last executing test programs: 4m23.304700594s ago: executing program 2 (id=4683): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000340)={@void, @val={0x0, 0x80, 0x6, 0x9, 0x1ab0, 0x9}, @ipv4=@tipc={{0x20, 0x4, 0x1, 0x8, 0xaa, 0x65, 0x0, 0x3, 0x6, 0x0, @multicast1, @remote, {[@end, @timestamp_prespec={0x44, 0x2c, 0xfb, 0x3, 0x9, [{@broadcast, 0x6}, {@local}, {@multicast2, 0x5}, {@empty, 0x5}, {@broadcast, 0x3}]}, @end, @cipso={0x86, 0x1b, 0x1, [{0x1, 0x2}, {0x0, 0xd, "d1213030849005b818264c"}, {0x1, 0x6, "ce9d1622"}]}, @ssrr={0x89, 0x1b, 0x5d, [@dev={0xac, 0x14, 0x14, 0x35}, @multicast2, @multicast2, @dev={0xac, 0x14, 0x14, 0x27}, @broadcast, @rand_addr=0x64010102]}, @rr={0x7, 0x7, 0xc0, [@multicast2]}]}}, @payload_named={{{{{0x2a, 0x0, 0x1, 0x1, 0x0, 0xa, 0x0, 0x2, 0x2, 0x0, 0x2, 0x4, 0x3, 0x2, 0x3, 0x1, 0x3, 0x4e24, 0x4e22}, 0x3, 0x4}, 0x1, 0x3}}, [0x0, 0x0]}}}, 0xb4) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) open(0x0, 0x60840, 0x0) 4m22.014313098s ago: executing program 2 (id=4687): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) close(0x3) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {}, {0x1, 0xf}}, [@filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xfff1, 0xe}}, @TCA_FW_INDEV={0x14, 0x3, 'bond0\x00'}]}}]}, 0x4c}}, 0x20040054) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x2, 0x3, 0xb, 0x0, 0x1}, &(0x7f0000000180)=0x14) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f00000002c0)={0x5, &(0x7f0000000280)=[{0x4, 0x9, 0xb8, 0xf09}, {0x8, 0x4d, 0x0, 0x401}, {0x4091, 0x22, 0x9, 0x4}, {0x2, 0x1, 0x9, 0xb7}, {0x5, 0x8, 0x7, 0x1ff}]}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 4m9.61748826s ago: executing program 2 (id=4697): pipe(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x126b, &(0x7f0000000500)={0x0, 0x72de, 0x0, 0x40000, 0x3a8}, &(0x7f0000000140), &(0x7f0000000280)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0xa, 0x4}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) fsopen(&(0x7f0000000000)='sockfs\x00', 0x0) prlimit64(r0, 0xd, &(0x7f00000000c0)={0x6, 0x2000000000}, &(0x7f0000000300)) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x10000000000) 4m8.409003123s ago: executing program 2 (id=4701): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x9c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x3004}]}, 0x9c}}, 0x0) 4m8.201291924s ago: executing program 2 (id=4703): socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000040900010073797a300000000034000000030a01010000000000000000050000000900010073797a300000000009000300730900000000000000000a40000000042c000000050a05000000000000000000050000060c00024000000000000000010900010073797a3000000000140000001100"], 0xa8}}, 0x0) close(0x4) 4m7.078392023s ago: executing program 2 (id=4707): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3ab}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x20000000, 0x2, 0x6}, 0x64}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x4) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000740)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000002c0)="27030200dc0f24000e00003c120c00000300ff840000000200000003125ce882cbf490d908f1523f000000002d9c2740e260a09c6911cda856d5141bffc6", 0x3e}], 0x1}, 0x8bb3a321ef809a) 3m52.025469116s ago: executing program 32 (id=4707): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3ab}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x20000000, 0x2, 0x6}, 0x64}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x4) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000740)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000002c0)="27030200dc0f24000e00003c120c00000300ff840000000200000003125ce882cbf490d908f1523f000000002d9c2740e260a09c6911cda856d5141bffc6", 0x3e}], 0x1}, 0x8bb3a321ef809a) 2m13.704825229s ago: executing program 0 (id=5036): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x8be}}, 0x1006) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000003c0)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000001040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) 2m12.308261223s ago: executing program 0 (id=5038): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/vmstat\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000083c0)={0x2020, 0x0, 0x0}, 0x202e) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0x10b3fdc4, 0x0, 0x0, 0x0, 0x100004, 0x0, 0x0, 0x2, 0x200000c}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x3}, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) 2m12.065089237s ago: executing program 0 (id=5041): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x840) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0x10, 0x0, 0x1, 0x0, 0x0, 0x4000041}, 0x844) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m11.809092477s ago: executing program 0 (id=5046): mkdirat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 2m11.615016682s ago: executing program 0 (id=5048): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x8be}}, 0x1006) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000003c0)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000001040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) 2m10.666737009s ago: executing program 0 (id=5058): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00', 0x0}) unshare(0x64000600) r2 = gettid() r3 = socket(0x10, 0x803, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2e, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000080)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000304f9ffbffffedbdf2500007400", @ANYRES32=r1, @ANYBLOB="049c01000750050008001300", @ANYRES32=r2, @ANYBLOB="14000300"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x42850) 2m10.286596648s ago: executing program 33 (id=5058): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00', 0x0}) unshare(0x64000600) r2 = gettid() r3 = socket(0x10, 0x803, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2e, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000080)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000304f9ffbffffedbdf2500007400", @ANYRES32=r1, @ANYBLOB="049c01000750050008001300", @ANYRES32=r2, @ANYBLOB="14000300"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x42850) 15.455429446s ago: executing program 1 (id=5399): socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x2000006, 0x0, 0xb, 0x8, 0x2, 0xfa13, 0xffffffff}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={0xb, 0x0, 0x40000}, 0x20) syz_open_dev$usbfs(0x0, 0xb, 0x101301) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01032757c38d085641a726"], 0x20}, 0x1, 0x0, 0x0, 0x20040845}, 0x48d4) 15.099221168s ago: executing program 5 (id=5402): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) read$FUSE(r0, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) close(r1) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="5c00000013006bcc9e3be35c6e17aa33074b876c1d0000007ea60864160af36514000cc0080019000900000006001cc00200bc24eab5008000001e618294ff4051f60a84c9f4d4938037e786a6d00010000400000000000000c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004) 14.973575167s ago: executing program 5 (id=5405): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = socket(0x10, 0x3, 0x0) recvmmsg(r0, 0x0, 0x0, 0x40002000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r1, 0x0, 0x4004) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001e000503"], 0x24}, 0x1, 0x8000000, 0x0, 0x400c880}, 0x0) 10.451600941s ago: executing program 1 (id=5412): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x2, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 10.343315245s ago: executing program 6 (id=5413): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) syz_clone(0x81000000, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0xc17a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = userfaultfd(0x80001) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0xfac7}) r5 = syz_open_dev$sndpcmc(&(0x7f0000000340), 0x1, 0x80) ioctl$SNDRV_PCM_IOCTL_UNLINK(r5, 0x4161, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r6, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000002100)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}}, 0x14}}, 0x40) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 9.904997941s ago: executing program 1 (id=5417): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000022c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xffff, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x44000) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x488, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x45c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x1, 0x7, 0xd988, 0x3, 0x3, 0xa08b, 0x1, 0x3ff, 0x5, 0x5, 0x6, 0x4, 0x3, 0x92c, 0x7, 0xffffffb2, 0xeaac, 0x2, 0xe13, 0x4, 0x10000, 0xded, 0x8, 0x10000000, 0x1, 0x10001, 0xc6d, 0x80000001, 0x8, 0x7, 0x7, 0x7, 0x5, 0x7, 0x800, 0x9, 0x100, 0x8, 0x9, 0x8, 0x3, 0x5, 0x6, 0x9, 0x3, 0xd, 0x7, 0x5, 0x13f6, 0x81, 0x53, 0x17, 0x4, 0x1, 0x6, 0x4, 0x8, 0x800, 0x86e1, 0x8, 0xfffffff9, 0x5, 0x1, 0x3, 0x5, 0x5, 0x80000000, 0xf3, 0xd, 0x8, 0xfffffff9, 0x800, 0x2726a3ed, 0x6, 0x4, 0x2, 0x6, 0x8, 0x2, 0x7ff, 0x100, 0x1ff, 0x7, 0x3, 0x4, 0x8, 0x5, 0x8000002, 0x5, 0x0, 0x4, 0x3, 0x16, 0xff, 0x1, 0xc, 0x9, 0xb, 0x5, 0x8000, 0x8, 0x6, 0xa, 0xfa, 0x3, 0x0, 0x10, 0x1ff, 0x3, 0x4, 0x60000000, 0x8, 0x2, 0x4000000d, 0x3, 0x2, 0x401, 0xa955, 0x5000, 0x1, 0xe6, 0x2, 0x9, 0x6e4, 0x1, 0x5, 0xe, 0xb, 0x6, 0x4, 0x80000001, 0x3, 0x99b, 0x9c4, 0x7f, 0x3, 0x70, 0xff800, 0x1, 0x7, 0x5, 0xff, 0x7, 0x6, 0xfff, 0x800, 0xa3, 0x10000, 0xff, 0x80000000, 0xc, 0x7, 0x8, 0xff, 0x0, 0x0, 0x8, 0x6, 0xe2f3, 0x4, 0x7f, 0x9, 0x1, 0xffff, 0x3, 0x9, 0x9, 0x8, 0x7, 0xfffffc00, 0x0, 0x40, 0x400, 0x64c, 0x8, 0x7, 0x8, 0x6, 0xfffffffe, 0x6, 0x5, 0x7ff, 0xc7, 0x7, 0xf30, 0x800, 0x0, 0xee3, 0x5, 0x4, 0x8, 0x8, 0x1000, 0x8, 0x7, 0xa37f, 0x8, 0x9, 0x3, 0x1, 0xff, 0x5, 0x10000, 0xb, 0xcf9, 0x8, 0xfc, 0x40, 0x3, 0x1731, 0x3b, 0xff, 0x6, 0x6ad880, 0x266d, 0x7, 0xc28, 0x2, 0x400, 0x7d75, 0x52, 0xd3, 0x8, 0x2, 0x4, 0xfffffff8, 0x200, 0x6, 0x6, 0x8, 0xe, 0xe459, 0x7ff, 0xc7, 0x80, 0x40, 0x0, 0x9, 0x3feb, 0x800, 0x100, 0x100, 0x8, 0xfffffb98, 0xfffffffb, 0x4, 0x20001, 0x3, 0x8, 0x1, 0x15b9, 0x7, 0x100, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0xffffffffffffffff, 0x7a94, 0x7, 0xb, {0x7, 0x0, 0x1, 0x80, 0x6572, 0x6}, {0x2, 0x1, 0x400, 0x8, 0x8}, 0x3, 0x4, 0x7fffffff}}]}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 9.622452287s ago: executing program 4 (id=5418): syz_open_dev$media(&(0x7f0000000540), 0x5, 0x60600) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x8}) 9.29898489s ago: executing program 4 (id=5419): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xffffffde, 0x318145a8, 0x0, 0xfffe, 0x2, 0xfffffff6, 0x0, 0x0, 0x8, 0x100}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40242, 0x1) close(r0) unshare(0x2a020480) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 9.233586404s ago: executing program 5 (id=5420): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)) connect$can_bcm(0xffffffffffffffff, &(0x7f0000001ff0), 0x10) ioctl$sock_bt_hci(r3, 0x400448c9, 0x0) 9.082987596s ago: executing program 1 (id=5421): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f00000004c0)='cpuset.memory_migrate\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xa5) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1, 0x1}, 0x21) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) 7.314713944s ago: executing program 1 (id=5422): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000001c0)={0x9, 0x3, 0x3, 0x0, 0x7}) r4 = add_key(&(0x7f0000000040)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) keyctl$revoke(0x3, r4) 7.314012765s ago: executing program 5 (id=5423): write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) dup(0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000380)=0x3, 0x4) sendmmsg(r1, &(0x7f0000001c00), 0x400000000000159, 0x40840) write(r0, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) 7.092332798s ago: executing program 4 (id=5424): socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0xfffffffd}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80d, 0x0, 0x10000000, 0x5, 0x4}, 0x1, r2}}]}, {0x0, 0xa}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x1}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) 6.991075231s ago: executing program 5 (id=5425): mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x3ec0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) bpf$PROG_LOAD(0x25, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$dri(0x0, 0x1, 0x2200) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SG_GET_COMMAND_Q(r2, 0x2270, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r3 = socket$caif_seqpacket(0x25, 0x5, 0x5) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f00000001c0)=""/113, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) getsockopt(0xffffffffffffffff, 0xcd, 0x6, 0x0, 0x0) 6.890606101s ago: executing program 6 (id=5426): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x800) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$key(0xf, 0x3, 0x2) bind$packet(r2, &(0x7f0000000180)={0x11, 0x2, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) unshare(0x20000400) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000000), 0x4) getsockname$packet(r2, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000700)={'bridge_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.382472063s ago: executing program 6 (id=5427): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) unshare(0x22020400) ioctl$HIDIOCGFLAG(0xffffffffffffffff, 0x8004480e, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x24, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x6, 0x7, 0x5, 0x8, 0x4c74, 0x10000, 0x7, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xffffffff, 0x7, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10100007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x1007, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x403, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x200, 0x1fd, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa0, 0x4, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x2, 0x5, 0x1c, 0x120000, 0x7ff, 0x2006, 0x80a2ed, 0x4, 0x40000025], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0x0, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x4, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x9, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf41, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x7ff, 0x800d7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 5.545751969s ago: executing program 4 (id=5429): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)={0x44, 0x0, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}]}, 0x44}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$TCXONC(r5, 0x540a, 0x2) ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61122800000000006113140000000000bf1000000000000025000200091b00003d030000000000008701000000000000bc26000000000000bf67000000000000340300000ee600f0670200001400000016030000ffffffffbf050000000000000f650000000000006507f4ff02000400070700006b3128fe1f7500000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r6 = ioctl$TIOCGPTPEER(r5, 0x5441, 0x3) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000040)={0x2}) ioctl$TCXONC(r6, 0x540a, 0x3) add_key$user(&(0x7f0000000040), &(0x7f0000000000), &(0x7f00000002c0)='s', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc}, 0x10}, 0x94) syz_clone3(0x0, 0x0) 4.031355739s ago: executing program 4 (id=5430): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x68083, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x81, "287e7e6d8832aaa075c77e0c8e70f95445f1181e24384065fdcfe46afd3edebe"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x8, "55780d4dc328ff0f000000000008b6723b0800e91cf82578e35bde00"}) 3.926327894s ago: executing program 3 (id=5431): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x6, 0x25dfdc03, {0x2, 0x20, 0x20, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2000}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000804}, 0x4040000) 3.881251367s ago: executing program 4 (id=5432): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000200)=[{0x40, 0x2, 0xfd, 0x5ae9}, {0x20, 0x7f, 0x1, 0xfffff00c}, {0x6, 0x0, 0x7, 0x7}]}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xc, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x3eaf, 0x0) r4 = openat$vim2m(0xffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc0f8565c, &(0x7f0000000000)={0x10000, 0xbd5, 0x2, {0x2, @pix_mp={0x8, 0x10001, 0x585452c9, 0x2, 0x1, [{0x40, 0x1}, {0x8, 0xa}, {0x7, 0x1000}, {0x6, 0xa}, {0x100, 0x3}, {0x2, 0x4}, {0x1000101, 0x81}, {0xc}], 0x10, 0x7e, 0x1, 0x0, 0x3}}}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000500)={0x200, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 3.784262638s ago: executing program 3 (id=5433): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f00000004c0)='cpuset.memory_migrate\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xa5) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1, 0x1}, 0x21) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) 2.336462469s ago: executing program 5 (id=5434): r0 = socket$inet_sctp(0x2, 0x5, 0x84) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') setsockopt(0xffffffffffffffff, 0x84, 0x7f, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r3 = syz_open_dev$usbmon(&(0x7f0000000900), 0xa, 0x0) ioctl$MON_IOCX_GETX(r3, 0x80089203, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffc9b}) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000)=0x480e, 0x4) sendmmsg$inet(r0, &(0x7f0000001380)=[{{&(0x7f0000002140)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000003c0)=[{&(0x7f00000001c0)}], 0x1}}, {{&(0x7f0000000280)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f0000000740)=[{&(0x7f0000002180)}], 0x1}}], 0x2, 0x240000c4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=@newsa={0x150, 0x10, 0x713, 0x70bd26, 0x0, {{@in=@rand_addr=0x64010101, @in=@dev={0xac, 0x14, 0x14, 0x38}, 0x4e22, 0x0, 0x4e23, 0x7, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x4d3, 0x32}, @in=@remote, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x5a, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x70, 0x80, "316f74eeac053deb73fc018493cc"}}, @tfcpad={0x8, 0x16, 0x2}]}, 0x150}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r5 = syz_io_uring_complete(0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) 2.208454901s ago: executing program 3 (id=5435): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)={0x44, 0x0, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}]}, 0x44}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$TCXONC(r4, 0x540a, 0x2) ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61122800000000006113140000000000bf1000000000000025000200091b00003d030000000000008701000000000000bc26000000000000bf67000000000000340300000ee600f0670200001400000016030000ffffffffbf050000000000000f650000000000006507f4ff02000400070700006b3128fe1f7500000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r5 = epoll_create(0x7e) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x2}) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) add_key$user(&(0x7f0000000040), &(0x7f0000000000), &(0x7f00000002c0)='s', 0x1, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc}, 0x10}, 0x94) 2.07965836s ago: executing program 6 (id=5436): r0 = socket$kcm(0x2, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd29, 0x25dfdbfe, {{@in=@empty, @in6=@local, 0x0, 0x3, 0x0, 0x0, 0x2}, {0x2000000, 0x80000001, 0x0, 0x0, 0x80000001, 0x2, 0xfffffffffffffffd}, {0x0, 0x5, 0x200000000000}, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x4d6, 0x33}, 0x2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3502, 0x3, 0x3, 0x10, 0x9, 0x0, 0x10003}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000) r2 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0xfe, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}], 0x20}, 0x200040c4) 1.008673942s ago: executing program 3 (id=5437): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x800) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$key(0xf, 0x3, 0x2) bind$packet(r2, &(0x7f0000000180)={0x11, 0x2, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) unshare(0x20000400) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000000), 0x4) getsockname$packet(r2, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000700)={'bridge_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 644.10958ms ago: executing program 6 (id=5438): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c00000010001b000dad700000400000030000001800018013fa"], 0x2c}, 0x1, 0x0, 0x0, 0x48d1}, 0x4040080) 365.317666ms ago: executing program 3 (id=5439): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$kcm(0x2d, 0x2, 0x0) sendmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f0000000080)=@nfc_llcp={0x2d, 0x0, 0x10000000, 0x7, 0x4, 0x7, "47af57ce8c8e5af84d109ee7a1488bd8c3df97e87f7e771f69ced4c5de6ddeb44ee59bdfb62866129f1338dba84b5d82a121c369a6837123e849c909c16b53", 0x2d}, 0x80, 0x0}}], 0x1, 0x8000) 362.327107ms ago: executing program 1 (id=5440): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f00000002c0)={{r2, &(0x7f0000000080)='GPL\x00', 0x40, &(0x7f0000000200)={@_ha_fsid={[0xffffffff, 0x9]}, {0x2, 0x6, 0x9}}, 0x80000000, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0x7}, {[0x2, 0x3ff, 0xec87, 0x3]}, 0x2, 0xa1, &(0x7f00000003c0)=""/161}) setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x48a, &(0x7f0000000700)={0x7fff, 0x0, 0x2}, 0xc) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r2, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x40000000000018c, 0x2, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r7, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0, 0x0, 0x0, 0x0, 0x40800}, 0x0) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000480), r4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x2}, {0xffff, 0xffff}, {0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x51}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c0000001800ddd000000000000000000200000000000d05000000000600150005000000280016802400010003"], 0x4c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newqdisc={0x178, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x148, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x5, 0x400, 0x9, 0x81, 0x101, 0xe, 0xc40, 0x7fffffff, 0xfffffffd, 0x20, 0xb, 0x1d, 0x6, 0xca11, 0x10000}}, @TCA_GRED_MAX_P={0x8, 0x4, 0x2}]}}]}, 0x178}, 0x1, 0x0, 0x0, 0xc5}, 0x24008004) 247.402202ms ago: executing program 6 (id=5441): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 0s ago: executing program 3 (id=5442): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x68083, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x81, "287e7e6d8832aaa075c77e0c8e70f95445f1181e24384065fdcfe46afd3edebe"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x8, "55780d4dc328ff0f000000000008b6723b0800e91cf82578e35bde00"}) kernel console output (not intermixed with test programs): [ 520.588932][T13165] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 520.588960][T13165] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 520.792346][ T1530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.792870][ T1530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.228786][T13175] net_ratelimit: 12 callbacks suppressed [ 525.228803][T13175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.266290][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.269344][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.273186][T13175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.274847][T13165] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -110 [ 526.275048][T13165] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -110 [ 526.388499][ T1530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.388711][ T1530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.241864][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.308863][T13165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.394026][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.499806][ T5035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.312707][ T5797] Bluetooth: hci5: command 0x0406 tx timeout [ 530.428706][ T5882] net_ratelimit: 7 callbacks suppressed [ 530.428729][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.429018][T13177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.578683][T16771] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4190'. [ 530.602021][T16806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.602355][T16806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.636140][T13169] usb 4-1: USB disconnect, device number 17 [ 530.848240][T16824] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4206'. [ 530.848268][T16824] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4206'. [ 530.848286][T16824] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4206'. [ 530.848329][T16824] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4206'. [ 530.859574][ T5035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.859866][ T5035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.024735][T13165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.410804][T16841] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4213'. [ 532.475677][T16845] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4215'. [ 532.475944][T16845] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4215'. [ 532.476002][T16844] netlink: 'syz.1.4216': attribute type 4 has an invalid length. [ 532.526082][T16844] netlink: 'syz.1.4216': attribute type 4 has an invalid length. [ 532.693652][T16855] capability: warning: `syz.0.4219' uses deprecated v2 capabilities in a way that may be insecure [ 532.735341][T16844] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.736285][T16844] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.988358][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.020473][ T70] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.020755][ T70] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.113934][T16844] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 533.122281][T16844] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 533.888314][T16864] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4220'. [ 533.888346][T16864] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4220'. [ 533.898244][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.188561][T13177] net_ratelimit: 8 callbacks suppressed [ 536.188586][T13177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.448396][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.448732][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.514578][T13156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.828308][T13156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.228409][T13165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.474465][ T5982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.514365][ T5982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.558552][ T70] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.558876][ T70] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.394929][T13169] net_ratelimit: 10 callbacks suppressed [ 541.394954][T13169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.978390][ T1128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.978592][ T1128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.428449][T13177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.592430][T13156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.592587][T13156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.088284][ T70] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.088461][ T70] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.398450][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.423488][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.468330][T13165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.518555][T16887] tmpfs: Unsupported parameter 'huge' [ 543.598201][T13165] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 543.608339][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.772744][T13165] usb 3-1: unable to get BOS descriptor or descriptor too short [ 543.773527][T13165] usb 3-1: not running at top speed; connect to a high speed hub [ 543.773600][T13165] usb 3-1: too many configurations: 93, using maximum allowed: 8 [ 543.778717][T13165] usb 3-1: config 1 has an invalid interface number: 27 but max is 0 [ 543.778746][T13165] usb 3-1: config 1 has an invalid interface descriptor of length 2, skipping [ 543.778764][T13165] usb 3-1: config 1 has an invalid descriptor of length 209, skipping remainder of the config [ 543.778791][T13165] usb 3-1: config 1 has no interface number 0 [ 543.778822][T13165] usb 3-1: config 1 interface 27 altsetting 8 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 543.778849][T13165] usb 3-1: config 1 interface 27 has no altsetting 0 [ 543.786904][T13165] usb 3-1: config 1 has an invalid interface number: 27 but max is 0 [ 543.786932][T13165] usb 3-1: config 1 has an invalid interface descriptor of length 2, skipping [ 543.786949][T13165] usb 3-1: config 1 has an invalid descriptor of length 209, skipping remainder of the config [ 543.786967][T13165] usb 3-1: config 1 has no interface number 0 [ 543.786998][T13165] usb 3-1: config 1 interface 27 altsetting 8 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 543.787023][T13165] usb 3-1: config 1 interface 27 has no altsetting 0 [ 543.808618][T13165] usb 3-1: config 1 has an invalid interface number: 27 but max is 0 [ 543.808647][T13165] usb 3-1: config 1 has an invalid interface descriptor of length 2, skipping [ 543.808664][T13165] usb 3-1: config 1 has an invalid descriptor of length 209, skipping remainder of the config [ 543.808682][T13165] usb 3-1: config 1 has no interface number 0 [ 543.808713][T13165] usb 3-1: config 1 interface 27 altsetting 8 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 543.808737][T13165] usb 3-1: config 1 interface 27 has no altsetting 0 [ 543.810154][T13165] usb 3-1: config 1 has an invalid interface number: 27 but max is 0 [ 543.810176][T13165] usb 3-1: config 1 has an invalid interface descriptor of length 2, skipping [ 543.810192][T13165] usb 3-1: config 1 has an invalid descriptor of length 209, skipping remainder of the config [ 543.810210][T13165] usb 3-1: config 1 has no interface number 0 [ 543.810238][T13165] usb 3-1: config 1 interface 27 altsetting 8 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 543.810262][T13165] usb 3-1: config 1 interface 27 has no altsetting 0 [ 543.842417][T13165] usb 3-1: config 1 has an invalid interface number: 27 but max is 0 [ 543.842444][T13165] usb 3-1: config 1 has an invalid interface descriptor of length 2, skipping [ 543.842468][T13165] usb 3-1: config 1 has an invalid descriptor of length 209, skipping remainder of the config [ 543.842491][T13165] usb 3-1: config 1 has no interface number 0 [ 543.842531][T13165] usb 3-1: config 1 interface 27 altsetting 8 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 543.842560][T13165] usb 3-1: config 1 interface 27 has no altsetting 0 [ 543.847047][T13165] usb 3-1: config 1 has an invalid interface number: 27 but max is 0 [ 543.847075][T13165] usb 3-1: config 1 has an invalid interface descriptor of length 2, skipping [ 543.847091][T13165] usb 3-1: config 1 has an invalid descriptor of length 209, skipping remainder of the config [ 543.847109][T13165] usb 3-1: config 1 has no interface number 0 [ 543.847141][T13165] usb 3-1: config 1 interface 27 altsetting 8 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 543.847167][T13165] usb 3-1: config 1 interface 27 has no altsetting 0 [ 543.849736][T13165] usb 3-1: config 1 has an invalid interface number: 27 but max is 0 [ 543.849760][T13165] usb 3-1: config 1 has an invalid interface descriptor of length 2, skipping [ 543.849786][T13165] usb 3-1: config 1 has an invalid descriptor of length 209, skipping remainder of the config [ 543.849803][T13165] usb 3-1: config 1 has no interface number 0 [ 543.849833][T13165] usb 3-1: config 1 interface 27 altsetting 8 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 543.849858][T13165] usb 3-1: config 1 interface 27 has no altsetting 0 [ 543.854418][T13165] usb 3-1: config 1 has an invalid interface number: 27 but max is 0 [ 543.854443][T13165] usb 3-1: config 1 has an invalid interface descriptor of length 2, skipping [ 543.854460][T13165] usb 3-1: config 1 has an invalid descriptor of length 209, skipping remainder of the config [ 543.854478][T13165] usb 3-1: config 1 has no interface number 0 [ 543.854524][T13165] usb 3-1: config 1 interface 27 altsetting 8 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 543.854550][T13165] usb 3-1: config 1 interface 27 has no altsetting 0 [ 543.867627][T13165] usb 3-1: New USB device found, idVendor=045b, idProduct=0248, bcdDevice=ec.f0 [ 543.867658][T13165] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=208 [ 543.867677][T13165] usb 3-1: Product: syz [ 543.867691][T13165] usb 3-1: Manufacturer: syz [ 543.867704][T13165] usb 3-1: SerialNumber: syz [ 543.886743][T16881] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 543.889214][T16881] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 544.208324][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.256201][T13165] usb 3-1: USB disconnect, device number 16 [ 544.360220][T16905] netlink: 'syz.3.4232': attribute type 1 has an invalid length. [ 544.505476][T16908] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 544.876125][T16922] netlink: 'syz.2.4240': attribute type 13 has an invalid length. [ 544.921985][T16896] __nla_validate_parse: 2 callbacks suppressed [ 544.922005][T16896] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4231'. [ 544.922024][T16896] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4231'. [ 544.922048][T16896] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4231'. [ 544.922437][T16896] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4231'. [ 546.435112][ T1338] net_ratelimit: 10 callbacks suppressed [ 546.435129][ T1338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.435293][ T1338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.589126][T13177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.068561][T13153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.538330][ T1338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.538518][ T1338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.628852][T13177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.709055][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.668909][T13165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.669114][ T5982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.738180][T13153] net_ratelimit: 8 callbacks suppressed [ 551.738196][T13153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.788398][T13169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.028437][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.028624][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.829356][T13169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.831317][T13169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.142918][ T1128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.143206][ T1128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.868477][T13165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.258375][ T1338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.336551][T16957] tipc: Enabled bearer , priority 0 [ 556.337447][T16958] syzkaller0: entered promiscuous mode [ 556.337472][T16958] syzkaller0: entered allmulticast mode [ 556.595477][T16955] tipc: Resetting bearer [ 556.890072][T16955] tipc: Disabling bearer [ 556.988666][T13169] net_ratelimit: 9 callbacks suppressed [ 556.988686][T13169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.056317][T16973] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4254'. [ 557.056414][T16973] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4254'. [ 557.056426][T16973] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4254'. [ 557.056753][T16973] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4254'. [ 557.414693][T17004] netlink: 'syz.1.4263': attribute type 13 has an invalid length. [ 557.588421][ T1128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.588760][ T1128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.035598][T17025] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4266'. [ 558.972139][T13169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.069185][T13165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.079772][T13153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.141085][T17033] batadv_slave_0: entered promiscuous mode [ 560.435275][T17033] batadv_slave_0: left promiscuous mode [ 560.456751][T17047] tipc: Enabled bearer , priority 0 [ 560.475217][T17042] tipc: Resetting bearer [ 560.533655][T17049] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4275'. [ 560.533696][T17049] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4275'. [ 560.701000][T17041] tipc: Disabling bearer [ 560.920067][T17067] netlink: 'syz.4.4279': attribute type 13 has an invalid length. [ 560.949080][ T1128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.949257][ T1128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.148933][T13165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.573141][T13156] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 561.720679][T13156] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 561.720719][T13156] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 561.722296][T13156] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 561.722325][T13156] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 561.722347][T13156] usb 2-1: Manufacturer: syz [ 561.731472][T13156] usb 2-1: config 0 descriptor?? [ 562.418244][T13165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.448611][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.448908][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.840651][T17078] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4281'. [ 562.872221][T13156] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0015/input/input10 [ 562.985606][T13156] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0015/input/input11 [ 563.033641][T13156] input: syz Touch Strip as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0015/input/input12 [ 563.054959][T13156] input: syz Dial as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0015/input/input13 [ 563.092905][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.092983][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.111700][T17119] netlink: 'syz.0.4294': attribute type 13 has an invalid length. [ 563.148351][ T5982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.151902][T13156] uclogic 0003:256C:006D.0015: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.1-1/input0 [ 563.170202][T13156] usb 2-1: USB disconnect, device number 21 [ 563.477150][T13165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.588229][ T1128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.588720][ T1128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.678697][T17128] fido_id[17128]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 564.484934][T17166] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4305'. [ 564.484974][T17166] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4305'. [ 564.509639][T13169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.759707][ T1128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.760187][ T1128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.377860][T17187] netlink: 'syz.3.4313': attribute type 13 has an invalid length. [ 565.416895][T17169] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4306'. [ 565.915696][T17208] syzkaller1: entered promiscuous mode [ 565.915724][T17208] syzkaller1: entered allmulticast mode [ 566.389279][T17216] syzkaller0: entered promiscuous mode [ 566.389311][T17216] syzkaller0: entered allmulticast mode [ 567.039935][T17216] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4318'. [ 568.028758][T17203] net_ratelimit: 10 callbacks suppressed [ 568.028782][T17203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.029130][T17203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.056473][T13165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.146306][T17243] netlink: 'syz.4.4328': attribute type 13 has an invalid length. [ 568.814921][T17237] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4327'. [ 569.574925][T13169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.576237][T13156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.891162][T17256] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1907526232 (3815052464 ns) > initial count (2359658686 ns). Using initial count to start timer. [ 570.093019][ T1128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.093221][ T1128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.591950][T13177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.630159][T13177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.677293][T17290] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4339'. [ 571.681400][T17290] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4339'. [ 571.813698][T17294] netlink: 'syz.2.4341': attribute type 13 has an invalid length. [ 572.211510][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.334395][T17305] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4343'. [ 572.627854][T17316] syzkaller0: entered promiscuous mode [ 572.627884][T17316] syzkaller0: entered allmulticast mode [ 573.068843][T13165] net_ratelimit: 6 callbacks suppressed [ 573.068866][T13165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.180833][T17350] 9p: Bad value for 'rfdno' [ 573.323499][T17203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.323804][T17203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.479883][T17363] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4352'. [ 573.481006][T17363] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4352'. [ 573.729951][T13169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.310370][T17382] netlink: 220 bytes leftover after parsing attributes in process `syz.0.4357'. [ 574.310398][T17382] netlink: 'syz.0.4357': attribute type 2 has an invalid length. [ 574.438757][ T3486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.438972][ T3486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.750967][T13177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.921682][T17386] input: syz0 as /devices/virtual/input/input14 [ 575.567288][T17411] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.4361'. [ 575.588368][ T70] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.588657][ T70] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.628298][ T5982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.855775][T17417] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4364'. [ 575.876360][T17417] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4364'. [ 576.470528][T13153] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 576.500306][T17438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4373'. [ 576.628099][T13153] usb 2-1: Using ep0 maxpacket: 32 [ 576.631335][T13153] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 576.631403][T13153] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 576.631455][T13153] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 576.631493][T13153] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.682986][T13153] usb 2-1: config 0 descriptor?? [ 576.696624][T13153] hub 2-1:0.0: USB hub found [ 576.901625][T13153] hub 2-1:0.0: 7 ports detected [ 576.902187][T13153] hub 2-1:0.0: insufficient power available to use all downstream ports [ 577.058285][T17447] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4376'. [ 577.109097][T13153] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 577.109126][T13153] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 577.136156][T13153] usbhid 2-1:0.0: can't add hid device: -71 [ 577.136298][T13153] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 577.182776][T13153] usb 2-1: USB disconnect, device number 22 [ 577.488608][T17453] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4379'. [ 577.497374][T17453] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4379'. [ 577.497414][T17453] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4379'. [ 577.908407][T17460] gretap0: default FDB implementation only supports local addresses [ 578.238471][T17473] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4387'. [ 578.678427][T13153] net_ratelimit: 8 callbacks suppressed [ 578.678448][T13153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.799573][T17489] ipvlan2: entered promiscuous mode [ 578.898302][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.898597][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.908660][T13165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.765880][T17505] __nla_validate_parse: 4 callbacks suppressed [ 579.765902][T17505] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4399'. [ 579.856302][T17508] netlink: 'syz.0.4400': attribute type 13 has an invalid length. [ 579.953306][T13165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.018379][T17509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.018636][T17509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.018664][T17509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.141445][T17514] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.4402'. [ 580.989684][T13177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.419138][ T5035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.886020][T17563] netlink: 'syz.2.4419': attribute type 13 has an invalid length. [ 582.915330][T17589] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4426'. [ 582.916197][T17589] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4426'. [ 582.916230][T17589] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4426'. [ 584.008377][T13177] net_ratelimit: 8 callbacks suppressed [ 584.008397][T13177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.008879][T13177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.012594][ T70] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.013737][T13177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.016601][T13165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.072546][T17594] netlink: 64130 bytes leftover after parsing attributes in process `syz.2.4428'. [ 584.725296][T17612] netlink: 'syz.1.4435': attribute type 13 has an invalid length. [ 584.748381][T13153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.961225][ T70] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.961586][ T70] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.148903][T13165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.246495][T17628] netlink: 64130 bytes leftover after parsing attributes in process `syz.4.4440'. [ 585.411166][T17634] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4441'. [ 585.411194][T17634] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4441'. [ 585.468481][T13153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.517197][T17636] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4444'. [ 585.522068][T17636] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4444'. [ 585.522104][T17636] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4444'. [ 587.381384][T17671] 8021q: adding VLAN 0 to HW filter on device team0 [ 588.783921][T17690] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4461'. [ 588.878132][T13177] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 588.938803][T17697] netlink: 220 bytes leftover after parsing attributes in process `syz.2.4463'. [ 588.938829][T17697] netlink: 'syz.2.4463': attribute type 2 has an invalid length. [ 589.028271][T13177] usb 1-1: Using ep0 maxpacket: 32 [ 589.030958][T13177] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 589.030990][T13177] usb 1-1: config 0 has no interface number 0 [ 589.031042][T13177] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 589.034563][T13177] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 589.034594][T13177] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.034614][T13177] usb 1-1: Product: syz [ 589.034629][T13177] usb 1-1: Manufacturer: syz [ 589.034644][T13177] usb 1-1: SerialNumber: syz [ 589.060199][T13177] usb 1-1: config 0 descriptor?? [ 589.062026][T17686] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 589.280519][T17686] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 589.339895][ T5035] net_ratelimit: 9 callbacks suppressed [ 589.339917][ T5035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.340187][ T5035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.388428][T13165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.751827][ T5797] Bluetooth: hci1: command 0x0406 tx timeout [ 591.052146][T13169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.268620][T17531] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.269122][T17531] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.671406][T13177] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 591.671730][T13177] asix 1-1:0.188: probe with driver asix failed with error -71 [ 591.736043][T13177] usb 1-1: USB disconnect, device number 9 [ 591.798189][T13169] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 592.120636][T13165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.138111][T13169] usb 5-1: Using ep0 maxpacket: 8 [ 592.143596][T13169] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 592.146878][T13169] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 592.146908][T13169] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.146929][T13169] usb 5-1: Product: syz [ 592.146944][T13169] usb 5-1: Manufacturer: syz [ 592.146958][T13169] usb 5-1: SerialNumber: syz [ 592.607140][T17203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.607633][T17203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.863836][T13153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.215694][T17732] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4473'. [ 593.504940][T13169] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 593.569095][T13169] usb 5-1: USB disconnect, device number 16 [ 593.662516][T17734] netlink: 220 bytes leftover after parsing attributes in process `syz.2.4474'. [ 593.662543][T17734] netlink: 'syz.2.4474': attribute type 2 has an invalid length. [ 593.783487][T17740] 9p: Bad value for 'rfdno' [ 594.739623][T13169] net_ratelimit: 4 callbacks suppressed [ 594.739645][T13169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.964241][ T3486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.964559][ T3486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.058223][T13177] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 595.071203][T13154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.418368][T13177] usb 4-1: Using ep0 maxpacket: 8 [ 595.424896][T13177] usb 4-1: unable to get BOS descriptor or descriptor too short [ 595.429865][T13177] usb 4-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 595.429898][T13177] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.429920][T13177] usb 4-1: Product: syz [ 595.429936][T13177] usb 4-1: Manufacturer: syz [ 595.429950][T13177] usb 4-1: SerialNumber: syz [ 595.809835][T13175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.909066][T17768] netlink: 'syz.2.4483': attribute type 13 has an invalid length. [ 596.948344][T13154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.092449][T13169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.239249][T13177] usb 4-1: USB disconnect, device number 18 [ 597.525935][T17772] udevd[17772]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 598.041548][T13156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.099271][T13156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.113030][T13165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.296300][T17788] netlink: 220 bytes leftover after parsing attributes in process `syz.4.4487'. [ 598.296328][T17788] netlink: 'syz.4.4487': attribute type 2 has an invalid length. [ 598.378861][T17790] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4484'. [ 601.001664][T13165] net_ratelimit: 3 callbacks suppressed [ 601.001687][T13165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.781102][T13156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.784817][T17531] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.786310][T13156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.817912][T13177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.840701][T13153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.887374][T17817] netlink: 'syz.2.4496': attribute type 13 has an invalid length. [ 601.948158][T17820] netlink: 220 bytes leftover after parsing attributes in process `syz.0.4499'. [ 601.948187][T17820] netlink: 'syz.0.4499': attribute type 2 has an invalid length. [ 602.076307][T13153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.076820][T13177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.092021][T13154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.278517][T13153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.122240][ T5797] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 603.157584][ T5797] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 603.212241][ T5797] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 603.230677][ T5797] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 603.234206][ T5797] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 604.824425][T17868] netlink: 'syz.4.4515': attribute type 13 has an invalid length. [ 604.974984][T17865] lo: Caught tx_queue_len zero misconfig [ 604.975018][T17865] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 605.399599][ T5807] Bluetooth: hci0: command tx timeout [ 606.343089][T17916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4529'. [ 606.457396][T17843] chnl_net:caif_netlink_parms(): no params data found [ 606.527269][T17923] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4532'. [ 606.527376][T17923] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4532'. [ 606.730505][ T5807] Bluetooth: hci3: command 0x0406 tx timeout [ 607.608150][ T5807] Bluetooth: hci0: command tx timeout [ 608.835080][T17944] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4535'. [ 609.881796][T17944] bond1: entered promiscuous mode [ 609.883609][T17944] 8021q: adding VLAN 0 to HW filter on device bond1 [ 609.927223][ T5797] Bluetooth: hci0: command tx timeout [ 610.285841][T17946] 8021q: adding VLAN 0 to HW filter on device bond1 [ 610.286394][T17946] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 610.287452][T17946] bond1: (slave gre1): Error -95 calling set_mac_address [ 611.569241][T17971] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4543'. [ 611.569308][T17971] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4543'. [ 611.949785][ T5797] Bluetooth: hci0: command tx timeout [ 612.180820][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 612.180865][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.728298][T17999] ======================================================= [ 614.728298][T17999] WARNING: The mand mount option has been deprecated and [ 614.728298][T17999] and is ignored by this kernel. Remove the mand [ 614.728298][T17999] option from the mount to silence this warning. [ 614.728298][T17999] ======================================================= [ 615.345330][T18001] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4555'. [ 615.839365][T18014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4560'. [ 615.936003][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 615.936043][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.990766][T17843] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.990890][T17843] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.991141][T17843] bridge_slave_0: entered allmulticast mode [ 615.993307][T17843] bridge_slave_0: entered promiscuous mode [ 616.026961][T18001] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 616.108547][T18006] netlink: 776 bytes leftover after parsing attributes in process `syz.3.4557'. [ 616.110762][T17843] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.110988][T17843] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.111647][T17843] bridge_slave_1: entered allmulticast mode [ 616.119286][T17843] bridge_slave_1: entered promiscuous mode [ 616.244140][T18020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4562'. [ 617.358147][T13156] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 617.461639][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 617.461679][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.531686][T13156] usb 3-1: config 1 has an invalid descriptor of length 209, skipping remainder of the config [ 618.531764][T13156] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 618.531809][T13156] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 618.535534][T13156] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 618.535564][T13156] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.535585][T13156] usb 3-1: Product: syz [ 618.535601][T13156] usb 3-1: Manufacturer: syz [ 618.535616][T13156] usb 3-1: SerialNumber: syz [ 618.835178][T18051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4572'. [ 618.919077][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 618.919117][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.015468][T17843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 619.076768][T17843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 619.265320][T18062] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4574'. [ 619.403667][T17843] team0: Port device team_slave_0 added [ 619.559118][T18062] bond2: entered promiscuous mode [ 619.562296][T18062] 8021q: adding VLAN 0 to HW filter on device bond2 [ 619.661221][T13156] cdc_ncm 3-1:1.0: bind() failure [ 619.682587][T13156] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 619.683618][T13156] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 619.685612][T13156] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 619.719690][T13156] usb 3-1: USB disconnect, device number 17 [ 619.740840][T18065] 8021q: adding VLAN 0 to HW filter on device bond2 [ 619.741358][T18065] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 619.742418][T18065] bond2: (slave gre1): Error -95 calling set_mac_address [ 620.401281][T17843] team0: Port device team_slave_1 added [ 623.018592][T18094] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4583'. [ 624.454710][T18112] tipc: New replicast peer: 255.255.255.255 [ 624.456099][T18112] tipc: Enabled bearer , priority 10 [ 624.550490][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.550572][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.702566][T17843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 624.702585][T17843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 624.702616][T17843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 625.003782][T17843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 625.003802][T17843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 625.003828][T17843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 625.376399][T17843] hsr_slave_0: entered promiscuous mode [ 625.380509][T17843] hsr_slave_1: entered promiscuous mode [ 626.725048][ T12] bridge_slave_1: left allmulticast mode [ 626.725321][ T12] bridge_slave_1: left promiscuous mode [ 626.906077][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.564677][ T12] bridge_slave_0: left promiscuous mode [ 627.564967][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.578318][T18160] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4596'. [ 628.858972][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 628.939390][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 628.961042][ T12] bond0 (unregistering): Released all slaves [ 628.967254][ T12] bond1 (unregistering): Released all slaves [ 628.985215][ T12] bond2 (unregistering): Released all slaves [ 628.999388][ T12] bond3 (unregistering): Released all slaves [ 629.022586][ T12] bond4 (unregistering): Released all slaves [ 629.046534][ T12] bond5 (unregistering): Released all slaves [ 629.061172][ T12] bond6 (unregistering): Released all slaves [ 629.074296][ T12] bond7 (unregistering): Released all slaves [ 629.089429][ T12] bond8 (unregistering): Released all slaves [ 629.107425][ T12] bond9 (unregistering): Released all slaves [ 629.174714][T13165] tipc: Node number set to 3513419615 [ 632.896988][ T12] tipc: Left network mode [ 633.128159][T13165] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 633.294815][T13165] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 633.294855][T13165] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 633.294898][T13165] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 633.294922][T13165] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.351739][T13165] usb 4-1: config 0 descriptor?? [ 633.599403][T18222] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4612'. [ 633.803593][T13165] hid_parser_main: 452 callbacks suppressed [ 633.803617][T13165] cp2112 0003:10C4:EA90.0016: unknown main item tag 0x0 [ 633.805247][T13165] cp2112 0003:10C4:EA90.0016: unknown main item tag 0x0 [ 633.805278][T13165] cp2112 0003:10C4:EA90.0016: unknown main item tag 0x0 [ 633.805304][T13165] cp2112 0003:10C4:EA90.0016: unknown main item tag 0x0 [ 633.805331][T13165] cp2112 0003:10C4:EA90.0016: unknown main item tag 0x0 [ 633.805356][T13165] cp2112 0003:10C4:EA90.0016: unknown main item tag 0x0 [ 633.805381][T13165] cp2112 0003:10C4:EA90.0016: unknown main item tag 0x0 [ 634.021510][T13165] cp2112 0003:10C4:EA90.0016: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 634.079003][T13165] cp2112 0003:10C4:EA90.0016: Part Number: 0x00 Device Version: 0x00 [ 634.181577][T18238] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4616'. [ 634.683029][T13165] cp2112 0003:10C4:EA90.0016: error reading lock byte: -71 [ 634.698067][ T12] hsr_slave_0: left promiscuous mode [ 634.718311][T13165] usb 4-1: USB disconnect, device number 19 [ 634.739524][ T12] hsr_slave_1: left promiscuous mode [ 634.761458][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 634.761489][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 634.818818][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 634.818844][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 636.107072][ T12] veth1_macvtap: left promiscuous mode [ 636.107193][ T12] veth0_macvtap: left promiscuous mode [ 636.107478][ T12] veth1_vlan: left promiscuous mode [ 636.107683][ T12] veth0_vlan: left promiscuous mode [ 637.516445][T18277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4625'. [ 638.099809][T18285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4627'. [ 638.158721][ T12] team0 (unregistering): Port device team_slave_1 removed [ 638.198756][ T12] team0 (unregistering): Port device team_slave_0 removed [ 639.243505][T18305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4630'. [ 641.981783][T18321] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4635'. [ 643.216132][T18332] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4637'. [ 643.367514][T18336] netlink: 'syz.3.4638': attribute type 13 has an invalid length. [ 643.395662][T18316] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4633'. [ 643.587768][T18336] gretap0: refused to change device tx_queue_len [ 643.596285][T18336] net_ratelimit: 21 callbacks suppressed [ 643.596305][T18336] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 646.226273][T18374] netlink: 220 bytes leftover after parsing attributes in process `syz.1.4645'. [ 646.226300][T18374] netlink: 'syz.1.4645': attribute type 2 has an invalid length. [ 646.246178][ T12] IPVS: stop unused estimator thread 0... [ 646.319728][T18376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4646'. [ 648.570338][T18396] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4652'. [ 648.609899][T18399] netlink: 'syz.1.4653': attribute type 13 has an invalid length. [ 648.640949][T18402] netlink: 220 bytes leftover after parsing attributes in process `syz.4.4655'. [ 648.640977][T18402] netlink: 'syz.4.4655': attribute type 2 has an invalid length. [ 648.813214][T18399] gretap0: refused to change device tx_queue_len [ 648.813242][T18399] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 649.001289][T18418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4659'. [ 649.098403][T17843] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 649.151594][T18408] syzkaller0: entered promiscuous mode [ 649.151623][T18408] syzkaller0: entered allmulticast mode [ 649.170299][T17843] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 649.464586][T17843] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 649.669811][T17843] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 649.748296][T18440] netlink: 136 bytes leftover after parsing attributes in process `syz.3.4664'. [ 649.748328][T18440] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4664'. [ 650.033977][T18452] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4666'. [ 650.114611][ T5797] Bluetooth: hci0: link tx timeout [ 650.115079][ T5797] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 650.312333][T18464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4669'. [ 650.371344][T17843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 650.409166][T18466] netlink: 'syz.1.4670': attribute type 13 has an invalid length. [ 650.409697][T18466] gretap0: refused to change device tx_queue_len [ 650.409719][T18466] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 650.742542][T17843] 8021q: adding VLAN 0 to HW filter on device team0 [ 650.764750][ T1338] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.765825][ T1338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 650.797026][T17531] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.797258][T17531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 650.988200][T13177] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 651.682771][T13177] usb 5-1: New USB device found, idVendor=0e41, idProduct=3061, bcdDevice= 0.40 [ 651.682809][T13177] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.682830][T13177] usb 5-1: Product: syz [ 651.682845][T13177] usb 5-1: Manufacturer: syz [ 651.682861][T13177] usb 5-1: SerialNumber: syz [ 652.094750][T13177] usb 5-1: BAAD SPEAKERPHONE c_chmask mismatch [ 652.190683][ T5797] Bluetooth: hci0: command 0x0406 tx timeout [ 652.222418][T13177] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 652.250504][T13177] usb 5-1: USB disconnect, device number 17 [ 652.347243][T18328] udevd[18328]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 652.448282][T17843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 652.593773][T18503] syzkaller0: entered promiscuous mode [ 652.618848][T17843] veth0_vlan: entered promiscuous mode [ 652.696432][T18510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4682'. [ 653.009400][T18522] netlink: 'syz.1.4685': attribute type 13 has an invalid length. [ 653.009427][T18522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4685'. [ 654.451091][T18540] netlink: 'syz.4.4689': attribute type 21 has an invalid length. [ 654.451112][T18540] IPv6: NLM_F_CREATE should be specified when creating new route [ 654.600509][ T36] audit: type=1326 audit(1774820308.745:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18539 comm="syz.4.4689" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f333f83c799 code=0x0 [ 655.492088][T18547] usb usb8: usbfs: process 18547 (syz.4.4691) did not claim interface 0 before use [ 655.609195][T18551] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4693'. [ 662.582256][ T5797] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 662.595098][ T5797] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 662.630010][ T5797] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 662.635878][ T5797] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 662.636657][ T5797] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 664.675529][ T5797] Bluetooth: hci5: command tx timeout [ 666.758239][ T5797] Bluetooth: hci5: command tx timeout [ 667.841481][T18585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4703'. [ 668.922432][ T5797] Bluetooth: hci5: command tx timeout [ 669.364396][T18600] syzkaller0: entered promiscuous mode [ 670.470058][T18625] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4716'. [ 670.988206][ T5797] Bluetooth: hci5: command tx timeout [ 674.587534][T13169] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 675.322897][T13169] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 675.322937][T13169] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 675.322962][T13169] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 675.323009][T13169] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 675.323034][T13169] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.399543][T13169] usb 2-1: config 0 descriptor?? [ 675.869474][T13169] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 675.869517][T13169] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 675.869544][T13169] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 675.869570][T13169] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 675.869596][T13169] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 675.869622][T13169] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 675.869647][T13169] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 675.869673][T13169] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 675.869696][T13169] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 675.869722][T13169] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 676.014838][T13169] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 676.167893][T13156] usb 2-1: USB disconnect, device number 23 [ 676.543702][T18676] fido_id[18676]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 679.998888][T18711] netlink: 'syz.1.4742': attribute type 13 has an invalid length. [ 679.998914][T18711] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4742'. [ 682.644307][T18750] binder: 18748:18750 ioctl c018620c 0 returned -14 [ 684.123617][ T5807] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 684.133217][ T5807] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 684.169448][ T5807] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 684.170628][ T5807] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 684.171666][ T5807] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 685.962108][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.962155][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.275041][ T5797] Bluetooth: hci0: command tx timeout [ 688.348158][ T5797] Bluetooth: hci0: command tx timeout [ 690.433430][ T5797] Bluetooth: hci0: command tx timeout [ 692.508140][ T5797] Bluetooth: hci0: command tx timeout [ 696.963257][T18801] netlink: 'syz.4.4763': attribute type 13 has an invalid length. [ 697.478126][T13156] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 697.699126][T13156] usb 4-1: Using ep0 maxpacket: 16 [ 697.701245][T13156] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 697.701274][T13156] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 697.701287][T13156] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 697.701314][T13156] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 697.701327][T13156] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.706495][T13156] usb 4-1: config 0 descriptor?? [ 699.016568][T13156] hid_parser_main: 5 callbacks suppressed [ 699.016596][T13156] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 699.016626][T13156] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 699.016653][T13156] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 699.016679][T13156] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 699.016725][T13156] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 699.070287][T13156] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0018/input/input15 [ 699.188186][T13156] microsoft 0003:045E:07DA.0018: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 699.260233][T13177] usb 4-1: USB disconnect, device number 20 [ 699.386887][T18827] fido_id[18827]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 699.682568][T18562] chnl_net:caif_netlink_parms(): no params data found [ 701.053796][T18562] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.053954][T18562] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.054317][T18562] bridge_slave_0: entered allmulticast mode [ 701.083032][T18562] bridge_slave_0: entered promiscuous mode [ 701.989398][T18562] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.989543][T18562] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.989800][T18562] bridge_slave_1: entered allmulticast mode [ 701.992760][T18562] bridge_slave_1: entered promiscuous mode [ 702.181830][T18855] netlink: 'syz.1.4775': attribute type 13 has an invalid length. [ 702.206827][T18761] chnl_net:caif_netlink_parms(): no params data found [ 702.441268][T18562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 702.537605][T18562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 703.158397][ T1338] bridge_slave_1: left allmulticast mode [ 703.158432][ T1338] bridge_slave_1: left promiscuous mode [ 703.158728][ T1338] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.049377][ T1338] bridge_slave_0: left allmulticast mode [ 704.049400][ T1338] bridge_slave_0: left promiscuous mode [ 704.049588][ T1338] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.739829][ T1338] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 704.818786][ T1338] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 704.842103][ T1338] bond0 (unregistering): Released all slaves [ 704.870885][T18562] team0: Port device team_slave_0 added [ 705.006835][T18562] team0: Port device team_slave_1 added [ 705.501705][T18893] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4786'. [ 706.393713][T18898] netlink: 'syz.1.4788': attribute type 13 has an invalid length. [ 706.439353][T18761] bridge0: port 1(bridge_slave_0) entered blocking state [ 706.439498][T18761] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.439741][T18761] bridge_slave_0: entered allmulticast mode [ 706.442482][T18761] bridge_slave_0: entered promiscuous mode [ 706.446098][T18562] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 706.446114][T18562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 706.446142][T18562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 707.638215][ T1338] hsr_slave_0: left promiscuous mode [ 707.758105][ T1338] hsr_slave_1: left promiscuous mode [ 707.758892][ T1338] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 707.788865][ T1338] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 707.828612][ T1338] veth0_vlan: left promiscuous mode [ 708.199940][ T1338] team0 (unregistering): Port device team_slave_1 removed [ 708.238716][ T1338] team0 (unregistering): Port device team_slave_0 removed [ 708.523600][T18562] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 708.523620][T18562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 708.523659][T18562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 708.524908][T18761] bridge0: port 2(bridge_slave_1) entered blocking state [ 708.525134][T18761] bridge0: port 2(bridge_slave_1) entered disabled state [ 708.525345][T18761] bridge_slave_1: entered allmulticast mode [ 708.529661][T18761] bridge_slave_1: entered promiscuous mode [ 709.983221][T18761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 710.046726][T18761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 710.143383][T18562] hsr_slave_0: entered promiscuous mode [ 710.144288][T18562] hsr_slave_1: entered promiscuous mode [ 710.192053][T18761] team0: Port device team_slave_0 added [ 710.362690][T18761] team0: Port device team_slave_1 added [ 710.736682][T18761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 710.736702][T18761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 710.736732][T18761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 710.744543][T18761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 710.744559][T18761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 710.744584][T18761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 713.213506][T18959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4807'. [ 713.340125][T18961] netlink: 148 bytes leftover after parsing attributes in process `syz.3.4808'. [ 713.493175][T18761] hsr_slave_0: entered promiscuous mode [ 713.494816][T18761] hsr_slave_1: entered promiscuous mode [ 713.496050][T18761] debugfs: 'hsr0' already exists in 'hsr' [ 713.496076][T18761] Cannot create hsr debugfs directory [ 714.868355][T18984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4814'. [ 715.048690][T18984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4814'. [ 716.244395][ T1338] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.481564][T19011] netlink: 148 bytes leftover after parsing attributes in process `syz.3.4820'. [ 717.071006][ T1338] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.127824][ T1338] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.946352][T19049] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4831'. [ 721.035523][ T1338] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.403640][T18761] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 724.000794][T18761] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 724.320751][T18761] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 724.483388][ T5807] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 724.501575][ T5807] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 724.507262][ T5807] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 724.516272][ T5807] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 724.521874][ T5807] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 724.651232][ T1338] bridge_slave_1: left allmulticast mode [ 724.651265][ T1338] bridge_slave_1: left promiscuous mode [ 724.651546][ T1338] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.730295][ T1338] bridge_slave_0: left allmulticast mode [ 724.730327][ T1338] bridge_slave_0: left promiscuous mode [ 724.730595][ T1338] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.130750][T19102] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4841'. [ 727.445498][ T5797] Bluetooth: hci1: command tx timeout [ 727.668795][ T1338] bond1 (unregistering): (slave geneve2): Releasing active interface [ 727.668829][ T1338] geneve2 (unregistering): left allmulticast mode [ 727.739130][T19132] netlink: 148 bytes leftover after parsing attributes in process `syz.3.4852'. [ 727.898918][ T1338] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 727.999873][ T1338] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 728.046739][ T1338] bond0 (unregistering): Released all slaves [ 728.163080][ T1338] bond1 (unregistering): Released all slaves [ 728.198645][ T1338] bond2 (unregistering): Released all slaves [ 728.240742][ T1338] bond3 (unregistering): Released all slaves [ 728.298839][T18761] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 729.677783][ T5797] Bluetooth: hci1: command tx timeout [ 730.164189][T19180] netlink: 148 bytes leftover after parsing attributes in process `syz.3.4867'. [ 731.127418][T19192] netlink: 'syz.3.4870': attribute type 4 has an invalid length. [ 731.182952][T19191] netlink: 'syz.3.4870': attribute type 4 has an invalid length. [ 731.369222][ T1338] hsr_slave_0: left promiscuous mode [ 731.409104][ T1338] hsr_slave_1: left promiscuous mode [ 731.410138][ T1338] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 731.410163][ T1338] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 731.459047][ T1338] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 731.459073][ T1338] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 731.541815][ T1338] veth1_macvtap: left promiscuous mode [ 731.541887][ T1338] veth0_macvtap: left promiscuous mode [ 731.542046][ T1338] veth1_vlan: left promiscuous mode [ 731.542151][ T1338] veth0_vlan: left promiscuous mode [ 731.718056][ T5797] Bluetooth: hci1: command tx timeout [ 732.303108][ T1338] team_slave_1 (unregistering): left promiscuous mode [ 732.329171][ T1338] team0 (unregistering): Port device team_slave_1 removed [ 732.338985][ T1338] team_slave_0 (unregistering): left promiscuous mode [ 732.378656][ T1338] team0 (unregistering): Port device team_slave_0 removed [ 733.539605][T19092] chnl_net:caif_netlink_parms(): no params data found [ 733.666514][T18761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 733.788156][ T5797] Bluetooth: hci1: command tx timeout [ 734.087113][T18761] 8021q: adding VLAN 0 to HW filter on device team0 [ 734.197577][ T1128] bridge0: port 1(bridge_slave_0) entered blocking state [ 734.197721][ T1128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 734.379606][T19092] bridge0: port 1(bridge_slave_0) entered blocking state [ 734.379745][T19092] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.379998][T19092] bridge_slave_0: entered allmulticast mode [ 734.419785][T19092] bridge_slave_0: entered promiscuous mode [ 734.424451][ T1128] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.424630][ T1128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 734.466676][T19092] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.476047][T19092] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.476344][T19092] bridge_slave_1: entered allmulticast mode [ 734.509609][T19092] bridge_slave_1: entered promiscuous mode [ 734.704586][T19092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 734.797601][T19092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 735.236950][T19092] team0: Port device team_slave_0 added [ 735.263436][T19092] team0: Port device team_slave_1 added [ 736.891347][T19092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 736.891361][T19092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 736.891376][T19092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 737.821596][T19092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 737.821617][T19092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 737.821643][T19092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 740.111177][T19092] hsr_slave_0: entered promiscuous mode [ 740.124917][T19092] hsr_slave_1: entered promiscuous mode [ 740.125967][T19092] debugfs: 'hsr0' already exists in 'hsr' [ 740.125995][T19092] Cannot create hsr debugfs directory [ 740.271059][T19309] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4900'. [ 743.956019][T18761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 744.293974][ T1338] bridge_slave_1: left allmulticast mode [ 744.294009][ T1338] bridge_slave_1: left promiscuous mode [ 744.294319][ T1338] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.325270][T19371] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4914'. [ 744.389800][ T1338] bridge_slave_0: left allmulticast mode [ 744.389829][ T1338] bridge_slave_0: left promiscuous mode [ 744.390088][ T1338] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.487278][ T5807] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 744.512452][ T5807] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 744.517640][ T5807] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 744.538486][ T5807] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 744.540322][ T5807] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 744.928820][ T1338] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 745.069190][ T1338] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 745.150403][ T1338] bond0 (unregistering): Released all slaves [ 745.368781][T19378] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4916'. [ 745.420603][T19379] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4916'. [ 745.420629][T19379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4916'. [ 745.420638][T19379] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4916'. [ 745.654108][T19378] bond7: entered promiscuous mode [ 745.654447][T19378] 8021q: adding VLAN 0 to HW filter on device bond7 [ 745.740880][T19384] 8021q: adding VLAN 0 to HW filter on device bond7 [ 745.741254][T19384] bond7: (slave gre2): The slave device specified does not support setting the MAC address [ 745.741994][T19384] bond7: (slave gre2): Error -95 calling set_mac_address [ 746.279311][ T1338] hsr_slave_0: left promiscuous mode [ 746.927214][ T5807] Bluetooth: hci5: command tx timeout [ 747.013442][ T1338] hsr_slave_1: left promiscuous mode [ 747.014562][ T1338] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 747.042602][ T1338] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 747.394234][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.394309][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.579787][ T1338] team0 (unregistering): Port device team_slave_1 removed [ 748.640705][ T1338] team0 (unregistering): Port device team_slave_0 removed [ 748.988108][ T5807] Bluetooth: hci5: command tx timeout [ 749.037750][T19398] veth2: entered allmulticast mode [ 749.101409][T19398] veth3: entered promiscuous mode [ 751.144170][ T5807] Bluetooth: hci5: command tx timeout [ 753.002950][T19092] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 753.062680][T19092] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 753.154790][ T5807] Bluetooth: hci5: command tx timeout [ 753.155365][T19092] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 753.255786][T19372] chnl_net:caif_netlink_parms(): no params data found [ 753.285762][T19092] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 754.732938][T19372] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.733285][T19372] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.733545][T19372] bridge_slave_0: entered allmulticast mode [ 754.810812][T19372] bridge_slave_0: entered promiscuous mode [ 755.198745][T19372] bridge0: port 2(bridge_slave_1) entered blocking state [ 755.198838][T19372] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.199490][T19372] bridge_slave_1: entered allmulticast mode [ 755.201287][T19372] bridge_slave_1: entered promiscuous mode [ 756.766720][T19372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 756.791387][T19372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 757.438366][T19372] team0: Port device team_slave_0 added [ 757.464782][T19372] team0: Port device team_slave_1 added [ 757.826167][T19372] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 757.826187][T19372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 757.826217][T19372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 757.956798][T19372] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 757.956819][T19372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 757.956848][T19372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 758.844165][T19372] hsr_slave_0: entered promiscuous mode [ 758.863699][T19372] hsr_slave_1: entered promiscuous mode [ 759.440115][T19092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 759.472776][ T1338] bridge_slave_1: left allmulticast mode [ 759.472809][ T1338] bridge_slave_1: left promiscuous mode [ 759.473263][ T1338] bridge0: port 2(bridge_slave_1) entered disabled state [ 759.500082][T19563] netlink: 120 bytes leftover after parsing attributes in process `syz.1.4957'. [ 759.562317][ T1338] bridge_slave_0: left allmulticast mode [ 759.562349][ T1338] bridge_slave_0: left promiscuous mode [ 759.562612][ T1338] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.698991][ T1338] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 761.768622][ T1338] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 761.791819][ T1338] bond0 (unregistering): Released all slaves [ 763.448271][ T1338] hsr_slave_0: left promiscuous mode [ 763.507298][ T1338] hsr_slave_1: left promiscuous mode [ 763.515407][ T1338] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 763.534514][ T1338] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 764.255082][T19613] netlink: 120 bytes leftover after parsing attributes in process `syz.3.4966'. [ 764.479396][ T1338] team0 (unregistering): Port device team_slave_1 removed [ 764.518722][ T1338] team0 (unregistering): Port device team_slave_0 removed [ 764.618165][ T5982] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 764.722841][T19598] syzkaller0: entered promiscuous mode [ 764.722870][T19598] syzkaller0: entered allmulticast mode [ 764.734352][T19610] veth1_vlan: left promiscuous mode [ 764.734379][T19610] veth1_vlan: entered promiscuous mode [ 764.734396][T19610] veth1_vlan: entered allmulticast mode [ 764.776635][ T5982] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 764.776674][ T5982] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 764.776715][ T5982] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 764.776740][ T5982] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.821021][ T5982] usb 4-1: config 0 descriptor?? [ 765.143312][T19620] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4969'. [ 765.182744][T19620] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4969'. [ 765.200955][T19092] 8021q: adding VLAN 0 to HW filter on device team0 [ 765.253431][ T5982] playstation 0003:054C:0DF2.0019: unknown main item tag 0x0 [ 765.253471][ T5982] playstation 0003:054C:0DF2.0019: unknown main item tag 0x0 [ 765.253498][ T5982] playstation 0003:054C:0DF2.0019: unknown main item tag 0x0 [ 765.253523][ T5982] playstation 0003:054C:0DF2.0019: unknown main item tag 0x0 [ 765.253550][ T5982] playstation 0003:054C:0DF2.0019: unknown main item tag 0x0 [ 765.257412][T17967] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.262401][T17967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 765.344991][ T5982] playstation 0003:054C:0DF2.0019: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 765.437364][ T5982] playstation 0003:054C:0DF2.0019: Invalid reportID received, expected 9 got 32 [ 765.437397][ T5982] playstation 0003:054C:0DF2.0019: Failed to retrieve DualSense pairing info: -22 [ 765.437458][ T5982] playstation 0003:054C:0DF2.0019: Failed to get MAC address from DualSense [ 765.437475][ T5982] playstation 0003:054C:0DF2.0019: Failed to create dualsense. [ 765.509276][ T5982] playstation 0003:054C:0DF2.0019: probe with driver playstation failed with error -22 [ 765.593719][T17967] bridge0: port 2(bridge_slave_1) entered blocking state [ 765.593830][T17967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 765.872451][T13165] usb 4-1: USB disconnect, device number 21 [ 767.997832][T19645] netlink: 120 bytes leftover after parsing attributes in process `syz.4.4975'. [ 768.644561][T19654] syzkaller0: entered promiscuous mode [ 768.644590][T19654] syzkaller0: entered allmulticast mode [ 770.351427][T19664] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4979'. [ 770.367665][T19664] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4979'. [ 770.820983][T19092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 770.999962][T19092] veth0_vlan: entered promiscuous mode [ 771.012394][T19691] netlink: 120 bytes leftover after parsing attributes in process `syz.3.4984'. [ 771.053819][T19092] veth1_vlan: entered promiscuous mode [ 771.399021][T19372] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 771.442928][T19372] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 771.490899][T19092] veth0_macvtap: entered promiscuous mode [ 771.496727][T19372] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 771.543000][T19372] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 771.720906][T19092] veth1_macvtap: entered promiscuous mode [ 771.977862][T19092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 771.979344][T13165] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 772.343684][T13165] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 772.344305][T13165] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 772.344362][T13165] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 772.344412][T13165] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 772.344489][T13165] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 772.344571][T13165] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.916385][T13165] usb 2-1: config 0 descriptor?? [ 773.015396][T19092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 773.111819][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.130035][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.133725][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.153756][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.292383][T19721] syzkaller0: entered promiscuous mode [ 773.292415][T19721] syzkaller0: entered allmulticast mode [ 773.316321][T19723] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4990'. [ 773.335259][T19723] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4990'. [ 773.365251][T13165] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 773.365289][T13165] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 773.365316][T13165] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 773.365340][T13165] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 773.365365][T13165] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 773.365389][T13165] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 773.365414][T13165] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 773.365439][T13165] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 773.365464][T13165] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 773.365488][T13165] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 773.475316][T13165] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 773.668755][T13156] usb 2-1: USB disconnect, device number 24 [ 773.876159][T19735] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4992'. [ 773.985727][T19737] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4992'. [ 773.985764][T19737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4992'. [ 773.985781][T19737] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4992'. [ 774.019034][T19735] bond2: entered promiscuous mode [ 774.019612][T19735] 8021q: adding VLAN 0 to HW filter on device bond2 [ 774.130145][T19735] 8021q: adding VLAN 0 to HW filter on device bond2 [ 774.130448][T19735] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 774.131447][T19735] bond2: (slave gre1): Error -95 calling set_mac_address [ 774.365463][T17967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 774.365488][T17967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 774.469042][T19744] input: syz1 as /devices/virtual/input/input16 [ 774.694782][T17531] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 774.694806][T17531] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 774.740101][T19372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 774.850400][T19372] 8021q: adding VLAN 0 to HW filter on device team0 [ 774.900968][T17531] bridge0: port 1(bridge_slave_0) entered blocking state [ 774.912116][T17531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 774.967659][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 774.967810][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 775.005252][ T57] tipc: Subscription rejected, illegal request [ 775.440337][T19763] syzkaller0: entered promiscuous mode [ 775.440368][T19763] syzkaller0: entered allmulticast mode [ 775.778168][T13177] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 775.944113][T13177] usb 2-1: Using ep0 maxpacket: 16 [ 775.954444][T13177] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 775.954474][T13177] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 775.968339][T13177] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 775.968370][T13177] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.968389][T13177] usb 2-1: Product: syz [ 775.968403][T13177] usb 2-1: Manufacturer: syz [ 775.968416][T13177] usb 2-1: SerialNumber: syz [ 776.219764][T13177] usb 2-1: 0:2 : does not exist [ 776.232106][T13177] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 776.366316][T13177] usb 2-1: USB disconnect, device number 25 [ 776.497814][T19372] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 776.629460][T19618] udevd[19618]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 777.696382][T19813] syzkaller0: entered promiscuous mode [ 777.696411][T19813] syzkaller0: entered allmulticast mode [ 778.516612][T19372] veth0_vlan: entered promiscuous mode [ 778.543190][T19372] veth1_vlan: entered promiscuous mode [ 778.670023][T19372] veth0_macvtap: entered promiscuous mode [ 778.926539][T19372] veth1_macvtap: entered promiscuous mode [ 779.260388][T19372] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 779.279548][T19372] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 779.480448][T17967] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.483444][T17967] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.483494][T17967] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.483531][T17967] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.894730][T19866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5031'. [ 779.962429][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 779.962453][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 780.057610][T17531] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 780.057631][T17531] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 780.168714][T13169] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 780.282508][T19875] random: crng reseeded on system resumption [ 781.447996][T13169] usb 2-1: Using ep0 maxpacket: 8 [ 781.454492][T13169] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 781.454525][T13169] usb 2-1: config 0 has no interface number 0 [ 781.457620][T13169] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 781.457651][T13169] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.457672][T13169] usb 2-1: Product: syz [ 781.457687][T13169] usb 2-1: Manufacturer: syz [ 781.457703][T13169] usb 2-1: SerialNumber: syz [ 782.068589][T13169] usb 2-1: config 0 descriptor?? [ 782.307001][T13169] uvcvideo 2-1:0.31: probe with driver uvcvideo failed with error -22 [ 782.348853][T13169] usb 2-1: USB disconnect, device number 26 [ 783.889596][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803f56e800: rx timeout, send abort [ 784.270952][T19914] tipc: Enabled bearer , priority 0 [ 784.271819][T19914] syzkaller0: entered promiscuous mode [ 784.271844][T19914] syzkaller0: entered allmulticast mode [ 784.389679][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803f56e800: abort rx timeout. Force session deactivation [ 784.394199][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803f56c400: rx timeout, send abort [ 784.451432][T19923] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5044'. [ 784.456313][T19914] tipc: Resetting bearer [ 784.505636][T19912] tipc: Resetting bearer [ 784.752323][T19912] tipc: Disabling bearer [ 784.894289][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803f56c400: abort rx timeout. Force session deactivation [ 786.013956][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.096438][ T5797] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 786.119308][T19968] tipc: Enabled bearer , priority 0 [ 786.123741][T19968] syzkaller0: entered promiscuous mode [ 786.123768][T19968] syzkaller0: entered allmulticast mode [ 786.138179][ T5797] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 786.144910][ T5797] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 786.147541][ T5797] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 786.151905][ T5797] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 786.300447][T19966] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5064'. [ 786.315383][T19968] tipc: Resetting bearer [ 786.408728][T19971] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5065'. [ 786.462609][T19972] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5065'. [ 786.462644][T19972] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5065'. [ 786.462660][T19972] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5065'. [ 786.520212][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.589932][T19964] tipc: Resetting bearer [ 786.794589][T19964] tipc: Disabling bearer [ 787.729826][T19971] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 789.290769][ T5797] Bluetooth: hci0: command tx timeout [ 790.644660][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.737314][T19991] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5070'. [ 790.740932][T19991] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5070'. [ 790.798174][T19999] sock: sock_set_timeout: `syz.3.5073' (pid 19999) tries to set negative timeout [ 791.308260][ T5797] Bluetooth: hci0: command tx timeout [ 791.366118][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.968277][T13154] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 792.118263][T13154] usb 5-1: Using ep0 maxpacket: 16 [ 792.120896][T13154] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 792.120926][T13154] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 792.124024][T13154] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 792.124056][T13154] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.124075][T13154] usb 5-1: Product: syz [ 792.124089][T13154] usb 5-1: Manufacturer: syz [ 792.124104][T13154] usb 5-1: SerialNumber: syz [ 792.668342][T20041] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5081'. [ 792.759488][T20041] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5081'. [ 792.759528][T20041] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5081'. [ 792.763596][ T12] bridge_slave_1: left allmulticast mode [ 792.763628][ T12] bridge_slave_1: left promiscuous mode [ 792.763978][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 792.840603][ T12] bridge_slave_0: left allmulticast mode [ 792.840638][ T12] bridge_slave_0: left promiscuous mode [ 792.840905][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 792.878632][ T5882] usb 5-1: USB disconnect, device number 18 [ 793.389257][ T5797] Bluetooth: hci0: command tx timeout [ 793.758054][ T5882] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 793.759621][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 793.838685][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 793.861855][ T12] bond0 (unregistering): Released all slaves [ 793.947587][ T5882] usb 2-1: Using ep0 maxpacket: 32 [ 793.955580][ T5882] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 793.955615][ T5882] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 793.982999][ T5882] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 793.983031][ T5882] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 793.983054][ T5882] usb 2-1: Product: syz [ 793.983068][ T5882] usb 2-1: Manufacturer: syz [ 794.045375][ T5882] hub 2-1:4.0: USB hub found [ 794.234885][ T5882] hub 2-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 794.542214][T20054] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5085'. [ 794.542922][T20054] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5085'. [ 794.585460][T19967] chnl_net:caif_netlink_parms(): no params data found [ 794.585857][ T5882] usb 2-1: USB disconnect, device number 27 [ 795.773825][ T5797] Bluetooth: hci0: command tx timeout [ 796.098063][T13177] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 796.278999][T13177] usb 5-1: unable to get BOS descriptor or descriptor too short [ 796.280086][T13177] usb 5-1: no configurations [ 796.280103][T13177] usb 5-1: can't read configurations, error -22 [ 796.407551][T20081] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5091'. [ 796.407581][T20081] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5091'. [ 796.407599][T20081] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5091'. [ 796.407829][T20081] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5091'. [ 796.882873][ T12] hsr_slave_0: left promiscuous mode [ 796.918260][ T12] hsr_slave_1: left promiscuous mode [ 796.919431][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 796.919459][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 797.121551][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 797.121582][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 797.174903][T20114] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5095'. [ 797.221032][ T12] veth1_macvtap: left promiscuous mode [ 797.221104][ T12] veth0_macvtap: left promiscuous mode [ 797.221273][ T12] veth1_vlan: left promiscuous mode [ 797.221391][ T12] veth0_vlan: left promiscuous mode [ 798.355884][ T12] team0 (unregistering): Port device team_slave_1 removed [ 798.559655][ T12] team0 (unregistering): Port device team_slave_0 removed [ 798.788398][T20114] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 798.908217][T19967] bridge0: port 1(bridge_slave_0) entered blocking state [ 798.908423][T19967] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.908679][T19967] bridge_slave_0: entered allmulticast mode [ 798.912551][T19967] bridge_slave_0: entered promiscuous mode [ 798.991191][T19967] bridge0: port 2(bridge_slave_1) entered blocking state [ 798.991399][T19967] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.991637][T19967] bridge_slave_1: entered allmulticast mode [ 798.994735][T19967] bridge_slave_1: entered promiscuous mode [ 799.026610][T20125] __nla_validate_parse: 2 callbacks suppressed [ 799.026635][T20125] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5098'. [ 799.044074][T20125] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5098'. [ 799.152463][T19967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 799.155127][T19967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 799.302045][T19967] team0: Port device team_slave_0 added [ 799.348189][T19967] team0: Port device team_slave_1 added [ 799.680086][T19967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 799.680106][T19967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 799.680137][T19967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 799.750823][T19967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 799.750842][T19967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 799.750872][T19967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 800.694418][T19967] hsr_slave_0: entered promiscuous mode [ 800.708360][T19967] hsr_slave_1: entered promiscuous mode [ 800.709407][T19967] debugfs: 'hsr0' already exists in 'hsr' [ 800.709431][T19967] Cannot create hsr debugfs directory [ 801.139735][T20164] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5107'. [ 801.211792][T20167] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5107'. [ 801.211829][T20167] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5107'. [ 801.230093][T20164] bond8: entered promiscuous mode [ 801.236451][T20164] 8021q: adding VLAN 0 to HW filter on device bond8 [ 801.255925][T20135] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5102'. [ 801.255953][T20135] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5102'. [ 801.255973][T20135] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5102'. [ 801.256216][T20135] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5102'. [ 801.412794][T20164] 8021q: adding VLAN 0 to HW filter on device bond8 [ 801.413329][T20164] bond8: (slave gre2): The slave device specified does not support setting the MAC address [ 801.419846][T20164] bond8: (slave gre2): Error -95 calling set_mac_address [ 801.639628][T20169] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5108'. [ 802.361419][T19967] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 802.527241][T19967] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 802.685606][T19967] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 802.760187][T19967] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 803.194425][T19967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 803.266597][T19967] 8021q: adding VLAN 0 to HW filter on device team0 [ 803.334554][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.334798][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 804.396223][ T1338] bridge0: port 2(bridge_slave_1) entered blocking state [ 804.396395][ T1338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 804.813072][T20218] __nla_validate_parse: 1 callbacks suppressed [ 804.813095][T20218] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5119'. [ 804.888369][T20221] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5119'. [ 804.888413][T20221] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5119'. [ 805.044873][T20218] bond9: entered promiscuous mode [ 805.045372][T20218] 8021q: adding VLAN 0 to HW filter on device bond9 [ 805.619168][T20234] binder: 20233:20234 ioctl c0306201 2000000003c0 returned -14 [ 805.703885][T20222] 8021q: adding VLAN 0 to HW filter on device bond9 [ 805.704398][T20222] bond9: (slave gre2): The slave device specified does not support setting the MAC address [ 805.705719][T20222] bond9: (slave gre2): Error -95 calling set_mac_address [ 805.913712][T20210] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5117'. [ 805.913741][T20210] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5117'. [ 805.913761][T20210] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5117'. [ 805.914010][T20210] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5117'. [ 806.606251][T19967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 807.024295][T20257] syzkaller0: entered promiscuous mode [ 807.024325][T20257] syzkaller0: entered allmulticast mode [ 808.600442][T20270] Invalid ELF header len 6 [ 808.845050][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.845134][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.183876][T19967] veth0_vlan: entered promiscuous mode [ 809.251200][T19967] veth1_vlan: entered promiscuous mode [ 809.425337][T19967] veth0_macvtap: entered promiscuous mode [ 809.473283][T19967] veth1_macvtap: entered promiscuous mode [ 809.590374][T19967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 809.681102][T19967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 809.715758][T17531] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.716022][T17531] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.716261][T17531] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.716303][T17531] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.434144][T20299] tipc: Enabling of bearer rejected, failed to enable media [ 811.804036][T20320] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5137'. [ 811.858776][T20316] syzkaller0: entered promiscuous mode [ 811.858806][T20316] syzkaller0: entered allmulticast mode [ 811.982605][T20330] netlink: 'syz.5.5142': attribute type 32 has an invalid length. [ 812.078005][ T5882] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 812.147473][T20336] process 'syz.5.5145' launched './file0' with NULL argv: empty string added [ 812.320819][ T5882] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 812.320885][ T5882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 812.320913][ T5882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 812.320937][ T5882] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 812.320983][ T5882] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 812.321008][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.410052][ T5882] usb 5-1: config 0 descriptor?? [ 813.159427][ T5882] plantronics 0003:047F:FFFF.001B: reserved main item tag 0xd [ 813.216847][ T5882] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 813.438830][T13177] usb 5-1: USB disconnect, device number 21 [ 813.754282][T17531] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 813.754304][T17531] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 813.942556][ T92] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 813.942579][ T92] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 820.246823][ C1] vcan0: j1939_tp_rxtimer: 0xffff888060cb9000: rx timeout, send abort [ 820.286170][T20401] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5160'. [ 820.287488][T20401] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5160'. [ 820.985617][ C1] vcan0: j1939_tp_rxtimer: 0xffff888060cb9000: abort rx timeout. Force session deactivation [ 820.985748][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806251f800: rx timeout, send abort [ 821.485874][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806251f800: abort rx timeout. Force session deactivation [ 822.057750][T20426] syzkaller0: entered promiscuous mode [ 822.057780][T20426] syzkaller0: entered allmulticast mode [ 823.843808][T20449] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5172'. [ 823.844081][T20449] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5172'. [ 824.814557][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803679f400: rx timeout, send abort [ 825.245690][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803679f000: rx timeout, send abort [ 825.315882][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803679f400: abort rx timeout. Force session deactivation [ 825.844066][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803679f000: abort rx timeout. Force session deactivation [ 826.748885][T20477] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5184'. [ 826.988492][T20481] syzkaller0: entered promiscuous mode [ 826.988530][T20481] syzkaller0: entered allmulticast mode [ 832.828164][T13169] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 832.997999][T13169] usb 4-1: Using ep0 maxpacket: 16 [ 833.000483][T13169] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 833.000513][T13169] usb 4-1: config 0 has no interface number 0 [ 833.000562][T13169] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 833.000590][T13169] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 833.000632][T13169] usb 4-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 833.000658][T13169] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.007789][T13169] usb 4-1: config 0 descriptor?? [ 833.173777][T20533] batadv_slave_0: Caught tx_queue_len zero misconfig [ 833.743722][T13169] hid_parser_main: 5 callbacks suppressed [ 833.743747][T13169] holtek_mouse 0003:04D9:A081.001C: unknown main item tag 0x0 [ 833.743777][T13169] holtek_mouse 0003:04D9:A081.001C: unknown main item tag 0x0 [ 833.743804][T13169] holtek_mouse 0003:04D9:A081.001C: unknown main item tag 0x0 [ 833.743829][T13169] holtek_mouse 0003:04D9:A081.001C: unknown main item tag 0x0 [ 833.743855][T13169] holtek_mouse 0003:04D9:A081.001C: unknown main item tag 0x0 [ 833.743881][T13169] holtek_mouse 0003:04D9:A081.001C: unknown main item tag 0x0 [ 833.743907][T13169] holtek_mouse 0003:04D9:A081.001C: unknown main item tag 0x0 [ 833.743932][T13169] holtek_mouse 0003:04D9:A081.001C: unknown main item tag 0x0 [ 833.765113][T13169] holtek_mouse 0003:04D9:A081.001C: hidraw0: USB HID v0.00 Device [HID 04d9:a081] on usb-dummy_hcd.3-1/input1 [ 834.538283][ T5982] usb 4-1: USB disconnect, device number 22 [ 834.855169][T20550] fido_id[20550]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 837.576147][T20580] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5211'. [ 839.243656][T20580] bond1: entered promiscuous mode [ 839.244193][T20580] 8021q: adding VLAN 0 to HW filter on device bond1 [ 839.614688][T20594] fuse: Bad value for 'fd' [ 843.233912][T20587] 8021q: adding VLAN 0 to HW filter on device bond1 [ 843.234431][T20587] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 843.235681][T20587] bond1: (slave gre1): Error -95 calling set_mac_address [ 843.965940][T20585] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 843.967196][T20585] bond1: (slave gre1): Error -95 calling set_mac_address [ 844.378060][T13177] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 844.713137][T13177] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 844.713167][T13177] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 844.713188][T13177] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 844.713236][T13177] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 844.713259][T13177] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 844.713284][T13177] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 844.713325][T13177] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 844.713347][T13177] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.769184][T13177] usb 4-1: config 0 descriptor?? [ 845.283389][T20624] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 845.598288][T13177] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 23 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 845.864596][ C1] usblp0: nonzero read bulk status received: -71 [ 845.905191][T13175] usb 4-1: USB disconnect, device number 23 [ 845.929928][T13175] usblp0: removed [ 847.686340][T20674] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5230'. [ 847.705460][T20674] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 848.439135][T20679] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5232'. [ 848.565767][T20679] bond10: entered promiscuous mode [ 848.566322][T20679] 8021q: adding VLAN 0 to HW filter on device bond10 [ 848.846741][T20679] 8021q: adding VLAN 0 to HW filter on device bond10 [ 848.847259][T20679] bond10: (slave gre2): The slave device specified does not support setting the MAC address [ 848.868867][T20679] bond10: (slave gre2): Error -95 calling set_mac_address [ 855.020800][T20749] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5249'. [ 855.131104][T20749] bond3: entered promiscuous mode [ 855.168770][T20749] 8021q: adding VLAN 0 to HW filter on device bond3 [ 855.331643][T20752] 8021q: adding VLAN 0 to HW filter on device bond3 [ 855.332358][T20752] bond3: (slave gre1): The slave device specified does not support setting the MAC address [ 855.336351][T20752] bond3: (slave gre1): Error -95 calling set_mac_address [ 857.558057][T13177] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 857.614646][T20808] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5260'. [ 857.614677][T20808] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5260'. [ 857.614696][T20808] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5260'. [ 857.614965][T20808] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5260'. [ 857.708058][T13177] usb 6-1: Using ep0 maxpacket: 8 [ 857.712196][T13177] usb 6-1: unable to get BOS descriptor or descriptor too short [ 857.714801][T13177] usb 6-1: config 12 interface 0 altsetting 7 endpoint 0x3 has invalid wMaxPacketSize 0 [ 857.714831][T13177] usb 6-1: config 12 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 0 [ 857.714856][T13177] usb 6-1: config 12 interface 0 has no altsetting 0 [ 857.722706][T13177] usb 6-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 857.722735][T13177] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.722753][T13177] usb 6-1: Product: syz [ 857.722766][T13177] usb 6-1: Manufacturer: syz [ 857.722779][T13177] usb 6-1: SerialNumber: syz [ 858.031898][T13177] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 858.031967][T13177] usb 6-1: selecting invalid altsetting 0 [ 859.138277][T13177] snd-usb-audio 6-1:12.0: probe with driver snd-usb-audio failed with error -12 [ 859.154867][T13177] usb 6-1: USB disconnect, device number 2 [ 859.295698][T20845] udevd[20845]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:12.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 859.693441][T13177] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 859.834445][T20855] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5271'. [ 859.878742][T13177] usb 6-1: Using ep0 maxpacket: 32 [ 860.378467][T13177] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 64 [ 860.381782][T13177] usb 6-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 860.381812][T13177] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.381834][T13177] usb 6-1: Product: syz [ 860.381849][T13177] usb 6-1: Manufacturer: syz [ 860.381864][T13177] usb 6-1: SerialNumber: syz [ 860.463630][T20833] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 860.790841][T13177] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 860.790906][T13177] usb 6-1: MIDIStreaming interface descriptor not found [ 860.911818][T13177] usb 6-1: USB disconnect, device number 3 [ 862.062064][T20845] udevd[20845]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 867.208032][T19863] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 867.361336][T19863] usb 4-1: Using ep0 maxpacket: 32 [ 867.376612][T19863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 12592, setting to 1024 [ 867.376649][T19863] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 867.380671][T19863] usb 4-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 867.380703][T19863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.380724][T19863] usb 4-1: Product: syz [ 867.380739][T19863] usb 4-1: Manufacturer: syz [ 867.380753][T19863] usb 4-1: SerialNumber: syz [ 867.396473][T20900] Bluetooth: hci5: command 0x0406 tx timeout [ 867.424621][T19863] usb 4-1: config 0 descriptor?? [ 867.426999][T20915] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 867.548307][T19863] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 867.967711][T19863] usb 4-1: USB disconnect, device number 24 [ 868.145212][T20940] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5295'. [ 868.145240][T20940] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5295'. [ 868.145259][T20940] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5295'. [ 868.145506][T20940] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5295'. [ 868.330772][T20947] udevd[20947]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 870.369020][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.370463][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.574737][T20985] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5309'. [ 871.574784][T20985] netlink: 'syz.5.5309': attribute type 30 has an invalid length. [ 871.647788][T20985] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5309'. [ 871.671709][ T1128] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 871.672008][ T1128] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 871.672069][ T1128] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 871.672108][ T1128] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 871.712722][T20985] netlink: 'syz.5.5309': attribute type 30 has an invalid length. [ 872.829766][T19863] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 872.835193][T20998] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5313'. [ 872.996581][T19863] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 872.996722][T19863] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 872.996754][T19863] usb 4-1: too many endpoints for config 1 interface 1 altsetting 1: 66, using maximum allowed: 30 [ 872.996919][T19863] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 66 [ 873.075922][T19863] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 873.075965][T19863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.075986][T19863] usb 4-1: Product: syz [ 873.076108][T19863] usb 4-1: Manufacturer: syz [ 873.076178][T19863] usb 4-1: SerialNumber: syz [ 873.761966][T21006] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5316'. [ 873.903090][T20992] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5311'. [ 873.903120][T20992] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5311'. [ 873.903139][T20992] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5311'. [ 873.904125][T20992] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5311'. [ 874.172679][T19863] cdc_ncm 4-1:1.0: bind() failure [ 874.197380][T19863] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 874.197438][T19863] cdc_ncm 4-1:1.1: bind() failure [ 874.248909][T19863] usb 4-1: USB disconnect, device number 25 [ 876.654671][T21039] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5326'. [ 876.690009][ T5797] Bluetooth: hci0: link tx timeout [ 876.690265][ T5797] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 876.696641][ T5797] Bluetooth: hci0: link tx timeout [ 876.696662][ T5797] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 876.898781][ T5982] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 877.038325][T21044] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5329'. [ 877.038356][T21044] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5329'. [ 877.038374][T21044] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5329'. [ 877.038633][T21044] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5329'. [ 877.052956][ T5982] usb 6-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 877.052986][ T5982] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 877.053004][ T5982] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 223 [ 877.053051][ T5982] usb 6-1: config 0 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 877.053075][ T5982] usb 6-1: config 0 interface 0 has no altsetting 0 [ 877.057630][ T5982] usb 6-1: New USB device found, idVendor=03f0, idProduct=0404, bcdDevice= 0.00 [ 877.057658][ T5982] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.057678][ T5982] usb 6-1: Product: syz [ 877.057691][ T5982] usb 6-1: Manufacturer: syz [ 877.057704][ T5982] usb 6-1: SerialNumber: syz [ 877.077340][ T5982] usb 6-1: config 0 descriptor?? [ 878.096485][T21053] syzkaller0: entered promiscuous mode [ 878.096514][T21053] syzkaller0: entered allmulticast mode [ 878.288398][ T5982] usb 6-1: USB disconnect, device number 4 [ 878.560634][T20900] Bluetooth: hci0: link tx timeout [ 878.560658][T20900] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 878.560676][T20900] Bluetooth: hci0: link tx timeout [ 878.560687][T20900] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 878.980227][T20900] Bluetooth: hci0: command 0x0406 tx timeout [ 881.311485][T20900] Bluetooth: hci0: command 0x0406 tx timeout [ 882.255705][T21094] __nla_validate_parse: 1 callbacks suppressed [ 882.255730][T21094] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5349'. [ 882.255750][T21094] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5349'. [ 882.255768][T21094] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5349'. [ 882.256018][T21094] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5349'. [ 882.921814][T21114] netlink: 260 bytes leftover after parsing attributes in process `syz.4.5354'. [ 883.032512][T21116] fuse: Bad value for 'fd' [ 883.525508][T21127] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5356'. [ 887.598420][T21156] netlink: 260 bytes leftover after parsing attributes in process `syz.5.5366'. [ 888.118210][T21140] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5365'. [ 888.118239][T21140] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5365'. [ 888.118256][T21140] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5365'. [ 888.118504][T21140] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5365'. [ 888.463434][T19863] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 888.879193][T19863] usb 6-1: unable to get BOS descriptor or descriptor too short [ 888.879960][T19863] usb 6-1: not running at top speed; connect to a high speed hub [ 888.882246][T19863] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 39, changing to 4 [ 888.885363][T19863] usb 6-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 888.885393][T19863] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.885415][T19863] usb 6-1: Product: syz [ 888.885429][T19863] usb 6-1: Manufacturer: syz [ 888.885444][T19863] usb 6-1: SerialNumber: syz [ 889.921661][T21185] netlink: 'syz.1.5377': attribute type 13 has an invalid length. [ 890.307112][T19863] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 890.390001][T21196] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5375'. [ 891.273117][T19863] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 891.983041][T19863] usb 6-1: USB disconnect, device number 5 [ 892.105314][T21145] udevd[21145]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 894.184155][T21220] fuse: Bad value for 'fd' [ 894.929460][T21229] netlink: 'syz.5.5389': attribute type 13 has an invalid length. [ 897.488598][T21247] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5392'. [ 897.780551][T21249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5394'. [ 900.258234][T21222] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5386'. [ 900.258269][T21222] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5386'. [ 900.258288][T21222] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5386'. [ 900.258549][T21222] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5386'. [ 900.980222][T21276] netlink: 'syz.5.5402': attribute type 25 has an invalid length. [ 900.980240][T21276] netlink: 'syz.5.5402': attribute type 28 has an invalid length. [ 901.100496][T21280] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5404'. [ 901.331496][T21282] netlink: 108 bytes leftover after parsing attributes in process `syz.3.5404'. [ 901.487981][T21286] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5405'. [ 901.640849][T21280] bond11: entered promiscuous mode [ 901.641156][T21280] 8021q: adding VLAN 0 to HW filter on device bond11 [ 901.824253][T21285] 8021q: adding VLAN 0 to HW filter on device bond11 [ 901.824756][T21285] bond11: (slave gre2): The slave device specified does not support setting the MAC address [ 901.826033][T21285] bond11: (slave gre2): Error -95 calling set_mac_address [ 905.266788][T21299] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5409'. [ 905.266809][T21299] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5409'. [ 905.266820][T21299] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5409'. [ 905.266960][T21299] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5409'. [ 905.558438][T21307] netlink: 'syz.6.5411': attribute type 1 has an invalid length. [ 905.594782][T21309] netlink: 'syz.1.5412': attribute type 13 has an invalid length. [ 909.588094][T21360] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5424'. [ 909.598851][T21360] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5424'. [ 909.598878][T21360] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5424'. [ 909.599113][T21360] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5424'. [ 909.781916][T21323] syz.3.5415 (21323): drop_caches: 2 [ 910.088696][T13153] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 910.248368][T13153] usb 7-1: Using ep0 maxpacket: 32 [ 910.257069][T13153] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 910.257100][T13153] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 910.257122][T13153] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 910.257156][T13153] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 910.257169][T13153] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 910.257183][T13153] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 910.257209][T13153] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 910.257223][T13153] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.270543][T13153] usb 7-1: config 0 descriptor?? [ 910.708606][T13153] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 910.782963][T13153] usb 7-1: USB disconnect, device number 2 [ 910.824891][T13153] usblp0: removed [ 912.395599][T13153] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 913.477872][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 913.646102][T13153] usb 7-1: Using ep0 maxpacket: 32 [ 913.807739][T13153] usb 7-1: device descriptor read/all, error -71 [ 915.268481][T21418] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5434'. [ 915.898756][T21433] lo: Caught tx_queue_len zero misconfig [ 931.718315][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.718409][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1021.187854][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1021.187874][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P21404/1:b..l P42/2:b..l [ 1021.187964][ C1] rcu: (detected by 1, t=10502 jiffies, g=101569, q=1175 ncpus=2) [ 1021.187983][ C1] task:kworker/u8:2 state:R running task stack:21432 pid:42 tgid:42 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1021.188044][ C1] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 1021.188082][ C1] Call Trace: [ 1021.188089][ C1] [ 1021.188103][ C1] __schedule+0x1553/0x5240 [ 1021.188171][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1021.188196][ C1] ? unwind_next_frame+0x1aaf/0x23c0 [ 1021.188287][ C1] ? __pfx___schedule+0x10/0x10 [ 1021.188314][ C1] ? irqentry_exit+0x59e/0x620 [ 1021.188326][ C1] ? rcu_is_watching+0x15/0xb0 [ 1021.188346][ C1] preempt_schedule_notrace+0x57/0x90 [ 1021.188359][ C1] preempt_schedule_notrace_thunk+0x16/0x30 [ 1021.188373][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1021.188390][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 1021.188417][ C1] stack_depot_save_flags+0x2ff/0x810 [ 1021.188438][ C1] kasan_save_track+0x4f/0x80 [ 1021.188454][ C1] ? kasan_save_track+0x3e/0x80 [ 1021.188468][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 1021.188484][ C1] ? __kmalloc_noprof+0x3e7/0x7b0 [ 1021.188493][ C1] ? batadv_tvlv_container_ogm_append+0x16c/0x520 [ 1021.188511][ C1] ? batadv_iv_ogm_schedule+0x2b2/0xf60 [ 1021.188527][ C1] ? batadv_iv_send_outstanding_bat_ogm_packet+0x6c8/0x7e0 [ 1021.188544][ C1] ? process_scheduled_works+0xb6e/0x18c0 [ 1021.188559][ C1] ? worker_thread+0xa53/0xfc0 [ 1021.188574][ C1] ? kthread+0x388/0x470 [ 1021.188584][ C1] ? ret_from_fork+0x51e/0xb90 [ 1021.188599][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 1021.188640][ C1] __kasan_kmalloc+0x93/0xb0 [ 1021.188658][ C1] __kmalloc_noprof+0x3e7/0x7b0 [ 1021.188669][ C1] ? batadv_tvlv_container_ogm_append+0x16c/0x520 [ 1021.188689][ C1] batadv_tvlv_container_ogm_append+0x16c/0x520 [ 1021.188707][ C1] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 1021.188724][ C1] ? batadv_tvlv_container_ogm_append+0x3f/0x520 [ 1021.188743][ C1] batadv_iv_ogm_schedule+0x2b2/0xf60 [ 1021.188768][ C1] ? __pfx_batadv_iv_ogm_schedule+0x10/0x10 [ 1021.188787][ C1] ? batadv_send_skb_packet+0x426/0x690 [ 1021.188804][ C1] batadv_iv_send_outstanding_bat_ogm_packet+0x6c8/0x7e0 [ 1021.188827][ C1] ? process_scheduled_works+0xa8d/0x18c0 [ 1021.188843][ C1] process_scheduled_works+0xb6e/0x18c0 [ 1021.188916][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1021.188937][ C1] ? assign_work+0x3d5/0x5e0 [ 1021.188955][ C1] worker_thread+0xa53/0xfc0 [ 1021.188984][ C1] kthread+0x388/0x470 [ 1021.188996][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1021.189011][ C1] ? __pfx_kthread+0x10/0x10 [ 1021.189024][ C1] ret_from_fork+0x51e/0xb90 [ 1021.189041][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1021.189055][ C1] ? __switch_to+0xc7d/0x1450 [ 1021.189072][ C1] ? __pfx_kthread+0x10/0x10 [ 1021.189085][ C1] ret_from_fork_asm+0x1a/0x30 [ 1021.189105][ C1] [ 1021.189110][ C1] task:syz.5.5434 state:R running task stack:25896 pid:21404 tgid:21395 ppid:19372 task_flags:0x400040 flags:0x00080002 [ 1021.189151][ C1] Call Trace: [ 1021.189155][ C1] [ 1021.189162][ C1] __schedule+0x1553/0x5240 [ 1021.189192][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1021.189205][ C1] ? __pfx___schedule+0x10/0x10 [ 1021.189224][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1021.189241][ C1] preempt_schedule_irq+0x4d/0xa0 [ 1021.189252][ C1] irqentry_exit+0x599/0x620 [ 1021.189264][ C1] ? trace_irq_disable+0x3b/0x150 [ 1021.189282][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1021.189295][ C1] RIP: 0010:lock_release+0x2d7/0x3d0 [ 1021.189307][ C1] Code: 7c ae 10 00 00 00 00 eb b5 e8 55 48 83 09 f7 c3 00 02 00 00 74 b9 65 48 8b 05 c5 35 ae 10 48 3b 44 24 28 75 44 fb 48 83 c4 30 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 22 24 cd [ 1021.189317][ C1] RSP: 0018:ffffc90004107640 EFLAGS: 00000282 [ 1021.189327][ C1] RAX: 67ecd9f83214d400 RBX: 0000000000000202 RCX: 0000000000000046 [ 1021.189335][ C1] RDX: 00000000cbb457a5 RSI: ffffffff8d7c0cea RDI: ffffffff8ba67580 [ 1021.189344][ C1] RBP: ffff88802f3dc8e0 R08: ffffffff8b2601d0 R09: ffffffff8ddcb9c0 [ 1021.189351][ C1] R10: 0000000000000000 R11: ffffed100bd6e3d5 R12: 0000000000000002 [ 1021.189359][ C1] R13: 0000000000000002 R14: ffff88803fcc2298 R15: ffff88802f3dbd00 [ 1021.189370][ C1] ? rt_spin_lock+0x1e0/0x400 [ 1021.189393][ C1] rt_spin_unlock+0x29/0x200 [ 1021.189410][ C1] __skb_try_recv_datagram+0xa9/0x1b0 [ 1021.189427][ C1] __unix_dgram_recvmsg+0x2e3/0xd60 [ 1021.189448][ C1] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 1021.189464][ C1] ? irqentry_exit+0x59e/0x620 [ 1021.189476][ C1] ? trace_irq_disable+0x3b/0x150 [ 1021.189496][ C1] ? unix_dgram_recvmsg+0xb1/0xd0 [ 1021.189507][ C1] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 1021.189519][ C1] sock_recvmsg_nosec+0x10c/0x140 [ 1021.189537][ C1] ____sys_recvmsg+0x3ef/0x4b0 [ 1021.189555][ C1] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1021.189577][ C1] ? import_iovec+0x73/0xa0 [ 1021.189597][ C1] ___sys_recvmsg+0x215/0x590 [ 1021.189609][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1021.189623][ C1] ? __pfx____sys_recvmsg+0x10/0x10 [ 1021.189635][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 1021.189665][ C1] do_recvmmsg+0x33a/0x800 [ 1021.189681][ C1] ? file_init_path+0x3b/0x5b0 [ 1021.189695][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 1021.189708][ C1] ? __asan_memcpy+0x40/0x70 [ 1021.189728][ C1] ? __pfx_do_futex+0x10/0x10 [ 1021.189748][ C1] __x64_sys_recvmmsg+0x198/0x250 [ 1021.189763][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1021.189782][ C1] do_syscall_64+0x14d/0xf80 [ 1021.189795][ C1] ? trace_irq_disable+0x3b/0x150 [ 1021.189808][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1021.189820][ C1] ? clear_bhb_loop+0x40/0x90 [ 1021.189834][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1021.189845][ C1] RIP: 0033:0x7f3d6edbc799 [ 1021.189856][ C1] RSP: 002b:00007f3d6cff5028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1021.189867][ C1] RAX: ffffffffffffffda RBX: 00007f3d6f036090 RCX: 00007f3d6edbc799 [ 1021.189882][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1021.189890][ C1] RBP: 00007f3d6ee52c99 R08: 0000000000000000 R09: 0000000000000000 [ 1021.189897][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1021.189904][ C1] R13: 00007f3d6f036128 R14: 00007f3d6f036090 R15: 00007ffdc6fc22f8 [ 1021.189921][ C1] [ 1021.189926][ C1] rcu: rcu_preempt kthread starved for 8854 jiffies! g101569 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1021.189939][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1021.189945][ C1] rcu: RCU grace-period kthread stack dump: [ 1021.189949][ C1] task:rcu_preempt state:R running task stack:27680 pid:18 tgid:18 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1021.189981][ C1] Call Trace: [ 1021.189985][ C1] [ 1021.189991][ C1] __schedule+0x1553/0x5240 [ 1021.190022][ C1] ? __pfx___schedule+0x10/0x10 [ 1021.190044][ C1] ? schedule+0x90/0x360 [ 1021.190056][ C1] schedule+0x164/0x360 [ 1021.190068][ C1] schedule_timeout+0x158/0x2c0 [ 1021.190087][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1021.190105][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1021.190121][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1021.190139][ C1] ? prepare_to_swait_event+0x340/0x370 [ 1021.190161][ C1] rcu_gp_fqs_loop+0x312/0x11d0 [ 1021.190178][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1021.190190][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1021.190200][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1021.190215][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1021.190229][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 1021.190242][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1021.190252][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1021.190265][ C1] ? __kthread_parkme+0x7a/0x1f0 [ 1021.190281][ C1] ? __kthread_parkme+0x19c/0x1f0 [ 1021.190300][ C1] kthread+0x388/0x470 [ 1021.190312][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1021.190322][ C1] ? __pfx_kthread+0x10/0x10 [ 1021.190335][ C1] ret_from_fork+0x51e/0xb90 [ 1021.190352][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1021.190367][ C1] ? __switch_to+0xc7d/0x1450 [ 1021.190383][ C1] ? __pfx_kthread+0x10/0x10 [ 1021.190395][ C1] ret_from_fork_asm+0x1a/0x30 [ 1021.190414][ C1] [ 1021.190418][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1021.190423][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1021.190482][ C0] NMI backtrace for cpu 0 [ 1021.190500][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1021.190522][ C0] Tainted: [L]=SOFTLOCKUP [ 1021.190527][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1021.190537][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1021.190556][ C0] Code: be 5c 02 e9 13 c4 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 bc 25 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1021.190570][ C0] RSP: 0018:ffffffff8da07dc0 EFLAGS: 00000246 [ 1021.190585][ C0] RAX: 0000000000641b1d RBX: ffffffff8199709a RCX: 0000000080000001 [ 1021.190598][ C0] RDX: 0000000000000001 RSI: ffffffff8d564872 RDI: ffffffff8ba67580 [ 1021.190610][ C0] RBP: ffffffff8da07eb0 R08: ffff8880b8833e1b R09: 1ffff110171067c3 [ 1021.190622][ C0] R10: dffffc0000000000 R11: ffffed10171067c4 R12: 0000000000000000 [ 1021.190633][ C0] R13: 1ffffffff1b605d8 R14: 0000000000000000 R15: 1ffffffff1b605d8 [ 1021.190645][ C0] FS: 0000000000000000(0000) GS:ffff888126336000(0000) knlGS:0000000000000000 [ 1021.190660][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1021.190671][ C0] CR2: 0000200000170030 CR3: 00000000668f4000 CR4: 00000000003526f0 [ 1021.190689][ C0] Call Trace: [ 1021.190696][ C0] [ 1021.190701][ C0] default_idle+0x9/0x20 [ 1021.190720][ C0] default_idle_call+0x72/0xb0 [ 1021.190740][ C0] do_idle+0x36a/0x5f0 [ 1021.190763][ C0] ? __pfx_do_idle+0x10/0x10 [ 1021.190786][ C0] cpu_startup_entry+0x43/0x60 [ 1021.190806][ C0] rest_init+0x2de/0x300 [ 1021.190828][ C0] start_kernel+0x385/0x3d0 [ 1021.190977][ C0] x86_64_start_reservations+0x24/0x30 [ 1021.190999][ C0] x86_64_start_kernel+0x143/0x1c0 [ 1021.191018][ C0] common_startup_64+0x13e/0x147 [ 1021.191043][ C0]