last executing test programs: 5m21.880189552s ago: executing program 0 (id=516): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000140)={0x13, 0x10, 0xfa00, {&(0x7f0000000480), r0, 0x1}}, 0x18) 5m21.508586178s ago: executing program 0 (id=519): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) 5m21.012635552s ago: executing program 0 (id=521): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x3}, 0xb2a1}) write$sndseq(r1, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c) keyctl$dh_compute(0x17, &(0x7f0000000140), &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) syz_usb_connect$uac2(0x3, 0x9d, &(0x7f0000000000)=ANY=[], &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0}) 5m19.864163664s ago: executing program 2 (id=528): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, 0x0, 0x0) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x1}], 0x1, 0x0, 0x0, 0x3) close_range(r1, r4, 0x0) 5m18.699877416s ago: executing program 2 (id=534): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000240002"], 0x64}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, 0x0, 0x0) r3 = accept(r1, 0x0, 0x0) setsockopt$sock_timeval(r3, 0x1, 0x42, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5m18.276480082s ago: executing program 2 (id=536): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='nr_ino']) mknod$loop(&(0x7f0000000040)='./file0/file0\x00', 0x4, 0x1) 5m17.919067214s ago: executing program 2 (id=537): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r0, 0xfff) accept4(r0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r2, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000034c0)='\x00', 0x1}, {0x0}], 0x2}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000009c0)=ANY=[@ANYBLOB="12e01b3989dd", @ANYRES32=r1], 0x1000f) 5m17.785550014s ago: executing program 3 (id=538): ioperm(0x6, 0x9, 0x824) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) readv(r0, &(0x7f0000000980)=[{&(0x7f0000000240)=""/95, 0x5f}], 0x1) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) unshare(0x22020400) close(r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg(r2, 0x0, 0x100) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 5m17.728228568s ago: executing program 0 (id=540): sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x9) 5m16.699595924s ago: executing program 2 (id=544): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, 0x0, 0x0) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x1}], 0x1, 0x0, 0x0, 0x3) close_range(r1, r4, 0x0) 5m16.401500876s ago: executing program 3 (id=546): r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00'}) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000040)=0x10001, 0x4) bind$can_raw(r1, &(0x7f0000000080), 0x10) 5m16.012941485s ago: executing program 3 (id=547): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='nr_inodes']) mknod$loop(&(0x7f0000000040)='./file0/file0\x00', 0x4, 0x1) 5m15.713447829s ago: executing program 3 (id=550): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x83}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xf5}, @NFTA_EXTHDR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x8c}}, 0x0) 5m15.519196791s ago: executing program 2 (id=551): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x6, 0x7, 0x200, 0x4, 0x8, 0x8ed, 0x10, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8810) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x7fffe, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {0x1, 0xb}, {0x4, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048800}, 0x400c000) sendto$packet(r4, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 5m14.967793989s ago: executing program 3 (id=552): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024917720042322023f77010203010902120001000010000904"], 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000002300)={&(0x7f00000000c0)=[{0x90, 0x1011, 0x0, &(0x7f0000000080)}], 0x1}) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f00000001c0)=0xa96) syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x2, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xf1, 0x10, 0x8, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x3e, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x80, 0x3, 0x9}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0x10, 0x7, 0x2, 0x8, 0xb}, 0x5a, &(0x7f0000000200)={0x5, 0xf, 0x5a, 0x3, [@ptm_cap={0x3}, @generic={0x47, 0x10, 0x4, "a42c504364fc2b9b4c3f06e928ac0fdf30fbd704c22e5724ccc64b2733a9391a18adf231a04ce8fa3469171a944b7cd8255dc8842f6dd78a5928391f182bc5d02b80d9c7"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x7, 0x3, 0x2, 0xfe}]}, 0x4, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x2409}}, {0x0, 0x0}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x2421}}, {0x51, &(0x7f0000000440)=@string={0x51, 0x3, "6f85c9ae4357c3a22a8578095b8cb00ae7149881571adc7870ac7d72397356197219238539f8bd3228ad617cae633edc51d682de176febc8dd12c54e14e040c86c49eb89127093e55bead935f9e924"}}]}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000038c0)=[{{&(0x7f0000000580)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001840)=[{0x0}, {0x0}, {&(0x7f0000000740)="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", 0x1000}, {0x0}], 0x4, 0x0, 0x0, 0x4008000}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000055}}, {{&(0x7f0000002280)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000021c0)=[{&(0x7f0000002140)="6584091e306b93663bb4a66b2716a2824895aae52a7255308fe84472aff5c9326328e031a6a748982ab93b4d9d45663ab4aeef72f00c8e5a2d753bfe4314a9eb29bf9ce175fbe76f93785fc853df70508ed66df275d9d6e861b1e3bfa03a2d832a6a4ea800a868", 0x67}], 0x1, 0x0, 0x0, 0x2}}, {{&(0x7f0000002200)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000023c0)=[{&(0x7f0000002280)}, {0x0}], 0x2, &(0x7f0000003840)=[@rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}], 0x5c, 0x8000}}], 0x4, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ustat(0x7f, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x8907, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) openat$binderfs(0xffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x800, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x40084503, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, 0x0}], 0x1, 0x30, &(0x7f0000001d80)=[@cr0={0x0, 0x40000}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x6000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 5m13.935434969s ago: executing program 0 (id=554): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$phonet(0x23, 0x2, 0x1) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[], 0x134}}, 0x0) 5m13.238393438s ago: executing program 0 (id=555): setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x4, 0x6361, 0x7, 0xffffffff, 0x40000003}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xf, 0xb}, {0x6}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x80, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x200040e5}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000240)="80", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 5m12.769890026s ago: executing program 3 (id=558): r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00'}) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000040)=0x10001, 0x4) bind$can_raw(r1, &(0x7f0000000080), 0x10) 5m0.124411699s ago: executing program 32 (id=551): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x6, 0x7, 0x200, 0x4, 0x8, 0x8ed, 0x10, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8810) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x7fffe, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {0x1, 0xb}, {0x4, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048800}, 0x400c000) sendto$packet(r4, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 4m58.139178347s ago: executing program 33 (id=555): setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x4, 0x6361, 0x7, 0xffffffff, 0x40000003}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xf, 0xb}, {0x6}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x80, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x200040e5}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000240)="80", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 4m57.583318896s ago: executing program 34 (id=558): r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00'}) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000040)=0x10001, 0x4) bind$can_raw(r1, &(0x7f0000000080), 0x10) 3m54.034012413s ago: executing program 4 (id=705): ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000300)={0x2, 0x88f, 0x0, &(0x7f0000000340)="0000040000cf3b2ba333ffff956e6e", 0x0, 0xf}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m52.492129936s ago: executing program 4 (id=712): syz_emit_ethernet(0xa6, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010120", 0x70, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000400260004000000"}]}}}}}}, 0x0) 3m51.945696492s ago: executing program 4 (id=714): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000001a80), 0x0, 0x200040c0) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) 3m51.4681699s ago: executing program 4 (id=715): r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000200), 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1b0000001a006da800000056cf208561f6756e7596fc0000000000000800010000"], 0x24}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0) r1 = getpgid(0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r2 = syz_pidfd_open(r1, 0x0) mount$tmpfs(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f00000001c0), 0x800, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) pidfd_getfd(r2, r2, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 3m51.143906344s ago: executing program 4 (id=718): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x2) 3m48.994711619s ago: executing program 4 (id=725): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000001a80), 0x0, 0x200040c0) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) 3m48.645843841s ago: executing program 35 (id=725): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000001a80), 0x0, 0x200040c0) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) 2m45.287354035s ago: executing program 8 (id=960): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000100039042abd", @ANYRES32=0x0, @ANYBLOB="0020000000000000200012800b0001006272696467650000100002800a00"], 0x40}}, 0x40048814) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000300)='befs\x00', 0x200000, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r2 = socket(0x1e, 0x4, 0x0) connect$can_bcm(r2, 0x0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x8004, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000340)=[0x0], &(0x7f0000001f40), 0x0, 0x1, 0x0, 0x0, r4}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2}, 0x40440) sendmsg(0xffffffffffffffff, 0x0, 0x4) creat(&(0x7f0000000200)='./file0/../file0\x00', 0x82) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@deltaction={0x14, 0x31, 0x300, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) setrlimit(0xd, &(0x7f0000000300)={0x8, 0x4}) mount$9p_virtio(&(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', &(0x7f00000004c0), 0x8017, 0x0) 2m44.39578528s ago: executing program 8 (id=966): syz_emit_ethernet(0xab, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010120", 0x75, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000400260004"}, {0x1, 0x1, "fe906d17efe3"}]}}}}}}, 0x0) 2m44.160062536s ago: executing program 8 (id=969): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x8000000000000000, 0x4, 0x2000008, 0x2, 0x24, 0x6, 0x6, 0xfffffffffffffffc, 0x100fff}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) lchown(&(0x7f0000000100)='./file0\x00', 0xee00, 0x0) 2m41.886022625s ago: executing program 8 (id=975): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x48, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}, @NFTA_SET_ELEM_KEY_END={0x8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 2m41.412682057s ago: executing program 8 (id=976): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "0e57b3d487e2db32", "a9df7ccffde8899f914d4f2c3e263509", "3c36a51c", "6775c975b6b15e11"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000001980)=""/4099, 0xc27}], 0x1) 2m40.282768737s ago: executing program 8 (id=981): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0xe503, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc000, 0x103) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) 2m24.019881017s ago: executing program 36 (id=981): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0xe503, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc000, 0x103) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) 8.192787835s ago: executing program 9 (id=1830): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(0x0, 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x8000000000000000, 0x4, 0x2000008, 0x2, 0x24, 0x6, 0x6, 0xfffffffffffffffc, 0x100fff}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) lchown(&(0x7f0000000100)='./file0\x00', 0xee00, 0x0) 8.128945348s ago: executing program 6 (id=1831): preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) close(0xffffffffffffffff) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) syz_usb_connect(0x5, 0x24, &(0x7f0000000c80)={{0x12, 0x1, 0x250, 0xe9, 0x97, 0x3f, 0x40, 0xc45, 0x800a, 0x5a9d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0x81, 0x90, 0x98, "", [{{0x9, 0x4, 0xf9, 0x7, 0x0, 0x6, 0xc2, 0x45, 0xe}}]}}]}}, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0}) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x2c, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendmmsg(r4, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) 7.904387384s ago: executing program 9 (id=1835): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x62, 0x0, 0xee01}, {0x1}, {0x0, 0x0, 0x200000000000, 0x1}, 0x400000, 0x0, 0x2, 0x0, 0x0, 0x3}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0xf, 0x20}}]}, 0xc4}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) pread64(r2, 0x0, 0x0, 0x275) syz_usb_control_io$uac2(r0, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_AGP_UNBIND(r3, 0x40086437, &(0x7f0000000100)={0x0, 0x27}) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000200)={0x1, 0x0, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000500), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x503, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x2b1f5}, [@IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x30}}, 0x800) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)={0x0, @private, @multicast1}, &(0x7f0000000b40)=0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000b80)={0x94, r5, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xd}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xd0}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x41004}, 0x20000004) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000040), 0x2, r13}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000580)={0x401, 0x1, &(0x7f0000000180)=[r13], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r14, 0x0, 0x0], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20b52c"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f00000003c0)={0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="00224fd400004f0de36691c9dbb2697f3cc047c9df3652f0e22076ec3dfb9823c19890d6648e35f472505381c423228947c22faff5108e5d682fb688d433e966ae70e5766895e6ebf4dfd05bbff655b442fd06fe89"], &(0x7f0000000380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x5c74}}}, &(0x7f0000000b00)={0x10, &(0x7f0000000480)={0x40, 0x3, 0x53, "cf222e6f85c21686e21d0aaf9dc7b68e2f3543b5e061b2e2a7d60157ce643ca256a798ec7d02403bc121dda9cd364bd19d8db9c0624644d073ece55e300b9127e355760a8141d082146b16fde9be00526c2388"}, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="210003000000b06004"]}) 5.915343576s ago: executing program 6 (id=1847): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) 5.736079512s ago: executing program 9 (id=1849): sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000cc0)={0x14, 0x0, 0x3, 0x3, 0x70bd25, 0x25dfdbfb, {0x1, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x5bf08cece5b99490}, 0x8000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3846101009049ca56f0a2f7", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',']) kexec_load(0x3, 0x2, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b", 0x7f, 0x5, 0xffffffff}, {0x0, 0x0, 0x100, 0x9}], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=[@iv={0x90, 0x117, 0x2, 0x78, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245"}], 0x90, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c801fb1", 0xba}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70", 0x33}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a", 0xaf}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b9198877e4e9d920ff", 0xea}], 0x6, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5.635885346s ago: executing program 6 (id=1851): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x2, 0x3, 0x6, 0x8, 0x4, 0x62}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="0503e5fdd3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 5.048713554s ago: executing program 7 (id=1854): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000280), &(0x7f0000000240)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000007000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 4.700879578s ago: executing program 7 (id=1857): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000340)={{0x1, 0x1, 0x0, 0x1, 0x80000000}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 4.684992472s ago: executing program 6 (id=1858): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x3, 0x0) fcntl$notify(r1, 0x402, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000d40)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0x4000000, 0xf0, 0xffffffff, 0x0, 0x310, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000005c0)={r6, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x12, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x8, 0x40000000000000]}}) r7 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88102) mq_notify(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x1f, 0x0, @thr={0x0, &(0x7f0000000380)="e2e15cbebc064b26984da94db1a0293b4923c90b88f0f6caddee92328660df1adb0487cb420591"}}) r8 = semget$private(0x0, 0x2, 0x10) semctl$SETVAL(r8, 0x1, 0x8, 0x0) semctl$SETALL(r8, 0x0, 0x9, &(0x7f0000000200)) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e23, 0xf, @local, 0x2}, 0x1c) ptrace(0x10, r9) semctl$GETPID(0x0, 0x3, 0xb, &(0x7f00000013c0)=""/4096) ptrace$setregset(0x4205, r9, 0x202, &(0x7f00000001c0)={0x0}) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000001280)={r5, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9603dda1af1ea80000000000000000000000deff00000000000000000000000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}}) 4.25373668s ago: executing program 7 (id=1861): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x100, 0x1000000000, 0x80000000000005, 0x5, 0x2000000, 0x7f, 0x2004cb, 0x0, 0xa1a, 0x5, 0x5, 0x2, 0x180000, 0x593, 0x20000002], 0x10000, 0x2002}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.383606063s ago: executing program 6 (id=1862): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000d00)=ANY=[], 0x10) close(r1) socket$kcm(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r2, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r3}, &(0x7f00000002c0), &(0x7f00000003c0)=r0}, 0x20) 3.329666197s ago: executing program 9 (id=1863): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010025bd7000ffdbdf2500000000", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0xc881}, 0x8080) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="004100000000000014002b8008000100", @ANYRES32=r3], 0x34}}, 0x4008000) 3.032698668s ago: executing program 6 (id=1865): syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e7cc6120c4108a81ad7d0102030109021b00010000c005090423000103"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000dc0)={0x44, &(0x7f0000000bc0)={0x0, 0x15, 0x3, "c39242"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f00000001c0)) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000001c0), 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000040)={0x0, 0x2, 0xffffff8f}) r3 = syz_open_dev$dri(0x0, 0xd1e, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r4, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000540), 0x3c) r5 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r7, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000200)=""/233, 0xe9}, {&(0x7f0000000300)=""/109, 0x6d}, {0x0}, {&(0x7f00000004c0)=""/8, 0x8}, {&(0x7f0000000580)=""/246, 0xf6}, {&(0x7f0000000680)=""/173, 0xad}, {&(0x7f0000000740)=""/251, 0xfb}], 0x8}, 0x3}, {{0x0, 0x0, &(0x7f0000004100), 0x0, &(0x7f0000004140)=""/164, 0xa4}, 0x81}], 0x2, 0x2, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f0000000100)={0x20000014}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r5, &(0x7f0000000000)={0xa0000001}) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) 2.859905498s ago: executing program 1 (id=1867): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000280), &(0x7f0000000240)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000007000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 2.857976391s ago: executing program 7 (id=1868): r0 = io_uring_setup(0x8a9, &(0x7f0000000300)={0x0, 0xe4ac, 0x80, 0x1, 0x390}) io_uring_register$IORING_UNREGISTER_NAPI(r0, 0x1c, &(0x7f0000000380), 0x1) clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x0, 0xfffffffffffeffff, 0x7, 0x0, 0xfffffffffffffffd, 0x77, 0x0, 0x0, 0x0, 0x8, 0x248e, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x81, 0x6, 0x5, 0x7ff, 0xf439}) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04"], 0xf) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2, r1}, 0xc) sendfile(r1, r2, &(0x7f0000000040)=0x10000, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20030a00) r4 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl(r4, 0x6f41, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) r7 = eventfd2(0x8, 0x1) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000140)={r7, 0x890d}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000894}, 0x4) close_range(r3, 0xffffffffffffffff, 0x0) 2.773509521s ago: executing program 9 (id=1869): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x2, 0x3, 0x6, 0x8, 0x4, 0x62}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="0503e5fdd3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.614493023s ago: executing program 1 (id=1871): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080), 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) 2.327807227s ago: executing program 1 (id=1873): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd24, 0x1, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x7b2d2bff, 0x4, 0x2bfe, 0x6, 0x9, 0x3, 0x5, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xfff1, 0xb}, {0xe, 0x9}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.304387147s ago: executing program 7 (id=1874): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x62, 0x0, 0xee01}, {0x1}, {0x0, 0x0, 0x200000000000, 0x1}, 0x400000, 0x0, 0x2, 0x0, 0x0, 0x3}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0xf, 0x20}}]}, 0xc4}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) pread64(r2, 0x0, 0x0, 0x275) syz_usb_control_io$uac2(r0, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_AGP_UNBIND(r3, 0x40086437, &(0x7f0000000100)={0x0, 0x27}) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000200)={0x1, 0x0, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000500), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x503, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x2b1f5}, [@IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x30}}, 0x800) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)={0x0, @private, @multicast1}, &(0x7f0000000b40)=0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000b80)={0x94, r5, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xd}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xd0}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x41004}, 0x20000004) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], 0x0, 0x3, r13}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000580)={0x401, 0x1, &(0x7f0000000180)=[r13], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r15, r14, r14], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20b52c"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f00000003c0)={0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="00224fd400004f0de36691c9dbb2697f3cc047c9df3652f0e22076ec3dfb9823c19890d6648e35f472505381c423228947c22faff5108e5d682fb688d433e966ae70e5766895e6ebf4dfd05bbff655b442fd06fe89"], &(0x7f0000000380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x5c74}}}, &(0x7f0000000b00)={0x10, &(0x7f0000000480)={0x40, 0x3, 0x53, "cf222e6f85c21686e21d0aaf9dc7b68e2f3543b5e061b2e2a7d60157ce643ca256a798ec7d02403bc121dda9cd364bd19d8db9c0624644d073ece55e300b9127e355760a8141d082146b16fde9be00526c2388"}, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="210003000000b06004"]}) 1.836921812s ago: executing program 9 (id=1876): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024917720042322023f77010203010902120001000010000904"], 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000002300)={&(0x7f00000000c0)=[{0x90, 0x1011, 0x0, &(0x7f0000000080)}], 0x1}) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f00000001c0)=0xa96) syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x2, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xf1, 0x10, 0x8, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x3e, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x80, 0x3, 0x9}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0x10, 0x7, 0x2, 0x8, 0xb}, 0x5c, &(0x7f0000000200)={0x5, 0xf, 0x5c, 0x3, [@ptm_cap={0x3}, @generic={0x49, 0x10, 0x4, "a42c504364fc2b9b4c3f06e928ac0fdf30fbd704c22e5724ccc64b2733a9391a18adf231a04ce8fa3469171a944b7cd8255dc8842f6dd78a5928391f182bc5d02b80d9c775b5"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x7, 0x3, 0x2, 0xfe}]}, 0x4, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x2409}}, {0x0, 0x0}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x2421}}, {0x0, 0x0}]}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000038c0)=[{{&(0x7f0000000580)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001840)=[{0x0}, {0x0}, {&(0x7f0000000740)="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", 0x1000}, {0x0}], 0x4, 0x0, 0x0, 0x4008000}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000055}}, {{&(0x7f0000002280)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000021c0)=[{&(0x7f0000002140)="6584091e306b93663bb4a66b2716a2824895aae52a7255308fe84472aff5c9326328e031a6a748982ab93b4d9d45663ab4aeef72f00c8e5a2d753bfe4314a9eb29bf9ce175fbe76f93785fc853df70508ed66df275d9d6e861b1e3bfa03a2d832a6a4ea800a868", 0x67}], 0x1, 0x0, 0x0, 0x2}}, {{&(0x7f0000002200)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000023c0)=[{&(0x7f0000002280)}], 0x1, &(0x7f0000003840)=[@rights={{0x24, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x70, 0x8000}}], 0x4, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ustat(0x7f, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x8907, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) openat$binderfs(0xffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x800, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x40084503, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, 0x0}], 0x1, 0x30, &(0x7f0000001d80)=[@cr0={0x0, 0x40000}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x6000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 1.809720781s ago: executing program 5 (id=1877): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e7cc6120c4108a81ad7d0102030109021b00010000c00509"], 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) r0 = syz_open_dev$dri(0x0, 0xd1e, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000540), 0x3c) r1 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000200)=""/233, 0xe9}, {&(0x7f0000000300)=""/109, 0x6d}, {&(0x7f0000000380)=""/216, 0xd8}, {0x0}, {&(0x7f0000000580)=""/246, 0xf6}, {&(0x7f0000000680)=""/173, 0xad}, {&(0x7f0000000740)=""/251, 0xfb}], 0x8}, 0x3}, {{&(0x7f0000000880)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000002b00)=[{0x0}, {&(0x7f0000000940)=""/193, 0xc1}, {&(0x7f0000000a40)=""/61, 0x3d}, {0x0}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000002980)=""/175, 0xaf}, {0x0}], 0x7, &(0x7f0000002b40)=""/224, 0xe0}, 0xa64}, {{&(0x7f0000002c40)=@x25, 0x80, 0x0, 0x0, &(0x7f0000002dc0)=""/106, 0x6a}, 0x4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004140)=""/164, 0xa4}, 0x81}], 0x4, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 1.644425656s ago: executing program 1 (id=1878): ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r0 = syz_create_resource$binfmt(0x0) r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) fcntl$setlease(r1, 0x400, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) creat(&(0x7f0000000140)='./file0\x00', 0x160) open$dir(&(0x7f0000000100)='./file0\x00', 0x4000, 0xc) timer_getoverrun(0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x80, 0x78e22799f4a46f40) read$watch_queue(r2, &(0x7f00000001c0)=""/178, 0xb2) 1.553696152s ago: executing program 5 (id=1879): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010025bd7000ffdbdf2500000000", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0xc881}, 0x8080) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010027bd", @ANYRES32=r1, @ANYBLOB="004100000000000014002b8008000100", @ANYRES32=r3], 0x34}}, 0x4008000) 1.361138185s ago: executing program 1 (id=1880): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0xd6b, &(0x7f0000000040)={0x0, 0x3bd0, 0xc000, 0x8, 0xc5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x6a9e, 0x7721, 0x16, 0x0, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3e, 0x0) 1.256313457s ago: executing program 5 (id=1881): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000280), &(0x7f0000000240)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000007000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 1.141937609s ago: executing program 7 (id=1882): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b77, &(0x7f0000000040)={0x0, 0xca72, 0xc000, 0x0, 0x20002fb}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 799.797956ms ago: executing program 5 (id=1883): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003c00)=ANY=[@ANYBLOB="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"], 0x2178}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000100)=0x3ff, 0x4) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040)=0x194f, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r5 = accept4(r3, 0x0, 0x0, 0x0) sendto(r5, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r4, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) 575.783489ms ago: executing program 1 (id=1884): r0 = io_uring_setup(0x8a9, &(0x7f0000000300)={0x0, 0xe4ac, 0x80, 0x1, 0x390}) io_uring_register$IORING_UNREGISTER_NAPI(r0, 0x1c, &(0x7f0000000380), 0x1) clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x0, 0xfffffffffffeffff, 0x7, 0x0, 0xfffffffffffffffd, 0x77, 0x0, 0x0, 0x0, 0x8, 0x248e, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x81, 0x6, 0x5, 0x7ff, 0xf439}) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04"], 0xf) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2, r1}, 0xc) sendfile(r1, r2, &(0x7f0000000040)=0x10000, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20030a00) r4 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl(r4, 0x6f41, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) r7 = eventfd2(0x8, 0x1) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000140)={r7, 0x890d}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000894}, 0x4) close_range(r3, 0xffffffffffffffff, 0x0) 333.757253ms ago: executing program 5 (id=1885): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x3, 0x0) fcntl$notify(r1, 0x402, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000d40)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0x4000000, 0xf0, 0xffffffff, 0x0, 0x310, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000005c0)={r6, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x12, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x8, 0x40000000000000]}}) r7 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88102) mq_notify(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x1f, 0x0, @thr={&(0x7f0000000300), 0x0}}) r8 = semget$private(0x0, 0x2, 0x10) semctl$SETVAL(r8, 0x1, 0x8, 0x0) semctl$SETALL(r8, 0x0, 0x9, &(0x7f0000000200)) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e23, 0xf, @local, 0x2}, 0x1c) ptrace(0x10, r9) semctl$GETPID(0x0, 0x3, 0xb, &(0x7f00000013c0)=""/4096) ptrace$setregset(0x4205, r9, 0x202, &(0x7f00000001c0)={0x0}) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000001280)={r5, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9603dda1af1ea80000000000000000000000deff00000000000000000000000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}}) 0s ago: executing program 5 (id=1886): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x2, 0x3, 0x6, 0x8, 0x4, 0x62}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="0503e5fdd3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) kernel console output (not intermixed with test programs): ort 6081 - 0 [ 230.969690][ T7362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.970503][ T7635] netlink: 'syz.4.633': attribute type 9 has an invalid length. [ 230.970523][ T7635] netlink: 'syz.4.633': attribute type 7 has an invalid length. [ 230.970534][ T7635] netlink: 'syz.4.633': attribute type 8 has an invalid length. [ 231.138497][ T7362] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.360628][ T1779] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.462655][ T3326] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.462869][ T3326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.557044][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.557175][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.691825][ T7390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.802197][ T1779] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.843307][ T5269] 8021q: adding VLAN 0 to HW filter on device eth5 [ 233.875878][ T7390] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.931283][ T173] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.931391][ T173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.940932][ T7383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.151782][ T1779] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.198041][ T173] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.198120][ T173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.330302][ T7383] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.404666][ T1178] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.404875][ T1178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.460473][ T1178] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.460635][ T1178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.891000][ T7674] netlink: 72 bytes leftover after parsing attributes in process `syz.4.637'. [ 236.243770][ T5747] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 236.395644][ T5747] usb 5-1: Using ep0 maxpacket: 32 [ 236.414168][ T5747] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.414183][ T5747] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 236.447724][ T5747] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 236.447750][ T5747] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.447760][ T5747] usb 5-1: Product: syz [ 236.447768][ T5747] usb 5-1: Manufacturer: syz [ 236.447775][ T5747] usb 5-1: SerialNumber: syz [ 236.467264][ T5747] usb 5-1: config 0 descriptor?? [ 236.574052][ T1779] bridge_slave_1: left allmulticast mode [ 236.574075][ T1779] bridge_slave_1: left promiscuous mode [ 236.581479][ T1779] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.726326][ T1779] bridge_slave_0: left allmulticast mode [ 236.726349][ T1779] bridge_slave_0: left promiscuous mode [ 236.726498][ T1779] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.905516][ T5739] usb 5-1: USB disconnect, device number 7 [ 237.243969][ T1779] bridge_slave_1: left allmulticast mode [ 237.243993][ T1779] bridge_slave_1: left promiscuous mode [ 237.244151][ T1779] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.344732][ T1779] bridge_slave_0: left allmulticast mode [ 237.344756][ T1779] bridge_slave_0: left promiscuous mode [ 237.346990][ T1779] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.503920][ T5621] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 238.503945][ T4923] Bluetooth: hci0: command 0x1003 tx timeout [ 238.708403][ T1779] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.784521][ T1779] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.831220][ T1779] bond0 (unregistering): Released all slaves [ 238.960959][ T7723] netlink: 72 bytes leftover after parsing attributes in process `syz.4.647'. [ 239.614550][ T1779] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.674567][ T1779] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.715765][ T1779] bond0 (unregistering): Released all slaves [ 239.743816][ T5718] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 239.767706][ T5269] 8021q: adding VLAN 0 to HW filter on device eth6 [ 239.861866][ T7362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.914089][ T5718] usb 5-1: Using ep0 maxpacket: 32 [ 239.929851][ T5718] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.929890][ T5718] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 239.947589][ T5718] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 239.947630][ T5718] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.947650][ T5718] usb 5-1: Product: syz [ 239.947664][ T5718] usb 5-1: Manufacturer: syz [ 239.947678][ T5718] usb 5-1: SerialNumber: syz [ 240.014654][ T5718] usb 5-1: config 0 descriptor?? [ 240.401896][ T5747] usb 5-1: USB disconnect, device number 8 [ 240.519002][ T7383] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.629523][ T7390] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.120219][ T7768] netlink: 12 bytes leftover after parsing attributes in process `syz.1.654'. [ 241.702596][ T7788] netlink: 72 bytes leftover after parsing attributes in process `syz.4.656'. [ 241.812406][ T5269] 8021q: adding VLAN 0 to HW filter on device eth7 [ 242.539140][ T7362] veth0_vlan: entered promiscuous mode [ 242.597364][ T7390] veth0_vlan: entered promiscuous mode [ 242.614192][ T7383] veth0_vlan: entered promiscuous mode [ 243.057291][ T7362] veth1_vlan: entered promiscuous mode [ 243.095268][ T7390] veth1_vlan: entered promiscuous mode [ 243.124983][ T5269] 8021q: adding VLAN 0 to HW filter on device eth8 [ 243.194634][ T7383] veth1_vlan: entered promiscuous mode [ 243.591858][ T168] Bluetooth: hci0: Frame reassembly failed (-84) [ 243.752533][ T7362] veth0_macvtap: entered promiscuous mode [ 243.778748][ T7390] veth0_macvtap: entered promiscuous mode [ 243.943034][ T7383] veth0_macvtap: entered promiscuous mode [ 243.970017][ T7362] veth1_macvtap: entered promiscuous mode [ 243.976940][ T7390] veth1_macvtap: entered promiscuous mode [ 243.989459][ T7383] veth1_macvtap: entered promiscuous mode [ 244.050178][ T7362] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.223839][ T1779] hsr_slave_0: left promiscuous mode [ 244.265101][ T1779] hsr_slave_1: left promiscuous mode [ 244.267793][ T1779] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.267811][ T1779] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.315218][ T1779] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.315249][ T1779] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.444042][ T5739] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 244.483724][ T1779] hsr_slave_0: left promiscuous mode [ 244.531947][ T1779] hsr_slave_1: left promiscuous mode [ 244.532594][ T1779] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.532609][ T1779] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.556014][ T1779] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.556040][ T1779] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.652797][ T5739] usb 5-1: unable to get BOS descriptor or descriptor too short [ 244.660928][ T5739] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 244.660955][ T5739] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 244.661016][ T5739] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 244.697512][ T5739] usb 5-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 244.697530][ T5739] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.697540][ T5739] usb 5-1: Product: syz [ 244.697547][ T5739] usb 5-1: Manufacturer: syz [ 244.697554][ T5739] usb 5-1: SerialNumber: syz [ 244.791235][ T1779] veth1_macvtap: left promiscuous mode [ 244.791325][ T1779] veth0_macvtap: left promiscuous mode [ 244.791540][ T1779] veth1_vlan: left promiscuous mode [ 244.791688][ T1779] veth0_vlan: left promiscuous mode [ 244.928895][ T5739] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 244.986123][ T1779] veth1_macvtap: left promiscuous mode [ 244.986236][ T1779] veth0_macvtap: left promiscuous mode [ 244.986434][ T1779] veth1_vlan: left promiscuous mode [ 244.986560][ T1779] veth0_vlan: left promiscuous mode [ 245.130256][ T5739] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 245.147969][ T5739] usb 5-1: USB disconnect, device number 9 [ 245.242710][ T7406] udevd[7406]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 245.623826][ T4923] Bluetooth: hci0: command 0x1003 tx timeout [ 245.628360][ T5621] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 246.170433][ T1779] team0 (unregistering): Port device team_slave_1 removed [ 246.236999][ T1779] team0 (unregistering): Port device team_slave_0 removed [ 246.475004][ T5739] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 246.629628][ T5739] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.629681][ T5739] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 246.629722][ T5739] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 246.629746][ T5739] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.648970][ T5739] usb 2-1: config 0 descriptor?? [ 246.861634][ T7845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.876752][ T7845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.071894][ T1779] team_slave_1 (unregistering): left promiscuous mode [ 247.071928][ T1779] team_slave_1 (unregistering): left allmulticast mode [ 247.104407][ T1779] team0 (unregistering): Port device team_slave_1 removed [ 247.130492][ T1779] team_slave_0 (unregistering): left promiscuous mode [ 247.130515][ T1779] team_slave_0 (unregistering): left allmulticast mode [ 247.187076][ T1779] team0 (unregistering): Port device team_slave_0 removed [ 247.638171][ T7390] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.662013][ T7383] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.673115][ T5269] 8021q: adding VLAN 0 to HW filter on device eth9 [ 247.768951][ T5739] ath6kl: Failed to submit usb control message: -110 [ 247.769005][ T5739] ath6kl: unable to send the bmi data to the device: -110 [ 247.769019][ T5739] ath6kl: Unable to send get target info: -110 [ 247.822274][ T5739] ath6kl: Failed to init ath6kl core: -110 [ 247.823463][ T5739] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 247.864049][ T7362] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.160661][ T7390] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.176241][ T7383] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.206025][ T1905] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.208414][ T1905] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.212741][ T1905] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.260679][ T1905] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.273798][ T1905] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.288331][ T1905] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.290956][ T1905] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.320057][ T1905] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.324006][ T1905] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.389838][ T1905] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.488662][ T1905] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.629135][ T55] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.286974][ T4189] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.286993][ T4189] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.497428][ T1905] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.497448][ T1905] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.844891][ T5269] 8021q: adding VLAN 0 to HW filter on device eth10 [ 250.874009][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.874029][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.957939][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.957959][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.070001][ T1905] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.070021][ T1905] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.235116][ T5880] usb 2-1: USB disconnect, device number 9 [ 251.577965][ T5710] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 251.704543][ T1905] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.704559][ T1905] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.759679][ T5710] usb 5-1: Using ep0 maxpacket: 32 [ 251.781448][ T5710] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 251.781476][ T5710] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.781494][ T5710] usb 5-1: config 0 has no interface number 0 [ 251.781538][ T5710] usb 5-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 251.838231][ T5710] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 251.838262][ T5710] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.838281][ T5710] usb 5-1: Product: syz [ 251.838295][ T5710] usb 5-1: Manufacturer: syz [ 251.838310][ T5710] usb 5-1: SerialNumber: syz [ 251.875945][ T5710] usb 5-1: config 0 descriptor?? [ 251.892131][ T5710] radio-si470x 5-1:0.35: could not find interrupt in endpoint [ 251.892212][ T5710] radio-si470x 5-1:0.35: probe with driver radio-si470x failed with error -5 [ 252.087764][ T5710] radio-raremono 5-1:0.35: this is not Thanko's Raremono. [ 252.088266][ T5710] usbhid 5-1:0.35: couldn't find an input interrupt endpoint [ 252.291232][ T7889] program syz.4.676 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 252.483186][ T5710] usb 5-1: USB disconnect, device number 10 [ 255.698323][ T7924] netlink: set zone limit has 4 unknown bytes [ 255.711013][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.425182][ T4923] Bluetooth: hci0: command 0x1003 tx timeout [ 256.443969][ T5621] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 257.272100][ T37] audit: type=1800 audit(1781297566.836:2): pid=7971 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.691" name="SYSV798dd825" dev="tmpfs" ino=0 res=0 errno=0 [ 264.360609][ T5710] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 264.529904][ T5710] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 264.529955][ T5710] usb 8-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 264.529978][ T5710] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.569110][ T5710] usb 8-1: config 0 descriptor?? [ 264.569875][ T8018] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 264.823217][ T5710] usbhid 8-1:0.0: can't add hid device: -71 [ 264.823342][ T5710] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 264.850866][ T5710] usb 8-1: USB disconnect, device number 2 [ 265.323610][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 265.733108][ T5269] 8021q: adding VLAN 0 to HW filter on device eth11 [ 266.335343][ T5868] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 266.497724][ T5868] usb 7-1: Using ep0 maxpacket: 32 [ 266.499955][ T5868] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 266.499979][ T5868] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 266.524678][ T5868] usb 7-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 266.524708][ T5868] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.524726][ T5868] usb 7-1: Product: syz [ 266.524739][ T5868] usb 7-1: Manufacturer: syz [ 266.524754][ T5868] usb 7-1: SerialNumber: syz [ 266.619867][ T5868] usb 7-1: config 0 descriptor?? [ 267.356584][ T5868] usb 7-1: USB disconnect, device number 2 [ 268.667974][ T5269] 8021q: adding VLAN 0 to HW filter on device eth12 [ 268.903866][ T5621] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 269.217284][ T8107] syz.6.721 (8107) used greatest stack depth: 18048 bytes left [ 270.027740][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.403746][ T5615] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 270.568023][ T5615] usb 6-1: unable to get BOS descriptor or descriptor too short [ 270.569891][ T5615] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 270.599702][ T5615] usb 6-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 270.599732][ T5615] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.599752][ T5615] usb 6-1: Product: syz [ 270.599766][ T5615] usb 6-1: Manufacturer: syz [ 270.599780][ T5615] usb 6-1: SerialNumber: syz [ 270.689079][ T4923] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 270.730728][ T4923] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 270.757668][ T4923] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 270.778603][ T4923] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 270.781371][ T4923] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 271.016163][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.104355][ T5615] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 271.152925][ T5615] usb 6-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 271.152954][ T5615] usb 6-1: found format II with max.bitrate = 4, frame size=7372 [ 271.347653][ T5747] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 271.506948][ T5747] usb 2-1: Using ep0 maxpacket: 32 [ 271.510654][ T5747] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.510680][ T5747] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 271.518707][ T5747] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 271.518747][ T5747] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.518766][ T5747] usb 2-1: Product: syz [ 271.518786][ T5747] usb 2-1: Manufacturer: syz [ 271.518800][ T5747] usb 2-1: SerialNumber: syz [ 271.578516][ T5747] usb 2-1: config 0 descriptor?? [ 271.655751][ T8120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.656338][ T8120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.680334][ T5615] usb 6-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 271.680360][ T5615] usb 6-1: found format II with max.bitrate = 4, frame size=7372 [ 271.872540][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.904883][ T5615] usb 6-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 272.071539][ T5615] usb 6-1: USB disconnect, device number 2 [ 272.304101][ T5868] usb 2-1: USB disconnect, device number 10 [ 272.543456][ T8156] udevd[8156]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 272.568224][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.985116][ T5614] Bluetooth: hci0: command tx timeout [ 273.736380][ T12] bridge_slave_1: left allmulticast mode [ 273.736414][ T12] bridge_slave_1: left promiscuous mode [ 273.736675][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.783773][ T5621] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 273.783786][ T5614] Bluetooth: hci1: command 0x1003 tx timeout [ 273.928720][ T5615] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 273.959690][ T12] bridge_slave_0: left allmulticast mode [ 273.959724][ T12] bridge_slave_0: left promiscuous mode [ 273.959973][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.100971][ T5615] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 274.101008][ T5615] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 274.101028][ T5615] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 274.101075][ T5615] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 274.101100][ T5615] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 274.101127][ T5615] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 274.103271][ T5615] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 274.103298][ T5615] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 274.103317][ T5615] usb 6-1: Product: syz [ 274.103331][ T5615] usb 6-1: Manufacturer: syz [ 274.232011][ T8177] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 274.251287][ T5615] cdc_wdm 6-1:1.0: skipping garbage [ 274.251300][ T5615] cdc_wdm 6-1:1.0: skipping garbage [ 274.264442][ T5615] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 274.264471][ T5615] cdc_wdm 6-1:1.0: Unknown control protocol [ 274.455715][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 274.455791][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 274.457929][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 274.457959][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 274.458203][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 274.458223][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 274.459582][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 274.459603][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 274.459822][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 274.459840][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 274.460085][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 274.460103][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 274.460360][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 274.460380][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 274.460603][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 274.460622][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 274.460845][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 274.460863][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 274.461084][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 274.461103][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 274.503808][ T5621] Bluetooth: hci3: command 0x1003 tx timeout [ 274.503862][ T4923] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 274.545012][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 274.633816][ T10] usb 6-1: USB disconnect, device number 3 [ 274.925066][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 275.074842][ T4923] Bluetooth: hci0: command tx timeout [ 277.277499][ T4923] Bluetooth: hci0: command tx timeout [ 277.306238][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.394336][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.447316][ T12] bond0 (unregistering): Released all slaves [ 277.479062][ T8184] process 'syz.1.741' launched './file0' with NULL argv: empty string added [ 277.946433][ T5718] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 278.005711][ T12] tipc: Left network mode [ 278.144063][ T5718] usb 2-1: config 0 has an invalid interface number: 205 but max is 0 [ 278.144093][ T5718] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 278.144111][ T5718] usb 2-1: config 0 has no interface number 0 [ 278.144151][ T5718] usb 2-1: config 0 interface 205 has no altsetting 0 [ 278.194293][ T5718] usb 2-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 278.194324][ T5718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.194344][ T5718] usb 2-1: Product: syz [ 278.194358][ T5718] usb 2-1: Manufacturer: syz [ 278.194372][ T5718] usb 2-1: SerialNumber: syz [ 278.302842][ T5718] usb 2-1: config 0 descriptor?? [ 278.375036][ T5718] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 278.375109][ T5718] dvb-usb: bulk message failed: -22 (3/0) [ 278.431002][ T5718] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 278.431998][ T5718] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 278.432054][ T5718] usb 2-1: media controller created [ 278.482381][ T5718] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 278.515243][ T5718] dvb-usb: bulk message failed: -22 (6/0) [ 278.515388][ T5718] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 278.548088][ T5718] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5 [ 278.686366][ T5718] dvb-usb: schedule remote query interval to 150 msecs. [ 278.686445][ T5718] dvb-usb: bulk message failed: -22 (3/0) [ 278.707331][ T5718] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 278.852854][ T5718] dvb-usb: bulk message failed: -22 (1/0) [ 278.852907][ T5718] dvb-usb: error while querying for an remote control event. [ 279.013686][ T5718] dvb-usb: bulk message failed: -22 (1/0) [ 279.013718][ T5718] dvb-usb: error while querying for an remote control event. [ 279.175009][ T5718] dvb-usb: bulk message failed: -22 (1/0) [ 279.175040][ T5718] dvb-usb: error while querying for an remote control event. [ 279.303807][ T4923] Bluetooth: hci0: command tx timeout [ 279.333747][ T5718] dvb-usb: bulk message failed: -22 (1/0) [ 279.333780][ T5718] dvb-usb: error while querying for an remote control event. [ 279.493654][ T5718] dvb-usb: bulk message failed: -22 (1/0) [ 279.493684][ T5718] dvb-usb: error while querying for an remote control event. [ 279.653688][ T5718] dvb-usb: bulk message failed: -22 (1/0) [ 279.653721][ T5718] dvb-usb: error while querying for an remote control event. [ 279.663516][ T8129] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.663827][ T8129] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.664092][ T8129] bridge_slave_0: entered allmulticast mode [ 279.666574][ T8129] bridge_slave_0: entered promiscuous mode [ 279.712752][ T5269] 8021q: adding VLAN 0 to HW filter on device eth13 [ 279.714208][ T8129] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.714322][ T8129] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.714522][ T8129] bridge_slave_1: entered allmulticast mode [ 279.757276][ T8129] bridge_slave_1: entered promiscuous mode [ 279.815191][ T5718] dvb-usb: bulk message failed: -22 (1/0) [ 279.815224][ T5718] dvb-usb: error while querying for an remote control event. [ 279.833776][ T5747] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 279.973732][ T5718] dvb-usb: bulk message failed: -22 (1/0) [ 279.973764][ T5718] dvb-usb: error while querying for an remote control event. [ 279.993786][ T5747] usb 7-1: Using ep0 maxpacket: 16 [ 280.044513][ T4923] Bluetooth: hci6: Malformed LE Event: 0x0d [ 280.133658][ T5718] dvb-usb: bulk message failed: -22 (1/0) [ 280.133691][ T5718] dvb-usb: error while querying for an remote control event. [ 280.301116][ T5718] dvb-usb: bulk message failed: -22 (1/0) [ 280.301150][ T5718] dvb-usb: error while querying for an remote control event. [ 280.453663][ T5718] dvb-usb: bulk message failed: -22 (1/0) [ 280.453695][ T5718] dvb-usb: error while querying for an remote control event. [ 280.613684][ T5718] dvb-usb: bulk message failed: -22 (1/0) [ 280.613717][ T5718] dvb-usb: error while querying for an remote control event. [ 280.773689][ T5718] dvb-usb: bulk message failed: -22 (1/0) [ 280.773724][ T5718] dvb-usb: error while querying for an remote control event. [ 280.951225][ T5718] dvb-usb: bulk message failed: -22 (1/0) [ 280.957580][ T5718] dvb-usb: error while querying for an remote control event. [ 281.043701][ T5747] usb 7-1: unable to get BOS descriptor or descriptor too short [ 281.057488][ T5747] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 281.057529][ T5747] usb 7-1: can't read configurations, error -71 [ 281.113682][ T5718] dvb-usb: bulk message failed: -22 (1/0) [ 281.113717][ T5718] dvb-usb: error while querying for an remote control event. [ 281.196337][ T10] usb 2-1: USB disconnect, device number 11 [ 281.384798][ T4923] Bluetooth: hci0: command tx timeout [ 281.527860][ T8129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.577793][ T8129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.727245][ T10] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 281.916251][ T8129] team0: Port device team_slave_0 added [ 281.934504][ T8129] team0: Port device team_slave_1 added [ 282.670030][ T12] hsr_slave_0: left promiscuous mode [ 282.742900][ T12] hsr_slave_1: left promiscuous mode [ 282.750241][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.750268][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.786426][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.786452][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.915041][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 282.916989][ T12] veth1_macvtap: left promiscuous mode [ 282.917084][ T12] veth0_macvtap: left promiscuous mode [ 282.917322][ T12] veth1_vlan: left promiscuous mode [ 282.917479][ T12] veth0_vlan: left promiscuous mode [ 283.063985][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 283.075233][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 283.075260][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 283.075285][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 283.075308][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 283.075348][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 283.075370][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.323375][ T10] usb 2-1: GET_CAPABILITIES returned 0 [ 283.323433][ T10] usbtmc 2-1:16.0: can't read capabilities [ 283.562118][ T10] usb 2-1: USB disconnect, device number 12 [ 284.484789][ T12] team0 (unregistering): Port device team_slave_1 removed [ 284.554231][ T12] team0 (unregistering): Port device team_slave_0 removed [ 284.976784][ T8129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.976795][ T8129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 284.976810][ T8129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.082643][ T8129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.082658][ T8129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 285.082677][ T8129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.334159][ T8129] hsr_slave_0: entered promiscuous mode [ 285.430259][ T8129] hsr_slave_1: entered promiscuous mode [ 285.703744][ T36] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 285.873796][ T36] usb 2-1: Using ep0 maxpacket: 8 [ 285.875801][ T36] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 285.875826][ T36] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 285.875849][ T36] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 285.875869][ T36] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 285.875905][ T36] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 285.875924][ T36] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.400381][ T36] usb 2-1: GET_CAPABILITIES returned 0 [ 286.400424][ T36] usbtmc 2-1:16.0: can't read capabilities [ 286.540028][ T8368] tipc: Started in network mode [ 286.540060][ T8368] tipc: Node identity 82d4b7de7425, cluster identity 4711 [ 286.564469][ T8368] tipc: Enabled bearer , priority 0 [ 286.614392][ T5868] usb 2-1: USB disconnect, device number 13 [ 286.646779][ T5269] 8021q: adding VLAN 0 to HW filter on device eth14 [ 286.657548][ T8365] tipc: Resetting bearer [ 286.786832][ T8369] syzkaller0: entered promiscuous mode [ 286.786858][ T8369] syzkaller0: entered allmulticast mode [ 286.854183][ T8364] tipc: Resetting bearer [ 286.974829][ T8364] tipc: Disabling bearer [ 288.902617][ T8129] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 289.036520][ T8129] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 289.037206][ T8129] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 289.251826][ T8129] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 289.264259][ T8129] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 289.365201][ T8129] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 289.371823][ T5269] 8021q: adding VLAN 0 to HW filter on device eth15 [ 289.377726][ T8129] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 289.637208][ T8129] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 290.329231][ T8129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.484569][ T8129] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.560572][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.560748][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.573309][ T173] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.574766][ T173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.818893][ T8445] tipc: Started in network mode [ 290.818925][ T8445] tipc: Node identity 6e13e6945ffa, cluster identity 4711 [ 290.819100][ T8445] tipc: Enabled bearer , priority 0 [ 290.822655][ T8445] syzkaller0: entered promiscuous mode [ 290.822680][ T8445] syzkaller0: entered allmulticast mode [ 290.888421][ T8445] tipc: Resetting bearer [ 290.935589][ T8444] tipc: Resetting bearer [ 290.982083][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888031d0cc00: rx timeout, send abort [ 290.986107][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888031d0cc00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 291.196072][ T8444] tipc: Disabling bearer [ 291.381230][ T5269] 8021q: adding VLAN 0 to HW filter on device eth16 [ 292.215181][ T8129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.393602][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 292.420257][ T8493] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 292.420391][ T8493] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 293.473657][ T4923] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 293.844741][ T8129] veth0_vlan: entered promiscuous mode [ 293.907583][ T8129] veth1_vlan: entered promiscuous mode [ 294.008951][ T8129] veth0_macvtap: entered promiscuous mode [ 294.037065][ T8129] veth1_macvtap: entered promiscuous mode [ 294.082338][ T8129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.139385][ T8129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.172157][ T173] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.172376][ T173] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.172413][ T173] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.172446][ T173] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.505851][ T8536] netlink: 112 bytes leftover after parsing attributes in process `syz.7.825'. [ 294.505921][ T8536] netlink: 232 bytes leftover after parsing attributes in process `syz.7.825'. [ 297.393403][ T3326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.393424][ T3326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.480221][ T3326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.480240][ T3326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.744910][ T4923] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 302.984898][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 304.423900][ T8648] Invalid logical block size (8192) [ 305.175522][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 305.218284][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 305.282379][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 305.506807][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 305.538849][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 305.709826][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 306.503953][ T8658] tipc: Enabled bearer , priority 0 [ 306.507518][ T8658] syzkaller0: entered promiscuous mode [ 306.507543][ T8658] syzkaller0: entered allmulticast mode [ 306.561124][ T8658] tipc: Resetting bearer [ 306.570674][ T36] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 306.643396][ T8667] netlink: 24 bytes leftover after parsing attributes in process `syz.6.852'. [ 306.824377][ T8657] tipc: Resetting bearer [ 306.896445][ T36] usb 9-1: Using ep0 maxpacket: 32 [ 307.615644][ T36] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.615673][ T36] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 307.620892][ T36] usb 9-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 307.620932][ T36] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.620952][ T36] usb 9-1: Product: syz [ 307.620967][ T36] usb 9-1: Manufacturer: syz [ 307.620981][ T36] usb 9-1: SerialNumber: syz [ 307.645127][ T36] usb 9-1: config 0 descriptor?? [ 308.543018][ T5710] usb 9-1: USB disconnect, device number 2 [ 309.006597][ T8657] tipc: Disabling bearer [ 309.261322][ T10] tipc: Node number set to 4143036382 [ 312.121641][ T5627] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 312.220924][ T5718] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 312.284731][ T5627] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 312.284762][ T5627] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.292251][ T5627] usb 7-1: config 0 descriptor?? [ 312.410219][ T5718] usb 8-1: Using ep0 maxpacket: 32 [ 312.413639][ T5718] usb 8-1: config 0 has an invalid interface number: 35 but max is 0 [ 312.413666][ T5718] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.413685][ T5718] usb 8-1: config 0 has no interface number 0 [ 312.413727][ T5718] usb 8-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 312.418424][ T5718] usb 8-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 312.418451][ T5718] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.418471][ T5718] usb 8-1: Product: syz [ 312.418484][ T5718] usb 8-1: Manufacturer: syz [ 312.418498][ T5718] usb 8-1: SerialNumber: syz [ 312.451613][ T5718] usb 8-1: config 0 descriptor?? [ 312.492486][ T5718] radio-si470x 8-1:0.35: could not find interrupt in endpoint [ 312.492568][ T5718] radio-si470x 8-1:0.35: probe with driver radio-si470x failed with error -5 [ 312.684732][ T5718] radio-raremono 8-1:0.35: this is not Thanko's Raremono. [ 312.685370][ T5718] usbhid 8-1:0.35: couldn't find an input interrupt endpoint [ 312.791271][ T8722] tipc: Enabling of bearer rejected, failed to enable media [ 312.863026][ T5627] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 312.904826][ T8721] program syz.7.860 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 313.461413][ T5627] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 313.461439][ T5627] [drm] Initialized udl on minor 2 [ 313.485622][ T5821] usb 8-1: USB disconnect, device number 3 [ 313.538373][ T5627] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 313.579702][ T5627] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 313.635724][ T5710] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 313.687919][ T5627] usb 7-1: USB disconnect, device number 5 [ 313.699158][ T5710] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 314.869932][ T5718] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 315.866290][ T5718] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 315.866320][ T5718] usb 2-1: config 1 has no interface number 0 [ 315.866364][ T5718] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 315.866390][ T5718] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 315.866417][ T5718] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.920725][ T5718] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 315.920757][ T5718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.920778][ T5718] usb 2-1: Product: syz [ 315.920792][ T5718] usb 2-1: Manufacturer: syz [ 315.920807][ T5718] usb 2-1: SerialNumber: syz [ 315.972410][ T8771] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 317.179103][ T5718] usb 2-1: Error in usbnet_get_endpoints (-71) [ 317.212880][ T5718] usb 2-1: USB disconnect, device number 14 [ 318.244173][ T8821] syz_tun: entered allmulticast mode [ 318.618708][ T5718] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 318.781700][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.800376][ T5718] usb 2-1: Using ep0 maxpacket: 32 [ 318.804357][ T5718] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 318.804384][ T5718] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 318.804404][ T5718] usb 2-1: config 0 has no interface number 0 [ 318.804448][ T5718] usb 2-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 318.807238][ T5718] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 318.807266][ T5718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.807287][ T5718] usb 2-1: Product: syz [ 318.807301][ T5718] usb 2-1: Manufacturer: syz [ 318.807315][ T5718] usb 2-1: SerialNumber: syz [ 318.898293][ T5718] usb 2-1: config 0 descriptor?? [ 318.916155][ T5718] radio-si470x 2-1:0.35: could not find interrupt in endpoint [ 318.916244][ T5718] radio-si470x 2-1:0.35: probe with driver radio-si470x failed with error -5 [ 319.455589][ T5718] radio-raremono 2-1:0.35: this is not Thanko's Raremono. [ 320.133813][ T8823] program syz.1.887 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 320.232446][ T5718] usbhid 2-1:0.35: couldn't find an input interrupt endpoint [ 322.309489][ T5748] usb 2-1: USB disconnect, device number 15 [ 322.743663][ T5627] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 322.877694][ T8861] netlink: 16 bytes leftover after parsing attributes in process `syz.7.898'. [ 322.916194][ T5627] usb 9-1: Using ep0 maxpacket: 32 [ 322.918034][ T5627] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 322.918058][ T5627] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 322.920200][ T5627] usb 9-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 322.920228][ T5627] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.920246][ T5627] usb 9-1: Product: syz [ 322.920254][ T5627] usb 9-1: Manufacturer: syz [ 322.920261][ T5627] usb 9-1: SerialNumber: syz [ 322.924184][ T5627] usb 9-1: config 0 descriptor?? [ 323.369138][ T4923] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 323.512341][ T5627] usb 9-1: USB disconnect, device number 3 [ 324.170749][ T8891] syzkaller0: entered promiscuous mode [ 324.170765][ T8891] syzkaller0: entered allmulticast mode [ 324.725117][ T5620] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 325.252056][ T1886] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 326.494721][ T5620] Bluetooth: hci6: command 0x0406 tx timeout [ 326.505644][ T5620] Bluetooth: hci2: command 0x0406 tx timeout [ 326.565344][ T5614] Bluetooth: hci5: command 0x0406 tx timeout [ 329.882001][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 330.412166][ T8918] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5) [ 330.532757][ T8918] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 330.700958][ T8918] vhci_hcd vhci_hcd.0: Device attached [ 331.234152][ T5880] usb 50-1: SetAddress Request (2) to port 0 [ 331.234219][ T5880] usb 50-1: new SuperSpeed USB device number 2 using vhci_hcd [ 331.430581][ T9008] vhci_hcd: connection reset by peer [ 331.508674][ T4923] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 331.549662][ T3326] vhci_hcd vhci_hcd.8: stop threads [ 331.563671][ T3326] vhci_hcd vhci_hcd.8: release socket [ 331.601393][ T3326] vhci_hcd vhci_hcd.8: disconnect device [ 332.574816][ T5748] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 332.742008][ T9057] syzkaller0: entered promiscuous mode [ 332.742026][ T9057] syzkaller0: entered allmulticast mode [ 332.767067][ T5748] usb 7-1: Using ep0 maxpacket: 32 [ 332.771421][ T5748] usb 7-1: config 0 has an invalid interface number: 35 but max is 0 [ 332.771450][ T5748] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 332.771511][ T5748] usb 7-1: config 0 has no interface number 0 [ 332.771550][ T5748] usb 7-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 332.856311][ T5748] usb 7-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 332.856392][ T5748] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.856412][ T5748] usb 7-1: Product: syz [ 332.856427][ T5748] usb 7-1: Manufacturer: syz [ 332.856442][ T5748] usb 7-1: SerialNumber: syz [ 332.898683][ T5748] usb 7-1: config 0 descriptor?? [ 332.904690][ T5748] radio-si470x 7-1:0.35: could not find interrupt in endpoint [ 332.904776][ T5748] radio-si470x 7-1:0.35: probe with driver radio-si470x failed with error -5 [ 332.915995][ T4923] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 333.115245][ T5748] radio-raremono 7-1:0.35: this is not Thanko's Raremono. [ 333.115619][ T5748] usbhid 7-1:0.35: couldn't find an input interrupt endpoint [ 333.331301][ T9046] program syz.6.949 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 333.623535][ T9077] netlink: 32 bytes leftover after parsing attributes in process `syz.8.960'. [ 333.667979][ T5718] usb 7-1: USB disconnect, device number 6 [ 333.801836][ T9077] befs: (loop8): No write support. Marking filesystem read-only [ 334.072215][ T9077] befs: (loop8): unable to read superblock [ 334.292900][ T9090] faux_driver vgem: [drm] Unknown color mode 55545; guessing buffer size. [ 334.840349][ T5747] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 336.721251][ T5880] usb 50-1: device descriptor read/8, error -110 [ 336.812452][ T5747] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 336.812485][ T5747] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.812504][ T5747] usb 8-1: Product: syz [ 336.812518][ T5747] usb 8-1: Manufacturer: syz [ 336.812533][ T5747] usb 8-1: SerialNumber: syz [ 336.855417][ T5747] usb 8-1: config 0 descriptor?? [ 337.061339][ T9108] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 337.176943][ T5880] usb usb50-port1: attempt power cycle [ 337.864288][ T5880] usb usb50-port1: unable to enumerate USB device [ 338.418101][ T5747] usb 8-1: USB disconnect, device number 4 [ 339.969531][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 340.290050][ T10] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 340.320740][ T9160] netlink: 8 bytes leftover after parsing attributes in process `syz.6.988'. [ 340.364912][ T5880] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 340.462636][ T10] usb 8-1: config 1 has an invalid interface number: 7 but max is 0 [ 340.462664][ T10] usb 8-1: config 1 has no interface number 0 [ 340.462698][ T10] usb 8-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 340.462712][ T10] usb 8-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 340.462726][ T10] usb 8-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.464836][ T10] usb 8-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 340.464863][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.464875][ T10] usb 8-1: Product: syz [ 340.464882][ T10] usb 8-1: Manufacturer: syz [ 340.464889][ T10] usb 8-1: SerialNumber: syz [ 340.532141][ T9155] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 340.570887][ T5880] usb 2-1: unable to get BOS descriptor or descriptor too short [ 340.572203][ T5880] usb 2-1: config 3 has an invalid interface number: 249 but max is 0 [ 340.572228][ T5880] usb 2-1: config 3 has no interface number 0 [ 340.572259][ T5880] usb 2-1: config 3 interface 249 has no altsetting 0 [ 340.575035][ T5880] usb 2-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=5a.9d [ 340.575062][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.575082][ T5880] usb 2-1: Product: syz [ 340.575097][ T5880] usb 2-1: Manufacturer: syz [ 340.575111][ T5880] usb 2-1: SerialNumber: syz [ 342.233304][ T5880] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 342.234426][ T5880] gspca_sn9c2028: read1 error -71 [ 342.255003][ T5880] gspca_sn9c2028: read1 error -71 [ 342.255404][ T5880] gspca_sn9c2028: read1 error -71 [ 342.255482][ T5880] sn9c2028 2-1:3.249: probe with driver sn9c2028 failed with error -71 [ 342.306614][ T5880] usb 2-1: USB disconnect, device number 16 [ 343.268202][ T10] usb 8-1: Error in usbnet_get_endpoints (-71) [ 343.288681][ T10] usb 8-1: USB disconnect, device number 5 [ 346.037156][ T5718] IPVS: starting estimator thread 0... [ 346.058664][ T9215] warning: `syz.6.1013' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 346.130771][ T9216] IPVS: using max 12 ests per chain, 28800 per kthread [ 346.584307][ T5748] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 346.768357][ T5748] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 346.768390][ T5748] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.778959][ T5748] usb 2-1: config 0 descriptor?? [ 347.021334][ T9223] tipc: Enabling of bearer rejected, failed to enable media [ 347.080465][ T5748] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 347.346308][ T5748] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 347.346333][ T5748] [drm] Initialized udl on minor 2 [ 347.541103][ T5748] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 347.542124][ T5748] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 347.582296][ T5747] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 347.587686][ T5748] usb 2-1: USB disconnect, device number 17 [ 347.593227][ T5747] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 348.550449][ T5718] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 348.723026][ T5718] usb 8-1: Using ep0 maxpacket: 32 [ 348.725564][ T5718] usb 8-1: config 0 has an invalid interface number: 35 but max is 0 [ 348.725591][ T5718] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.725610][ T5718] usb 8-1: config 0 has no interface number 0 [ 348.725642][ T5718] usb 8-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 348.728028][ T5718] usb 8-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 348.728062][ T5718] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.728082][ T5718] usb 8-1: Product: syz [ 348.728095][ T5718] usb 8-1: Manufacturer: syz [ 348.728103][ T5718] usb 8-1: SerialNumber: syz [ 348.731364][ T5718] usb 8-1: config 0 descriptor?? [ 348.826524][ T5718] radio-si470x 8-1:0.35: could not find interrupt in endpoint [ 348.826577][ T5718] radio-si470x 8-1:0.35: probe with driver radio-si470x failed with error -5 [ 349.038003][ T5718] radio-raremono 8-1:0.35: this is not Thanko's Raremono. [ 349.038488][ T5718] usbhid 8-1:0.35: couldn't find an input interrupt endpoint [ 349.254179][ T9254] program syz.7.1030 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 349.550249][ T10] usb 8-1: USB disconnect, device number 6 [ 350.046409][ T5748] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 350.208779][ T5748] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 350.208808][ T5748] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.216784][ T5748] usb 7-1: config 0 descriptor?? [ 350.481301][ T9280] tipc: Enabling of bearer rejected, failed to enable media [ 350.544344][ T5748] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 350.805842][ T5748] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 350.805866][ T5748] [drm] Initialized udl on minor 2 [ 351.033148][ T5748] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 351.033493][ T5748] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 351.057090][ T5748] usb 7-1: USB disconnect, device number 7 [ 351.072410][ T10] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 351.072761][ T10] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 354.192736][ T9344] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 354.311758][ T9344] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 354.870491][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 354.883610][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 354.917451][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 354.934139][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 354.940280][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 354.966323][ T9360] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1074'. [ 354.966479][ T9360] openvswitch: netlink: Flow actions attr not present in new flow. [ 357.152630][ T59] Bluetooth: hci1: command tx timeout [ 357.314365][ T5748] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 357.480150][ T5748] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 357.480178][ T5748] usb 2-1: config 1 has no interface number 0 [ 357.480231][ T5748] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 357.480326][ T5748] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 357.480381][ T5748] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.482760][ T5748] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 357.482788][ T5748] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.482808][ T5748] usb 2-1: Product: syz [ 357.482822][ T5748] usb 2-1: Manufacturer: syz [ 357.482837][ T5748] usb 2-1: SerialNumber: syz [ 357.603923][ T9377] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 357.813175][ T9392] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.949186][ T9392] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.435028][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 358.904276][ T9407] tipc: Enabled bearer , priority 0 [ 359.166750][ T9356] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.166868][ T9356] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.167107][ T9356] bridge_slave_0: entered allmulticast mode [ 359.227871][ T9356] bridge_slave_0: entered promiscuous mode [ 359.236208][ T9356] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.250225][ T9356] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.250472][ T9356] bridge_slave_1: entered allmulticast mode [ 359.285189][ T9356] bridge_slave_1: entered promiscuous mode [ 359.386117][ T59] Bluetooth: hci1: command tx timeout [ 359.463278][ T9405] tipc: Disabling bearer [ 359.903863][ T9356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.965019][ T9356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.144044][ T9356] team0: Port device team_slave_0 added [ 360.160617][ T9356] team0: Port device team_slave_1 added [ 360.221800][ T9356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.221818][ T9356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.221844][ T9356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.224638][ T9356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.224653][ T9356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.224679][ T9356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.510861][ T9356] hsr_slave_0: entered promiscuous mode [ 360.514283][ T9356] hsr_slave_1: entered promiscuous mode [ 360.515109][ T9356] debugfs: 'hsr0' already exists in 'hsr' [ 360.515129][ T9356] Cannot create hsr debugfs directory [ 360.539806][ T5748] usb 2-1: Error in usbnet_get_endpoints (-71) [ 360.612237][ T5748] usb 2-1: USB disconnect, device number 18 [ 361.599819][ T59] Bluetooth: hci1: command tx timeout [ 361.690653][ T9428] Bluetooth: hci3: Frame reassembly failed (-84) [ 361.691010][ T9428] Bluetooth: hci3: Frame reassembly failed (-84) [ 362.998804][ T9356] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 363.050455][ T9356] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 363.077839][ T9356] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 363.234325][ T9356] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 363.237020][ T9356] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 363.289096][ T9356] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 363.292928][ T9356] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 363.357862][ T9356] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 363.831502][ T4923] Bluetooth: hci1: command tx timeout [ 363.849821][ T9356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.908066][ T4923] Bluetooth: hci3: command 0x1003 tx timeout [ 363.939592][ T9356] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.944271][ T59] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 364.022460][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.022545][ T4189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.173064][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.216489][ T4189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.370533][ T5748] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 365.535364][ T5748] usb 8-1: config 1 has an invalid interface number: 7 but max is 0 [ 365.535392][ T5748] usb 8-1: config 1 has no interface number 0 [ 365.535434][ T5748] usb 8-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 365.535458][ T5748] usb 8-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 365.535481][ T5748] usb 8-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.537867][ T5748] usb 8-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 365.537885][ T5748] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.537896][ T5748] usb 8-1: Product: syz [ 365.537904][ T5748] usb 8-1: Manufacturer: syz [ 365.537911][ T5748] usb 8-1: SerialNumber: syz [ 365.650184][ T9464] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 368.351212][ T5748] usb 8-1: Error in usbnet_get_endpoints (-71) [ 368.397547][ T5748] usb 8-1: USB disconnect, device number 7 [ 368.590440][ T9356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 369.077924][ T9356] veth0_vlan: entered promiscuous mode [ 369.102112][ T9356] veth1_vlan: entered promiscuous mode [ 369.193153][ T9356] veth0_macvtap: entered promiscuous mode [ 369.213485][ T9356] veth1_macvtap: entered promiscuous mode [ 369.298676][ T9356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.329091][ T9356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 369.346353][ T173] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.346607][ T173] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.346646][ T173] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.346678][ T173] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.055904][ T159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.055922][ T159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.378739][ T1905] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.378761][ T1905] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.828705][ T9522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1117'. [ 370.828730][ T9522] openvswitch: netlink: Flow actions attr not present in new flow. [ 374.171351][ T9536] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1121'. [ 375.180065][ T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 375.372622][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 375.374642][ T10] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 375.374670][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.388634][ T10] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 375.604118][ T9556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.604721][ T9556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.710788][ T9556] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1129'. [ 375.727607][ T10] gspca_nw80x: reg_w err -71 [ 375.727743][ T10] nw80x 2-1:3.0: probe with driver nw80x failed with error -71 [ 375.851395][ T10] usb 2-1: USB disconnect, device number 19 [ 378.562804][ T9605] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1148'. [ 380.619935][ T9642] netlink: 'syz.7.1150': attribute type 4 has an invalid length. [ 381.181152][ T9650] netlink: 'syz.7.1150': attribute type 4 has an invalid length. [ 383.394112][ T9664] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 383.405116][ T5710] IPVS: starting estimator thread 0... [ 383.494060][ T9667] IPVS: using max 16 ests per chain, 38400 per kthread [ 383.978187][ T9671] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1169'. [ 385.079443][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 386.447718][ T9685] syzkaller0: entered promiscuous mode [ 386.447745][ T9685] syzkaller0: entered allmulticast mode [ 387.704284][ T5868] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 387.864309][ T5868] usb 2-1: Using ep0 maxpacket: 32 [ 387.866163][ T5868] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 387.866187][ T5868] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 387.870159][ T5868] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 387.870186][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.870206][ T5868] usb 2-1: Product: syz [ 387.870220][ T5868] usb 2-1: Manufacturer: syz [ 387.870234][ T5868] usb 2-1: SerialNumber: syz [ 387.964280][ T5868] usb 2-1: config 0 descriptor?? [ 388.475382][ T5748] usb 2-1: USB disconnect, device number 20 [ 388.534227][ T59] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 389.158923][ T9733] syzkaller0: entered promiscuous mode [ 389.158949][ T9733] syzkaller0: entered allmulticast mode [ 389.870724][ T9753] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 390.095484][ T59] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 390.597691][ T9773] syzkaller0: entered promiscuous mode [ 390.597716][ T9773] syzkaller0: entered allmulticast mode [ 391.051315][ T9779] syzkaller0: entered promiscuous mode [ 391.051343][ T9779] syzkaller0: entered allmulticast mode [ 391.624172][ T59] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 391.999968][ T5748] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 392.138779][ T5748] usb 10-1: device descriptor read/64, error -71 [ 392.399142][ T5748] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 392.534175][ T5748] usb 10-1: device descriptor read/64, error -71 [ 392.609072][ T10] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 392.652245][ T5748] usb usb10-port1: attempt power cycle [ 392.771674][ T10] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 392.771702][ T10] usb 2-1: config 1 has no interface number 0 [ 392.771745][ T10] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 392.771767][ T10] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 392.771781][ T10] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.773937][ T10] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 392.773966][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.773985][ T10] usb 2-1: Product: syz [ 392.773998][ T10] usb 2-1: Manufacturer: syz [ 392.774005][ T10] usb 2-1: SerialNumber: syz [ 392.778474][ T9818] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 392.950328][ T9826] syzkaller0: entered promiscuous mode [ 392.950354][ T9826] syzkaller0: entered allmulticast mode [ 393.039200][ T5748] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 393.058627][ T5748] usb 10-1: device descriptor read/8, error -71 [ 393.367706][ T5748] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 393.371571][ T10] usb 2-1: Error in usbnet_get_endpoints (-71) [ 393.389789][ T5748] usb 10-1: device descriptor read/8, error -71 [ 393.404701][ T10] usb 2-1: USB disconnect, device number 21 [ 393.434153][ T8041] udevd[8041]: setting mode of /dev/bus/usb/002/021 to 020664 failed: No such file or directory [ 393.434282][ T8041] udevd[8041]: setting owner of /dev/bus/usb/002/021 to uid=0, gid=0 failed: No such file or directory [ 393.508435][ T5748] usb usb10-port1: unable to enumerate USB device [ 394.746273][ T10] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 394.981250][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 394.983912][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 394.983937][ T10] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 394.986133][ T10] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 394.986160][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.986180][ T10] usb 2-1: Product: syz [ 394.986194][ T10] usb 2-1: Manufacturer: syz [ 394.986208][ T10] usb 2-1: SerialNumber: syz [ 394.989230][ T10] usb 2-1: config 0 descriptor?? [ 395.296945][ T5880] usb 2-1: USB disconnect, device number 22 [ 396.050255][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 396.423926][ T5880] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 396.599398][ T5880] usb 10-1: config 1 has an invalid interface number: 7 but max is 0 [ 396.599426][ T5880] usb 10-1: config 1 has no interface number 0 [ 396.599469][ T5880] usb 10-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 396.599496][ T5880] usb 10-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 396.599522][ T5880] usb 10-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.601908][ T5880] usb 10-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 396.601936][ T5880] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.601947][ T5880] usb 10-1: Product: syz [ 396.601954][ T5880] usb 10-1: Manufacturer: syz [ 396.601962][ T5880] usb 10-1: SerialNumber: syz [ 396.650519][ T823] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 396.710530][ T9892] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 396.872717][ T823] usb 2-1: Using ep0 maxpacket: 32 [ 396.877116][ T823] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 396.877141][ T823] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 396.879417][ T823] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 396.879434][ T823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.879444][ T823] usb 2-1: Product: syz [ 396.879451][ T823] usb 2-1: Manufacturer: syz [ 396.879458][ T823] usb 2-1: SerialNumber: syz [ 396.898122][ T823] usb 2-1: config 0 descriptor?? [ 397.376411][ T823] usb 2-1: USB disconnect, device number 23 [ 397.555816][ T5880] usb 10-1: Error in usbnet_get_endpoints (-71) [ 397.653451][ T5880] usb 10-1: USB disconnect, device number 6 [ 399.245045][ T5748] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 399.405511][ T5748] usb 7-1: Using ep0 maxpacket: 32 [ 399.409119][ T5748] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 399.409145][ T5748] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 399.412074][ T5748] usb 7-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 399.412103][ T5748] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.412123][ T5748] usb 7-1: Product: syz [ 399.412137][ T5748] usb 7-1: Manufacturer: syz [ 399.412149][ T5748] usb 7-1: SerialNumber: syz [ 399.474577][ T5748] usb 7-1: config 0 descriptor?? [ 399.962563][ T5748] usb 7-1: USB disconnect, device number 8 [ 400.324320][ T4923] Bluetooth: hci3: command 0x1003 tx timeout [ 400.324608][ T59] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 400.853142][ T9963] syzkaller0: entered promiscuous mode [ 400.853168][ T9963] syzkaller0: entered allmulticast mode [ 402.376056][ T5880] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 402.546006][ T5880] usb 7-1: Using ep0 maxpacket: 32 [ 402.552893][ T5880] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 402.552918][ T5880] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 402.555907][ T5880] usb 7-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 402.555936][ T5880] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.555949][ T5880] usb 7-1: Product: syz [ 402.555957][ T5880] usb 7-1: Manufacturer: syz [ 402.555964][ T5880] usb 7-1: SerialNumber: syz [ 402.576452][ T5880] usb 7-1: config 0 descriptor?? [ 403.145070][ T823] usb 7-1: USB disconnect, device number 9 [ 403.323494][T10006] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1312'. [ 404.598831][ T823] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 404.686409][ T59] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 404.688290][ T4923] Bluetooth: hci3: command 0x1003 tx timeout [ 404.801713][ T823] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 404.801745][ T823] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.807121][ T823] usb 7-1: config 0 descriptor?? [ 405.053642][T10025] tipc: Enabling of bearer rejected, failed to enable media [ 405.148284][ T823] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 405.252959][T10039] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 405.409878][ T823] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 405.409895][ T823] [drm] Initialized udl on minor 2 [ 405.677510][ T823] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 405.686025][ T823] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 405.707747][ T823] usb 7-1: USB disconnect, device number 10 [ 405.729578][ T5821] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 405.730096][ T5821] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 406.009329][ T10] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 406.070874][T10051] netlink: 56 bytes leftover after parsing attributes in process `syz.9.1330'. [ 406.169555][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 406.172570][ T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 406.172606][ T10] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 406.174848][ T10] usb 8-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 406.174876][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.174895][ T10] usb 8-1: Product: syz [ 406.174907][ T10] usb 8-1: Manufacturer: syz [ 406.174914][ T10] usb 8-1: SerialNumber: syz [ 406.180042][ T10] usb 8-1: config 0 descriptor?? [ 406.537557][T10058] tipc: Enabling of bearer rejected, failed to enable media [ 406.726954][ T10] usb 8-1: USB disconnect, device number 8 [ 407.008034][T10074] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 407.119773][T10077] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1339'. [ 407.244520][ T59] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 407.595768][T10093] syzkaller0: entered promiscuous mode [ 407.595784][T10093] syzkaller0: entered allmulticast mode [ 407.665973][ T823] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 407.879566][ T823] usb 10-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 407.879622][ T823] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 407.879644][ T823] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.386641][T10108] fuse: Bad value for 'fd' [ 408.433461][T10110] tipc: Enabling of bearer rejected, failed to enable media [ 408.531342][ T59] Bluetooth: hci0: command 0x0406 tx timeout [ 409.236490][ T10] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 409.396724][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 409.398962][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 409.398987][ T10] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 409.402879][ T10] usb 7-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 409.402907][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.403016][ T10] usb 7-1: Product: syz [ 409.403033][ T10] usb 7-1: Manufacturer: syz [ 409.403048][ T10] usb 7-1: SerialNumber: syz [ 409.467628][ T10] usb 7-1: config 0 descriptor?? [ 410.021550][ T5868] usb 7-1: USB disconnect, device number 11 [ 410.547049][T10143] tipc: Enabling of bearer rejected, failed to enable media [ 410.652458][ T5868] usb 10-1: USB disconnect, device number 7 [ 410.896897][ T4923] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 411.335811][T10168] syzkaller0: entered promiscuous mode [ 411.335828][T10168] syzkaller0: entered allmulticast mode [ 413.144550][ T10] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 413.724717][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 413.727332][ T10] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 413.727358][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 413.727377][ T10] usb 2-1: config 0 has no interface number 0 [ 413.727419][ T10] usb 2-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 413.732131][ T10] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 413.732160][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.732181][ T10] usb 2-1: Product: syz [ 413.732196][ T10] usb 2-1: Manufacturer: syz [ 413.732210][ T10] usb 2-1: SerialNumber: syz [ 413.816378][ T10] usb 2-1: config 0 descriptor?? [ 413.828085][ T10] radio-si470x 2-1:0.35: could not find interrupt in endpoint [ 413.828134][ T10] radio-si470x 2-1:0.35: probe with driver radio-si470x failed with error -5 [ 414.034727][ T10] radio-raremono 2-1:0.35: this is not Thanko's Raremono. [ 414.035296][ T10] usbhid 2-1:0.35: couldn't find an input interrupt endpoint [ 414.257238][T10170] program syz.1.1376 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 414.341008][ T31] usb 2-1: USB disconnect, device number 24 [ 414.479153][ T4923] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 414.599133][T10208] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 414.989937][T10216] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1392'. [ 415.915249][ T10] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 416.083396][ T10] usb 10-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 416.083428][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.190408][ T10] usb 10-1: config 0 descriptor?? [ 416.445681][T10234] tipc: Enabling of bearer rejected, failed to enable media [ 416.518678][ T10] udl 10-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 417.060798][ T10] [drm] Initialized udl 0.0.1 for 10-1:0.0 on minor 2 [ 417.060822][ T10] [drm] Initialized udl on minor 2 [ 417.088710][ C0] raw-gadget.0 gadget.9: ignoring, device is not running [ 417.090071][ T10] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 417.117117][ T10] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 417.135041][ T5710] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 417.153427][ T5710] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 417.153646][ T5710] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 417.178012][ T10] usb 10-1: USB disconnect, device number 8 [ 418.049117][T10277] syzkaller0: entered promiscuous mode [ 418.049134][T10277] syzkaller0: entered allmulticast mode [ 419.033220][T10297] netlink: 'syz.7.1425': attribute type 1 has an invalid length. [ 419.033257][T10297] netlink: 'syz.7.1425': attribute type 1 has an invalid length. [ 419.315292][ T823] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 419.496764][ T823] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 419.496783][ T823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.505030][ T823] usb 2-1: config 0 descriptor?? [ 419.696590][T10313] syzkaller0: entered promiscuous mode [ 419.696650][T10313] syzkaller0: entered allmulticast mode [ 419.792306][T10299] tipc: Enabling of bearer rejected, failed to enable media [ 419.983421][ T823] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 419.983906][ T823] [drm:udl_init] *ERROR* Selecting channel failed [ 420.057784][ T823] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 420.057810][ T823] [drm] Initialized udl on minor 2 [ 420.058955][ T823] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 420.059238][ T823] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 420.079864][ T5880] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 420.120786][ T5880] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 420.120922][ T5880] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 420.241015][ T823] usb 2-1: USB disconnect, device number 25 [ 423.093794][T10347] tipc: Started in network mode [ 423.093813][T10347] tipc: Node identity 46e130ff39ca, cluster identity 4711 [ 423.093926][T10347] tipc: Enabled bearer , priority 0 [ 423.334037][T10346] tipc: Disabling bearer [ 423.395583][ T5748] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 423.557333][ T5748] usb 10-1: Using ep0 maxpacket: 32 [ 423.579569][ T5748] usb 10-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 423.579601][ T5748] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.628565][ T5748] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 423.705828][ T5821] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 423.846817][T10345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.852176][T10345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.879915][ T5821] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 423.879946][ T5821] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.884449][ T5821] usb 8-1: config 0 descriptor?? [ 423.911543][T10345] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1441'. [ 423.916380][ T5748] gspca_nw80x: reg_w err -71 [ 423.916472][ T5748] nw80x 10-1:3.0: probe with driver nw80x failed with error -71 [ 423.966790][ T5748] usb 10-1: USB disconnect, device number 9 [ 424.149496][T10353] tipc: Enabling of bearer rejected, failed to enable media [ 424.224193][ T5821] udl 8-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 424.459438][ T5821] [drm] Initialized udl 0.0.1 for 8-1:0.0 on minor 2 [ 424.459464][ T5821] [drm] Initialized udl on minor 2 [ 424.704481][ T5821] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 424.704757][ T5821] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 424.708783][ T31] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 424.732825][ T31] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 424.732958][ T31] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 424.736473][ T5821] usb 8-1: USB disconnect, device number 9 [ 425.233566][ T823] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 425.417473][ T823] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 425.417502][ T823] usb 2-1: config 1 has no interface number 0 [ 425.417546][ T823] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 425.417569][ T823] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 425.417593][ T823] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.422410][ T823] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 425.422441][ T823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.422460][ T823] usb 2-1: Product: syz [ 425.422470][ T823] usb 2-1: Manufacturer: syz [ 425.422477][ T823] usb 2-1: SerialNumber: syz [ 425.508174][T10385] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 427.456191][ T823] usb 2-1: Error in usbnet_get_endpoints (-71) [ 427.497272][ T823] usb 2-1: USB disconnect, device number 26 [ 428.503504][ T5748] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 428.663761][ T5748] usb 7-1: Using ep0 maxpacket: 32 [ 428.670601][ T5748] usb 7-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 428.670629][ T5748] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.688962][ T5748] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 428.906170][T10410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.906764][T10410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.165622][T10410] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1465'. [ 429.196188][ T5748] gspca_nw80x: reg_w err -71 [ 429.196284][ T5748] nw80x 7-1:3.0: probe with driver nw80x failed with error -71 [ 430.192654][ T5748] usb 7-1: USB disconnect, device number 12 [ 431.363009][ T823] IPVS: starting estimator thread 0... [ 431.484897][T10440] IPVS: using max 10 ests per chain, 24000 per kthread [ 435.253279][T10502] fuse: Bad value for 'fd' [ 436.469006][ T4923] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 436.878636][T10531] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1511'. [ 436.878661][T10531] openvswitch: netlink: Flow actions attr not present in new flow. [ 437.947077][T10538] syzkaller0: entered promiscuous mode [ 437.947102][T10538] syzkaller0: entered allmulticast mode [ 439.023192][T10559] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1522'. [ 439.091912][ T4923] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 441.528367][T10589] mmap: syz.9.1535 (10589) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 441.653869][T10593] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1536'. [ 445.515820][ T5710] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 445.675921][ T5710] usb 8-1: Using ep0 maxpacket: 32 [ 445.678745][ T5710] usb 8-1: config 0 has an invalid interface number: 35 but max is 0 [ 445.678772][ T5710] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 445.678792][ T5710] usb 8-1: config 0 has no interface number 0 [ 445.678835][ T5710] usb 8-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 445.681317][ T5710] usb 8-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 445.681346][ T5710] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.681365][ T5710] usb 8-1: Product: syz [ 445.681380][ T5710] usb 8-1: Manufacturer: syz [ 445.681393][ T5710] usb 8-1: SerialNumber: syz [ 445.706128][ T5710] usb 8-1: config 0 descriptor?? [ 445.775770][ T5710] radio-si470x 8-1:0.35: could not find interrupt in endpoint [ 445.775858][ T5710] radio-si470x 8-1:0.35: probe with driver radio-si470x failed with error -5 [ 445.951027][ T5710] radio-raremono 8-1:0.35: this is not Thanko's Raremono. [ 445.959299][ T5710] usbhid 8-1:0.35: couldn't find an input interrupt endpoint [ 446.167497][ T5748] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 446.178593][T10628] program syz.7.1548 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 446.328682][ T5748] usb 7-1: Using ep0 maxpacket: 32 [ 446.330553][ T5748] usb 7-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 446.330582][ T5748] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.345390][ T5748] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 446.537876][ T31] usb 8-1: USB disconnect, device number 10 [ 446.557920][T10633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.558729][T10633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.640819][T10633] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1550'. [ 446.705740][ T5748] gspca_nw80x: reg_w err -71 [ 446.705796][ T5748] nw80x 7-1:3.0: probe with driver nw80x failed with error -71 [ 446.719910][ T5748] usb 7-1: USB disconnect, device number 13 [ 447.289687][ T31] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 447.464055][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 447.466905][ T31] usb 2-1: config 3 has an invalid interface number: 249 but max is 0 [ 447.466931][ T31] usb 2-1: config 3 has no interface number 0 [ 447.466963][ T31] usb 2-1: config 3 interface 249 has no altsetting 0 [ 447.500585][ T31] usb 2-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=5a.9d [ 447.500616][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.500634][ T31] usb 2-1: Product: syz [ 447.500642][ T31] usb 2-1: Manufacturer: syz [ 447.500649][ T31] usb 2-1: SerialNumber: syz [ 447.637546][T10662] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1561'. [ 448.166844][ T31] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 448.167319][ T31] gspca_sn9c2028: read1 error -71 [ 448.167650][ T31] gspca_sn9c2028: read1 error -71 [ 448.167981][ T31] gspca_sn9c2028: read1 error -71 [ 448.168044][ T31] sn9c2028 2-1:3.249: probe with driver sn9c2028 failed with error -71 [ 448.170866][ T31] usb 2-1: USB disconnect, device number 27 [ 449.114732][T10699] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1575'. [ 449.148988][ T31] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 449.309211][ T31] usb 8-1: Using ep0 maxpacket: 32 [ 449.312266][ T31] usb 8-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 449.312294][ T31] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.361767][ T31] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 449.572397][T10686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.572875][T10686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.610670][T10686] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1571'. [ 449.612328][ T31] gspca_nw80x: reg_w err -71 [ 449.612417][ T31] nw80x 8-1:3.0: probe with driver nw80x failed with error -71 [ 449.614940][ T31] usb 8-1: USB disconnect, device number 11 [ 450.080877][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 450.110657][ T5880] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 450.270902][ T5880] usb 2-1: Using ep0 maxpacket: 32 [ 450.274002][ T5880] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 450.274029][ T5880] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 450.274049][ T5880] usb 2-1: config 0 has no interface number 0 [ 450.274092][ T5880] usb 2-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 450.277380][ T5880] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 450.277407][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.277418][ T5880] usb 2-1: Product: syz [ 450.277426][ T5880] usb 2-1: Manufacturer: syz [ 450.277433][ T5880] usb 2-1: SerialNumber: syz [ 450.280547][ T5880] usb 2-1: config 0 descriptor?? [ 450.366062][ T5880] radio-si470x 2-1:0.35: could not find interrupt in endpoint [ 450.366150][ T5880] radio-si470x 2-1:0.35: probe with driver radio-si470x failed with error -5 [ 450.556372][ T5880] radio-raremono 2-1:0.35: this is not Thanko's Raremono. [ 450.712062][T10729] lo speed is unknown, defaulting to 1000 [ 450.717872][T10729] lo speed is unknown, defaulting to 1000 [ 450.833736][ T5880] usbhid 2-1:0.35: couldn't find an input interrupt endpoint [ 450.838856][T10717] program syz.1.1581 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 451.172068][T10729] lo speed is unknown, defaulting to 1000 [ 451.396388][T10729] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 451.396507][T10729] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 451.396558][T10729] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 451.565183][T10729] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 452.143373][ T31] usb 2-1: USB disconnect, device number 28 [ 452.410315][T10737] syz_tun: entered allmulticast mode [ 452.449253][T10729] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 452.544493][T10741] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1589'. [ 452.749135][T10729] lo speed is unknown, defaulting to 1000 [ 452.752204][ T823] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 452.769559][T10729] lo speed is unknown, defaulting to 1000 [ 452.771058][T10729] lo speed is unknown, defaulting to 1000 [ 452.791353][T10729] lo speed is unknown, defaulting to 1000 [ 452.850766][ T4923] Bluetooth: Frame is too long (len 10, expected len 4) [ 452.891500][T10729] lo speed is unknown, defaulting to 1000 [ 452.937778][ T823] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 452.937810][ T823] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.992750][ T823] usb 8-1: config 0 descriptor?? [ 453.083584][T10729] lo speed is unknown, defaulting to 1000 [ 453.247791][T10739] tipc: Enabling of bearer rejected, failed to enable media [ 453.347844][ T823] udl 8-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 453.759166][ T823] [drm] Initialized udl 0.0.1 for 8-1:0.0 on minor 2 [ 453.759182][ T823] [drm] Initialized udl on minor 2 [ 453.836167][ T823] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 453.838742][ T823] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 453.842344][ T5880] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 453.842561][ T5880] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 453.902033][ T823] usb 8-1: USB disconnect, device number 12 [ 454.185331][ T10] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 454.288880][ T5748] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 454.349034][ T10] usb 10-1: config 1 has an invalid interface number: 7 but max is 0 [ 454.349061][ T10] usb 10-1: config 1 has no interface number 0 [ 454.349095][ T10] usb 10-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 454.349109][ T10] usb 10-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 454.349123][ T10] usb 10-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 454.376467][T10770] syz_tun: entered allmulticast mode [ 454.397872][ T10] usb 10-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 454.397902][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.397921][ T10] usb 10-1: Product: syz [ 454.397935][ T10] usb 10-1: Manufacturer: syz [ 454.397949][ T10] usb 10-1: SerialNumber: syz [ 454.438576][T10759] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 454.536253][ T5748] usb 7-1: Using ep0 maxpacket: 32 [ 454.539593][ T5748] usb 7-1: config 0 has an invalid interface number: 35 but max is 0 [ 454.539627][ T5748] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 454.539646][ T5748] usb 7-1: config 0 has no interface number 0 [ 454.539763][ T5748] usb 7-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 454.581726][ T5748] usb 7-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 454.581756][ T5748] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.582172][ T5748] usb 7-1: Product: syz [ 454.582188][ T5748] usb 7-1: Manufacturer: syz [ 454.582201][ T5748] usb 7-1: SerialNumber: syz [ 454.649034][ T5748] usb 7-1: config 0 descriptor?? [ 454.700272][ T5748] radio-si470x 7-1:0.35: could not find interrupt in endpoint [ 454.700364][ T5748] radio-si470x 7-1:0.35: probe with driver radio-si470x failed with error -5 [ 455.133249][ T823] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 455.147410][ T5748] radio-raremono 7-1:0.35: this is not Thanko's Raremono. [ 455.147985][ T5748] usbhid 7-1:0.35: couldn't find an input interrupt endpoint [ 455.151025][ T10] usb 10-1: Error in usbnet_get_endpoints (-71) [ 455.219519][ T10] usb 10-1: USB disconnect, device number 10 [ 455.346837][ T823] usb 8-1: Using ep0 maxpacket: 32 [ 455.356065][ T823] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 455.356093][ T823] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 455.383340][ T823] usb 8-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 455.383369][ T823] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.383388][ T823] usb 8-1: Product: syz [ 455.383402][ T823] usb 8-1: Manufacturer: syz [ 455.383414][ T823] usb 8-1: SerialNumber: syz [ 455.383750][T10765] program syz.6.1599 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 455.442448][ T823] usb 8-1: config 0 descriptor?? [ 455.699488][ T10] usb 7-1: USB disconnect, device number 14 [ 456.026350][ T823] usb 8-1: USB disconnect, device number 13 [ 457.313116][ T9] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 457.473333][ T9] usb 10-1: Using ep0 maxpacket: 32 [ 457.480165][T10813] binder: 10812:10813 ioctl c0306201 200000000080 returned -14 [ 458.360252][ T823] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 458.489646][T10838] syz_tun: entered allmulticast mode [ 458.542730][ T823] usb 2-1: Using ep0 maxpacket: 32 [ 458.545249][ T823] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 458.545274][ T823] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 458.559352][ T823] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 458.559382][ T823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.559403][ T823] usb 2-1: Product: syz [ 458.559422][ T823] usb 2-1: Manufacturer: syz [ 458.559437][ T823] usb 2-1: SerialNumber: syz [ 458.612884][ T823] usb 2-1: config 0 descriptor?? [ 459.032897][ T10] usb 2-1: USB disconnect, device number 29 [ 459.228271][T10843] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 459.228300][T10843] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 459.328010][T10843] vhci_hcd vhci_hcd.0: Device attached [ 459.446134][T10843] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1623'. [ 459.934429][ T823] usb 46-1: SetAddress Request (2) to port 0 [ 459.934514][ T823] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 460.157706][ T9] usb 10-1: unable to get BOS descriptor or descriptor too short [ 460.160276][ T9] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 460.160314][ T9] usb 10-1: can't read configurations, error -71 [ 460.257598][T10851] vhci_hcd: connection reset by peer [ 460.272738][ T173] vhci_hcd vhci_hcd.6: stop threads [ 460.272757][ T173] vhci_hcd vhci_hcd.6: release socket [ 460.292109][ T173] vhci_hcd vhci_hcd.6: disconnect device [ 463.649880][ T5880] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 463.823679][ T5880] usb 10-1: Using ep0 maxpacket: 32 [ 463.832631][T10896] binder: 10895:10896 ioctl 4018620d 0 returned -22 [ 463.833734][T10896] binder: 10895:10896 ioctl c0306201 200000000080 returned -14 [ 465.040761][ T5821] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 465.210205][ T5821] usb 8-1: Using ep0 maxpacket: 32 [ 465.288189][ T5821] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 465.288218][ T5821] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 465.342594][ T5821] usb 8-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 465.342723][ T5821] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.342745][ T5821] usb 8-1: Product: syz [ 465.342759][ T5821] usb 8-1: Manufacturer: syz [ 465.342771][ T5821] usb 8-1: SerialNumber: syz [ 465.383493][ T823] usb 46-1: device descriptor read/8, error -110 [ 465.435148][ T5821] usb 8-1: config 0 descriptor?? [ 465.866449][ T823] usb usb46-port1: attempt power cycle [ 465.989451][ T5821] usb 8-1: USB disconnect, device number 14 [ 466.774695][ T5880] usb 10-1: unable to get BOS descriptor or descriptor too short [ 466.779069][ T5880] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 466.779108][ T5880] usb 10-1: can't read configurations, error -71 [ 467.097632][ T823] usb usb46-port1: unable to enumerate USB device [ 468.789936][ T5880] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 468.955215][T10971] binder: BINDER_SET_CONTEXT_MGR already set [ 468.955230][T10971] binder: 10970:10971 ioctl 4018620d 200000004a80 returned -16 [ 469.136725][ T5880] usb 2-1: Using ep0 maxpacket: 32 [ 469.872672][ T5880] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 469.872703][ T5880] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 469.872723][ T5880] usb 2-1: config 0 has no interface number 0 [ 469.872766][ T5880] usb 2-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 469.876874][ T5880] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 469.876903][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.876924][ T5880] usb 2-1: Product: syz [ 469.876938][ T5880] usb 2-1: Manufacturer: syz [ 469.876952][ T5880] usb 2-1: SerialNumber: syz [ 469.893723][ T5880] usb 2-1: config 0 descriptor?? [ 469.910568][ T5880] radio-si470x 2-1:0.35: could not find interrupt in endpoint [ 469.910670][ T5880] radio-si470x 2-1:0.35: probe with driver radio-si470x failed with error -5 [ 470.118764][ T5880] radio-raremono 2-1:0.35: this is not Thanko's Raremono. [ 470.119357][ T5880] usbhid 2-1:0.35: couldn't find an input interrupt endpoint [ 470.529478][ T5880] usb 2-1: USB disconnect, device number 30 [ 471.971321][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 474.645882][ T10] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 474.667885][T11017] syzkaller0: entered promiscuous mode [ 474.667910][T11017] syzkaller0: entered allmulticast mode [ 474.806142][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 474.811944][T11012] binder: 11011:11012 ioctl 4018620d 0 returned -22 [ 474.814755][T11012] binder: 11011:11012 ioctl c0306201 200000000080 returned -14 [ 474.910868][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 474.920738][ T10] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 474.920763][ T10] usb 2-1: can't read configurations, error -71 [ 475.949516][ T9] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 476.109855][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 476.113722][ T9] usb 8-1: config 0 has an invalid interface number: 35 but max is 0 [ 476.113749][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 476.113768][ T9] usb 8-1: config 0 has no interface number 0 [ 476.113806][ T9] usb 8-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 476.118308][ T9] usb 8-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 476.118340][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.118442][ T9] usb 8-1: Product: syz [ 476.118457][ T9] usb 8-1: Manufacturer: syz [ 476.118471][ T9] usb 8-1: SerialNumber: syz [ 476.202899][ T9] usb 8-1: config 0 descriptor?? [ 476.215289][ T9] radio-si470x 8-1:0.35: could not find interrupt in endpoint [ 476.215361][ T9] radio-si470x 8-1:0.35: probe with driver radio-si470x failed with error -5 [ 476.312956][ T5880] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 476.424722][ T9] radio-raremono 8-1:0.35: this is not Thanko's Raremono. [ 476.425324][ T9] usbhid 8-1:0.35: couldn't find an input interrupt endpoint [ 476.474809][ T5880] usb 10-1: Using ep0 maxpacket: 32 [ 476.506711][T11051] binder: BINDER_SET_CONTEXT_MGR already set [ 476.506726][T11051] binder: 11050:11051 ioctl 4018620d 200000000040 returned -16 [ 476.567100][T11058] binder: 11050:11058 ioctl c0306201 2000000000c0 returned -22 [ 476.643004][T11045] program syz.7.1703 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 476.835254][T10926] usb 8-1: USB disconnect, device number 15 [ 476.876798][ T4923] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 478.295106][T11083] syzkaller0: entered promiscuous mode [ 478.295132][T11083] syzkaller0: entered allmulticast mode [ 478.738678][ T9] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 478.898884][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 478.901326][ T9] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 478.901349][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 478.901374][ T9] usb 2-1: config 0 has no interface number 0 [ 478.901408][ T9] usb 2-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 478.905371][ T9] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 478.905401][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.905420][ T9] usb 2-1: Product: syz [ 478.905435][ T9] usb 2-1: Manufacturer: syz [ 478.905449][ T9] usb 2-1: SerialNumber: syz [ 478.991351][ T9] usb 2-1: config 0 descriptor?? [ 479.013169][ T9] radio-si470x 2-1:0.35: could not find interrupt in endpoint [ 479.013251][ T9] radio-si470x 2-1:0.35: probe with driver radio-si470x failed with error -5 [ 479.211049][ T9] radio-raremono 2-1:0.35: this is not Thanko's Raremono. [ 479.211645][ T9] usbhid 2-1:0.35: couldn't find an input interrupt endpoint [ 479.312415][ T5880] usb 10-1: unable to get BOS descriptor or descriptor too short [ 479.313178][ T5880] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 479.313197][ T5880] usb 10-1: can't read configurations, error -71 [ 479.343616][ T4923] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 479.430562][T11088] program syz.1.1722 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 479.594881][ T9] usb 2-1: USB disconnect, device number 33 [ 481.078907][ T5627] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 481.239092][ T5627] usb 10-1: Using ep0 maxpacket: 32 [ 481.241198][ T5627] usb 10-1: config 0 has an invalid interface number: 35 but max is 0 [ 481.241221][ T5627] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 481.241240][ T5627] usb 10-1: config 0 has no interface number 0 [ 481.241279][ T5627] usb 10-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 481.245991][ T5627] usb 10-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 481.246018][ T5627] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.246037][ T5627] usb 10-1: Product: syz [ 481.246051][ T5627] usb 10-1: Manufacturer: syz [ 481.246065][ T5627] usb 10-1: SerialNumber: syz [ 481.258987][ T5627] usb 10-1: config 0 descriptor?? [ 481.267777][ T5627] radio-si470x 10-1:0.35: could not find interrupt in endpoint [ 481.267859][ T5627] radio-si470x 10-1:0.35: probe with driver radio-si470x failed with error -5 [ 481.482369][ T5627] radio-raremono 10-1:0.35: this is not Thanko's Raremono. [ 481.482930][ T5627] usbhid 10-1:0.35: couldn't find an input interrupt endpoint [ 481.698200][T11141] program syz.9.1740 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 482.017952][ T5627] usb 10-1: USB disconnect, device number 17 [ 482.109442][T11169] syzkaller0: entered promiscuous mode [ 482.109468][T11169] syzkaller0: entered allmulticast mode [ 482.199989][ T10] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 482.361102][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 482.380594][T11165] binder: BINDER_SET_CONTEXT_MGR already set [ 482.380604][T11165] binder: 11164:11165 ioctl 4018620d 200000000040 returned -16 [ 482.507511][ T10] usb 8-1: unable to get BOS descriptor or descriptor too short [ 482.508442][ T10] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 482.508475][ T10] usb 8-1: can't read configurations, error -71 [ 482.891576][ T4923] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 484.124378][ T823] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 484.295794][ T823] usb 8-1: Using ep0 maxpacket: 32 [ 484.330771][T11211] binder: 11210:11211 ioctl c0306201 0 returned -14 [ 484.489624][ T823] usb 8-1: unable to get BOS descriptor or descriptor too short [ 484.490650][ T823] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 484.490684][ T823] usb 8-1: can't read configurations, error -71 [ 484.504642][ T4923] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 485.588348][ T5627] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 485.759345][ T5627] usb 2-1: Using ep0 maxpacket: 32 [ 485.764836][ T5627] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 485.764854][ T5627] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 485.764864][ T5627] usb 2-1: config 0 has no interface number 0 [ 485.764888][ T5627] usb 2-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 485.769346][ T5627] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 485.769376][ T5627] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.769395][ T5627] usb 2-1: Product: syz [ 485.769404][ T5627] usb 2-1: Manufacturer: syz [ 485.769411][ T5627] usb 2-1: SerialNumber: syz [ 485.849922][ T5627] usb 2-1: config 0 descriptor?? [ 485.865594][ T5627] radio-si470x 2-1:0.35: could not find interrupt in endpoint [ 485.865681][ T5627] radio-si470x 2-1:0.35: probe with driver radio-si470x failed with error -5 [ 486.071301][ T5627] radio-raremono 2-1:0.35: this is not Thanko's Raremono. [ 486.071882][ T5627] usbhid 2-1:0.35: couldn't find an input interrupt endpoint [ 486.293674][T11256] program syz.1.1783 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 486.386139][ T5880] usb 2-1: USB disconnect, device number 34 [ 486.634885][ T4923] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 487.682841][T10926] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 487.855652][T10926] usb 10-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 487.855670][T10926] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.859730][T10926] usb 10-1: config 0 descriptor?? [ 488.244471][T11308] tipc: Enabling of bearer rejected, failed to enable media [ 488.357765][ T4923] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 488.454511][T10926] udl 10-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 488.766943][T10926] [drm] Initialized udl 0.0.1 for 10-1:0.0 on minor 2 [ 488.766967][T10926] [drm] Initialized udl on minor 2 [ 488.911873][T10926] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 488.912373][T10926] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 488.918526][ T5880] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 488.919428][ T5880] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 488.919658][ T5880] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 488.922044][T10926] usb 10-1: USB disconnect, device number 18 [ 489.625662][T11350] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 489.838573][ T5880] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 489.865001][T11350] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 490.001889][ T10] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 490.004502][ T5880] usb 2-1: Using ep0 maxpacket: 32 [ 490.007751][ T5880] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 490.007775][ T5880] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 490.007794][ T5880] usb 2-1: config 0 has no interface number 0 [ 490.007833][ T5880] usb 2-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 490.011289][ T5880] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 490.011318][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.011336][ T5880] usb 2-1: Product: syz [ 490.011363][ T5880] usb 2-1: Manufacturer: syz [ 490.011588][ T5880] usb 2-1: SerialNumber: syz [ 490.042687][ T5880] usb 2-1: config 0 descriptor?? [ 490.054592][ T5880] radio-si470x 2-1:0.35: could not find interrupt in endpoint [ 490.054677][ T5880] radio-si470x 2-1:0.35: probe with driver radio-si470x failed with error -5 [ 490.204811][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 490.208468][ T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 490.208495][ T10] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 490.211147][ T10] usb 8-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 490.211175][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.211195][ T10] usb 8-1: Product: syz [ 490.211210][ T10] usb 8-1: Manufacturer: syz [ 490.211224][ T10] usb 8-1: SerialNumber: syz [ 490.260489][ T5880] radio-raremono 2-1:0.35: this is not Thanko's Raremono. [ 490.261062][ T5880] usbhid 2-1:0.35: couldn't find an input interrupt endpoint [ 490.285329][ T10] usb 8-1: config 0 descriptor?? [ 490.480441][T11348] program syz.1.1820 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 490.577240][ T5880] usb 2-1: USB disconnect, device number 35 [ 490.610995][ T4923] Bluetooth: hci1: command 0x0406 tx timeout [ 490.631536][T10926] usb 8-1: USB disconnect, device number 20 [ 491.059631][ T10] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 491.222987][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 491.224311][ T10] usb 7-1: config 3 has an invalid interface number: 249 but max is 0 [ 491.224336][ T10] usb 7-1: config 3 has no interface number 0 [ 491.224367][ T10] usb 7-1: config 3 interface 249 has no altsetting 0 [ 491.260502][ T10] usb 7-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=5a.9d [ 491.260532][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.260551][ T10] usb 7-1: Product: syz [ 491.260559][ T10] usb 7-1: Manufacturer: syz [ 491.260566][ T10] usb 7-1: SerialNumber: syz [ 491.316066][ T5627] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 491.489864][ T5627] usb 10-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 491.489897][ T5627] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.545561][ T5627] usb 10-1: config 0 descriptor?? [ 491.657455][ T59] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 491.794490][T11387] tipc: Enabling of bearer rejected, failed to enable media [ 491.858249][ T5627] udl 10-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 492.046735][ T10] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 492.047341][ T10] gspca_sn9c2028: read1 error -71 [ 492.047737][ T10] gspca_sn9c2028: read1 error -71 [ 492.048181][ T10] gspca_sn9c2028: read1 error -71 [ 492.048331][ T10] sn9c2028 7-1:3.249: probe with driver sn9c2028 failed with error -71 [ 492.093105][ T10] usb 7-1: USB disconnect, device number 15 [ 492.208603][ T5627] [drm] Initialized udl 0.0.1 for 10-1:0.0 on minor 2 [ 492.208630][ T5627] [drm] Initialized udl on minor 2 [ 492.307889][ T5627] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 492.321939][ T5627] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 492.344539][ T9] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 492.344754][ T9] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 492.345764][ T5627] usb 10-1: USB disconnect, device number 19 [ 492.425345][T11406] block nbd0: Unsupported socket: should be TCP or UNIX. [ 492.833577][ T9] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 493.015141][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 493.018170][ T9] usb 8-1: config 0 has an invalid interface number: 35 but max is 0 [ 493.018197][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 493.018216][ T9] usb 8-1: config 0 has no interface number 0 [ 493.018245][ T9] usb 8-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 493.020554][ T9] usb 8-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 493.020582][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.020602][ T9] usb 8-1: Product: syz [ 493.020614][ T9] usb 8-1: Manufacturer: syz [ 493.020621][ T9] usb 8-1: SerialNumber: syz [ 493.024153][ T9] usb 8-1: config 0 descriptor?? [ 493.041726][ T9] radio-si470x 8-1:0.35: could not find interrupt in endpoint [ 493.041809][ T9] radio-si470x 8-1:0.35: probe with driver radio-si470x failed with error -5 [ 493.261335][ T9] radio-raremono 8-1:0.35: this is not Thanko's Raremono. [ 493.261687][ T9] usbhid 8-1:0.35: couldn't find an input interrupt endpoint [ 493.368659][T11425] syzkaller0: entered promiscuous mode [ 493.368684][T11425] syzkaller0: entered allmulticast mode [ 493.480076][T11409] program syz.7.1843 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 493.529632][ T59] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 493.566419][ T9] usb 8-1: USB disconnect, device number 21 [ 494.410149][ T5880] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 495.366203][ T5880] usb 2-1: Using ep0 maxpacket: 32 [ 495.371776][ T5880] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 495.371821][ T5880] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 495.384287][ T5880] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 495.384317][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.386670][ T5880] usb 2-1: Product: syz [ 495.386689][ T5880] usb 2-1: Manufacturer: syz [ 495.386703][ T5880] usb 2-1: SerialNumber: syz [ 495.399919][ T5880] usb 2-1: config 0 descriptor?? [ 495.617824][T11461] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 495.683076][T11461] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 495.730988][ T10] usb 2-1: USB disconnect, device number 36 [ 496.034534][ T59] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 496.103970][ T5880] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 496.132732][T11476] syzkaller0: entered promiscuous mode [ 496.132749][T11476] syzkaller0: entered allmulticast mode [ 496.317157][ T5880] usb 7-1: Using ep0 maxpacket: 32 [ 496.319803][ T5880] usb 7-1: config 0 has an invalid interface number: 35 but max is 0 [ 496.319830][ T5880] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 496.319849][ T5880] usb 7-1: config 0 has no interface number 0 [ 496.319913][ T5880] usb 7-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 496.322467][ T5880] usb 7-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 496.322495][ T5880] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.322515][ T5880] usb 7-1: Product: syz [ 496.322528][ T5880] usb 7-1: Manufacturer: syz [ 496.322543][ T5880] usb 7-1: SerialNumber: syz [ 496.327524][ T5880] usb 7-1: config 0 descriptor?? [ 496.357988][ T5880] radio-si470x 7-1:0.35: could not find interrupt in endpoint [ 496.358081][ T5880] radio-si470x 7-1:0.35: probe with driver radio-si470x failed with error -5 [ 496.555984][ T5880] radio-raremono 7-1:0.35: this is not Thanko's Raremono. [ 496.556354][ T5880] usbhid 7-1:0.35: couldn't find an input interrupt endpoint [ 496.773703][T11467] program syz.6.1865 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 496.926462][ T10] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 497.088367][ T10] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 497.088390][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.142992][ T10] usb 8-1: config 0 descriptor?? [ 497.150630][T10926] usb 7-1: USB disconnect, device number 16 [ 497.388362][T11487] tipc: Enabling of bearer rejected, failed to enable media [ 497.407295][ T9] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 497.490076][ T10] udl 8-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 497.490564][ T10] [drm:udl_init] *ERROR* Selecting channel failed [ 497.532597][ T10] [drm] Initialized udl 0.0.1 for 8-1:0.0 on minor 2 [ 497.532613][ T10] [drm] Initialized udl on minor 2 [ 497.533552][ T10] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 497.533813][ T10] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 497.534542][ T5710] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 497.562391][ T5710] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 497.588535][ T10] usb 8-1: USB disconnect, device number 22 [ 497.601594][ T9] usb 10-1: Using ep0 maxpacket: 32 [ 497.635960][ T9] usb 10-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 497.635992][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.636012][ T9] usb 10-1: Product: syz [ 497.636025][ T9] usb 10-1: Manufacturer: syz [ 497.636039][ T9] usb 10-1: SerialNumber: syz [ 497.637837][ T5710] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 497.707019][ T9] usb 10-1: config 0 descriptor?? [ 497.752395][ T9] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 497.752517][ T9] dvb-usb: bulk message failed: -22 (4/0) [ 497.752533][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 497.752657][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 497.752670][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 497.813422][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 497.818049][ T9] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 497.818142][ T9] usb 10-1: media controller created [ 497.872131][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 497.923467][ T9] usb 10-1: selecting invalid altsetting 3 [ 497.923488][ T9] ttusb2: set interface to alts=3 failed [ 497.938320][T11495] dvb-usb: bulk message failed: -22 (7/0) [ 497.938341][T11495] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 497.938378][T11495] ttusb2: i2c transfer failed. [ 498.065767][ T9] DVB: Unable to find symbol tda10086_attach() [ 498.065918][ T9] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 498.066867][ T9] dvb-usb: bulk message failed: -22 (4/0) [ 498.066886][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 498.067737][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 498.067754][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 498.067818][ T9] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 498.400264][ T59] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 498.483813][ T10] usb 10-1: USB disconnect, device number 20 [ 498.636395][ T38] INFO: task syz.8.981:9144 blocked for more than 143 seconds. [ 498.636424][ T38] Not tainted syzkaller #0 [ 498.636434][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 498.636444][ T38] task:syz.8.981 state:D stack:26432 pid:9144 tgid:9143 ppid:8129 task_flags:0x400140 flags:0x00080002 [ 498.636920][ T38] Call Trace: [ 498.637000][ T38] [ 498.637073][ T38] __schedu[ 498.637073][ T38] __schedule+0x16d8/0x55e0 [ 498.637273][ T38] ? prepare_to_wait_event+0x3d6/0x470 [ 498.637440][ T38] ? rt_spin_lock+0x1e0/0x400 [ 498.637490][ T38] ? __pfx___schedule+0x10/0x10 [ 498.637524][ T38] ? schedule+0x90/0x360 [ 498.637551][ T38] schedule+0x164/0x360 [ 498.637578][ T38] fuse_wait_aborted+0x175/0x420 [ 498.637682][ T38] ? __pfx_fuse_wait_aborted+0x10/0x10 [ 498.637711][ T38] ? __pfx_autoremove_wake_function+0x10/0x10 [ 498.637742][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 498.637809][ T38] fuse_conn_destroy+0x193/0x390 [ 498.637857][ T38] ? __pfx_fuse_conn_destroy+0x10/0x10 [ 498.637876][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 498.637914][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 498.637940][ T38] ? rt_mutex_slowunlock+0x4aa/0x8d0 [ 498.637975][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 498.638006][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 498.638034][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 498.638063][ T38] fuse_kill_sb_anon+0x210/0x290 [ 498.638089][ T38] deactivate_locked_super+0xbc/0x130 [ 498.638157][ T38] ? __pfx_fuse_fill_super+0x10/0x10 [ 498.638179][ T38] get_tree_nodev+0xd7/0x150 [ 498.638201][ T38] fuse_get_tree+0x28c/0x3a0 [ 498.638221][ T38] vfs_get_tree+0x92/0x2a0 [ 498.638243][ T38] do_new_mount+0x319/0xdc0 [ 498.641377][ T38] ? cap_capable+0x123/0x460 [ 498.641539][ T38] ? __pfx_do_new_mount+0x10/0x10 [ 498.641571][ T38] ? ns_capable+0x89/0xe0 [ 498.641610][ T38] ? path_mount+0x647/0x1040 [ 498.641641][ T38] ? user_path_at+0xd4/0x160 [ 498.642059][ T38] __se_sys_mount+0x31d/0x420 [ 498.642097][ T38] ? __pfx___se_sys_mount+0x10/0x10 [ 498.642131][ T38] ? __x64_sys_mount+0x20/0xc0 [ 498.642158][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.642204][ T38] do_syscall_64+0x174/0x580 [ 498.642267][ T38] ? trace_irq_disable+0x3b/0x140 [ 498.642358][ T38] ? clear_bhb_loop+0x40/0x90 [ 498.642383][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.642408][ T38] RIP: 0033:0x7f812194ce59 [ 498.642834][ T38] RSP: 002b:00007f811fb9e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 498.642891][ T38] RAX: ffffffffffffffda RBX: 00007f8121bc5fa0 RCX: 00007f812194ce59 [ 498.642906][ T38] RDX: 00002000000020c0 RSI: 0000200000002080 RDI: 0000000000000000 [ 498.642919][ T38] RBP: 00007f81219e2d6f R08: 00002000000003c0 R09: 0000000000000000 [ 498.642932][ T38] R10: 0000000000000413 R11: 0000000000000246 R12: 0000000000000000 [ 498.642944][ T38] R13: 00007f8121bc6038 R14: 00007f8121bc5fa0 R15: 00007ffd7c78c948 [ 498.642976][ T38] [ 498.643005][ T38] [ 498.643005][ T38] Showing all locks held in the system: [ 498.643021][ T38] 6 locks held by kworker/0:1/10: [ 498.643060][ T38] #0: ffff888021af5138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 498.643297][ T38] #1: ffffc900000f7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 498.643343][ T38] #2: ffff888029a5c210 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4cf0 [ 498.643453][ T38] #3: ffff888035af4210 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xe3/0x990 [ 498.643501][ T38] #4: ffff88803f8eb1d8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 498.643580][ T38] #5: ffff88801eef5318 (&(&priv->bus_notifier)->rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 498.643655][ T38] 2 locks held by kdevtmpfs/33: [ 498.643782][ T38] #0: ffff88801c294480 (sb_writers){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 498.643830][ T38] #1: ffff88801aef4e38 (&type->i_mutex_dir_key/1){+.+.}-{4:4}, at: __start_removing_path+0x1bc/0x310 [ 498.643880][ T38] 1 lock held by khungtaskd/38: [ 498.643890][ T38] #0: ffffffff8ddc7b60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 498.643986][ T38] 2 locks held by getty/5364: [ 498.643997][ T38] #0: ffff8880367db0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 498.644128][ T38] #1: ffffc90003cc62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1390 [ 498.644183][ T38] 1 lock held by syz-executor/7362: [ 498.644194][ T38] #0: ffff888037788480 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 498.644247][ T38] 1 lock held by udevd/8041: [ 498.644257][ T38] #0: ffff888037142480 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 498.644307][ T38] 1 lock held by udevd/8156: [ 498.644330][ T38] #0: ffff88801c294480 (sb_writers){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 498.644458][ T38] 1 lock held by syz.8.981/9144: [ 498.644469][ T38] #0: ffff888039c960d0 (&type->s_umount_key#82/1){+.+.}-{4:4}, at: alloc_super+0x283/0xa70 [ 498.644525][ T38] 1 lock held by syz.7.1882/11510: [ 498.644537][ T38] [ 498.644542][ T38] ============================================= [ 498.644542][ T38] [ 498.644550][ T38] NMI backtrace for cpu 0 [ 498.644573][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 498.644594][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 498.644606][ T38] Call Trace: [ 498.644613][ T38] [ 498.644620][ T38] dump_stack_lvl+0xe8/0x150 [ 498.644654][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 498.644705][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 498.644742][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 498.644766][ T38] sys_info+0x135/0x170 [ 498.644783][ T38] watchdog+0xfd7/0x1030 [ 498.644867][ T38] ? watchdog+0x1c7/0x1030 [ 498.644894][ T38] kthread+0x388/0x470 [ 498.644920][ T38] ? __pfx_watchdog+0x10/0x10 [ 498.644938][ T38] ? __pfx_kthread+0x10/0x10 [ 498.644963][ T38] ret_from_fork+0x514/0xb70 [ 498.644997][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 498.645017][ T38] ? __switch_to+0xc89/0x1420 [ 498.645048][ T38] ? __pfx_kthread+0x10/0x10 [ 498.645073][ T38] ret_from_fork_asm+0x1a/0x30 [ 498.645110][ T38] [ 498.645132][ T38] Sending NMI from CPU 0 to CPUs 1: [ 498.645160][ C1] NMI backtrace for cpu 1 [ 498.645174][ C1] CPU: 1 UID: 0 PID: 11510 Comm: syz.7.1882 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 498.645192][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 498.645202][ C1] RIP: 0010:lock_release+0x101/0x3c0 [ 498.645268][ C1] Code: 8d 60 ff 49 8d af f8 0b 00 00 4d 63 ec 48 89 04 24 83 f8 32 0f 83 2a 02 00 00 4a 8d 1c ad 00 00 00 00 4c 01 eb 48 8d 6c dd 00 <48> 89 ef 4c 89 f6 e8 f4 f1 76 09 44 89 64 24 14 45 89 e5 85 c0 0f [ 498.645306][ C1] RSP: 0018:ffffc90003d5f5b8 EFLAGS: 00000006 [ 498.645320][ C1] RAX: 0000000000000002 RBX: 0000000000000005 RCX: 0000000000000046 [ 498.645331][ C1] RDX: ffffffff8feb7f00 RSI: ffffffff8d416ded RDI: ffffffff8b873ba0 [ 498.645343][ C1] RBP: ffff8880253849a0 R08: ffffc90003d5ff48 R09: 0000000000000000 [ 498.645354][ C1] R10: 0000000000000000 R11: ffffffff8ddc7b60 R12: 0000000000000001 [ 498.645365][ C1] R13: 0000000000000001 R14: ffffffff8ddc7b60 R15: ffff888025383d80 [ 498.645376][ C1] FS: 00007f39168a66c0(0000) GS:ffff8881264a1000(0000) knlGS:0000000000000000 [ 498.645390][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 498.645401][ C1] CR2: 00007f0ccacf6658 CR3: 000000003ac5a000 CR4: 00000000003526f0 [ 498.645415][ C1] Call Trace: [ 498.645421][ C1] [ 498.645427][ C1] ? unwind_next_frame+0x8f/0x2550 [ 498.645449][ C1] ? unwind_next_frame+0x8f/0x2550 [ 498.645468][ C1] unwind_next_frame+0x1baa/0x2550 [ 498.645488][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.645505][ C1] ? unwind_next_frame+0x8f/0x2550 [ 498.645525][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 498.645574][ C1] arch_stack_walk+0x11b/0x150 [ 498.645606][ C1] stack_trace_save+0xa9/0x100 [ 498.645623][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 498.645640][ C1] ? stack_depot_save_flags+0x33/0x800 [ 498.645707][ C1] kasan_save_track+0x3e/0x80 [ 498.645761][ C1] ? kasan_save_track+0x3e/0x80 [ 498.645776][ C1] ? kasan_save_free_info+0x40/0x50 [ 498.645796][ C1] ? __kasan_slab_free+0x5c/0x80 [ 498.645811][ C1] ? kfree+0x1c5/0x6c0 [ 498.645853][ C1] ? io_clean_op+0x298/0x330 [ 498.645903][ C1] ? __io_submit_flush_completions+0xd4d/0xf80 [ 498.645951][ C1] ? io_submit_sqes+0x1cec/0x2310 [ 498.645966][ C1] ? __se_sys_io_uring_enter+0x364/0x1be0 [ 498.645982][ C1] ? do_syscall_64+0x174/0x580 [ 498.646002][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.646036][ C1] ? kasan_quarantine_put+0xbb/0x1f0 [ 498.646074][ C1] kasan_save_free_info+0x40/0x50 [ 498.646095][ C1] __kasan_slab_free+0x5c/0x80 [ 498.646112][ C1] kfree+0x1c5/0x6c0 [ 498.646126][ C1] ? io_clean_op+0x298/0x330 [ 498.646145][ C1] io_clean_op+0x298/0x330 [ 498.646163][ C1] __io_submit_flush_completions+0xd4d/0xf80 [ 498.646193][ C1] io_submit_sqes+0x1cec/0x2310 [ 498.646228][ C1] __se_sys_io_uring_enter+0x364/0x1be0 [ 498.646251][ C1] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 498.646271][ C1] ? rcu_is_watching+0x15/0xb0 [ 498.646345][ C1] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 498.646361][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.646377][ C1] do_syscall_64+0x174/0x580 [ 498.646397][ C1] ? trace_irq_disable+0x3b/0x140 [ 498.646415][ C1] ? clear_bhb_loop+0x40/0x90 [ 498.646433][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.646449][ C1] RIP: 0033:0x7f391864ce59 [ 498.646463][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 498.646477][ C1] RSP: 002b:00007f39168a6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 498.646493][ C1] RAX: ffffffffffffffda RBX: 00007f39188c5fa0 RCX: 00007f391864ce59 [ 498.646505][ C1] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 498.646516][ C1] RBP: 00007f39186e2d6f R08: 0000000000000000 R09: 0000000000000000 [ 498.646526][ C1] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 498.646535][ C1] R13: 00007f39188c6038 R14: 00007f39188c5fa0 R15: 00007ffe5a9915a8 [ 498.646552][ C1] [ 498.689572][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 498.689592][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 498.689613][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 498.689624][ T38] Call Trace: [ 498.689632][ T38] [ 498.689639][ T38] vpanic+0x56c/0xa60 [ 498.689667][ T38] ? __pfx___schedule+0x10/0x10 [ 498.689693][ T38] ? __pfx_vpanic+0x10/0x10 [ 498.689733][ T38] panic+0xc5/0xd0 [ 498.689755][ T38] ? __pfx_panic+0x10/0x10 [ 498.689774][ T38] ? preempt_schedule_common+0x82/0xd0 [ 498.689798][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 498.689823][ T38] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 498.689842][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 498.689860][ T38] watchdog+0x1030/0x1030 [ 498.689883][ T38] ? watchdog+0x1c7/0x1030 [ 498.689903][ T38] kthread+0x388/0x470 [ 498.689923][ T38] ? __pfx_watchdog+0x10/0x10 [ 498.689937][ T38] ? __pfx_kthread+0x10/0x10 [ 498.689956][ T38] ret_from_fork+0x514/0xb70 [ 498.689974][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 498.689990][ T38] ? __switch_to+0xc89/0x1420 [ 498.690013][ T38] ? __pfx_kthread+0x10/0x10 [ 498.690032][ T38] ret_from_fork_asm+0x1a/0x30 [ 498.690061][ T38] [ 498.690346][ T38] Kernel Offset: disabled