858568][ T6667] Rebooting in 86400 seconds..