last executing test programs: 39.905892963s ago: executing program 1 (id=98): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x2a, 0x1, 0x0, 0x1, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r3, &(0x7f00000002c0)={'#! ', './file0', [], 0xa, "1f410e2852ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bd030000005a3c7c04055f1f70e4064d46b2bb9e5100d446bb6afb2c0fc07b58f4a9c1"}, 0x4e) r4 = fsopen(&(0x7f0000000040)='fuse\x00', 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r5 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r5, 0x110, 0x1, &(0x7f0000000040)='\x04]{!\x00', 0x5) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000c00)={0x0, 0x84, 0x6, 0x1, 0x7, 0x4, 0x1000, 0x0, {0x0, @in={{0x2, 0x4e21, @local}}, 0x7, 0x1800000, 0xc, 0x8001, 0x4}}, &(0x7f0000000cc0)=0xb0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000080)='user_id', 0x0, 0xffffffffffffff9c) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)=ANY=[@ANYBLOB="600100001000130726bd700000000000fe800000000000000000000000000033ac1414110000000000000000000000004e2a00004e230003020000003a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="e4ffffff91e731ce59e48f92702b0530ac443100924efe358ea25e99fac0c0e973507acc6c5f67adcc0826e869b5217179d0d6028baef15dfe12f1ded1fde2a57b7087860293a9746b9611570567d68f898237e2bc86095ea05b5a977a65bac0"], 0x160}, 0x1, 0x0, 0x0, 0xc0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x24}, 0x94) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) 38.96829093s ago: executing program 3 (id=101): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x2a, 0x1, 0x0, 0x1, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r3, &(0x7f00000002c0)={'#! ', './file0', [], 0xa, "1f410e2852ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bd030000005a3c7c04055f1f70e4064d46b2bb9e5100d446bb6afb2c0fc07b58f4a9c1"}, 0x4e) r4 = fsopen(&(0x7f0000000040)='fuse\x00', 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r5 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r5, 0x110, 0x1, &(0x7f0000000040)='\x04]{!\x00', 0x5) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000c00)={0x0, 0x84, 0x6, 0x1, 0x7, 0x4, 0x1000, 0x0, {0x0, @in={{0x2, 0x4e21, @local}}, 0x7, 0x1800000, 0xc, 0x8001, 0x4}}, &(0x7f0000000cc0)=0xb0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000080)='user_id', 0x0, 0xffffffffffffff9c) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)=ANY=[@ANYBLOB="600100001000130726bd700000000000fe800000000000000000000000000033ac1414110000000000000000000000004e2a00004e230003020000003a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="e4ffffff91e731ce59e48f92702b0530ac443100924efe358ea25e99fac0c0e973507acc6c5f67adcc0826e869b5217179d0d6028baef15dfe12f1ded1fde2a57b7087860293a9746b9611570567d68f898237e2bc86095ea05b5a977a65bac0"], 0x160}, 0x1, 0x0, 0x0, 0xc0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x24}, 0x94) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) 37.276750797s ago: executing program 4 (id=105): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x2a, 0x1, 0x0, 0x1, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r3, &(0x7f00000002c0)={'#! ', './file0', [], 0xa, "1f410e2852ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bd030000005a3c7c04055f1f70e4064d46b2bb9e5100d446bb6afb2c0fc07b58f4a9c1"}, 0x4e) r4 = fsopen(&(0x7f0000000040)='fuse\x00', 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r5 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r5, 0x110, 0x1, &(0x7f0000000040)='\x04]{!\x00', 0x5) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000c00)={0x0, 0x84, 0x6, 0x1, 0x7, 0x4, 0x1000, 0x0, {0x0, @in={{0x2, 0x4e21, @local}}, 0x7, 0x1800000, 0xc, 0x8001, 0x4}}, &(0x7f0000000cc0)=0xb0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000080)='user_id', 0x0, 0xffffffffffffff9c) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)=ANY=[@ANYBLOB="600100001000130726bd700000000000fe800000000000000000000000000033ac1414110000000000000000000000004e2a00004e230003020000003a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000fe8000000000000000000000000000aa0000000000000000000000000000000005000000000000000a000000000000000600000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000200000000000000f8ffffffffffffff0c000000000000000200000029bd7000000000000a0001002800000068001200726663343534332867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e000000080000000316f74eeac053deb73fc018493cc121927a9bca207141b9a451c00aa0c001c00", @ANYRES32=0x0, @ANYBLOB="e4ffffff91e731ce59e48f92702b0530ac443100924efe358ea25e99fac0c0e973507acc6c5f67adcc0826e869b5217179d0d6028baef15dfe12f1ded1fde2a57b7087860293a9746b9611570567d68f898237e2bc86095ea05b5a977a65bac0"], 0x160}, 0x1, 0x0, 0x0, 0xc0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x24}, 0x94) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) 36.635804137s ago: executing program 1 (id=107): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) io_setup(0x3, &(0x7f0000000140)=0x0) io_submit(r2, 0x1, &(0x7f0000000a40)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r3 = getpid() r4 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r4, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYRESHEX=r2], 0x1e) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r6, 0x1, 0x29, &(0x7f0000000100)=0x1003ff, 0x4) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000000)=0x4949, 0x4) sendmmsg$inet6(r6, &(0x7f00000000c0)=[{{&(0x7f0000000080)={0xa, 0x0, 0x2, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r6, &(0x7f0000005cc0), 0x1, 0x40012000, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1ac}}, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_CONTEXT(r7, 0x84, 0x83, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)={0x40, 0x8, 0x8, "fde61e0ee4a63b9e"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)={0x20, 0x14, 0x4, "348b35e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r8, &(0x7f0000000540)=""/99, 0x63) landlock_restrict_self(0xffffffffffffffff, 0xc) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) prctl$PR_SCHED_CORE(0x4d, 0x4, r3, 0x0, 0x0) setsockopt(r0, 0xff, 0x24, &(0x7f0000002d80)="f0c4", 0x2) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) 35.441217982s ago: executing program 3 (id=109): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000407f04ffff00000000000109022d00010000000009040000020300000009210000000122180009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000521150025ff0904a1010901a1007508950109309102c0c0"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000400)={0x5, 0x100, 0xcf}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = fsopen(&(0x7f0000000200)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000040)='source', &(0x7f0000001bc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b0x0) socket$inet6(0xa, 0x80001, 0x0) timer_settime(r1, 0x1, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) 33.7602166s ago: executing program 2 (id=111): socketpair$unix(0x1, 0x1881a178339365d7, 0x0, 0x0) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) socket$inet6(0xa, 0x80001, 0x0) timer_settime(r1, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) 33.056620637s ago: executing program 1 (id=112): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x474c, 0x4) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000000)=0x5d81, 0xf) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e37, @local}, 0x10) open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x38, 0x18, 0x400, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9, 0x1500}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x9, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0x0, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x0, 0x1, 0x4}}}}]}, 0x38}}, 0x80) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x16) ioctl$KVM_CAP_HYPERV_SEND_IPI(r3, 0x4068aea3, &(0x7f0000000300)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0xffffffffffffff64, 0x10, 0x1, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2b28d, 0x5b21}}, 0x50}, 0x1, 0x0, 0x0, 0xc1}, 0x10) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}]}]}, 0x5c}}, 0x0) socket$rds(0x15, 0x5, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 32.761215039s ago: executing program 1 (id=113): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fcdbdf2517000000440006803d00040063636d2861657329"], 0x58}, 0x1, 0x0, 0x0, 0x806}, 0x0) 32.625122976s ago: executing program 1 (id=114): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000001c0), 0x0, 0x800}) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r3 = socket$kcm(0x1e, 0x5, 0x0) recvmsg$kcm(r3, &(0x7f0000001740)={0x0, 0x0, &(0x7f00000016c0)}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/1/root/var\x00', 0x1ff) listen(0xffffffffffffffff, 0x5) write(0xffffffffffffffff, &(0x7f0000000280)='1', 0x1) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 32.432652382s ago: executing program 4 (id=115): syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x40004) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x3e}, 0x1c) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f00000001c0)=@add_del={0x2, &(0x7f0000000080)='xfrm0\x00'}) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x22020600) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6293a, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, 0x0, 0x0) sendmsg$nl_xfrm(r1, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000180)}}], 0x1, 0x4000801) 32.10603026s ago: executing program 3 (id=117): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x44, 0x2c, 0xd3f, 0x4070bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x5, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0xffffffff}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014) 31.823799525s ago: executing program 0 (id=119): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}, 0x6}, 0x7f) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)="3a94", 0x2}], 0x1}, 0x40095) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='veth0_macvtap\x00', 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4040011) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x8080) 31.386095855s ago: executing program 2 (id=120): syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000"/51], 0x0) syz_emit_ethernet(0x56, &(0x7f0000000140)={@local, @local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x1c, 0x2c, 0xff, @remote, @local, {[@routing={0x0, 0x0, 0x0, 0xe}], {{0x8000, 0x4e1f, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0xfffe}}}}}}}, 0x0) 31.300332556s ago: executing program 2 (id=121): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x88440, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000140)={0x7fff, 0x70000, 0x8, r3, 0x19}) close_range(r0, 0xffffffffffffffff, 0x0) 31.019600986s ago: executing program 2 (id=122): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000940)="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", 0x54f, r0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000080)={r1}, &(0x7f0000000280)={'enc=', 'pkcs1', ' hash=', {'sha224\x00'}}, 0x0, 0x0) 30.852675368s ago: executing program 2 (id=123): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x88440, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) landlock_create_ruleset(&(0x7f0000000080)={0x0, 0x8, 0x1, 0x10040, 0x3, 0x3}, 0x30, 0x3) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x39000, 0x0) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x408cd, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfffffe3e) close(0x3) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000140)={0x7fff, 0x70000, 0x8, r3, 0x19}) close_range(r0, 0xffffffffffffffff, 0x0) 30.696731939s ago: executing program 0 (id=124): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000100)=0x9, 0x4) mmap(&(0x7f0000001000/0xb000)=nil, 0xb000, 0x2, 0x12, r0, 0x852ac000) syz_emit_ethernet(0x56, &(0x7f0000000140)={@local, @local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x1c, 0x2c, 0xff, @remote, @local, {[@routing={0x0, 0x0, 0x0, 0xe}], {{0x8000, 0x4e1f, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0xfffe}}}}}}}, 0x0) 30.634094022s ago: executing program 4 (id=125): syz_emit_ethernet(0x56, &(0x7f0000000140)={@local, @local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x1c, 0x2c, 0xff, @remote, @local, {[@routing={0x0, 0x0, 0x0, 0xe}], {{0x8000, 0x4e1f, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0xfffe}}}}}}}, 0x0) 30.611912125s ago: executing program 0 (id=126): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000100)=0x9, 0x4) mmap(&(0x7f0000001000/0xb000)=nil, 0xb000, 0x2, 0x12, r0, 0x852ac000) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x86, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e1f, 0xffffffff, @loopback, 0xbf}, 0x1c) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f00000001c0)=0xffff, 0x4) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000280)=0x6c, 0x4) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/4110, 0x100e}, 0x7ffffffe}], 0x1, 0x40002000, 0x0) 30.529701831s ago: executing program 2 (id=127): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}, 0x6}, 0x7f) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)="3a94", 0x2}], 0x1}, 0x40095) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4040011) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x8080) 30.514874492s ago: executing program 3 (id=128): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write(r1, &(0x7f0000000240)="94", 0x1) vmsplice(r4, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c", 0x93}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) tee(r0, r4, 0x8f5, 0x0) write$cgroup_devices(r4, 0x0, 0x8) write(r2, 0x0, 0x0) 30.375638584s ago: executing program 0 (id=129): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write(r1, &(0x7f0000000240)="94", 0x1) vmsplice(r4, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c", 0x93}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) tee(r0, r4, 0x8f5, 0x0) write$cgroup_devices(r4, 0x0, 0x8) write(r2, 0x0, 0x0) 30.321459268s ago: executing program 4 (id=130): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write(r1, &(0x7f0000000240)="94", 0x1) vmsplice(r4, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb0", 0x62}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) tee(r0, r4, 0x8f5, 0x0) write$cgroup_devices(r4, 0x0, 0x8) write(r2, 0x0, 0x0) 30.137906412s ago: executing program 3 (id=131): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write(r1, &(0x7f0000000240)="94", 0x1) vmsplice(r4, &(0x7f0000000380)=[{0x0}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) tee(r0, r4, 0x8f5, 0x0) write$cgroup_devices(r4, 0x0, 0x8) write(r2, 0x0, 0x0) 29.800033908s ago: executing program 0 (id=132): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x8, 0x40, 0x7fff0000}]}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0xaf316000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd2(0x0, 0x0) io_setup(0x4, 0x0) io_pgetevents(0x0, 0x2, 0x2, &(0x7f0000000100)=[{}, {}], 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffe, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r1}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) shutdown(r0, 0x0) 29.521801279s ago: executing program 4 (id=133): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}, 0x6}, 0x7f) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x40095) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='veth0_macvtap\x00', 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4040011) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x8080) 29.479778405s ago: executing program 3 (id=134): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}, 0x6}, 0x7f) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x40095) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='veth0_macvtap\x00', 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4040011) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x8080) 29.309223269s ago: executing program 0 (id=135): r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x42, 0x4b) ftruncate(r0, 0x1ffffe) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0xaf316000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = eventfd2(0x0, 0x0) io_setup(0x4, &(0x7f0000000080)=0x0) io_pgetevents(r3, 0x2, 0x2, &(0x7f0000000100)=[{}, {}], 0x0, 0x0) io_submit(r3, 0x2, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffe, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) shutdown(r1, 0x0) 29.284038978s ago: executing program 1 (id=136): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000940)="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", 0x559, r0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000080)={r1}, &(0x7f0000000280)={'enc=', 'pkcs1', ' hash=', {'sha224\x00'}}, 0x0, 0x0) 0s ago: executing program 32 (id=127): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}, 0x6}, 0x7f) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)="3a94", 0x2}], 0x1}, 0x40095) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4040011) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x8080) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.154' (ED25519) to the list of known hosts. [ 75.991661][ T5603] cgroup: Unknown subsys name 'net' [ 76.093328][ T5603] cgroup: Unknown subsys name 'cpuset' [ 76.096342][ T5603] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.708014][ T5603] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.970691][ T5619] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.976820][ T5621] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.980762][ T5621] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.988600][ T5627] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.989490][ T5627] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.990299][ T5627] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.990644][ T5626] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.991939][ T5627] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.999678][ T5627] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.000269][ T5627] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.003050][ T5626] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.003430][ T5626] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.003894][ T5626] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.005151][ T5626] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.008210][ T5626] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.010461][ T5626] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.011978][ T5626] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.013457][ T5614] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.014612][ T5614] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.015281][ T5614] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.015954][ T5614] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.024835][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.026165][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 80.046468][ T5626] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.060167][ T5626] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.130027][ T5632] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.130144][ T5632] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.130315][ T5632] bridge_slave_0: entered allmulticast mode [ 81.132234][ T5632] bridge_slave_0: entered promiscuous mode [ 81.179394][ T5632] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.179514][ T5632] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.179649][ T5632] bridge_slave_1: entered allmulticast mode [ 81.193282][ T5632] bridge_slave_1: entered promiscuous mode [ 81.289051][ T5632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.324460][ T5630] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.324559][ T5630] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.324675][ T5630] bridge_slave_0: entered allmulticast mode [ 81.326282][ T5630] bridge_slave_0: entered promiscuous mode [ 81.331416][ T5632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.384642][ T5630] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.384798][ T5630] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.385041][ T5630] bridge_slave_1: entered allmulticast mode [ 81.386175][ T5630] bridge_slave_1: entered promiscuous mode [ 81.423507][ T5634] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.423630][ T5634] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.423776][ T5634] bridge_slave_0: entered allmulticast mode [ 81.425907][ T5634] bridge_slave_0: entered promiscuous mode [ 81.436320][ T5634] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.436423][ T5634] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.436856][ T5634] bridge_slave_1: entered allmulticast mode [ 81.438651][ T5634] bridge_slave_1: entered promiscuous mode [ 81.440424][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.440524][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.441195][ T5633] bridge_slave_0: entered allmulticast mode [ 81.443286][ T5633] bridge_slave_0: entered promiscuous mode [ 81.479698][ T5630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.482884][ T5632] team0: Port device team_slave_0 added [ 81.486598][ T5630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.501942][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.502114][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.502818][ T5633] bridge_slave_1: entered allmulticast mode [ 81.504824][ T5633] bridge_slave_1: entered promiscuous mode [ 81.517427][ T5632] team0: Port device team_slave_1 added [ 81.599582][ T5634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.635257][ T5630] team0: Port device team_slave_0 added [ 81.637816][ T5634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.641512][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.644757][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.662858][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.662873][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.662896][ T5632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.674113][ T5630] team0: Port device team_slave_1 added [ 81.736071][ T5635] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.736181][ T5635] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.736271][ T5635] bridge_slave_0: entered allmulticast mode [ 81.737346][ T5635] bridge_slave_0: entered promiscuous mode [ 81.740662][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.740675][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.740697][ T5632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.787877][ T5635] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.788023][ T5635] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.788498][ T5635] bridge_slave_1: entered allmulticast mode [ 81.791167][ T5635] bridge_slave_1: entered promiscuous mode [ 81.806619][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.806634][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.806655][ T5630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.812614][ T5634] team0: Port device team_slave_0 added [ 81.817368][ T5633] team0: Port device team_slave_0 added [ 81.855018][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.855034][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.855057][ T5630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.860208][ T5634] team0: Port device team_slave_1 added [ 81.863010][ T5633] team0: Port device team_slave_1 added [ 81.898614][ T5635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.963812][ T5632] hsr_slave_0: entered promiscuous mode [ 81.965201][ T5632] hsr_slave_1: entered promiscuous mode [ 81.971031][ T5635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.028787][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.028805][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.028855][ T5634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.032993][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.033020][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.033042][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.063363][ T5619] Bluetooth: hci1: command tx timeout [ 82.063369][ T4931] Bluetooth: hci3: command tx timeout [ 82.063596][ T5626] Bluetooth: hci2: command tx timeout [ 82.087845][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.087860][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.087882][ T5634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.092302][ T5635] team0: Port device team_slave_0 added [ 82.094016][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.094027][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.094049][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.130408][ T5626] Bluetooth: hci4: command tx timeout [ 82.131682][ T5626] Bluetooth: hci0: command tx timeout [ 82.143618][ T5635] team0: Port device team_slave_1 added [ 82.166492][ T5630] hsr_slave_0: entered promiscuous mode [ 82.167856][ T5630] hsr_slave_1: entered promiscuous mode [ 82.168626][ T5630] debugfs: 'hsr0' already exists in 'hsr' [ 82.168720][ T5630] Cannot create hsr debugfs directory [ 82.279065][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.279083][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.279109][ T5635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.341405][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.341424][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.341451][ T5635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.421774][ T5634] hsr_slave_0: entered promiscuous mode [ 82.423129][ T5634] hsr_slave_1: entered promiscuous mode [ 82.423973][ T5634] debugfs: 'hsr0' already exists in 'hsr' [ 82.423993][ T5634] Cannot create hsr debugfs directory [ 82.444131][ T5633] hsr_slave_0: entered promiscuous mode [ 82.445233][ T5633] hsr_slave_1: entered promiscuous mode [ 82.445987][ T5633] debugfs: 'hsr0' already exists in 'hsr' [ 82.446004][ T5633] Cannot create hsr debugfs directory [ 82.687482][ T5635] hsr_slave_0: entered promiscuous mode [ 82.688746][ T5635] hsr_slave_1: entered promiscuous mode [ 82.689670][ T5635] debugfs: 'hsr0' already exists in 'hsr' [ 82.689690][ T5635] Cannot create hsr debugfs directory [ 83.060003][ T5632] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 83.066222][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.091121][ T5632] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 83.095506][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.115852][ T5632] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 83.119677][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.131828][ T5632] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.139263][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.205582][ T5630] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.212227][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.213311][ T5630] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.221813][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.233409][ T5630] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.244329][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.253001][ T5630] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.257024][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.350335][ T5633] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.355092][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.381949][ T5633] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.385001][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.385812][ T5633] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.388577][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.389409][ T5633] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.407380][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.463834][ T5632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.551629][ T5635] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.556687][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.563565][ T5632] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.582237][ T5635] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.592963][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.595187][ T5635] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.597788][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.602743][ T1124] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.602883][ T1124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.619502][ T5635] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.633363][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.666893][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.667019][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.768463][ T5634] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.776326][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.777133][ T5634] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.784159][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.798105][ T5634] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.806672][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.821045][ T5634] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.824768][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.906156][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.956493][ T5630] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.975037][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.001256][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.001323][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.030827][ T5633] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.032596][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.032687][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.043624][ T5632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.064112][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.064215][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.110812][ T1124] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.110927][ T1124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.131364][ T5619] Bluetooth: hci1: command tx timeout [ 84.132572][ T5626] Bluetooth: hci2: command tx timeout [ 84.138737][ T5626] Bluetooth: hci3: command tx timeout [ 84.182961][ T5634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.210522][ T5619] Bluetooth: hci4: command tx timeout [ 84.210613][ T5626] Bluetooth: hci0: command tx timeout [ 84.217177][ T5635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.239658][ T5632] veth0_vlan: entered promiscuous mode [ 84.262777][ T5632] veth1_vlan: entered promiscuous mode [ 84.308138][ T5634] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.316247][ T5635] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.347444][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.347562][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.349382][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.349490][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.361590][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.361692][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.406874][ T1124] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.406937][ T1124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.443477][ T5632] veth0_macvtap: entered promiscuous mode [ 84.463931][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.481259][ T5632] veth1_macvtap: entered promiscuous mode [ 84.536024][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.559373][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.584826][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.637885][ T5630] veth0_vlan: entered promiscuous mode [ 84.685626][ T5630] veth1_vlan: entered promiscuous mode [ 84.757744][ T5634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.810896][ T5633] veth0_vlan: entered promiscuous mode [ 84.816760][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.816781][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.836162][ T5635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.846721][ T5633] veth1_vlan: entered promiscuous mode [ 84.914946][ T5630] veth0_macvtap: entered promiscuous mode [ 84.955899][ T5630] veth1_macvtap: entered promiscuous mode [ 84.959747][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.959990][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.962455][ T5633] veth0_macvtap: entered promiscuous mode [ 84.968456][ T5633] veth1_macvtap: entered promiscuous mode [ 84.974139][ T1162] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.974279][ T1162] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.974318][ T1162] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.974354][ T1162] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.994748][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.999248][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.149561][ T5632] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 85.175567][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.205492][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.231152][ T5632] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 85.232976][ T5632] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 85.233572][ T5632] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 85.234139][ T5632] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 85.259039][ T5634] veth0_vlan: entered promiscuous mode [ 85.264193][ T1124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.264211][ T1124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.323548][ T5635] veth0_vlan: entered promiscuous mode [ 85.372700][ T5715] netlink: 'syz.4.5': attribute type 1 has an invalid length. [ 85.378124][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.378145][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.385796][ T5715] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5'. [ 85.385902][ T1162] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.386074][ T1162] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.393211][ T5715] tunl0: entered promiscuous mode [ 85.393229][ T5715] tunl0: entered allmulticast mode [ 85.413009][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.413963][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.413998][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.414029][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.414508][ T5635] veth1_vlan: entered promiscuous mode [ 85.416893][ T5634] veth1_vlan: entered promiscuous mode [ 85.420391][ T1162] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.440084][ T43] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.710067][ T5634] veth0_macvtap: entered promiscuous mode [ 85.757431][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.757453][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.781100][ T5634] veth1_macvtap: entered promiscuous mode [ 85.784078][ T5635] veth0_macvtap: entered promiscuous mode [ 85.813295][ T5635] veth1_macvtap: entered promiscuous mode [ 85.883929][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.883945][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.904729][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.950500][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.056410][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.123972][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.166854][ T1124] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.213173][ T5619] Bluetooth: hci2: command tx timeout [ 86.213206][ T4931] Bluetooth: hci1: command tx timeout [ 86.213265][ T5626] Bluetooth: hci3: command tx timeout [ 86.234778][ T5719] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 86.292572][ T5626] Bluetooth: hci0: command tx timeout [ 86.292609][ T5626] Bluetooth: hci4: command tx timeout [ 86.420977][ T50] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.463359][ T50] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.464094][ T50] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.464190][ T50] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.652480][ T1124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.652504][ T1124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.660003][ T50] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.660913][ T1124] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.661242][ T1124] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.863271][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.863287][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.908111][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.908124][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.949369][ T10] cfg80211: failed to load regulatory.db [ 87.031105][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.031127][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.591725][ T5741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 87.673071][ T5742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9'. [ 87.673149][ T5742] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 88.290845][ T5626] Bluetooth: hci3: command tx timeout [ 88.290885][ T5626] Bluetooth: hci2: command tx timeout [ 88.290917][ T5626] Bluetooth: hci1: command tx timeout [ 88.369880][ T4931] Bluetooth: hci4: command tx timeout [ 88.382325][ T4931] Bluetooth: hci0: command tx timeout [ 89.332429][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 89.483049][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 89.517758][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.517778][ T9] usb 2-1: Product: syz [ 89.517790][ T9] usb 2-1: Manufacturer: syz [ 89.517798][ T9] usb 2-1: SerialNumber: syz [ 89.915033][ T5765] syz.2.15 uses obsolete (PF_INET,SOCK_PACKET) [ 90.017990][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 90.018041][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 90.117227][ T5767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.117639][ T5767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.411647][ T31] audit: type=1326 audit(1789419692.765:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5770 comm="syz.2.17" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc80ec code=0x0 [ 90.489493][ T5769] syzkaller0: entered promiscuous mode [ 90.489518][ T5769] syzkaller0: entered allmulticast mode [ 90.729824][ T31] audit: type=1804 audit(1789419693.085:3): pid=5774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.17" name="/newroot/5/file1" dev="fuse" ino=1 res=1 errno=0 [ 90.993292][ T5779] netlink: 'syz.0.19': attribute type 1 has an invalid length. [ 91.010004][ T5779] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19'. [ 91.165648][ T31] audit: type=1326 audit(1789419693.525:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5780 comm="syz.3.20" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa50ec code=0x0 [ 91.244212][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 91.244279][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 91.245463][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 91.294017][ T9] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 91.313174][ T9] usb 2-1: USB disconnect, device number 2 [ 91.408475][ T5787] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22'. [ 91.465142][ T5791] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22'. [ 91.569313][ T5783] Zero length message leads to an empty skb [ 92.080627][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 92.230320][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 92.239036][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 92.239091][ T10] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 92.245976][ T10] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 92.246005][ T10] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 92.246025][ T10] usb 3-1: config 14 has no interface number 0 [ 92.246041][ T10] usb 3-1: config 14 has no interface number 1 [ 92.246107][ T10] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 92.246130][ T10] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 92.246156][ T10] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 92.246181][ T10] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 92.246220][ T10] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 92.246279][ T10] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 92.246306][ T10] usb 3-1: config 14 interface 57 has no altsetting 0 [ 92.246324][ T10] usb 3-1: config 14 interface 228 has no altsetting 0 [ 92.291428][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.291453][ T10] usb 3-1: Product: syz [ 92.291465][ T10] usb 3-1: Manufacturer: syz [ 92.291480][ T10] usb 3-1: SerialNumber: syz [ 92.550281][ T30] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 92.700947][ T30] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 92.705739][ T30] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.705791][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.705816][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.705837][ T30] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 92.705877][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.723339][ T30] usb 5-1: config 0 descriptor?? [ 92.780041][ T1013] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 92.849537][ T10] legousbtower 3-1:14.57: interrupt endpoints not found [ 92.929962][ T1013] usb 4-1: Using ep0 maxpacket: 8 [ 92.931878][ T1013] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 92.933287][ T1013] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 92.933311][ T1013] usb 4-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 92.933328][ T1013] usb 4-1: config 179 has no interface number 0 [ 92.933395][ T1013] usb 4-1: config 179 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 92.933434][ T1013] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.115921][ T5796] netlink: 20 bytes leftover after parsing attributes in process `syz.2.24'. [ 93.115950][ T5796] netlink: 20 bytes leftover after parsing attributes in process `syz.2.24'. [ 93.266048][ T5800] kvm: faulting far call emulation tainted memory [ 93.276855][ T1013] usb 4-1: USB disconnect, device number 2 [ 93.327312][ T30] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 93.346596][ T10] legousbtower 3-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 93.377075][ T10] legousbtower 3-1:14.228: LEGO USB Tower #-159 now attached to major 180 minor 1 [ 93.621567][ T5818] fuse: Unknown parameter 'user_id00000000000000000000' [ 94.670197][ T5697] usb 5-1: reset high-speed USB device number 2 using dummy_hcd [ 95.341721][ T4729] usb 3-1: USB disconnect, device number 2 [ 95.372451][ T4729] legousbtower 3-1:14.228: LEGO USB Tower #-159 now disconnected [ 95.455533][ T5831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.36'. [ 95.645934][ T5833] netlink: 4 bytes leftover after parsing attributes in process `syz.2.37'. [ 95.714625][ T31] audit: type=1326 audit(1789419698.075:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5834 comm="syz.3.38" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa50ec code=0x0 [ 95.988037][ T31] audit: type=1804 audit(1789419698.345:6): pid=5836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.38" name="/newroot/7/file1" dev="fuse" ino=1 res=1 errno=0 [ 96.666602][ T1013] usb 5-1: USB disconnect, device number 2 [ 97.795394][ T5860] syzkaller0: entered promiscuous mode [ 97.795420][ T5860] syzkaller0: entered allmulticast mode [ 98.197038][ T5862] netlink: 4 bytes leftover after parsing attributes in process `syz.4.47'. [ 98.237445][ T5862] netlink: 4 bytes leftover after parsing attributes in process `syz.4.47'. [ 98.559903][ T1013] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 98.610528][ T5868] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 98.612087][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.645139][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.655543][ T50] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.655633][ T50] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.709886][ T1013] usb 2-1: Using ep0 maxpacket: 32 [ 98.714718][ T1013] usb 2-1: unable to get BOS descriptor or descriptor too short [ 98.714773][ T1013] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 98.716467][ T1013] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 98.716491][ T1013] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 98.716511][ T1013] usb 2-1: config 14 has no interface number 0 [ 98.716527][ T1013] usb 2-1: config 14 has no interface number 1 [ 98.716596][ T1013] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 98.716620][ T1013] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 98.716646][ T1013] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 98.716670][ T1013] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 98.716697][ T1013] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 98.716723][ T1013] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 98.716749][ T1013] usb 2-1: config 14 interface 57 has no altsetting 0 [ 98.716767][ T1013] usb 2-1: config 14 interface 228 has no altsetting 0 [ 98.719497][ T1013] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.719520][ T1013] usb 2-1: Product: syz [ 98.719534][ T1013] usb 2-1: Manufacturer: syz [ 98.719548][ T1013] usb 2-1: SerialNumber: syz [ 99.326942][ T1013] legousbtower 2-1:14.57: interrupt endpoints not found [ 99.338949][ T5884] netlink: 12 bytes leftover after parsing attributes in process `syz.4.54'. [ 99.353425][ T5884] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.368608][ T5884] bridge_slave_1 (unregistering): left allmulticast mode [ 99.368645][ T5884] bridge_slave_1 (unregistering): left promiscuous mode [ 99.368738][ T5884] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.541983][ T5864] netlink: 20 bytes leftover after parsing attributes in process `syz.1.48'. [ 99.543406][ T5864] netlink: 20 bytes leftover after parsing attributes in process `syz.1.48'. [ 99.579071][ T5886] syzkaller0: entered promiscuous mode [ 99.579094][ T5886] syzkaller0: entered allmulticast mode [ 99.721983][ T5888] syzkaller0: entered promiscuous mode [ 99.722005][ T5888] syzkaller0: entered allmulticast mode [ 99.778041][ T1013] legousbtower 2-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 99.781944][ T1013] legousbtower 2-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 99.974900][ T5895] netlink: 'syz.2.59': attribute type 1 has an invalid length. [ 100.354707][ T5906] netlink: 20 bytes leftover after parsing attributes in process `syz.4.62'. [ 100.922410][ T30] usb 2-1: USB disconnect, device number 3 [ 100.954976][ T30] legousbtower 2-1:14.228: LEGO USB Tower #-160 now disconnected [ 101.059865][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 101.219848][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 101.227056][ T10] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 101.228353][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.264033][ T10] usb 3-1: config 0 descriptor?? [ 101.306250][ T10] as10x_usb: device has been detected [ 101.307343][ T10] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 101.373645][ T10] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 101.454548][ T10] as10x_usb: error during firmware upload part1 [ 101.455413][ T10] Registered device nBox DVB-T Dongle [ 101.567735][ T5922] netlink: 36 bytes leftover after parsing attributes in process `syz.4.67'. [ 101.675679][ T5927] netlink: 36 bytes leftover after parsing attributes in process `syz.4.67'. [ 101.706069][ T9] usb 3-1: USB disconnect, device number 3 [ 101.778298][ T9] Unregistered device nBox DVB-T Dongle [ 101.783527][ T9] as10x_usb: device has been disconnected [ 102.574325][ T5939] netlink: 'syz.2.72': attribute type 1 has an invalid length. [ 102.576195][ T5939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.72'. [ 102.761216][ T5713] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 102.809913][ T30] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 102.909914][ T5713] usb 5-1: Using ep0 maxpacket: 32 [ 102.914339][ T5713] usb 5-1: unable to get BOS descriptor or descriptor too short [ 102.914391][ T5713] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 102.917550][ T5713] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 102.917593][ T5713] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 102.917613][ T5713] usb 5-1: config 14 has no interface number 0 [ 102.917628][ T5713] usb 5-1: config 14 has no interface number 1 [ 102.917698][ T5713] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 102.917723][ T5713] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 102.917746][ T5713] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 102.917771][ T5713] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 102.917797][ T5713] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 102.917822][ T5713] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 102.917846][ T5713] usb 5-1: config 14 interface 57 has no altsetting 0 [ 102.917863][ T5713] usb 5-1: config 14 interface 228 has no altsetting 0 [ 102.922544][ T5713] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.922566][ T5713] usb 5-1: Product: syz [ 102.922578][ T5713] usb 5-1: Manufacturer: syz [ 102.922591][ T5713] usb 5-1: SerialNumber: syz [ 102.959887][ T30] usb 4-1: Using ep0 maxpacket: 32 [ 102.966377][ T30] usb 4-1: unable to get BOS descriptor or descriptor too short [ 102.966423][ T30] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 102.968712][ T30] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 102.968734][ T30] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 102.968752][ T30] usb 4-1: config 14 has no interface number 0 [ 102.968766][ T30] usb 4-1: config 14 has no interface number 1 [ 102.968851][ T30] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 102.968873][ T30] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 102.968895][ T30] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 102.968918][ T30] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 102.968967][ T30] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 102.968989][ T30] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 102.969011][ T30] usb 4-1: config 14 interface 57 has no altsetting 0 [ 102.969026][ T30] usb 4-1: config 14 interface 228 has no altsetting 0 [ 102.982788][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.982811][ T30] usb 4-1: Product: syz [ 102.982824][ T30] usb 4-1: Manufacturer: syz [ 102.982918][ T30] usb 4-1: SerialNumber: syz [ 103.084210][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 103.330591][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 103.332018][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.332061][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.332076][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.332088][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 103.332128][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.342913][ T5713] legousbtower 5-1:14.57: interrupt endpoints not found [ 103.350268][ T10] usb 3-1: config 0 descriptor?? [ 103.408681][ T30] legousbtower 4-1:14.57: interrupt endpoints not found [ 103.548102][ T5936] netlink: 20 bytes leftover after parsing attributes in process `syz.4.70'. [ 103.548123][ T5936] netlink: 20 bytes leftover after parsing attributes in process `syz.4.70'. [ 103.613781][ T5940] netlink: 20 bytes leftover after parsing attributes in process `syz.3.71'. [ 103.613834][ T5940] netlink: 20 bytes leftover after parsing attributes in process `syz.3.71'. [ 103.764463][ T5713] legousbtower 5-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 103.767236][ T5713] legousbtower 5-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 103.823097][ T30] legousbtower 4-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 103.847494][ T10] plantronics 0003:047F:FFFF.0002: hiddev1,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 103.848367][ T30] legousbtower 4-1:14.228: LEGO USB Tower #-158 now attached to major 180 minor 2 [ 104.120650][ T5956] fuse: Unknown parameter 'user_id00000000000000000000' [ 104.359680][ T5960] netlink: 'syz.0.78': attribute type 1 has an invalid length. [ 104.364201][ T5960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.78'. [ 104.379520][ T5961] usb 5-1: LEGO USB Tower reset control request failed [ 104.641687][ T5962] usb 5-1: LEGO USB Tower reset control request failed [ 104.642781][ T30] usb 5-1: USB disconnect, device number 3 [ 104.679940][ T30] legousbtower 5-1:14.228: LEGO USB Tower #-160 now disconnected [ 104.762678][ T10] usb 4-1: USB disconnect, device number 3 [ 104.781117][ T10] legousbtower 4-1:14.228: LEGO USB Tower #-158 now disconnected [ 105.179932][ T4729] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 105.332725][ T4729] usb 2-1: Using ep0 maxpacket: 16 [ 105.335244][ T4729] usb 2-1: New USB device found, idVendor=044f, idProduct=b300, bcdDevice= 0.00 [ 105.339459][ T4729] usb 2-1: config 0 has an invalid descriptor of length 127, skipping remainder of the config [ 105.339511][ T4729] usb 2-1: config 0 interface 0 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 105.339537][ T4729] usb 2-1: config 0 interface 0 has no altsetting 0 [ 105.339572][ T4729] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.361941][ T4729] usb 2-1: config 0 descriptor?? [ 105.383867][ T4729] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 105.474893][ T5974] netlink: 'syz.4.82': attribute type 1 has an invalid length. [ 105.487872][ T5974] netlink: 4 bytes leftover after parsing attributes in process `syz.4.82'. [ 105.623189][ T5976] netlink: 'syz.0.83': attribute type 1 has an invalid length. [ 105.627637][ T5976] netlink: 4 bytes leftover after parsing attributes in process `syz.0.83'. [ 105.820377][ T5713] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 105.844981][ T4729] usb 3-1: USB disconnect, device number 4 [ 105.973666][ T5713] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 105.974698][ T5713] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.974748][ T5713] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.974773][ T5713] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.974795][ T5713] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 105.974835][ T5713] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.052009][ T5713] usb 4-1: config 0 descriptor?? [ 106.119891][ T1013] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 106.199877][ T5697] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 106.270212][ T1013] usb 1-1: Using ep0 maxpacket: 32 [ 106.273305][ T1013] usb 1-1: unable to get BOS descriptor or descriptor too short [ 106.273389][ T1013] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 106.274748][ T1013] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 106.274773][ T1013] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 106.274792][ T1013] usb 1-1: config 14 has no interface number 0 [ 106.274807][ T1013] usb 1-1: config 14 has no interface number 1 [ 106.274882][ T1013] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 106.274897][ T1013] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 106.274911][ T1013] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 106.274925][ T1013] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 106.274941][ T1013] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 106.274955][ T1013] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 106.274989][ T1013] usb 1-1: config 14 interface 57 has no altsetting 0 [ 106.275000][ T1013] usb 1-1: config 14 interface 228 has no altsetting 0 [ 106.277077][ T1013] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.277098][ T1013] usb 1-1: Product: syz [ 106.277111][ T1013] usb 1-1: Manufacturer: syz [ 106.277153][ T1013] usb 1-1: SerialNumber: syz [ 106.379848][ T5697] usb 5-1: Using ep0 maxpacket: 32 [ 106.382435][ T5697] usb 5-1: unable to get BOS descriptor or descriptor too short [ 106.382479][ T5697] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 106.383876][ T5697] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 106.383901][ T5697] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 106.383918][ T5697] usb 5-1: config 14 has no interface number 0 [ 106.383932][ T5697] usb 5-1: config 14 has no interface number 1 [ 106.384022][ T5697] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 106.384044][ T5697] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 106.384065][ T5697] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 106.384086][ T5697] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 106.384142][ T5697] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 106.384165][ T5697] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 106.384188][ T5697] usb 5-1: config 14 interface 57 has no altsetting 0 [ 106.384426][ T5697] usb 5-1: config 14 interface 228 has no altsetting 0 [ 106.387147][ T5697] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.387166][ T5697] usb 5-1: Product: syz [ 106.387179][ T5697] usb 5-1: Manufacturer: syz [ 106.387191][ T5697] usb 5-1: SerialNumber: syz [ 106.504049][ T5713] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 106.785728][ T1013] legousbtower 1-1:14.57: interrupt endpoints not found [ 106.835194][ T5697] legousbtower 5-1:14.57: interrupt endpoints not found [ 106.863755][ T5998] netlink: 'syz.2.89': attribute type 1 has an invalid length. [ 106.865319][ T5998] netlink: 4 bytes leftover after parsing attributes in process `syz.2.89'. [ 106.893758][ T5997] fuse: Unknown parameter 'user_id00000000000000000000' [ 106.995563][ T5984] netlink: 20 bytes leftover after parsing attributes in process `syz.0.86'. [ 106.995590][ T5984] netlink: 20 bytes leftover after parsing attributes in process `syz.0.86'. [ 107.208285][ T1013] legousbtower 1-1:14.228: get version request failed: -121 [ 107.208423][ T1013] legousbtower 1-1:14.228: probe with driver legousbtower failed with error -121 [ 107.245635][ T5697] legousbtower 5-1:14.228: get version request failed: -32 [ 107.245751][ T5697] legousbtower 5-1:14.228: probe with driver legousbtower failed with error -32 [ 107.269865][ T30] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 107.420256][ T30] usb 3-1: Using ep0 maxpacket: 16 [ 107.421735][ T30] usb 3-1: New USB device found, idVendor=044f, idProduct=b300, bcdDevice= 0.00 [ 107.422955][ T30] usb 3-1: config 0 has an invalid descriptor of length 127, skipping remainder of the config [ 107.423005][ T30] usb 3-1: config 0 interface 0 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 107.423032][ T30] usb 3-1: config 0 interface 0 has no altsetting 0 [ 107.423695][ T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.427476][ T30] usb 3-1: config 0 descriptor?? [ 107.505600][ T30] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 107.939875][ T1013] usb 4-1: reset high-speed USB device number 4 using dummy_hcd [ 107.968981][ T4729] usb 2-1: USB disconnect, device number 4 [ 109.025756][ T10] usb 1-1: USB disconnect, device number 2 [ 109.155588][ T5697] usb 5-1: USB disconnect, device number 4 [ 109.560611][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 109.592812][ T30] usb 4-1: USB disconnect, device number 4 [ 109.725191][ T10] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 109.726765][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.756073][ T10] usb 1-1: config 0 descriptor?? [ 109.996333][ T10] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 110.081349][ T1013] usb 3-1: USB disconnect, device number 5 [ 110.279676][ T10] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 1 [ 110.279705][ T10] [drm] Initialized udl on minor 1 [ 111.542264][ T6044] __nla_validate_parse: 2 callbacks suppressed [ 111.542280][ T6044] netlink: 20 bytes leftover after parsing attributes in process `syz.2.99'. [ 111.542289][ T6044] netlink: 12 bytes leftover after parsing attributes in process `syz.2.99'. [ 111.548629][ T6044] netlink: 'syz.2.99': attribute type 1 has an invalid length. [ 111.584157][ T6044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.99'. [ 114.380882][ T5698] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 114.535790][ T5698] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 114.538260][ T5698] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.538329][ T5698] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.538353][ T5698] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.538373][ T5698] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 114.538440][ T5698] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.619872][ T5698] usb 3-1: config 0 descriptor?? [ 114.939857][ T1013] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 115.078459][ T5698] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 115.100350][ T1013] usb 2-1: Using ep0 maxpacket: 32 [ 115.105921][ T1013] usb 2-1: unable to get BOS descriptor or descriptor too short [ 115.105968][ T1013] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 115.107554][ T1013] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 115.107575][ T1013] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 115.107592][ T1013] usb 2-1: config 14 has no interface number 0 [ 115.107614][ T1013] usb 2-1: config 14 has no interface number 1 [ 115.107674][ T1013] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 115.107695][ T1013] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 115.107717][ T1013] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 115.107740][ T1013] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 115.107762][ T1013] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 115.107784][ T1013] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 115.107834][ T1013] usb 2-1: config 14 interface 57 has no altsetting 0 [ 115.107850][ T1013] usb 2-1: config 14 interface 228 has no altsetting 0 [ 115.117616][ T1013] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.117639][ T1013] usb 2-1: Product: syz [ 115.117652][ T1013] usb 2-1: Manufacturer: syz [ 115.117664][ T1013] usb 2-1: SerialNumber: syz [ 115.331645][ T10] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 115.337443][ T10] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 115.390211][ T10] usb 1-1: USB disconnect, device number 3 [ 115.625822][ T1013] legousbtower 2-1:14.57: interrupt endpoints not found [ 115.666373][ T6080] fuse: Unknown parameter 'user_id00000000000000000000' [ 115.853361][ T6078] netlink: 20 bytes leftover after parsing attributes in process `syz.1.107'. [ 115.853391][ T6078] netlink: 20 bytes leftover after parsing attributes in process `syz.1.107'. [ 116.030617][ T30] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 116.060180][ T1013] legousbtower 2-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 116.065492][ T1013] legousbtower 2-1:14.228: LEGO USB Tower #-159 now attached to major 180 minor 1 [ 116.182469][ T30] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 116.183515][ T30] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.183564][ T30] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.183587][ T30] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.183607][ T30] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 116.183633][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.188864][ T30] usb 4-1: config 0 descriptor?? [ 116.469923][ T5697] usb 3-1: reset high-speed USB device number 6 using dummy_hcd [ 116.725008][ T30] plantronics 0003:047F:FFFF.0005: hiddev2,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 117.117231][ T6092] fuse: Unknown parameter 'user_id00000000000000000000' [ 118.047783][ T30] usb 2-1: USB disconnect, device number 5 [ 118.094369][ T30] legousbtower 2-1:14.228: LEGO USB Tower #-159 now disconnected [ 118.145294][ T5689] usb 3-1: USB disconnect, device number 6 [ 118.973997][ T10] usb 4-1: USB disconnect, device number 5 [ 119.357555][ T6109] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.710809][ T6109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.731747][ T6109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.300116][ T1124] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.300170][ T1124] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.300207][ T1124] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.300243][ T1124] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.574206][ C0] sched: DL replenish lagged too much [ 133.277956][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.293316][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.735940][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.754610][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 209.751331][ T5621] Bluetooth: hci2: command 0x0406 tx timeout [ 209.751442][ T5621] Bluetooth: hci1: command 0x0406 tx timeout [ 209.751487][ T5621] Bluetooth: hci4: command 0x0406 tx timeout [ 209.751529][ T5621] Bluetooth: hci0: command 0x0406 tx timeout [ 209.751571][ T5621] Bluetooth: hci3: command 0x0406 tx timeout [ 256.872585][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.891237][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.937828][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.955679][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 341.411743][ T32] INFO: task kworker/0:0:9 blocked for more than 141 seconds. [ 341.411774][ T32] Not tainted syzkaller #0 [ 341.411785][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 341.411794][ T32] task:kworker/0:0 state:D stack:22344 pid:9 tgid:9 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 341.411859][ T32] Workqueue: events_power_efficient reg_check_chans_work [ 341.411889][ T32] Call Trace: [ 341.411898][ T32] [ 341.411913][ T32] __schedule+0x17db/0x58f0 [ 341.411968][ T32] ? do_raw_spin_unlock+0xf5/0x200 [ 341.412005][ T32] ? __pfx___schedule+0x10/0x10 [ 341.412047][ T32] ? schedule+0x90/0x2b0 [ 341.412082][ T32] schedule+0x164/0x2b0 [ 341.412116][ T32] schedule_preempt_disabled+0x13/0x30 [ 341.412135][ T32] __mutex_lock+0x7c1/0x1550 [ 341.412156][ T32] ? arch_stack_walk+0x11b/0x150 [ 341.412184][ T32] ? __mutex_lock+0x5d4/0x1550 [ 341.412211][ T32] ? reg_check_chans_work+0x1a1/0x1110 [ 341.412236][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 341.412271][ T32] ? add_lock_to_list+0xc7/0x100 [ 341.412303][ T32] reg_check_chans_work+0x1a1/0x1110 [ 341.412344][ T32] ? __pfx_reg_check_chans_work+0x10/0x10 [ 341.412370][ T32] ? lock_acquire+0x115/0x350 [ 341.412401][ T32] ? rcu_is_watching+0x16/0xb0 [ 341.412428][ T32] ? process_scheduled_works+0x97a/0x1630 [ 341.412465][ T32] process_scheduled_works+0xc3d/0x1630 [ 341.412527][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 341.412562][ T32] ? assign_work+0x3cf/0x5d0 [ 341.412594][ T32] worker_thread+0xa47/0xfb0 [ 341.412653][ T32] kthread+0x38b/0x480 [ 341.412675][ T32] ? __pfx_worker_thread+0x10/0x10 [ 341.412700][ T32] ? __pfx_kthread+0x10/0x10 [ 341.412722][ T32] ret_from_fork+0x514/0xb70 [ 341.412746][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 341.412777][ T32] ? __switch_to+0xc89/0x1420 [ 341.412809][ T32] ? __pfx_kthread+0x10/0x10 [ 341.412832][ T32] ret_from_fork_asm+0x1a/0x30 [ 341.412882][ T32] [ 341.412999][ T32] [ 341.412999][ T32] Showing all locks held in the system: [ 341.413009][ T32] locks held by kthreadd/2: 1, last CPU#0: [ 341.413024][ T32] #0: ffffffff8eeac370 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 341.413078][ T32] locks held by kworker/0:0/9: 4, on CPU#0: [ 341.413092][ T32] #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 341.413148][ T32] #1: ffffc900000e7c40 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 341.413202][ T32] #2: ffffffff90252180 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0xac/0x1110 [ 341.413252][ T32] #3: ffff888067f907a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_check_chans_work+0x1a1/0x1110 [ 341.413302][ T32] locks held by kworker/u8:0/12: 3, last CPU#0: [ 341.413316][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 341.413372][ T32] #1: ffffc90000117c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 341.413426][ T32] #2: ffff888067de07a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 341.413493][ T32] locks held by kworker/u8:1/13: 3, last CPU#0: [ 341.413507][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 341.413562][ T32] #1: ffffc90000127c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 341.413616][ T32] #2: ffff888067f907a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 341.413675][ T32] locks held by kworker/1:1/30: 4, last CPU#1: [ 341.413689][ T32] #0: ffff8880794c0540 ((wq_completion)wg-kex-wg2#10){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 341.413750][ T32] #1: ffffc90000a67c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 341.413818][ T32] #2: ffff88807bbd6640 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0