last executing test programs: 3m49.00527208s ago: executing program 2 (id=3071): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) r3 = socket$xdp(0x2c, 0x3, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000340)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0xffff, 0x70bd2c, 0x25dfdbfb, {}, [{0x64, 0x1, [@m_nat={0x60, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xaf, 0x1, 0x2e3fa6bf2c47fb38, 0x1000, 0x10}, @empty, @multicast1, 0xff000000}}]}, {0x10, 0x6, "5422002fcf6706afb352af16"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x24004040}, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 3m48.343282656s ago: executing program 3 (id=3075): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000ffdbdf252100000008000300", @ANYRES32=r3, @ANYBLOB], 0x44}}, 0x0) 3m48.338513806s ago: executing program 2 (id=3076): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff3}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00U\x00=\t\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYBLOB="20000280", @ANYRES32=r0, @ANYBLOB="0000000000000000000000000a000000000000000000001420000100", @ANYRES32=r1], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3m48.094103063s ago: executing program 3 (id=3077): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(0x0, r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xfffffffb}, 0x5, 0x34, 0x91f}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0x16}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x30}, 0x80d0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3m48.063809414s ago: executing program 2 (id=3078): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000240)={0x4, 0x7, 0x0, 0x1}, 0x10) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)}}], 0x1, 0x0) 3m47.611103934s ago: executing program 2 (id=3081): socket$can_bcm(0x1d, 0x2, 0x2) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) stat(0x0, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r0, 0x0, 0x0) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b89200"], 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000040)={&(0x7f0000000140)=[{0x7, 0x8000, 0x64, &(0x7f0000000080)="4924f34d930b5c409f37d4011cd6a87c8a285fb6eba3ab92b4bc4f1ab506923cf30ae2483b8848bcfb8920995c2b1837dc8a31274fd026526299eb77e43ce9381f1438a269192cd68ceb033f508b9c549c91c73ec279e46279ef8b70ebf0680b833820d8"}, {0x7, 0x2100, 0x0, &(0x7f0000000180)}], 0x2}) 3m47.162684673s ago: executing program 1 (id=3084): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@timestamp, @window={0x3, 0x7}, @timestamp, @mss={0x2, 0x1}, @mss={0x2, 0x94b}, @sack_perm, @timestamp, @mss={0x2, 0x80000001}], 0x2000000000000042) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmmsg(r0, &(0x7f0000008200)=[{{0x0, 0x0, &(0x7f0000000dc0)=[{0x0}], 0x1}}], 0x1, 0x8000) 3m47.099445193s ago: executing program 3 (id=3085): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0x4112, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m47.098740282s ago: executing program 4 (id=3086): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) r3 = socket$xdp(0x2c, 0x3, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000340)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0xffff, 0x70bd2c, 0x25dfdbfb, {}, [{0x64, 0x1, [@m_nat={0x60, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xaf, 0x1, 0x2e3fa6bf2c47fb38, 0x1000, 0x10}, @empty, @multicast1, 0xff000000}}]}, {0x10, 0x6, "5422002fcf6706afb352af16"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x24004040}, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 3m46.878294138s ago: executing program 1 (id=3088): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff3}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00U\x00=\t\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYBLOB="20000280", @ANYRES32=r0, @ANYBLOB="0000000000000000000000000a000000000000000000001420000100", @ANYRES32=r1], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3m46.843957257s ago: executing program 3 (id=3089): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x7, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=ANY=[@ANYBLOB="40000000100039040000000000000000000003", @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x200080d0) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvmmsg(r0, &(0x7f0000000600)=[{{&(0x7f0000000140)=@nfc_llcp, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)=""/199}, {&(0x7f0000000340)=""/161}, {&(0x7f0000000400)=""/94}, {&(0x7f0000000480)=""/160}, {&(0x7f0000000640)=""/155}, {&(0x7f0000000700)=""/80}], 0x0, &(0x7f0000000580)=""/80, 0x11}}], 0x4000000000002ff, 0x2, 0x0) 3m46.77852955s ago: executing program 4 (id=3090): r0 = inotify_init() r1 = fsopen(&(0x7f00000001c0)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r4, 0x4068aea3, &(0x7f0000000080)={0x74, 0x0, 0x2516fe2a6eac4bfd}) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000580)={0x320, 0xa0, 0xf0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x10, 0x400c}, {0x8, 0x8}, {0x0, 0xffffffff}, {0x0, 0x0, 0x200}, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0xfffffffc, 0x3, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mknodat(r2, &(0x7f0000000180)='./file0\x00', 0x8000, 0x9) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x3c, r6, 0x1, 0x70bd25, 0x4, {0x54}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048890}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m46.620656735s ago: executing program 1 (id=3091): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000240)={0x4, 0x7, 0x0, 0x1}, 0x10) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)}}], 0x1, 0x0) 3m46.345943559s ago: executing program 1 (id=3093): quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f00000000c0)=@nullb, 0x0, &(0x7f0000000000)='.\x00') socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb60102030109021200fd000000000904"], 0x0) r0 = openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0185648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90b, 0x8, '\x00', @p_u16=&(0x7f00000001c0)}}) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) r1 = request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r1, 0x202000) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_open_dev$dvb_demux(&(0x7f0000000840), 0x80, 0x103000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f0000000f00)={0xcb, 0x1, 0x3, 0x3}) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fcntl$setpipe(r5, 0x407, 0x8000b) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000002c0)=[@timestamp, @sack_perm, @window={0x3, 0x9, 0x2}, @mss={0x2, 0x400}, @mss={0x2, 0xcb2}, @mss={0x2, 0x3}, @sack_perm, @sack_perm], 0x8) lseek(r2, 0x40000007, 0x0) 3m46.318908405s ago: executing program 0 (id=3094): io_setup(0x7, &(0x7f0000001240)=0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/power/hibernate_compression_threads', 0x81, 0x114) io_submit(r0, 0x1, &(0x7f0000000400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000bc0), 0x0, 0x1000000000003}]) 3m46.28911413s ago: executing program 4 (id=3095): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xfffffffb}, 0x5, 0x34, 0x91f}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0x16}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x30}, 0x80d0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3m45.943849012s ago: executing program 0 (id=3096): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000700"], 0x50) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r0, r0, 0x0, 0x200000) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x1002000ff) 3m45.602677851s ago: executing program 3 (id=3097): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0x4112, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m44.279181416s ago: executing program 0 (id=3098): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r1, 0xcccccccc}) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r1], &(0x7f0000000200), &(0x7f00000000c0)=[r2], &(0x7f0000000040), 0x0, 0x300}) 3m44.222490611s ago: executing program 4 (id=3099): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@timestamp, @window={0x3, 0x7}, @timestamp, @mss={0x2, 0x1}, @mss={0x2, 0x94b}, @sack_perm, @timestamp, @mss={0x2, 0x80000001}], 0x2000000000000042) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmmsg(r0, &(0x7f0000008200)=[{{0x0, 0x0, &(0x7f0000000dc0)=[{0x0}], 0x1}}], 0x1, 0x8000) 3m44.134926546s ago: executing program 3 (id=3100): r0 = socket(0x10, 0x3, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)="e9", 0x1}], 0x1) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc)=0x102, 0x16) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f2000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000), 0x80001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x0) getsockname(r0, &(0x7f0000000300)=@tipc=@id, &(0x7f0000000380)=0x80) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000ac1e0001000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff00000000010006004400050000020000000000000000ffff0a010101000000003c00000002000000ac1414aa00000000000000000000000006000000040300"/176], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_usb_connect(0x5, 0x64, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000cb8be7406d04230807000102030109025200010000000009044000000e0100390a240108000b020102082407010500070e01000606060509000600040007000300390c2402050302060254df000a092402050001031f04082403"], 0x0) 3m44.134726956s ago: executing program 2 (id=3101): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff3}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYBLOB="20000280", @ANYRES32=r0, @ANYBLOB="0000000000000000000000000a000000000000000000001420000100", @ANYRES32=r1], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3m44.025895897s ago: executing program 0 (id=3102): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0x3, 0x0, 0x4, 0x0, 0x7}, 0x76e0}) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {0x0, 0xfe}, {}, @result}], 0x1c) 3m43.981775149s ago: executing program 4 (id=3103): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553ff73042486134529f62054673877e37"], 0x1c}}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0) 3m43.857266403s ago: executing program 1 (id=3104): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x40000105, 0x0, 0x0}) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4048aecb, &(0x7f0000000280)={0x7, 0x0, [{0x7, 0xffffffff, 0x1, 0xffffff89, 0x6, 0x6, 0x80000001}, {0x1, 0x4, 0x6, 0x8000, 0x27, 0x7, 0x9}, {0xb, 0x8, 0x0, 0x3ff, 0x7ffffdff, 0x8003, 0xffff}, {0x80000019, 0xe5f, 0x0, 0x4, 0xdf3, 0x6, 0x80000001}, {0x80000000, 0x2bb, 0x1, 0xd, 0x3, 0x7fd, 0x400}, {0x80000000, 0x100, 0x4, 0x6, 0x3, 0x2, 0x3}, {0x80000001, 0x2, 0x3, 0xfffffff7, 0xfffffff9, 0xff, 0x6}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3m43.807231253s ago: executing program 2 (id=3105): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="ad5a97"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="200103"], 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000880)={0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="400c1c"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000500)={&(0x7f00000018c0)=[{0x8, 0x0, 0x0, 0x0}], 0x1}) 3m43.659164523s ago: executing program 0 (id=3106): io_setup(0x7, &(0x7f0000001240)=0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/power/hibernate_compression_threads', 0x81, 0x114) io_submit(r0, 0x1, &(0x7f0000000400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000bc0), 0x0, 0x1000000000003}]) 3m43.620922896s ago: executing program 4 (id=3107): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x7, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=ANY=[@ANYBLOB="40000000100039040000000000000000000003", @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x200080d0) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvmmsg(r0, &(0x7f0000000600)=[{{&(0x7f0000000140)=@nfc_llcp, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)=""/199}, {&(0x7f0000000340)=""/161}, {&(0x7f0000000400)=""/94}, {&(0x7f0000000480)=""/160}, {&(0x7f0000000640)=""/155}, {&(0x7f0000000700)=""/80}], 0x0, &(0x7f0000000580)=""/80, 0x11}}], 0x4000000000002ff, 0x2, 0x0) 3m43.327752995s ago: executing program 1 (id=3108): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000700"], 0x50) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r0, r0, 0x0, 0x200000) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x1002000ff) 3m43.291830713s ago: executing program 0 (id=3109): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xfffffffb}, 0x5, 0x34, 0x91f}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0x16}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x30}, 0x80d0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3m8.033650203s ago: executing program 32 (id=3109): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xfffffffb}, 0x5, 0x34, 0x91f}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0x16}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x30}, 0x80d0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3m7.911206592s ago: executing program 33 (id=3108): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000700"], 0x50) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r0, r0, 0x0, 0x200000) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x1002000ff) 3m7.822395669s ago: executing program 34 (id=3105): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="ad5a97"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="200103"], 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000880)={0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="400c1c"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000500)={&(0x7f00000018c0)=[{0x8, 0x0, 0x0, 0x0}], 0x1}) 3m7.652474531s ago: executing program 35 (id=3100): r0 = socket(0x10, 0x3, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)="e9", 0x1}], 0x1) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc)=0x102, 0x16) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f2000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000), 0x80001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x0) getsockname(r0, &(0x7f0000000300)=@tipc=@id, &(0x7f0000000380)=0x80) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000ac1e0001000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff00000000010006004400050000020000000000000000ffff0a010101000000003c00000002000000ac1414aa00000000000000000000000006000000040300"/176], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_usb_connect(0x5, 0x64, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000cb8be7406d04230807000102030109025200010000000009044000000e0100390a240108000b020102082407010500070e01000606060509000600040007000300390c2402050302060254df000a092402050001031f04082403"], 0x0) 3m7.465957988s ago: executing program 36 (id=3107): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x7, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=ANY=[@ANYBLOB="40000000100039040000000000000000000003", @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x200080d0) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvmmsg(r0, &(0x7f0000000600)=[{{&(0x7f0000000140)=@nfc_llcp, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)=""/199}, {&(0x7f0000000340)=""/161}, {&(0x7f0000000400)=""/94}, {&(0x7f0000000480)=""/160}, {&(0x7f0000000640)=""/155}, {&(0x7f0000000700)=""/80}], 0x0, &(0x7f0000000580)=""/80, 0x11}}], 0x4000000000002ff, 0x2, 0x0) 13.534610639s ago: executing program 6 (id=3522): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x10}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0x20000}, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 13.081861953s ago: executing program 7 (id=3526): socket$packet(0x11, 0x3, 0x300) r0 = openat$full(0xffffff9c, &(0x7f00000003c0), 0x8002, 0x0) io_uring_setup(0x2f08, &(0x7f00000007c0)={0x0, 0x768, 0x1000, 0x1, 0x14c, 0x0, r0}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) mount(&(0x7f0000000480)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000004c0)='cramfs\x00', 0x208000, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000340)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4, @loopback}, @in={0x2, 0x4000, @broadcast}}}, 0x118) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r2, &(0x7f0000000180)=0xfe5f, 0x12) 10.92592273s ago: executing program 6 (id=3531): r0 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000a00)={{0x1, 0x1, 0x18, r0, {0x1ff}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) open(0x0, 0x66842, 0x21) mount$9p_virtio(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x10808, &(0x7f0000000540)={'trans=virtio,', {[{@access_user}], [{@appraise_type}]}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x26, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x94) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$kcm(0x23, 0x5, 0x0) listen(r2, 0x800) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r4, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) accept4(r2, 0x0, 0x0, 0x80000) socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x4, 0xc0e, 0x5, 0x8d, 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180), 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) 9.845080667s ago: executing program 7 (id=3532): syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12012000f1048108cd060202d492000000010902"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000580)="02043c0001000000010e0200c52cf7c20675e005b02f0800eb2b2ff0dadb897c6b112002faffffff3066090cb600c5471d130aaf14c85443b705ca7952ad90e59066321a54e7df", 0x47, 0x40001, 0x0, 0x0) 8.408425441s ago: executing program 6 (id=3537): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, 0x0, 0x0, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000280)=""/121, 0xa2ec4ae9}], 0x2, 0x0, 0x8dff}, 0x0) 8.018508065s ago: executing program 6 (id=3539): io_setup(0x20, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000003c0)={r0, 0xfffffffffffffe7a, 0x34}, &(0x7f0000000300)={'enc=', 'pkcs1', ' hash=', {'blake2s-256-x86\x00'}}, &(0x7f0000000400)="fd32ad486607aa0b4faf9825d769c40c4ceac439d361391dc339a366ea50a15ab5c8e364d809000c3f8b264dea8322c5ff2770de1dd8aa233061f6dc24ceeda5486ac5b10af3c69ac3b2d54e9a5f1c39c85ddf82ccf8e431ed3c652bef217833be8d9013adc7d71f89ae9c9e647abce80e339d04fae630a41d5a0e11f8ad45e58311a2b0b3dbfb23b9851b6a982ca36357db147451a913", &(0x7f0000000280)=""/48) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0x138, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x8, &(0x7f00000000c0)=0x4d, 0x4) getsockopt$inet6_buf(r8, 0x29, 0x6, &(0x7f0000000000)=""/16, &(0x7f0000000240)=0x10) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f00000000c0)={@remote, @private0, @empty, 0x40003, 0x40, 0x5, 0x100, 0x0, 0x590043, r3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r9, &(0x7f0000000180)=@abs, 0x6e) 6.169302556s ago: executing program 9 (id=3543): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0xc0086202, &(0x7f0000000180)=0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x8081) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1d7) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x4, 0xb, 0x59, 0x88, 0xfe, 0x0, 0x2a}, 0xe) shutdown(r0, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x2e, 0x0, 0x0) 6.025965122s ago: executing program 6 (id=3544): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) getdents(0xffffffffffffffff, 0x0, 0x58) syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000047ff4f40d3131132677a010203010902120001760fb30f09"], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8011}, 0x80) unshare(0x2a020400) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) pwritev(r0, 0x0, 0x0, 0x3, 0xc6e) 5.81615565s ago: executing program 8 (id=3545): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000e, 0x6c2f2, 0xffffffffffffffff, 0x0) 5.78408465s ago: executing program 7 (id=3546): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) getdents(0xffffffffffffffff, 0x0, 0x58) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc00c5512, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'nicvf0\x00'}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 5.682878361s ago: executing program 9 (id=3548): socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) r0 = socket$inet_sctp(0x2, 0x5, 0x84) socket$netlink(0x10, 0x3, 0x0) userfaultfd(0x80001) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x11, 0x3, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @loopback}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x21, 0x0}}, {0x2, 0x4e23, @local}, 0x1f7, 0x0, 0x0, 0x0, 0xfff9, 0x0, 0x4, 0x2, 0x7ff}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) 5.061477419s ago: executing program 9 (id=3550): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0xb, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x1a, 0x2, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x4, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x1000, 0x4800, 0x300000, 0x800c, 0xe, 0x46a3f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8daa, 0x2, 0xe, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x9, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x6, 0x7, 0xfffffffc, 0x7, 0x100, 0x72c, 0x1c32, 0x3, 0x5, 0x97d4, 0x400, 0xd968, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0xffff, 0x6, 0x96, 0xfbfffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x6, 0xe, 0x5, 0x7, 0x6, 0x2, 0x2, 0x1, 0x8, 0x7, 0x200, 0x3], [0x1, 0x8000c584, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80080001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x10000004, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x7, 0x400004, 0x3, 0x6d7e, 0x3, 0x4, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x40, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x2, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x1, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x101, 0xf, 0x80000002, 0x4, 0x20008, 0x8a5, 0x86, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x1fc, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 4.674649611s ago: executing program 5 (id=3551): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x23e5, 0x65, 0x9, 0x9e}]}) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ffff1a40d8048200b7ce010282970902120001000000000904000000020201"], 0x0) openat(0xffffffffffffffff, 0x0, 0x434801, 0x488) socket$alg(0x26, 0x5, 0x0) mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x1ec, &(0x7f0000000300)={0x0, 0x1, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = syz_open_dev$media(&(0x7f0000000040), 0x2, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000180)={0x80000000, 0x0, &(0x7f0000001580)}) 4.499085929s ago: executing program 8 (id=3552): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.370324129s ago: executing program 9 (id=3553): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r1, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) connect$unix(r0, 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0xe26, 0x101400) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r3, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r2, 0xc0045520, &(0x7f00000000c0)=""/92) 4.274742416s ago: executing program 5 (id=3554): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20000840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x14, &(0x7f0000001740)=@ringbuf={{0x18, 0x8}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@tail_call], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) clock_adjtime(0x0, &(0x7f0000000040)={0x37db, 0xf423b, 0xfffffffffffffffc, 0x0, 0x0, 0x9, 0xfffffffffffffffc, 0x1, 0x3, 0x80000, 0x7ff, 0x0, 0x0, 0xfffffffffffffffd, 0x2, 0xf11b, 0x1, 0x8, 0x0, 0x0, 0x2, 0xb17, 0xffffffffffffffff, 0x5c43, 0x1, 0x6}) 4.213868032s ago: executing program 8 (id=3555): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[], 0x0, 0x3e, 0x0, 0x1}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) write$binfmt_elf32(r4, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x4, 0x2, 0x8d, 0x4, 0x3, 0x6, 0x4004, 0x1c7, 0x38, 0x25e, 0x408, 0x4, 0x20, 0x1, 0x5, 0x3ff, 0x200}, [{0x6474e551, 0x400, 0xb0, 0x7f, 0x1, 0x6, 0x3, 0x7ff}]}, 0x58) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x70bd25, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x3}, @in=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x80, 0x8}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1d}, {0x0, 0xfffffffffffffffa, 0x0, 0xc722}, 0x0, 0x6e6bc0}, [@tmpl={0x104, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x21}, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x32}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x2}, {{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x1, 0x3, 0x0, 0x7ff}, {{@in6=@remote, 0x0, 0x3c}, 0x0, @in=@loopback, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}]}]}, 0x1bc}}, 0x0) 4.02170062s ago: executing program 5 (id=3556): syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12012000f1048108cd060202d492000000010902"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000580)="02043c0001000000010e0200c52cf7c20675e005b02f0800eb2b2ff0dadb897c6b112002faffffff3066090cb600c5471d130aaf14c85443b705ca7952ad90e59066321a54e7df", 0x47, 0x40001, 0x0, 0x0) 3.586630955s ago: executing program 6 (id=3557): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0xfffffffd, 0x10100}, 0x0, 0x0, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r3 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r3}, &(0x7f0000000080)) timerfd_create(0x0, 0x0) read$FUSE(r2, &(0x7f0000002900)={0x2020}, 0x2020) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x2300, {}, {}, @raw32}], 0xffc8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x24) 2.702052604s ago: executing program 8 (id=3558): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0xb, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x1a, 0x2, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x4, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x1000, 0x4800, 0x300000, 0x800c, 0xe, 0x46a3f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8daa, 0x2, 0xe, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x9, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x6, 0x7, 0xfffffffc, 0x7, 0x100, 0x72c, 0x1c32, 0x3, 0x5, 0x97d4, 0x400, 0xd968, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0xffff, 0x6, 0x96, 0xfbfffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x6, 0xe, 0x5, 0x7, 0x6, 0x2, 0x2, 0x1, 0x8, 0x7, 0x200, 0x3], [0x1, 0x8000c584, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80080001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x10000004, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x7, 0x400004, 0x3, 0x6d7e, 0x3, 0x4, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x40, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x2, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x1, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x101, 0xf, 0x80000002, 0x4, 0x20008, 0x8a5, 0x86, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x1fc, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 2.645884192s ago: executing program 9 (id=3559): syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[], 0xb8}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) acct(0x0) 2.591266658s ago: executing program 5 (id=3560): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, 0x0, 0x0, 0x20008000) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@get={0xe0, 0x13, 0x1, 0x0, 0x0, {{'xchacha20\x00'}}}, 0xe0}}, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000400)={0x5, 0x2}) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f00000000c0)=0x2) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, 0x0) 2.590418656s ago: executing program 7 (id=3561): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000280)=""/121, 0xa2ec4ae9}], 0x2, 0x0, 0x8dff}, 0x0) 2.153641658s ago: executing program 8 (id=3562): bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x6, 0x5, 0x4, 0x0, 0x8, 0xa5b4}}, {0x4}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40001}, 0x10) 2.090573631s ago: executing program 7 (id=3563): openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f0000000180)={0x0, 0x0, [0x6, 0x3, 0x3fffc000, 0x6, 0x7, 0x7, 0x10, 0x2]}) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r3, &(0x7f0000000180)=ANY=[], 0x86) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) dup3(r4, r3, 0x0) 2.090325803s ago: executing program 5 (id=3564): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x23e5, 0x65, 0x9, 0x9e}]}) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ffff1a40d8048200b7ce010282970902120001000000000904000000020201"], 0x0) openat(0xffffffffffffffff, 0x0, 0x434801, 0x488) socket$alg(0x26, 0x5, 0x0) mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x1ec, &(0x7f0000000300)={0x0, 0x1, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = syz_open_dev$media(&(0x7f0000000040), 0x2, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000180)={0x80000000, 0x0, &(0x7f0000001580)}) 1.425040944s ago: executing program 9 (id=3565): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 930.801641ms ago: executing program 7 (id=3566): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20000840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x14, &(0x7f0000001740)=@ringbuf={{0x18, 0x8}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@tail_call], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) clock_adjtime(0x0, &(0x7f0000000040)={0x37db, 0xf423b, 0xfffffffffffffffc, 0x0, 0x0, 0x9, 0xfffffffffffffffc, 0x1, 0x3, 0x80000, 0x7ff, 0x0, 0x0, 0xfffffffffffffffd, 0x2, 0xf11b, 0x1, 0x8, 0x0, 0x0, 0x2, 0xb17, 0xffffffffffffffff, 0x5c43, 0x1, 0x6}) 872.488617ms ago: executing program 5 (id=3567): sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r3 = socket(0xa, 0x3, 0x87) sendto(r3, &(0x7f00000003c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd28, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_IIF={0x8}, @RTA_SRC={0x8, 0x2, @private=0xa010100}]}, 0x2c}}, 0xea5bc50b6199d77e) 0s ago: executing program 8 (id=3568): r0 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000a00)={{0x1, 0x1, 0x18, r0, {0x1ff}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) open(0x0, 0x66842, 0x21) mount$9p_virtio(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x10808, &(0x7f0000000540)={'trans=virtio,', {[{@access_user}], [{@appraise_type}]}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x26, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x94) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$kcm(0x23, 0x5, 0x0) listen(r2, 0x800) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) write$tun(0xffffffffffffffff, 0x0, 0x3db) accept4(r2, 0x0, 0x0, 0x80000) socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x4, 0xc0e, 0x5, 0x8d, 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180), 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) kernel console output (not intermixed with test programs): ][ T66] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 661.394128][ T66] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.536252][ T5621] Bluetooth: hci1: command tx timeout [ 661.846152][ T66] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 661.848292][ T66] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.254078][ T66] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 662.254101][ T66] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.592566][T13619] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2737'. [ 662.610850][ T66] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 662.610883][ T66] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.645300][T13570] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.645443][T13570] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.645692][T13570] bridge_slave_0: entered allmulticast mode [ 662.647308][T13570] bridge_slave_0: entered promiscuous mode [ 662.652397][T13570] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.652584][T13570] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.652766][T13570] bridge_slave_1: entered allmulticast mode [ 662.695694][T13570] bridge_slave_1: entered promiscuous mode [ 662.759464][T13570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 662.761888][T13570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 662.792628][T13570] team0: Port device team_slave_0 added [ 662.796009][T13570] team0: Port device team_slave_1 added [ 662.842411][T13570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 662.842427][T13570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 662.842453][T13570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 662.845740][T13570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 662.845753][T13570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 662.845778][T13570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 662.949951][T13570] hsr_slave_0: entered promiscuous mode [ 662.950895][T13570] hsr_slave_1: entered promiscuous mode [ 663.572117][T13634] binder_alloc: 13633: binder_alloc_buf, no vma [ 663.606978][ T9] usb 4-1: USB disconnect, device number 73 [ 663.615819][ T5621] Bluetooth: hci1: command tx timeout [ 664.050357][ T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 664.585329][ T66] bridge_slave_1: left allmulticast mode [ 664.585353][ T66] bridge_slave_1: left promiscuous mode [ 664.585513][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.937869][ T66] bridge_slave_0: left allmulticast mode [ 664.937891][ T66] bridge_slave_0: left promiscuous mode [ 664.962714][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.034895][T13660] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2753'. [ 665.388881][T13662] binder_alloc: 13661: binder_alloc_buf, no vma [ 665.696449][ T5621] Bluetooth: hci1: command tx timeout [ 666.437325][T13679] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2761'. [ 666.604098][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 666.690715][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 666.758915][ T66] bond0 (unregistering): Released all slaves [ 666.936443][T13680] vlan2: entered allmulticast mode [ 666.936466][T13680] bridge1: entered allmulticast mode [ 666.938190][T13681] bridge1: port 1(erspan0) entered blocking state [ 666.938286][T13681] bridge1: port 1(erspan0) entered disabled state [ 666.938422][T13681] erspan0: entered allmulticast mode [ 667.018045][T13681] erspan0: entered promiscuous mode [ 667.085343][T13692] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2764'. [ 667.272387][T13694] binder_alloc: 13693: binder_alloc_buf, no vma [ 667.366993][ T66] tipc: Left network mode [ 667.777979][ T5621] Bluetooth: hci1: command tx timeout [ 668.282747][ T5266] 8021q: adding VLAN 0 to HW filter on device eth1 [ 670.622387][T13764] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2782'. [ 671.005837][ T66] hsr_slave_0: left promiscuous mode [ 671.027520][ T66] hsr_slave_1: left promiscuous mode [ 671.028445][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 671.028469][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 671.086978][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 671.087006][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 671.201687][ T66] veth1_macvtap: left promiscuous mode [ 671.201784][ T66] veth0_macvtap: left promiscuous mode [ 671.224610][ T66] veth0_vlan: left promiscuous mode [ 671.426850][T13790] kernel profiling enabled (shift: 4) [ 672.305068][ T66] team0 (unregistering): Port device team_slave_1 removed [ 672.365187][ T66] team0 (unregistering): Port device team_slave_0 removed [ 672.884438][T13797] dummy0: entered allmulticast mode [ 672.909516][T13796] dummy0: left allmulticast mode [ 673.386078][T13819] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2794'. [ 673.523140][T13570] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 673.580669][T13570] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 673.914779][T13570] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 673.941714][T13570] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 673.944191][T13570] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 674.000184][T13570] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 674.001056][T13570] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 674.051415][T13570] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 674.116409][ T66] IPVS: stop unused estimator thread 0... [ 674.240535][T13570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 674.269926][T13570] 8021q: adding VLAN 0 to HW filter on device team0 [ 674.285741][ T812] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.285875][ T812] bridge0: port 1(bridge_slave_0) entered forwarding state [ 674.382704][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.384074][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 675.241650][T13570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 675.301038][T13570] veth0_vlan: entered promiscuous mode [ 675.321669][T13570] veth1_vlan: entered promiscuous mode [ 675.356735][T13570] veth0_macvtap: entered promiscuous mode [ 675.363546][T13570] veth1_macvtap: entered promiscuous mode [ 675.399310][T13570] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 675.448344][T13570] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 675.491147][ T812] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.491782][ T812] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.491836][ T812] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.491883][ T812] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.564443][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 676.564464][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 676.769532][ T812] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 676.769553][ T812] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 680.114585][ T10] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 680.377236][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 680.520118][ T10] usb 5-1: New USB device found, idVendor=0582, idProduct=0075, bcdDevice= 0.40 [ 680.520198][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.520263][ T10] usb 5-1: Product: syz [ 680.520278][ T10] usb 5-1: Manufacturer: syz [ 680.520332][ T10] usb 5-1: SerialNumber: syz [ 683.242161][T13957] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2841'. [ 683.616910][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 683.617543][ T10] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 683.685925][ T10] usb 5-1: USB disconnect, device number 72 [ 684.146835][T13966] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2844'. [ 684.275066][T13970] syzkaller0: entered promiscuous mode [ 684.275088][T13970] syzkaller0: entered allmulticast mode [ 684.697156][T13979] tipc: Enabling of bearer rejected, failed to enable media [ 685.384468][ T10] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 685.547244][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 685.548845][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 685.548890][ T10] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 685.548913][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.579307][T14010] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2859'. [ 685.607810][ T10] usb 3-1: config 0 descriptor?? [ 685.620719][ T10] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 685.708371][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.709370][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.097494][T14023] vivid-007: ================= START STATUS ================= [ 686.097557][T14023] vivid-007: Enable Output Cropping: true grabbed [ 686.097605][T14023] vivid-007: Enable Output Composing: true grabbed [ 686.097618][T14023] vivid-007: Enable Output Scaler: true grabbed [ 686.097629][T14023] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 686.097681][T14023] vivid-007: Transmit Mode: HDMI grabbed [ 686.097692][T14023] vivid-007: Hotplug Present: 0x00000000 [ 686.097702][T14023] vivid-007: RxSense Present: 0x00000000 [ 686.097710][T14023] vivid-007: EDID Present: 0x00000000 [ 686.097720][T14023] vivid-007: ================== END STATUS ================== [ 686.099038][T14023] netlink: 'syz.0.2864': attribute type 4 has an invalid length. [ 686.099050][T14023] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2864'. [ 686.107778][T14023] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2864'. [ 686.374507][ T31] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 686.419877][T14031] tipc: Enabling of bearer rejected, failed to enable media [ 686.526032][T13555] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 686.529373][ T31] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 686.529398][ T31] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 686.529417][ T31] usb 1-1: config 0 has no interface number 0 [ 686.534850][ T31] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 686.534877][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.534909][ T31] usb 1-1: Product: syz [ 686.534923][ T31] usb 1-1: Manufacturer: syz [ 686.534937][ T31] usb 1-1: SerialNumber: syz [ 686.549316][ T31] usb 1-1: config 0 descriptor?? [ 686.674438][T13555] usb 4-1: Using ep0 maxpacket: 32 [ 686.680044][T13555] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 686.680267][T13555] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 686.680292][T13555] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 686.680304][T13555] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.719451][T13555] usb 4-1: config 0 descriptor?? [ 686.750867][T13555] hub 4-1:0.0: USB hub found [ 686.841689][ T31] uvcvideo 1-1:0.64: probe with driver uvcvideo failed with error -22 [ 686.873857][ T31] usb 1-1: USB disconnect, device number 45 [ 686.982252][T13555] hub 4-1:0.0: 1 port detected [ 687.182607][T13555] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 687.182679][T13555] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 687.192381][T13555] usbhid 4-1:0.0: fixing wrong optional hid class descriptors count [ 687.192401][T13555] usbhid 4-1:0.0: can't add hid device: -22 [ 687.192509][T13555] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 687.221005][T13555] usb 4-1: USB disconnect, device number 74 [ 687.481154][T14052] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2871'. [ 688.411740][T14073] tipc: Enabling of bearer rejected, failed to enable media [ 688.731092][T14086] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2882'. [ 688.770102][ T31] usb 3-1: USB disconnect, device number 58 [ 689.064968][T14093] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2886'. [ 689.279693][T14090] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2884'. [ 689.463117][T14102] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2889'. [ 690.024770][ T10] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 690.069392][T14116] tipc: Enabling of bearer rejected, failed to enable media [ 690.178334][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 690.178390][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 690.178430][ T10] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 690.178453][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.214990][ T10] usb 3-1: config 0 descriptor?? [ 690.245626][ T10] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 690.393753][T14134] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2899'. [ 690.740372][T14141] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2903'. [ 691.291117][T14159] capability: warning: `syz.0.2909' uses deprecated v2 capabilities in a way that may be insecure [ 691.607588][T14164] tipc: Enabling of bearer rejected, failed to enable media [ 691.836549][T14177] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2913'. [ 693.144538][ T9] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 693.187985][T14211] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2928'. [ 693.242601][ T10] usb 3-1: USB disconnect, device number 59 [ 693.294574][ T5847] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 693.304900][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 693.321233][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 693.321268][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 693.321305][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 693.321328][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.383924][ T9] usb 1-1: config 0 descriptor?? [ 693.396304][ T9] hub 1-1:0.0: USB hub found [ 693.465078][ T5847] usb 2-1: Using ep0 maxpacket: 32 [ 693.469819][ T5847] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 693.469900][ T5847] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 693.469938][ T5847] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 693.469961][ T5847] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.532471][ T5847] usb 2-1: config 0 descriptor?? [ 693.550494][ T5847] hub 2-1:0.0: USB hub found [ 693.615565][ T9] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 693.644727][ T9] usbhid 1-1:0.0: fixing wrong optional hid class descriptors count [ 693.644749][ T9] usbhid 1-1:0.0: can't add hid device: -22 [ 693.644916][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -22 [ 693.696479][ T9] usb 1-1: USB disconnect, device number 46 [ 693.748356][ T5847] hub 2-1:0.0: 1 port detected [ 693.954838][ T5847] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 693.954861][ T5847] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 693.958214][ T5847] usbhid 2-1:0.0: fixing wrong optional hid class descriptors count [ 693.958228][ T5847] usbhid 2-1:0.0: can't add hid device: -22 [ 693.958292][ T5847] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 694.016990][ T5847] usb 2-1: USB disconnect, device number 72 [ 695.622263][T14247] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2941'. [ 695.844524][T13555] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 695.997421][T13555] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 695.997477][T13555] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 695.997520][T13555] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 695.997543][T13555] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.020625][T13555] usb 3-1: config 0 descriptor?? [ 696.069520][T13555] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 697.209665][T14287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2957'. [ 697.252735][T14289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2958'. [ 698.035898][T14313] syz.1.2968 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 698.094520][ T9] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 698.213238][T14317] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2970'. [ 698.234698][ T9] usb 4-1: device descriptor read/64, error -71 [ 698.445079][T13555] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 698.481757][T14323] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2972'. [ 698.484418][ T9] usb 4-1: new full-speed USB device number 76 using dummy_hcd [ 698.596242][T13555] usb 1-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 698.596271][T13555] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 698.598789][T13555] usb 1-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 698.598816][T13555] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.598836][T13555] usb 1-1: Product: syz [ 698.598849][T13555] usb 1-1: Manufacturer: syz [ 698.598863][T13555] usb 1-1: SerialNumber: syz [ 698.603141][T13555] usb 1-1: config 0 descriptor?? [ 698.621027][T13555] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 698.624480][ T9] usb 4-1: device descriptor read/64, error -71 [ 698.745025][ T9] usb usb4-port1: attempt power cycle [ 699.080560][ T5870] usb 3-1: USB disconnect, device number 60 [ 699.090476][ T9] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 699.105715][ T9] usb 4-1: device descriptor read/8, error -71 [ 699.344516][ T9] usb 4-1: new full-speed USB device number 78 using dummy_hcd [ 699.366449][ T9] usb 4-1: device descriptor read/8, error -71 [ 699.474938][ T9] usb usb4-port1: unable to enumerate USB device [ 699.852936][ T9] usb 1-1: USB disconnect, device number 47 [ 700.290729][T14348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2982'. [ 700.546201][T14350] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2983'. [ 701.871772][T14380] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2996'. [ 702.132905][T14388] fuse: Bad value for 'fd' [ 702.334773][ T5740] usb 5-1: new full-speed USB device number 73 using dummy_hcd [ 702.475264][ T5740] usb 5-1: device descriptor read/64, error -71 [ 702.734495][ T5740] usb 5-1: new full-speed USB device number 74 using dummy_hcd [ 702.874428][ T5740] usb 5-1: device descriptor read/64, error -71 [ 702.986279][ T5740] usb usb5-port1: attempt power cycle [ 703.326419][ T5740] usb 5-1: new full-speed USB device number 75 using dummy_hcd [ 703.345249][ T5740] usb 5-1: device descriptor read/8, error -71 [ 703.433738][T14409] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3009'. [ 703.584537][ T5740] usb 5-1: new full-speed USB device number 76 using dummy_hcd [ 703.605376][ T5740] usb 5-1: device descriptor read/8, error -71 [ 703.724891][ T5740] usb usb5-port1: unable to enumerate USB device [ 703.839542][T14417] tipc: Enabled bearer , priority 0 [ 703.840426][T14417] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 704.069199][T14421] fuse: Bad value for 'fd' [ 704.158456][T14415] tipc: Disabling bearer [ 705.244519][ T5870] usb 4-1: new full-speed USB device number 79 using dummy_hcd [ 705.374465][ T5870] usb 4-1: device descriptor read/64, error -71 [ 705.614460][ T5870] usb 4-1: new full-speed USB device number 80 using dummy_hcd [ 705.744497][ T5870] usb 4-1: device descriptor read/64, error -71 [ 705.854798][ T5870] usb usb4-port1: attempt power cycle [ 705.916385][T14453] tipc: Enabled bearer , priority 0 [ 705.917289][T14453] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 706.180635][T14452] tipc: Disabling bearer [ 706.245146][ T5870] usb 4-1: new full-speed USB device number 81 using dummy_hcd [ 706.265874][ T5870] usb 4-1: device descriptor read/8, error -71 [ 706.504653][ T5870] usb 4-1: new full-speed USB device number 82 using dummy_hcd [ 706.525397][ T5870] usb 4-1: device descriptor read/8, error -71 [ 706.636311][ T5870] usb usb4-port1: unable to enumerate USB device [ 707.268849][T14488] syzkaller0: entered promiscuous mode [ 707.268865][T14488] syzkaller0: entered allmulticast mode [ 707.271144][T14488] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 708.010307][T14503] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3047'. [ 709.205109][T14538] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3063'. [ 709.213866][T14537] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3061'. [ 709.454492][ T10] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 709.605013][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 709.609426][ T10] usb 2-1: New USB device found, idVendor=0582, idProduct=0075, bcdDevice= 0.40 [ 709.609456][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.609475][ T10] usb 2-1: Product: syz [ 709.609489][ T10] usb 2-1: Manufacturer: syz [ 709.609503][ T10] usb 2-1: SerialNumber: syz [ 710.412127][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 710.449224][ T10] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 710.473604][ T10] usb 2-1: USB disconnect, device number 73 [ 710.837791][T14570] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3075'. [ 710.880384][T14572] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3076'. [ 711.190708][T14574] syzkaller0: entered promiscuous mode [ 711.190734][T14574] syzkaller0: entered allmulticast mode [ 711.208624][T14574] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 711.834410][ T5740] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 711.843138][T14589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3083'. [ 711.985303][ T5740] usb 3-1: no configurations [ 711.985316][ T5740] usb 3-1: can't read configurations, error -22 [ 712.124384][ T5740] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 712.275749][ T5740] usb 3-1: no configurations [ 712.275769][ T5740] usb 3-1: can't read configurations, error -22 [ 712.280376][ T5740] usb usb3-port1: attempt power cycle [ 712.321496][T14597] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3088'. [ 712.373002][T14599] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3087'. [ 712.614504][ T5740] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 712.645924][ T5740] usb 3-1: no configurations [ 712.645937][ T5740] usb 3-1: can't read configurations, error -22 [ 712.784461][ T5740] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 712.809181][ T5740] usb 3-1: no configurations [ 712.809201][ T5740] usb 3-1: can't read configurations, error -22 [ 712.809583][ T5740] usb usb3-port1: unable to enumerate USB device [ 712.914082][T14613] syzkaller0: entered promiscuous mode [ 712.914098][T14613] syzkaller0: entered allmulticast mode [ 712.924889][T14613] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 713.044430][ T5870] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 713.198817][ T5870] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 713.198844][ T5870] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 713.202427][ T5870] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 713.202457][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.202475][ T5870] usb 2-1: Product: syz [ 713.202490][ T5870] usb 2-1: Manufacturer: syz [ 713.202504][ T5870] usb 2-1: SerialNumber: syz [ 713.233019][ T5870] usb 2-1: config 0 descriptor?? [ 713.246010][ T5870] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 713.503447][ T5870] gspca_sunplus: reg_r err -71 [ 713.503539][ T5870] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 714.477800][ T5870] usb 2-1: USB disconnect, device number 74 [ 715.022915][T14625] vivid-007: ================= START STATUS ================= [ 715.022935][T14625] vivid-007: Enable Output Cropping: true grabbed [ 715.022950][T14625] vivid-007: Enable Output Composing: true grabbed [ 715.022961][T14625] vivid-007: Enable Output Scaler: true grabbed [ 715.022972][T14625] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 715.022983][T14625] vivid-007: Transmit Mode: HDMI grabbed [ 715.022994][T14625] vivid-007: Hotplug Present: 0x00000000 [ 715.023003][T14625] vivid-007: RxSense Present: 0x00000000 [ 715.023013][T14625] vivid-007: EDID Present: 0x00000000 [ 715.023022][T14625] vivid-007: ================== END STATUS ================== [ 715.023724][T14625] netlink: 'syz.3.3100': attribute type 4 has an invalid length. [ 715.023743][T14625] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3100'. [ 715.050499][T14625] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3100'. [ 715.284670][ T5870] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 715.466440][ T5870] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 715.466469][ T5870] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 715.466487][ T5870] usb 4-1: config 0 has no interface number 0 [ 715.471516][ T5870] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 715.471535][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.471545][ T5870] usb 4-1: Product: syz [ 715.471552][ T5870] usb 4-1: Manufacturer: syz [ 715.471560][ T5870] usb 4-1: SerialNumber: syz [ 715.481250][ T5870] usb 4-1: config 0 descriptor?? [ 715.654532][ T5737] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 715.760989][ T5870] uvcvideo 4-1:0.64: probe with driver uvcvideo failed with error -22 [ 715.769833][ T5870] usb 4-1: USB disconnect, device number 83 [ 715.816689][ T5737] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 715.816740][ T5737] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 715.816763][ T5737] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.880760][ T5737] usb 3-1: config 0 descriptor?? [ 715.903736][ T5737] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 716.087970][T14645] syzkaller0: entered promiscuous mode [ 716.087987][T14645] syzkaller0: entered allmulticast mode [ 718.712046][T14645] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 750.624230][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 750.624342][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 750.929203][ T5870] usb 3-1: USB disconnect, device number 65 [ 751.411012][ T5621] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 751.430784][ T5621] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 751.508543][ T5621] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 751.509592][ T5621] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 751.510328][ T5621] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 751.945575][ T5621] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 752.086908][T14660] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 752.091241][T14660] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 752.142490][T14660] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 752.143321][T14660] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 752.177114][T12266] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 752.238509][T12266] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 752.246310][T12266] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 752.257733][T12266] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 752.264496][T12266] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 752.460736][ T4920] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 752.502090][ T4920] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 752.539004][T14660] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 752.545162][ T4920] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 752.551879][ T4920] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 752.568941][ T4920] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 752.591454][ T4920] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 752.602427][ T4920] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 752.603512][ T4920] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 752.609942][ T4920] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 753.615846][ T4920] Bluetooth: hci0: command tx timeout [ 754.174509][ T4920] Bluetooth: hci7: command tx timeout [ 754.676586][ T4920] Bluetooth: hci6: command tx timeout [ 754.897407][ T4920] Bluetooth: hci8: command tx timeout [ 754.975359][ T4920] Bluetooth: hci9: command tx timeout [ 755.143606][ T161] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.475864][ T5620] bond0: (slave syz_tun): Releasing backup interface [ 755.696123][ T4920] Bluetooth: hci0: command tx timeout [ 756.254527][ T4920] Bluetooth: hci7: command tx timeout [ 756.330229][ T161] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.672114][ T161] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.734495][ T4920] Bluetooth: hci6: command tx timeout [ 756.974880][ T4920] Bluetooth: hci8: command tx timeout [ 757.027414][ T161] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.055115][ T4920] Bluetooth: hci9: command tx timeout [ 757.776008][ T4920] Bluetooth: hci0: command tx timeout [ 758.268539][T14649] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.268656][T14649] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.268825][T14649] bridge_slave_0: entered allmulticast mode [ 758.270227][T14649] bridge_slave_0: entered promiscuous mode [ 758.334431][ T4920] Bluetooth: hci7: command tx timeout [ 758.343901][T14649] bridge0: port 2(bridge_slave_1) entered blocking state [ 758.343984][T14649] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.344169][T14649] bridge_slave_1: entered allmulticast mode [ 758.372887][T14649] bridge_slave_1: entered promiscuous mode [ 758.644824][ T161] bridge_slave_1: left allmulticast mode [ 758.644849][ T161] bridge_slave_1: left promiscuous mode [ 758.645050][ T161] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.776721][ T161] bridge_slave_0: left allmulticast mode [ 758.776747][ T161] bridge_slave_0: left promiscuous mode [ 758.776942][ T161] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.814662][ T4920] Bluetooth: hci6: command tx timeout [ 759.054799][ T4920] Bluetooth: hci8: command tx timeout [ 759.144948][ T4920] Bluetooth: hci9: command tx timeout [ 759.854540][ T4920] Bluetooth: hci0: command tx timeout [ 759.895123][ T161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 759.975508][ T161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 759.996519][ T161] bond0 (unregistering): Released all slaves [ 760.194441][T14649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 760.283559][T14649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 760.283784][T14655] bridge0: port 1(bridge_slave_0) entered blocking state [ 760.283924][T14655] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.284051][T14655] bridge_slave_0: entered allmulticast mode [ 760.287257][T14655] bridge_slave_0: entered promiscuous mode [ 760.314640][T14657] bridge0: port 1(bridge_slave_0) entered blocking state [ 760.314756][T14657] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.315023][T14657] bridge_slave_0: entered allmulticast mode [ 760.317714][T14657] bridge_slave_0: entered promiscuous mode [ 760.319948][T14662] bridge0: port 1(bridge_slave_0) entered blocking state [ 760.320060][T14662] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.320241][T14662] bridge_slave_0: entered allmulticast mode [ 760.323886][T14662] bridge_slave_0: entered promiscuous mode [ 760.418994][T14655] bridge0: port 2(bridge_slave_1) entered blocking state [ 760.419098][T14655] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.419228][T14655] bridge_slave_1: entered allmulticast mode [ 760.420676][T14655] bridge_slave_1: entered promiscuous mode [ 760.423190][T14657] bridge0: port 2(bridge_slave_1) entered blocking state [ 760.423280][T14657] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.423415][T14657] bridge_slave_1: entered allmulticast mode [ 760.424630][ T4920] Bluetooth: hci7: command tx timeout [ 760.426565][T14657] bridge_slave_1: entered promiscuous mode [ 760.428327][T14662] bridge0: port 2(bridge_slave_1) entered blocking state [ 760.428440][T14662] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.428610][T14662] bridge_slave_1: entered allmulticast mode [ 760.431408][T14662] bridge_slave_1: entered promiscuous mode [ 760.535972][T14654] bridge0: port 1(bridge_slave_0) entered blocking state [ 760.536100][T14654] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.536409][T14654] bridge_slave_0: entered allmulticast mode [ 760.537877][T14654] bridge_slave_0: entered promiscuous mode [ 760.541457][T14649] team0: Port device team_slave_0 added [ 760.891618][T14654] bridge0: port 2(bridge_slave_1) entered blocking state [ 760.891729][T14654] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.895626][ T4920] Bluetooth: hci6: command tx timeout [ 760.912443][T14654] bridge_slave_1: entered allmulticast mode [ 760.922379][T14654] bridge_slave_1: entered promiscuous mode [ 760.931158][T14649] team0: Port device team_slave_1 added [ 760.934526][T14655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 760.943281][T14657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 761.037090][T14662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 761.089116][T14655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 761.091201][T14657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 761.097013][T14662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 761.134605][ T4920] Bluetooth: hci8: command tx timeout [ 761.184239][T14654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 761.186223][T14649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 761.186234][T14649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 761.186248][T14649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 761.215014][ T4920] Bluetooth: hci9: command tx timeout [ 761.752738][T14654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 761.753663][T14649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 761.753678][T14649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 761.753702][T14649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 761.811396][T14655] team0: Port device team_slave_0 added [ 761.912723][T14657] team0: Port device team_slave_0 added [ 761.922178][T14662] team0: Port device team_slave_0 added [ 761.965686][T14655] team0: Port device team_slave_1 added [ 761.968324][T14657] team0: Port device team_slave_1 added [ 761.971499][T14662] team0: Port device team_slave_1 added [ 762.086843][T14654] team0: Port device team_slave_0 added [ 762.167620][T14654] team0: Port device team_slave_1 added [ 762.195727][T14657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 762.195745][T14657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 762.195769][T14657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 762.384743][ T161] hsr_slave_0: left promiscuous mode [ 762.424696][ T161] hsr_slave_1: left promiscuous mode [ 762.425556][ T161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 762.425573][ T161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 762.465797][ T161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 762.465820][ T161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 762.569169][ T161] veth1_macvtap: left promiscuous mode [ 762.569248][ T161] veth0_macvtap: left promiscuous mode [ 762.569383][ T161] veth1_vlan: left promiscuous mode [ 762.569474][ T161] veth0_vlan: left promiscuous mode [ 763.299906][ T161] team0 (unregistering): Port device team_slave_1 removed [ 763.355169][ T161] team0 (unregistering): Port device team_slave_0 removed [ 763.547853][T14662] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 763.547870][T14662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 763.547896][T14662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 763.597312][T14655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 763.597329][T14655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 763.597355][T14655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 763.658031][T14657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 763.658045][T14657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 763.658059][T14657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 763.789495][ T5266] 8021q: adding VLAN 0 to HW filter on device eth1 [ 763.790619][T14662] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 763.790634][T14662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 763.790656][T14662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 763.809903][T14649] hsr_slave_0: entered promiscuous mode [ 763.812857][T14649] hsr_slave_1: entered promiscuous mode [ 763.868869][T14655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 763.868881][T14655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 763.868897][T14655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 763.918768][T14654] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 763.918785][T14654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 763.918810][T14654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 763.939774][T14654] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 763.939790][T14654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 763.939815][T14654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 764.121933][T14657] hsr_slave_0: entered promiscuous mode [ 764.123119][T14657] hsr_slave_1: entered promiscuous mode [ 764.124058][T14657] debugfs: 'hsr0' already exists in 'hsr' [ 764.124080][T14657] Cannot create hsr debugfs directory [ 764.184292][T14662] hsr_slave_0: entered promiscuous mode [ 764.185286][T14662] hsr_slave_1: entered promiscuous mode [ 764.185917][T14662] debugfs: 'hsr0' already exists in 'hsr' [ 764.185939][T14662] Cannot create hsr debugfs directory [ 764.265665][T14655] hsr_slave_0: entered promiscuous mode [ 764.266808][T14655] hsr_slave_1: entered promiscuous mode [ 764.267353][T14655] debugfs: 'hsr0' already exists in 'hsr' [ 764.267368][T14655] Cannot create hsr debugfs directory [ 764.331859][T14654] hsr_slave_0: entered promiscuous mode [ 764.332694][T14654] hsr_slave_1: entered promiscuous mode [ 764.333249][T14654] debugfs: 'hsr0' already exists in 'hsr' [ 764.333263][T14654] Cannot create hsr debugfs directory [ 765.409489][ T5266] 8021q: adding VLAN 0 to HW filter on device eth2 [ 765.981974][T14649] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 766.078084][T14649] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 766.383794][ T161] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.451640][T14649] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 766.489268][T14649] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 766.502658][T14649] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 766.566220][T14649] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 766.622395][ T5266] 8021q: adding VLAN 0 to HW filter on device eth3 [ 766.622910][T14649] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 766.647176][T14649] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 766.901193][ T161] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.435265][ T161] bond0: (slave netdevsim1): Releasing backup interface [ 767.498500][ T161] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.535091][T14657] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 767.637922][T14657] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 767.657435][T14657] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 767.698367][T14657] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 767.701305][ T5266] 8021q: adding VLAN 0 to HW filter on device eth4 [ 767.903641][ T161] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.938921][T14657] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 767.977475][T14657] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 768.093679][T14657] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 768.117410][T14657] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 768.420982][T14662] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 768.478889][T14662] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 768.494923][T14662] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 768.537492][T14662] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 768.555591][T14662] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 768.594423][T14662] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 768.614937][T14662] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 768.686772][T14662] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 769.251716][T14649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 769.271349][T14655] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 769.310887][T14655] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 769.343193][T14655] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 769.411919][T14655] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 769.425461][T14655] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 769.460488][T14655] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 769.747422][ T161] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.801906][T14655] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 769.818549][T14655] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 770.023757][T14649] 8021q: adding VLAN 0 to HW filter on device team0 [ 770.227508][ T161] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.324955][T14654] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 770.433821][T14654] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 770.465988][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 770.466194][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 770.471057][T14654] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 770.550191][T14654] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 770.568128][T14654] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 770.603652][T14654] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 770.902366][ T161] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.956794][T14654] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 771.023694][T14654] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 771.050345][ T812] bridge0: port 2(bridge_slave_1) entered blocking state [ 771.050517][ T812] bridge0: port 2(bridge_slave_1) entered forwarding state [ 771.067912][ T5266] 8021q: adding VLAN 0 to HW filter on device eth5 [ 771.171782][T14657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 771.360365][ T161] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.554219][T14657] 8021q: adding VLAN 0 to HW filter on device team0 [ 771.602232][ T3392] bridge0: port 1(bridge_slave_0) entered blocking state [ 771.602361][ T3392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 771.683218][ T3392] bridge0: port 2(bridge_slave_1) entered blocking state [ 771.684845][ T3392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 771.692545][T14662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 772.189265][T14662] 8021q: adding VLAN 0 to HW filter on device team0 [ 772.453211][ T3392] bridge0: port 1(bridge_slave_0) entered blocking state [ 772.457749][ T3392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 772.472484][T14655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 772.589303][ T5266] 8021q: adding VLAN 0 to HW filter on device eth6 [ 772.701836][ T7390] bridge0: port 2(bridge_slave_1) entered blocking state [ 772.701972][ T7390] bridge0: port 2(bridge_slave_1) entered forwarding state [ 773.065014][ T161] bridge_slave_1: left allmulticast mode [ 773.065039][ T161] bridge_slave_1: left promiscuous mode [ 773.065222][ T161] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.176461][ T161] bridge_slave_0: left allmulticast mode [ 773.176486][ T161] bridge_slave_0: left promiscuous mode [ 773.186579][ T161] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.504936][ T161] bridge_slave_1: left allmulticast mode [ 773.504974][ T161] bridge_slave_1: left promiscuous mode [ 773.505229][ T161] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.625765][ T161] bridge_slave_0: left allmulticast mode [ 773.625789][ T161] bridge_slave_0: left promiscuous mode [ 773.632965][ T161] bridge0: port 1(bridge_slave_0) entered disabled state [ 774.855145][ T161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 774.935255][ T161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 774.977936][ T161] bond0 (unregistering): Released all slaves [ 775.826075][ T161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 775.885747][ T161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 775.908830][ T161] bond0 (unregistering): Released all slaves [ 776.055416][T14655] 8021q: adding VLAN 0 to HW filter on device team0 [ 776.282641][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 776.282716][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 776.288238][T14654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 776.421351][ T3392] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.421475][ T3392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 776.429394][T14649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 776.598577][T14654] 8021q: adding VLAN 0 to HW filter on device team0 [ 776.619607][ T161] tipc: Left network mode [ 776.753035][ T3392] bridge0: port 1(bridge_slave_0) entered blocking state [ 776.753256][ T3392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 776.784109][ T3392] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.785364][ T3392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 778.349766][ T5266] 8021q: adding VLAN 0 to HW filter on device eth7 [ 778.583249][T14657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 778.943047][T14662] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 779.032518][T14649] veth0_vlan: entered promiscuous mode [ 779.380074][T14655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 779.432610][T14649] veth1_vlan: entered promiscuous mode [ 780.126418][ T5266] 8021q: adding VLAN 0 to HW filter on device eth8 [ 780.166943][T14654] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 780.191404][T14649] veth0_macvtap: entered promiscuous mode [ 780.198021][T14657] veth0_vlan: entered promiscuous mode [ 780.367760][T14649] veth1_macvtap: entered promiscuous mode [ 780.429696][T14657] veth1_vlan: entered promiscuous mode [ 780.878791][T14649] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 780.933041][T14649] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 780.952339][T14662] veth0_vlan: entered promiscuous mode [ 780.994068][ T3392] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.013213][ T3392] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.164504][ T161] hsr_slave_0: left promiscuous mode [ 781.204483][ T161] hsr_slave_1: left promiscuous mode [ 781.205181][ T161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 781.205197][ T161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 781.266459][ T161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 781.266487][ T161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 781.465912][ T161] hsr_slave_0: left promiscuous mode [ 781.504562][ T161] hsr_slave_1: left promiscuous mode [ 781.506258][ T161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 781.506277][ T161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 781.565633][ T161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 781.565661][ T161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 781.645756][ T161] veth1_macvtap: left promiscuous mode [ 781.645820][ T161] veth0_macvtap: left promiscuous mode [ 781.645953][ T161] veth1_vlan: left promiscuous mode [ 781.646047][ T161] veth0_vlan: left promiscuous mode [ 781.796163][ T161] veth1_macvtap: left promiscuous mode [ 781.796271][ T161] veth0_macvtap: left promiscuous mode [ 781.796513][ T161] veth1_vlan: left promiscuous mode [ 781.796679][ T161] veth0_vlan: left promiscuous mode [ 782.666605][ T161] team0 (unregistering): Port device team_slave_1 removed [ 782.707538][ T161] team0 (unregistering): Port device team_slave_0 removed [ 783.445973][ T161] team0 (unregistering): Port device team_slave_1 removed [ 783.485026][ T161] team0 (unregistering): Port device team_slave_0 removed [ 783.790655][ T3392] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.792266][ T5266] 8021q: adding VLAN 0 to HW filter on device eth9 [ 783.856681][ T3392] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.867227][T14662] veth1_vlan: entered promiscuous mode [ 783.882546][T14657] veth0_macvtap: entered promiscuous mode [ 783.953892][T14655] veth0_vlan: entered promiscuous mode [ 784.018759][T14657] veth1_macvtap: entered promiscuous mode [ 784.512742][T14655] veth1_vlan: entered promiscuous mode [ 784.558233][T14654] veth0_vlan: entered promiscuous mode [ 784.819064][T14657] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 784.933784][T14654] veth1_vlan: entered promiscuous mode [ 785.019613][T14662] veth0_macvtap: entered promiscuous mode [ 785.037482][T14657] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 785.047536][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 785.047555][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 785.163944][T14662] veth1_macvtap: entered promiscuous mode [ 785.341213][ T3458] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.345584][T14655] veth0_macvtap: entered promiscuous mode [ 785.347536][ T3458] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.350271][ T3458] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.381686][ T3458] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.479111][T14655] veth1_macvtap: entered promiscuous mode [ 785.507713][T14662] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 785.574043][T14662] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 785.607816][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 785.607838][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 785.896429][ T212] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.010929][T14655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 786.021776][ T212] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.039189][ T212] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.083708][T14654] veth0_macvtap: entered promiscuous mode [ 786.089698][ T212] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.240645][T14655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 786.242139][ T5266] 8021q: adding VLAN 0 to HW filter on device eth10 [ 786.575742][T14654] veth1_macvtap: entered promiscuous mode [ 786.939910][T15019] binder: BINDER_SET_CONTEXT_MGR already set [ 786.939925][T15019] binder: 15018:15019 ioctl 4018620d 200000004a80 returned -16 [ 786.951398][ T197] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.135282][ T812] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.139208][ T812] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.144007][ T812] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.427142][T14654] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 787.444217][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 787.444236][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 787.917772][T14654] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 788.356272][ T212] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.380008][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 788.380028][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 788.433155][ T3458] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.463226][ T3458] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.486067][ T3458] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.172963][ T8951] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 789.172980][ T8951] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 789.371056][ T3392] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 789.371076][ T3392] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 789.414607][T13555] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 789.688101][T13555] usb 6-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 789.688125][T13555] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 789.690268][T13555] usb 6-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 789.690293][T13555] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.690311][T13555] usb 6-1: Product: syz [ 789.690324][T13555] usb 6-1: Manufacturer: syz [ 789.690336][T13555] usb 6-1: SerialNumber: syz [ 789.736038][ T161] IPVS: stop unused estimator thread 0... [ 789.736824][ T161] IPVS: stop unused estimator thread 0... [ 789.787187][T13555] usb 6-1: config 0 descriptor?? [ 789.823247][T13555] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 790.281012][T13555] gspca_sunplus: reg_r err -71 [ 790.281106][T13555] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 790.324134][T13555] usb 6-1: USB disconnect, device number 2 [ 790.409486][ T8951] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 790.409506][ T8951] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 790.830750][ T161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 790.830771][ T161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 790.971113][ T161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 790.971134][ T161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 791.029730][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 791.029785][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 791.363153][T15065] netlink: 84 bytes leftover after parsing attributes in process `syz.7.3118'. [ 791.922551][T15079] binder: BINDER_SET_CONTEXT_MGR already set [ 791.922567][T15079] binder: 15076:15079 ioctl 4018620d 200000004a80 returned -16 [ 794.244478][T15091] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 794.307126][T15109] tipc: Started in network mode [ 794.307159][T15109] tipc: Node identity 3a72df4c10bf, cluster identity 4711 [ 794.307330][T15109] tipc: Enabled bearer , priority 0 [ 794.378485][T15109] syzkaller0: entered promiscuous mode [ 794.378513][T15109] syzkaller0: entered allmulticast mode [ 794.416544][T15091] usb 10-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 794.416574][T15091] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 794.421413][T15091] usb 10-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 794.421445][T15091] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.421463][T15091] usb 10-1: Product: syz [ 794.421477][T15091] usb 10-1: Manufacturer: syz [ 794.421492][T15091] usb 10-1: SerialNumber: syz [ 794.440776][T15091] usb 10-1: config 0 descriptor?? [ 794.446263][T15113] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 794.476041][T15091] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 794.677364][T15091] gspca_sunplus: reg_r err -71 [ 794.677488][T15091] sunplus 10-1:0.0: probe with driver sunplus failed with error -71 [ 794.713033][T15091] usb 10-1: USB disconnect, device number 2 [ 794.899987][T15109] tipc: Resetting bearer [ 795.014644][T15108] tipc: Resetting bearer [ 795.206475][T15108] tipc: Disabling bearer [ 797.600375][T15163] binder: BINDER_SET_CONTEXT_MGR already set [ 797.600389][T15163] binder: 15162:15163 ioctl 4018620d 200000004a80 returned -16 [ 797.631812][T15166] Bluetooth: MGMT ver 1.23 [ 798.119309][ T5266] 8021q: adding VLAN 0 to HW filter on device eth11 [ 800.015136][T15185] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 800.254825][T14854] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 800.407029][T14854] usb 7-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 800.407057][T14854] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 800.415113][T14854] usb 7-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 800.415144][T14854] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.415165][T14854] usb 7-1: Product: syz [ 800.415178][T14854] usb 7-1: Manufacturer: syz [ 800.415194][T14854] usb 7-1: SerialNumber: syz [ 800.430732][T14854] usb 7-1: config 0 descriptor?? [ 800.455227][T14854] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 800.834490][T14854] gspca_sunplus: reg_r err -71 [ 800.834566][T14854] sunplus 7-1:0.0: probe with driver sunplus failed with error -71 [ 800.920708][T14854] usb 7-1: USB disconnect, device number 2 [ 801.735383][ T5266] 8021q: adding VLAN 0 to HW filter on device eth12 [ 803.737680][T15225] gfs2: error -5 reading superblock [ 803.884704][T15231] tipc: Can't bind to reserved service type 2 [ 803.980178][T15235] netlink: 'syz.9.3145': attribute type 10 has an invalid length. [ 803.980198][T15235] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3145'. [ 804.006374][T15226] Process accounting resumed [ 804.301282][T15091] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 804.514476][T15091] usb 10-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 804.514510][T15091] usb 10-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 804.514530][T15091] usb 10-1: config 0 interface 0 has no altsetting 0 [ 804.701507][T15091] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 804.701543][T15091] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 804.701562][T15091] usb 10-1: Product: syz [ 804.701574][T15091] usb 10-1: Manufacturer: syz [ 804.701588][T15091] usb 10-1: SerialNumber: syz [ 805.243694][T15235] team0: Failed to send options change via netlink (err -105) [ 805.243729][T15235] team0: Port device geneve1 added [ 806.896499][T15091] usb 10-1: config 0 descriptor?? [ 807.144397][T15091] usb 10-1: can't set config #0, error -71 [ 807.157651][T15091] usb 10-1: USB disconnect, device number 3 [ 808.254511][T15091] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 809.040196][T15284] syz.7.3166 (15284): drop_caches: 2 [ 809.135614][T15091] usb 6-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 809.135643][T15091] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 809.146049][T15091] usb 6-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 809.146086][T15091] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.146105][T15091] usb 6-1: Product: syz [ 809.146118][T15091] usb 6-1: Manufacturer: syz [ 809.146132][T15091] usb 6-1: SerialNumber: syz [ 809.156373][T15091] usb 6-1: config 0 descriptor?? [ 809.163533][T15091] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 809.612941][T15091] gspca_sunplus: reg_r err -71 [ 809.613030][T15091] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 809.617052][T15276] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.640666][T15091] usb 6-1: USB disconnect, device number 3 [ 809.747464][T15295] ALSA: mixer_oss: invalid OSS volume '' [ 810.421775][T15276] bridge0: port 1(bridge_slave_0) entered disabled state [ 810.657753][T15299] netlink: 'syz.8.3171': attribute type 10 has an invalid length. [ 810.657770][T15299] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3171'. [ 810.970232][T15276] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 810.988003][T15276] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 811.004467][T14854] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 811.148577][ T10] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 811.168548][T14854] usb 9-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 811.168582][T14854] usb 9-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 811.168599][T14854] usb 9-1: config 0 interface 0 has no altsetting 0 [ 811.170719][T14854] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 811.170748][T14854] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 811.170758][T14854] usb 9-1: Product: syz [ 811.170766][T14854] usb 9-1: Manufacturer: syz [ 811.170773][T14854] usb 9-1: SerialNumber: syz [ 811.179418][T14854] usb 9-1: config 0 descriptor?? [ 811.213394][T14854] usb 9-1: selecting invalid altsetting 0 [ 811.326716][ T10] usb 8-1: config 118 has 0 interfaces, different from the descriptor's value: 1 [ 811.331081][ T10] usb 8-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 811.331111][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.331132][ T10] usb 8-1: Product: syz [ 811.331147][ T10] usb 8-1: Manufacturer: syz [ 811.331161][ T10] usb 8-1: SerialNumber: syz [ 811.437567][T14854] usb 9-1: USB disconnect, device number 2 [ 812.437919][T14854] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 813.348961][T14854] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 813.348989][T14854] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 813.349039][T14854] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 813.349062][T14854] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.405698][T14854] usb 10-1: config 0 descriptor?? [ 813.413945][T14854] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 813.413992][T14854] dvb-usb: bulk message failed: -22 (3/0) [ 813.420602][T14854] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 813.421477][T14854] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 813.421528][T14854] usb 10-1: media controller created [ 813.423674][T14854] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 813.431168][T14854] dvb-usb: bulk message failed: -22 (6/0) [ 813.431252][T14854] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 813.441945][T14854] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input66 [ 813.446943][T14854] dvb-usb: schedule remote query interval to 150 msecs. [ 813.446966][T14854] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 813.601779][T13555] dvb-usb: bulk message failed: -22 (1/0) [ 813.601809][T13555] dvb-usb: error while querying for an remote control event. [ 813.627113][T15322] dvb-usb: bulk message failed: -22 (2/0) [ 813.633780][T13555] usb 10-1: USB disconnect, device number 4 [ 813.692743][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.692810][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 813.829940][T15280] geneve2: entered promiscuous mode [ 813.927037][T13555] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 813.972729][T15299] team0: Failed to send options change via netlink (err -105) [ 813.972752][T15299] team0: Port device geneve1 added [ 813.973499][ T7390] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.973529][ T7390] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 59902 - 0 [ 813.990778][ T7390] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.990811][ T7390] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 59902 - 0 [ 813.990850][ T7390] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.990873][ T7390] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 59902 - 0 [ 813.990907][ T7390] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.990930][ T7390] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 59902 - 0 [ 814.157772][T15334] fuse: Unknown parameter 'grou00000000000000000000' [ 816.429086][T14856] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 816.608184][T14856] usb 10-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 816.608214][T14856] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 816.634552][T14856] usb 10-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 816.634583][T14856] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.634604][T14856] usb 10-1: Product: syz [ 816.634618][T14856] usb 10-1: Manufacturer: syz [ 816.634632][T14856] usb 10-1: SerialNumber: syz [ 816.687123][T14856] usb 10-1: config 0 descriptor?? [ 816.703388][T14856] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 816.764800][ T31] usb 8-1: USB disconnect, device number 2 [ 816.952815][T14856] gspca_sunplus: reg_r err -71 [ 816.952904][T14856] sunplus 10-1:0.0: probe with driver sunplus failed with error -71 [ 816.994759][T14856] usb 10-1: USB disconnect, device number 5 [ 818.367304][T15374] netlink: 'syz.8.3194': attribute type 10 has an invalid length. [ 818.367317][T15374] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3194'. [ 818.370795][ T5726] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 818.517389][ T5726] usb 8-1: Using ep0 maxpacket: 32 [ 818.519262][ T5726] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 818.519304][ T5726] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 818.519321][ T5726] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.533927][ T5726] usb 8-1: config 0 descriptor?? [ 818.568486][ T5726] hub 8-1:0.0: bad descriptor, ignoring hub [ 818.568521][ T5726] hub 8-1:0.0: probe with driver hub failed with error -5 [ 818.593713][ T5726] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 818.656394][ T31] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 818.686892][T15383] fuse: Unknown parameter 'grou00000000000000000000' [ 819.275888][T13555] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 819.355197][ T31] usb 9-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 819.355231][ T31] usb 9-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 819.355304][ T31] usb 9-1: config 0 interface 0 has no altsetting 0 [ 819.586770][ T31] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 819.586800][ T31] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 819.586820][ T31] usb 9-1: Product: syz [ 819.586834][ T31] usb 9-1: Manufacturer: syz [ 819.586847][ T31] usb 9-1: SerialNumber: syz [ 819.637862][ T31] usb 9-1: config 0 descriptor?? [ 819.658112][ T31] usb 9-1: selecting invalid altsetting 0 [ 819.735963][T13555] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 819.735991][T13555] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 819.736048][T13555] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 819.736072][T13555] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.783384][T13555] usb 6-1: config 0 descriptor?? [ 819.815709][T13555] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 819.815758][T13555] dvb-usb: bulk message failed: -22 (3/0) [ 819.821192][T14856] usb 8-1: USB disconnect, device number 3 [ 819.854458][T15374] snd-usb-audio 9-1:0.0: Runtime PM usage count underflow! [ 819.893300][T13555] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 819.895806][T13555] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 819.895871][T13555] usb 6-1: media controller created [ 819.919273][T13555] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 819.951095][ T31] usb 9-1: USB disconnect, device number 3 [ 819.967941][T13555] dvb-usb: bulk message failed: -22 (6/0) [ 819.968022][T13555] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 819.983265][T15379] dvb-usb: bulk message failed: -22 (2/0) [ 820.050306][T13555] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input67 [ 820.107255][T13555] dvb-usb: schedule remote query interval to 150 msecs. [ 820.107278][T13555] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 820.162101][T13555] usb 6-1: USB disconnect, device number 4 [ 820.454756][T15214] udevd[15214]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 820.550780][T13555] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 821.859862][ T5847] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 822.037767][ T5847] usb 7-1: config 118 has 0 interfaces, different from the descriptor's value: 1 [ 822.040599][ T5847] usb 7-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 822.040627][ T5847] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.040646][ T5847] usb 7-1: Product: syz [ 822.040660][ T5847] usb 7-1: Manufacturer: syz [ 822.040674][ T5847] usb 7-1: SerialNumber: syz [ 822.527092][T15425] tipc: Started in network mode [ 822.527123][T15425] tipc: Node identity 923887196538, cluster identity 4711 [ 822.527302][T15425] tipc: Enabled bearer , priority 0 [ 822.534177][T15425] syzkaller0: entered promiscuous mode [ 822.534212][T15425] syzkaller0: entered allmulticast mode [ 822.645514][T15425] tipc: Resetting bearer [ 822.753553][T15424] tipc: Resetting bearer [ 822.761717][ T5740] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 822.941909][ T5740] usb 6-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 822.941988][ T5740] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 822.962791][ T5740] usb 6-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 822.962820][ T5740] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.962923][ T5740] usb 6-1: Product: syz [ 822.962938][ T5740] usb 6-1: Manufacturer: syz [ 822.962952][ T5740] usb 6-1: SerialNumber: syz [ 823.053707][ T5740] usb 6-1: config 0 descriptor?? [ 823.120379][ T5740] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 823.284771][T15424] tipc: Disabling bearer [ 823.355890][ T5740] gspca_sunplus: reg_r err -71 [ 823.356053][ T5740] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 823.390930][ T5740] usb 6-1: USB disconnect, device number 5 [ 824.039228][T15457] fuse: Unknown parameter 'grou00000000000000000000' [ 824.999021][ T5847] usb 7-1: USB disconnect, device number 3 [ 825.235660][T15467] netlink: 'syz.6.3212': attribute type 10 has an invalid length. [ 825.235684][T15467] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3212'. [ 825.265225][T15467] team0: Port device geneve1 added [ 825.265546][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.266195][ T161] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.266237][ T161] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.266263][ T161] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.938053][ T5847] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 827.104587][ T5847] usb 7-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 827.104622][ T5847] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 827.104646][ T5847] usb 7-1: config 0 interface 0 has no altsetting 0 [ 827.111652][ T5847] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 827.111680][ T5847] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 827.111700][ T5847] usb 7-1: Product: syz [ 827.111714][ T5847] usb 7-1: Manufacturer: syz [ 827.111727][ T5847] usb 7-1: SerialNumber: syz [ 827.127738][ T5847] usb 7-1: config 0 descriptor?? [ 827.140077][ T5847] usb 7-1: selecting invalid altsetting 0 [ 827.233695][ T5596] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 827.417662][ T5596] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 827.417688][ T5596] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 827.417739][ T5596] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 827.417762][ T5596] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.500290][ T5847] usb 7-1: USB disconnect, device number 4 [ 827.562279][ T5596] usb 8-1: config 0 descriptor?? [ 827.568002][T15482] netlink: 'syz.8.3218': attribute type 2 has an invalid length. [ 827.594921][ T5596] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 827.594951][ T5596] dvb-usb: bulk message failed: -22 (3/0) [ 827.707553][ T5596] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 827.719280][ T5596] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 827.719335][ T5596] usb 8-1: media controller created [ 827.727823][ T5596] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 827.780885][ T5596] dvb-usb: bulk message failed: -22 (6/0) [ 827.780967][ T5596] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 827.781371][T15476] dvb-usb: bulk message failed: -22 (2/0) [ 827.810549][ T5596] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input68 [ 827.902269][ T5596] dvb-usb: schedule remote query interval to 150 msecs. [ 827.902294][ T5596] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 827.994079][ T5596] usb 8-1: USB disconnect, device number 4 [ 828.228103][T15087] udevd[15087]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 828.382621][ T5596] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 828.476049][T15494] fuse: Unknown parameter 'group_i00000000000000000000' [ 828.746685][ T5847] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 829.015383][ T5847] usb 7-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 829.015413][ T5847] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 829.030628][ T5847] usb 7-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 829.030656][ T5847] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.030675][ T5847] usb 7-1: Product: syz [ 829.030689][ T5847] usb 7-1: Manufacturer: syz [ 829.030703][ T5847] usb 7-1: SerialNumber: syz [ 830.060135][ T5847] usb 7-1: config 0 descriptor?? [ 830.083449][ T5847] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 830.270953][ T5847] gspca_sunplus: reg_r err -71 [ 830.271041][ T5847] sunplus 7-1:0.0: probe with driver sunplus failed with error -71 [ 830.282753][ T5847] usb 7-1: USB disconnect, device number 5 [ 830.455258][T15517] tipc: Started in network mode [ 830.455287][T15517] tipc: Node identity a248ae7e0159, cluster identity 4711 [ 830.455492][T15517] tipc: Enabled bearer , priority 0 [ 830.490195][T15517] syzkaller0: entered promiscuous mode [ 830.490221][T15517] syzkaller0: entered allmulticast mode [ 830.508952][T15517] tipc: Resetting bearer [ 830.696882][T15515] tipc: Resetting bearer [ 831.864088][T15515] tipc: Disabling bearer [ 833.010720][ T31] tipc: Node number set to 2735844990 [ 833.186536][T15541] netlink: 'syz.6.3231': attribute type 10 has an invalid length. [ 833.186558][T15541] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3231'. [ 833.427877][ T5847] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 833.931491][ T5847] usb 7-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 833.931534][ T5847] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 833.931559][ T5847] usb 7-1: config 0 interface 0 has no altsetting 0 [ 833.967368][ T5847] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 833.967400][ T5847] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 833.967421][ T5847] usb 7-1: Product: syz [ 833.967436][ T5847] usb 7-1: Manufacturer: syz [ 833.967451][ T5847] usb 7-1: SerialNumber: syz [ 834.020514][ T5847] usb 7-1: config 0 descriptor?? [ 834.054032][ T5847] usb 7-1: selecting invalid altsetting 0 [ 834.262181][ T13] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.262318][ T13] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.262354][ T13] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.262387][ T13] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.268562][T15537] debugfs: 'netdev:nicvf0' already exists in 'phy28' [ 834.294505][ T31] usb 7-1: USB disconnect, device number 6 [ 834.604720][T15561] netlink: 'syz.7.3235': attribute type 10 has an invalid length. [ 834.604741][T15561] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3235'. [ 834.623816][T15565] fuse: Unknown parameter 'group_i00000000000000000000' [ 834.696512][ T5726] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 834.794512][T15561] team0: Failed to send options change via netlink (err -105) [ 834.794537][T15561] team0: Port device geneve1 added [ 834.854353][ T5726] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 834.854381][ T5726] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 834.854432][ T5726] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 834.854454][ T5726] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.944605][ T5726] usb 6-1: config 0 descriptor?? [ 834.963698][ T5726] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 834.963746][ T5726] dvb-usb: bulk message failed: -22 (3/0) [ 834.980323][ T5726] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 834.990489][ T5726] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 834.990542][ T5726] usb 6-1: media controller created [ 834.995113][ T5726] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 835.033020][ T5726] dvb-usb: bulk message failed: -22 (6/0) [ 835.033104][ T5726] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 835.049142][ T5726] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input69 [ 835.150360][T15556] dvb-usb: bulk message failed: -22 (2/0) [ 835.160452][ T5726] dvb-usb: schedule remote query interval to 150 msecs. [ 835.160475][ T5726] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 835.171654][ T5726] usb 6-1: USB disconnect, device number 6 [ 835.535473][ T5726] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 837.078744][T15002] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 838.093733][T15002] usb 10-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 838.093759][T15002] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 838.096381][T15002] usb 10-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 838.096398][T15002] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.096408][T15002] usb 10-1: Product: syz [ 838.096416][T15002] usb 10-1: Manufacturer: syz [ 838.096423][T15002] usb 10-1: SerialNumber: syz [ 838.130401][T15002] usb 10-1: config 0 descriptor?? [ 838.190294][T15002] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 838.353659][T15002] gspca_sunplus: reg_r err -71 [ 838.353749][T15002] sunplus 10-1:0.0: probe with driver sunplus failed with error -71 [ 838.414503][T15002] usb 10-1: USB disconnect, device number 6 [ 838.716429][T15625] netlink: 'syz.5.3248': attribute type 10 has an invalid length. [ 838.716453][T15625] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3248'. [ 838.716743][T15625] dummy0: entered promiscuous mode [ 839.118214][T15637] fuse: Unknown parameter 'group_i00000000000000000000' [ 841.270463][T15668] netlink: 88 bytes leftover after parsing attributes in process `syz.9.3259'. [ 842.204462][T15683] netlink: 116 bytes leftover after parsing attributes in process `syz.7.3261'. [ 842.277221][T15685] netlink: 'syz.8.3263': attribute type 10 has an invalid length. [ 842.277235][T15685] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3263'. [ 842.277440][T15685] dummy0: entered promiscuous mode [ 842.378899][T15002] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 842.551826][T15002] usb 6-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 842.551855][T15002] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 842.568554][T15002] usb 6-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 842.568585][T15002] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.568606][T15002] usb 6-1: Product: syz [ 842.568620][T15002] usb 6-1: Manufacturer: syz [ 842.568634][T15002] usb 6-1: SerialNumber: syz [ 842.582510][T15002] usb 6-1: config 0 descriptor?? [ 842.592964][T15692] fuse: Unknown parameter 'group_id00000000000000000000' [ 842.609113][T15002] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 842.796454][T15002] gspca_sunplus: reg_r err -71 [ 842.796746][T15002] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 842.802186][T15002] usb 6-1: USB disconnect, device number 7 [ 845.359021][T15705] infiniband syz0: set active [ 845.359117][T15705] infiniband syz0: added bond_slave_0 [ 845.416617][T15705] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 845.424535][T15705] infiniband syz0: Couldn't open port 1 [ 845.425066][T15705] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 845.425101][T15705] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 845.425144][T15705] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 845.476390][T15716] netlink: 'syz.9.3275': attribute type 1 has an invalid length. [ 845.476415][T15716] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3275'. [ 846.363479][T15705] RDS/IB: syz0: added [ 846.364548][T15705] smc: adding ib device syz0 with port count 1 [ 846.364825][T15705] smc: ib device syz0 port 1 has no pnetid [ 846.663315][T15725] fuse: Unknown parameter 'group_id00000000000000000000' [ 846.776827][T15002] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 846.921087][T15002] usb 7-1: Using ep0 maxpacket: 32 [ 846.922893][T15002] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 846.922918][T15002] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 846.922952][T15002] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 846.922974][T15002] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.953022][T15002] usb 7-1: config 0 descriptor?? [ 848.468282][ T31] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 848.527072][T15744] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3284'. [ 848.609811][T15002] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 848.630896][ T31] usb 6-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 848.630923][ T31] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 848.633083][ T31] usb 6-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 848.633111][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.633130][ T31] usb 6-1: Product: syz [ 848.633144][ T31] usb 6-1: Manufacturer: syz [ 848.633154][ T31] usb 6-1: SerialNumber: syz [ 848.692924][ T31] usb 6-1: config 0 descriptor?? [ 848.726806][ T31] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 848.764921][T15002] usb 8-1: too many configurations: 151, using maximum allowed: 8 [ 848.791276][T15002] usb 8-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 848.791307][T15002] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 848.791708][T15002] usb 8-1: Product: syz [ 848.791725][T15002] usb 8-1: Manufacturer: syz [ 848.791740][T15002] usb 8-1: SerialNumber: syz [ 848.838398][T15002] usb 8-1: config 0 descriptor?? [ 848.868689][T15002] ims_pcu 8-1:0.0: Zero length descriptor [ 848.869123][T15002] ims_pcu 8-1:0.0: probe with driver ims_pcu failed with error -22 [ 848.926313][ T31] gspca_sunplus: reg_r err -71 [ 848.926408][ T31] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 848.954595][ T31] usb 6-1: USB disconnect, device number 8 [ 849.387069][ T31] usb 8-1: USB disconnect, device number 5 [ 850.167067][ T5740] usb 7-1: USB disconnect, device number 7 [ 850.377264][T15751] netlink: 'syz.9.3286': attribute type 2 has an invalid length. [ 852.281204][T15771] fuse: Unknown parameter 'group_id00000000000000000000' [ 852.431950][ T5740] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 852.793012][T15778] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3295'. [ 852.839401][ T5740] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 852.839429][ T5740] usb 10-1: config 0 has no interface number 0 [ 852.839473][ T5740] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 852.839499][ T5740] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 852.839536][ T5740] usb 10-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 852.839558][ T5740] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.871112][ T5740] usb 10-1: config 0 descriptor?? [ 853.357185][ T5740] prodikeys 0003:041E:2801.0007: unknown main item tag 0x0 [ 853.357220][ T5740] prodikeys 0003:041E:2801.0007: unknown main item tag 0x0 [ 853.407335][ T5740] prodikeys 0003:041E:2801.0007: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.9-1/input1 [ 853.430089][ T5740] hid_prodikeys: hid-prodikeys: failed to find output report [ 853.430089][ T5740] [ 853.587693][ T5740] usb 10-1: USB disconnect, device number 7 [ 853.786328][T14854] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 853.850086][T15002] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 853.860579][ T31] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 854.107750][T14854] usb 9-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 854.107934][T14854] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 854.126493][T15002] usb 8-1: Using ep0 maxpacket: 32 [ 854.128801][ T31] usb 6-1: too many configurations: 151, using maximum allowed: 8 [ 854.132601][T15002] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 854.132625][T15002] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 854.132675][T15002] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 854.132699][T15002] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.028802][T14854] usb 9-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 855.028831][T14854] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.028849][T14854] usb 9-1: Product: syz [ 855.028863][T14854] usb 9-1: Manufacturer: syz [ 855.028877][T14854] usb 9-1: SerialNumber: syz [ 855.067345][ T31] usb 6-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 855.067377][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 855.067396][ T31] usb 6-1: Product: syz [ 855.067410][ T31] usb 6-1: Manufacturer: syz [ 855.067425][ T31] usb 6-1: SerialNumber: syz [ 855.071916][T14854] usb 9-1: config 0 descriptor?? [ 855.074772][T15002] usb 8-1: config 0 descriptor?? [ 855.128217][ T31] usb 6-1: config 0 descriptor?? [ 855.160233][T14854] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 855.179303][ T31] ims_pcu 6-1:0.0: Zero length descriptor [ 855.179340][ T31] ims_pcu 6-1:0.0: probe with driver ims_pcu failed with error -22 [ 855.309105][T15798] netlink: 'syz.9.3302': attribute type 2 has an invalid length. [ 855.473850][T15091] usb 6-1: USB disconnect, device number 9 [ 856.234648][T15808] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3306'. [ 856.303352][T15810] fuse: Bad value for 'user_id' [ 856.303374][T15810] fuse: Bad value for 'user_id' [ 856.379996][T14854] usb 9-1: USB disconnect, device number 4 [ 856.792153][T14854] usb 8-1: USB disconnect, device number 6 [ 856.855412][T15818] netlink: 'syz.9.3310': attribute type 10 has an invalid length. [ 856.855427][T15818] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3310'. [ 856.855693][T15818] dummy0: entered promiscuous mode [ 860.777242][T15852] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3319'. [ 861.255994][ T31] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 861.301524][T15863] fuse: Bad value for 'user_id' [ 861.301543][T15863] fuse: Bad value for 'user_id' [ 861.418271][ T31] usb 10-1: Using ep0 maxpacket: 32 [ 861.424914][ T31] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 861.425032][ T31] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 861.425074][ T31] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 861.425097][ T31] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.487265][ T31] usb 10-1: config 0 descriptor?? [ 863.311741][T15886] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3332'. [ 864.387732][T15091] usb 10-1: USB disconnect, device number 8 [ 868.023918][T15916] smc: ib device syz0 ibport 2 applied user defined pnetid SYZ2 [ 868.124843][T15918] fuse: Bad value for 'user_id' [ 868.124863][T15918] fuse: Bad value for 'user_id' [ 868.176394][T15920] netlink: 44 bytes leftover after parsing attributes in process `syz.9.3344'. [ 869.808335][ T5847] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 870.023272][ T5847] usb 10-1: Using ep0 maxpacket: 32 [ 870.050788][ T5847] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 870.050917][ T5847] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 870.050961][ T5847] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 870.050985][ T5847] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.161452][ T5847] usb 10-1: config 0 descriptor?? [ 870.191206][ T5847] hub 10-1:0.0: bad descriptor, ignoring hub [ 870.191297][ T5847] hub 10-1:0.0: probe with driver hub failed with error -5 [ 870.235935][ T5847] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 870.547120][ T5847] usb 10-1: USB disconnect, device number 9 [ 873.588823][T15976] fuse: Bad value for 'fd' [ 873.983242][T13555] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 874.203790][T15988] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3364'. [ 874.851169][T13555] usb 8-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 874.851206][T13555] usb 8-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 874.851231][T13555] usb 8-1: config 0 interface 0 has no altsetting 0 [ 874.854058][T13555] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 874.854087][T13555] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 874.854109][T13555] usb 8-1: Product: syz [ 874.854124][T13555] usb 8-1: Manufacturer: syz [ 874.854139][T13555] usb 8-1: SerialNumber: syz [ 874.933368][T13555] usb 8-1: config 0 descriptor?? [ 874.981925][T13555] usb 8-1: selecting invalid altsetting 0 [ 875.978346][T15995] input: syz1 as /devices/virtual/input/input70 [ 876.128378][T13555] usb 8-1: USB disconnect, device number 7 [ 876.299217][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 876.299276][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 876.478054][T16004] netlink: 'syz.8.3370': attribute type 10 has an invalid length. [ 876.478073][T16004] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3370'. [ 876.679169][T14856] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 876.781609][ T5740] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 876.834526][T14856] usb 6-1: Using ep0 maxpacket: 32 [ 876.836565][T14856] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 876.836616][T14856] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 876.836659][T14856] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 876.836683][T14856] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.841455][T14856] usb 6-1: config 0 descriptor?? [ 876.879437][T14856] hub 6-1:0.0: bad descriptor, ignoring hub [ 876.879475][T14856] hub 6-1:0.0: probe with driver hub failed with error -5 [ 876.883144][T14856] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 876.937256][ T5740] usb 9-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 876.937291][ T5740] usb 9-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 876.937315][ T5740] usb 9-1: config 0 interface 0 has no altsetting 0 [ 876.939609][ T5740] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 876.939637][ T5740] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 876.939657][ T5740] usb 9-1: Product: syz [ 876.939672][ T5740] usb 9-1: Manufacturer: syz [ 876.939686][ T5740] usb 9-1: SerialNumber: syz [ 876.943847][ T5740] usb 9-1: config 0 descriptor?? [ 876.973546][ T5740] usb 9-1: selecting invalid altsetting 0 [ 877.304928][T13555] usb 6-1: USB disconnect, device number 10 [ 877.320738][T16003] snd-usb-audio 9-1:0.0: Runtime PM usage count underflow! [ 878.227149][ T5740] usb 9-1: USB disconnect, device number 5 [ 878.441502][T16001] Bluetooth: hci0: command 0x0406 tx timeout [ 878.536796][T16001] Bluetooth: hci7: command 0x0406 tx timeout [ 878.536834][T16001] Bluetooth: hci8: command 0x0406 tx timeout [ 878.536858][T16001] Bluetooth: hci6: command 0x0406 tx timeout [ 878.536880][T16001] Bluetooth: hci9: command 0x0406 tx timeout [ 879.016443][T16025] fuse: Bad value for 'fd' [ 879.247110][T16033] input: syz1 as /devices/virtual/input/input71 [ 880.807689][ T5740] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 881.671842][ T5740] usb 8-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 881.671878][ T5740] usb 8-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 881.671902][ T5740] usb 8-1: config 0 interface 0 has no altsetting 0 [ 881.677304][ T5740] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 881.677330][ T5740] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 881.677341][ T5740] usb 8-1: Product: syz [ 881.677349][ T5740] usb 8-1: Manufacturer: syz [ 881.677357][ T5740] usb 8-1: SerialNumber: syz [ 881.747554][ T5740] usb 8-1: config 0 descriptor?? [ 881.756663][ T5740] usb 8-1: selecting invalid altsetting 0 [ 882.135380][ T5740] usb 8-1: USB disconnect, device number 8 [ 882.136528][T15091] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 882.304964][T15091] usb 6-1: Using ep0 maxpacket: 32 [ 882.308017][T15091] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 882.308072][T15091] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 882.308196][T15091] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 882.308234][T15091] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.392991][T15091] usb 6-1: config 0 descriptor?? [ 882.407187][T15091] hub 6-1:0.0: bad descriptor, ignoring hub [ 882.407225][T15091] hub 6-1:0.0: probe with driver hub failed with error -5 [ 882.528987][T15091] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 882.786398][T16060] netlink: 'syz.8.3391': attribute type 10 has an invalid length. [ 882.786420][T16060] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3391'. [ 882.875139][ T5847] usb 6-1: USB disconnect, device number 11 [ 882.889306][T16062] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3392'. [ 882.891860][T16062] dummy0: left promiscuous mode [ 882.942986][T16063] netlink: 'syz.9.3392': attribute type 10 has an invalid length. [ 882.943009][T16063] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3392'. [ 882.996295][T16063] dummy0: entered promiscuous mode [ 883.053370][T15091] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 883.058621][T16065] fuse: Bad value for 'fd' [ 883.206005][T15091] usb 9-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 883.206041][T15091] usb 9-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 883.206064][T15091] usb 9-1: config 0 interface 0 has no altsetting 0 [ 883.239711][T15091] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 883.239749][T15091] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 883.239769][T15091] usb 9-1: Product: syz [ 883.239784][T15091] usb 9-1: Manufacturer: syz [ 883.239799][T15091] usb 9-1: SerialNumber: syz [ 883.259141][T16069] fuse: Bad value for 'fd' [ 883.281529][T15091] usb 9-1: config 0 descriptor?? [ 883.297951][T15091] usb 9-1: selecting invalid altsetting 0 [ 883.502169][T16060] debugfs: 'netdev:nicvf0' already exists in 'phy27' [ 883.525203][T15091] usb 9-1: USB disconnect, device number 6 [ 883.721149][T16079] netlink: 'syz.7.3399': attribute type 2 has an invalid length. [ 886.035894][T15091] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 886.194285][T15091] usb 6-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 886.194320][T15091] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 886.194344][T15091] usb 6-1: config 0 interface 0 has no altsetting 0 [ 886.197635][T15091] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 886.197665][T15091] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 886.197686][T15091] usb 6-1: Product: syz [ 886.197699][T15091] usb 6-1: Manufacturer: syz [ 886.197706][T15091] usb 6-1: SerialNumber: syz [ 886.272720][T16097] fuse: Bad value for 'fd' [ 886.279261][T15091] usb 6-1: config 0 descriptor?? [ 886.297576][T15091] usb 6-1: selecting invalid altsetting 0 [ 886.499506][T16101] syzkaller0: entered promiscuous mode [ 886.499533][T16101] syzkaller0: entered allmulticast mode [ 886.529227][T16101] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 886.558310][T14857] usb 6-1: USB disconnect, device number 12 [ 886.700667][ T5737] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 886.856348][ T5737] usb 7-1: Using ep0 maxpacket: 32 [ 886.858048][ T5737] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 886.858079][ T5737] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 886.858109][ T5737] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 886.858122][ T5737] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.916951][ T5737] usb 7-1: config 0 descriptor?? [ 886.935088][ T5737] hub 7-1:0.0: bad descriptor, ignoring hub [ 886.935128][ T5737] hub 7-1:0.0: probe with driver hub failed with error -5 [ 886.938403][ T5737] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 887.338625][ T5740] usb 7-1: USB disconnect, device number 8 [ 887.526260][T16114] netlink: 'syz.9.3412': attribute type 10 has an invalid length. [ 887.526284][T16114] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3412'. [ 887.852634][T14857] usb 10-1: new full-speed USB device number 10 using dummy_hcd [ 889.434347][T14857] usb 10-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 889.434381][T14857] usb 10-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 889.434404][T14857] usb 10-1: config 0 interface 0 has no altsetting 0 [ 889.438736][T14857] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 889.438764][T14857] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 889.438784][T14857] usb 10-1: Product: syz [ 889.438799][T14857] usb 10-1: Manufacturer: syz [ 889.438813][T14857] usb 10-1: SerialNumber: syz [ 889.450002][T14857] usb 10-1: config 0 descriptor?? [ 889.479303][T14857] usb 10-1: selecting invalid altsetting 0 [ 889.545017][T16127] netlink: 'syz.6.3417': attribute type 2 has an invalid length. [ 890.488265][T14857] usb 10-1: USB disconnect, device number 10 [ 890.700372][T16134] fuse: Bad value for 'fd' [ 891.038655][T16138] netlink: 'syz.9.3421': attribute type 1 has an invalid length. [ 891.038730][T16138] netlink: 224 bytes leftover after parsing attributes in process `syz.9.3421'. [ 891.271390][ T5737] IPVS: starting estimator thread 0... [ 891.363827][ T5847] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 891.523689][T16139] IPVS: using max 10 ests per chain, 24000 per kthread [ 891.880449][ T5847] usb 9-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 891.880485][ T5847] usb 9-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 891.880509][ T5847] usb 9-1: config 0 interface 0 has no altsetting 0 [ 891.886405][ T5847] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 891.886435][ T5847] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 891.886455][ T5847] usb 9-1: Product: syz [ 891.886469][ T5847] usb 9-1: Manufacturer: syz [ 891.886484][ T5847] usb 9-1: SerialNumber: syz [ 891.892832][ T5847] usb 9-1: config 0 descriptor?? [ 891.905806][ T5847] usb 9-1: selecting invalid altsetting 0 [ 891.976996][T16142] syzkaller0: entered promiscuous mode [ 891.977024][T16142] syzkaller0: entered allmulticast mode [ 891.993273][T16142] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 892.228151][ T5847] usb 9-1: USB disconnect, device number 7 [ 892.702110][T16058] udevd[16058]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 894.677709][T16171] binder_alloc: 16166: binder_alloc_buf, no vma [ 894.748846][ T5847] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 894.922994][ T5847] usb 9-1: Using ep0 maxpacket: 32 [ 894.927273][ T5847] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 894.927327][ T5847] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 894.927371][ T5847] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 894.927418][ T5847] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.980510][ T5847] usb 9-1: config 0 descriptor?? [ 894.994161][ T5847] hub 9-1:0.0: bad descriptor, ignoring hub [ 894.994198][ T5847] hub 9-1:0.0: probe with driver hub failed with error -5 [ 895.016803][ T5847] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 895.108152][T16175] fuse: Bad value for 'fd' [ 896.290442][ T5847] usb 9-1: USB disconnect, device number 8 [ 897.869718][T13555] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 898.035610][T13555] usb 6-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 898.035646][T13555] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 898.035669][T13555] usb 6-1: config 0 interface 0 has no altsetting 0 [ 898.040593][T13555] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 898.040623][T13555] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 898.040643][T13555] usb 6-1: Product: syz [ 898.040657][T13555] usb 6-1: Manufacturer: syz [ 898.040672][T13555] usb 6-1: SerialNumber: syz [ 898.353359][T16193] fuse: Invalid rootmode [ 898.546552][T13555] usb 6-1: config 0 descriptor?? [ 898.554892][T13555] usb 6-1: selecting invalid altsetting 0 [ 898.773012][T13555] usb 6-1: USB disconnect, device number 13 [ 898.971089][T16201] Invalid ELF header magic: != ELF [ 900.294446][T16208] syzkaller0: entered promiscuous mode [ 900.294474][T16208] syzkaller0: entered allmulticast mode [ 900.444263][T15087] udevd[15087]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 900.523006][T16215] binder_alloc: 16210: binder_alloc_buf, no vma [ 901.261485][T16227] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3449'. [ 901.304799][T16227] 8021q: adding VLAN 0 to HW filter on device bond1 [ 901.318067][T16227] dummy0: left promiscuous mode [ 901.341238][T16227] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 901.344276][T16227] netlink: 'syz.5.3449': attribute type 10 has an invalid length. [ 901.344297][T16227] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3449'. [ 901.347265][T16227] dummy0: entered promiscuous mode [ 901.387130][T16227] bond1: (slave dummy0): Releasing backup interface [ 901.409172][T15091] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 902.549398][T15091] usb 7-1: Using ep0 maxpacket: 32 [ 902.566681][T15091] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 902.566713][T15091] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.594691][T15091] usb 7-1: config 0 descriptor?? [ 903.093101][T16236] fuse: Invalid rootmode [ 903.114250][T15091] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 903.143302][T15091] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 903.144443][T15091] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 903.144509][T15091] usb 7-1: media controller created [ 903.173116][T15091] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 903.324234][T15091] az6027: usb out operation failed. (-71) [ 903.326306][T15091] az6027: usb out operation failed. (-71) [ 903.326322][T15091] stb0899_attach: Driver disabled by Kconfig [ 903.326332][T15091] az6027: no front-end attached [ 903.326332][T15091] [ 903.326738][T15091] az6027: usb out operation failed. (-71) [ 903.326752][T15091] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 903.330670][T15091] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input72 [ 903.383868][T15091] dvb-usb: schedule remote query interval to 400 msecs. [ 903.383888][T15091] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 903.386985][T15091] usb 7-1: USB disconnect, device number 9 [ 903.417311][T14857] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 903.583365][ T5847] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 903.592588][T14857] usb 6-1: config 0 has no interfaces? [ 903.592625][T14857] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 903.592648][T14857] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.666822][T14857] usb 6-1: config 0 descriptor?? [ 903.728473][T15091] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 903.761372][ T5847] usb 8-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 903.761408][ T5847] usb 8-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 903.761433][ T5847] usb 8-1: config 0 interface 0 has no altsetting 0 [ 903.765755][ T5847] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 903.765782][ T5847] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 903.765801][ T5847] usb 8-1: Product: syz [ 903.765830][ T5847] usb 8-1: Manufacturer: syz [ 903.765843][ T5847] usb 8-1: SerialNumber: syz [ 903.842179][ T5847] usb 8-1: config 0 descriptor?? [ 903.900631][ T5847] usb 8-1: selecting invalid altsetting 0 [ 903.997532][ T5596] usb 6-1: USB disconnect, device number 14 [ 904.108269][ T5847] usb 8-1: USB disconnect, device number 9 [ 904.146165][T14856] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 904.309320][T14856] usb 9-1: too many configurations: 151, using maximum allowed: 8 [ 904.367352][T14856] usb 9-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 904.367385][T14856] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 904.367405][T14856] usb 9-1: Product: syz [ 904.367420][T14856] usb 9-1: Manufacturer: syz [ 904.367435][T14856] usb 9-1: SerialNumber: syz [ 904.429634][T14856] usb 9-1: config 0 descriptor?? [ 904.453485][T14856] ims_pcu 9-1:0.0: Zero length descriptor [ 904.453545][T14856] ims_pcu 9-1:0.0: probe with driver ims_pcu failed with error -22 [ 904.667932][T14856] usb 9-1: USB disconnect, device number 9 [ 905.254554][T16263] binder: 16261:16263 ioctl c0306201 0 returned -14 [ 907.420277][T16277] fuse: Invalid rootmode [ 907.985132][ T31] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 908.153152][T14856] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 908.165170][ T31] usb 9-1: Using ep0 maxpacket: 32 [ 908.180017][ T31] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 908.180035][ T31] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.184144][ T31] usb 9-1: config 0 descriptor?? [ 908.351591][T14856] usb 8-1: config 0 has no interfaces? [ 908.351631][T14856] usb 8-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 908.351656][T14856] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.357320][T14856] usb 8-1: config 0 descriptor?? [ 908.413869][ T31] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 908.429929][ T31] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 908.431048][ T31] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 908.431101][ T31] usb 9-1: media controller created [ 908.447950][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 908.616310][ T31] az6027: usb out operation failed. (-71) [ 908.616749][ T31] az6027: usb out operation failed. (-71) [ 908.616764][ T31] stb0899_attach: Driver disabled by Kconfig [ 908.616774][ T31] az6027: no front-end attached [ 908.616774][ T31] [ 908.617153][ T31] az6027: usb out operation failed. (-71) [ 908.617168][ T31] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 908.628090][ T31] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input73 [ 908.652393][ T31] dvb-usb: schedule remote query interval to 400 msecs. [ 908.652415][ T31] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 908.667957][ T31] usb 9-1: USB disconnect, device number 10 [ 908.805902][T15091] usb 10-1: new full-speed USB device number 11 using dummy_hcd [ 908.845624][ T5847] usb 8-1: USB disconnect, device number 10 [ 908.956089][T15091] usb 10-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 908.956111][T15091] usb 10-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 908.956123][T15091] usb 10-1: config 0 interface 0 has no altsetting 0 [ 908.959906][T15091] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 908.959936][T15091] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 908.959958][T15091] usb 10-1: Product: syz [ 908.959973][T15091] usb 10-1: Manufacturer: syz [ 908.959988][T15091] usb 10-1: SerialNumber: syz [ 908.971290][T15091] usb 10-1: config 0 descriptor?? [ 909.029077][T15091] usb 10-1: selecting invalid altsetting 0 [ 910.176767][ T31] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 910.354601][T15091] usb 10-1: USB disconnect, device number 11 [ 910.578782][T16305] syzkaller0: entered promiscuous mode [ 910.578857][T16305] syzkaller0: entered allmulticast mode [ 910.589566][T16305] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 910.735948][T16311] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3478'. [ 910.841142][T16314] netlink: 'syz.7.3478': attribute type 10 has an invalid length. [ 910.841163][T16314] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3478'. [ 910.894117][T16311] 8021q: adding VLAN 0 to HW filter on device bond1 [ 910.950307][T16312] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 910.950556][T16314] dummy0: entered promiscuous mode [ 910.989224][T16314] bond1: (slave dummy0): Releasing backup interface [ 911.377788][T16321] binder: BINDER_SET_CONTEXT_MGR already set [ 911.377803][T16321] binder: 16320:16321 ioctl 4018620d 200000004a80 returned -16 [ 911.577047][T16326] binder: 16320:16326 ioctl c0306201 0 returned -14 [ 911.988973][T16330] fuse: Bad value for 'rootmode' [ 913.784628][ T31] Process accounting resumed [ 913.894552][T13555] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 913.966525][T16344] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3489'. [ 913.966743][T16344] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 914.019156][T16344] netlink: 152 bytes leftover after parsing attributes in process `syz.8.3489'. [ 914.062465][T13555] usb 8-1: Using ep0 maxpacket: 32 [ 914.065147][T13555] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 914.065176][T13555] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.103890][T13555] usb 8-1: config 0 descriptor?? [ 914.613686][T13555] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 915.184404][T13555] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 915.210195][T13555] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 915.210247][T13555] usb 8-1: media controller created [ 915.305677][T13555] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 915.345003][T13555] az6027: usb out operation failed. (-71) [ 915.345410][T13555] az6027: usb out operation failed. (-71) [ 915.345424][T13555] stb0899_attach: Driver disabled by Kconfig [ 915.345434][T13555] az6027: no front-end attached [ 915.345434][T13555] [ 915.346150][T13555] az6027: usb out operation failed. (-71) [ 915.346166][T13555] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 915.390844][T13555] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input74 [ 915.410920][T13555] dvb-usb: schedule remote query interval to 400 msecs. [ 915.410944][T13555] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 915.431265][T13555] usb 8-1: USB disconnect, device number 11 [ 915.560687][T16354] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3492'. [ 915.789090][T13555] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 916.188726][ T5847] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 916.271131][T16367] binder: 16361:16367 ioctl c0306201 0 returned -14 [ 917.118087][ T5847] usb 7-1: config 0 has no interfaces? [ 917.118130][ T5847] usb 7-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 917.118156][ T5847] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.153997][ T5847] usb 7-1: config 0 descriptor?? [ 917.401021][T16375] fuse: Bad value for 'rootmode' [ 917.416813][ T5726] Process accounting resumed [ 917.472624][ T5726] usb 7-1: USB disconnect, device number 10 [ 918.481990][T16382] netlink: 'syz.5.3501': attribute type 2 has an invalid length. [ 918.715966][T16386] netlink: 'syz.6.3503': attribute type 2 has an invalid length. [ 918.993948][T16390] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3502'. [ 922.417762][T16416] fuse: Bad value for 'rootmode' [ 922.625022][ T5847] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 922.986659][ T5847] usb 7-1: config 0 has no interfaces? [ 922.986765][ T5847] usb 7-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 922.986822][ T5847] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.359577][ T5847] usb 7-1: config 0 descriptor?? [ 923.411207][T16424] netlink: 'syz.9.3516': attribute type 2 has an invalid length. [ 924.484435][T15091] usb 7-1: USB disconnect, device number 11 [ 924.929945][T16443] netlink: 'syz.8.3520': attribute type 2 has an invalid length. [ 928.041794][T16463] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 929.399756][T16473] netlink: 'syz.6.3531': attribute type 2 has an invalid length. [ 930.471528][T16482] ip6gre1: entered promiscuous mode [ 930.471553][T16482] ip6gre1: entered allmulticast mode [ 930.669530][ T5596] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 930.838204][ T5596] usb 8-1: config 0 has no interfaces? [ 930.838243][ T5596] usb 8-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 930.838268][ T5596] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.852190][ T5596] usb 8-1: config 0 descriptor?? [ 931.385953][ T5596] usb 8-1: USB disconnect, device number 12 [ 933.013476][T16504] input: syz1 as /devices/virtual/input/input75 [ 933.470966][ T5596] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 933.955509][ T5596] usb 7-1: config 118 has 0 interfaces, different from the descriptor's value: 1 [ 934.134139][ T5596] usb 7-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 934.134169][ T5596] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.134190][ T5596] usb 7-1: Product: syz [ 934.134204][ T5596] usb 7-1: Manufacturer: syz [ 934.134219][ T5596] usb 7-1: SerialNumber: syz [ 934.333784][T16524] input: syz1 as /devices/virtual/input/input76 [ 935.317120][ T5596] usb 7-1: USB disconnect, device number 12 [ 936.736657][T16548] input: syz1 as /devices/virtual/input/input77 [ 937.348055][T16558] ALSA: mixer_oss: invalid OSS volume '' [ 1053.244599][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1053.244619][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5594/2:b..l P161/2:b..l P16561/2:b..l P29 [ 1053.244671][ C1] rcu: (detected by 1, t=10502 jiffies, g=109941, q=433 ncpus=2) [ 1053.244686][ C1] task:ktimers/1 state:R running task stack:22288 pid:29 tgid:29 ppid:2 task_flags:0x4208040 flags:0x00080000 [ 1053.244720][ C1] Call Trace: [ 1053.244727][ C1] [ 1053.244733][ C1] sched_show_task+0x4aa/0x5f0 [ 1053.244752][ C1] ? __pfx_sched_show_task+0x10/0x10 [ 1053.244761][ C1] ? rcu_dump_cpu_stacks+0x79/0x4e0 [ 1053.244833][ C1] ? wq_watchdog_touch+0x100/0x160 [ 1053.244850][ C1] print_other_cpu_stall+0xf7b/0x1310 [ 1053.244867][ C1] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 1053.244889][ C1] rcu_sched_clock_irq+0x93d/0x1050 [ 1053.244929][ C1] update_process_times+0x234/0x2d0 [ 1053.244966][ C1] tick_nohz_handler+0x3fb/0x730 [ 1053.244984][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 1053.244998][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 1053.245035][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 1053.245048][ C1] __hrtimer_run_queues+0x3a0/0xaf0 [ 1053.245072][ C1] hrtimer_interrupt+0x44a/0x900 [ 1053.245099][ C1] __sysvec_apic_timer_interrupt+0x102/0x430 [ 1053.245114][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1053.245162][ C1] [ 1053.245166][ C1] [ 1053.245170][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1053.245185][ C1] RIP: 0010:taprio_set_budgets+0x36b/0x3a0 [ 1053.245202][ C1] Code: c7 40 f6 1a 8f 4c 89 e6 e8 62 79 b1 fb 4c 8b 7c 24 08 e9 3e fe ff ff e8 c3 cf 98 f8 eb 05 e8 bc cf 98 f8 48 83 c4 30 5b 41 5c <41> 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 44 89 f9 80 e1 07 fe c1 38 [ 1053.245210][ C1] RSP: 0018:ffffc90000a3fad0 EFLAGS: 00000286 [ 1053.245219][ C1] RAX: ffffffff892b37e4 RBX: ffff888038f15800 RCX: ffff88801d2a3d80 [ 1053.245226][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 1053.245233][ C1] RBP: ffff888038f15c00 R08: 0000000000000000 R09: 0000000000000100 [ 1053.245239][ C1] R10: 0000000000000000 R11: ffffffff8ddc7b60 R12: ffff888038f15800 [ 1053.245245][ C1] R13: ffff888072a25000 R14: ffff888072a25380 R15: ffff88803e796036 [ 1053.245256][ C1] ? taprio_set_budgets+0x364/0x3a0 [ 1053.245277][ C1] advance_sched+0x979/0xc90 [ 1053.245297][ C1] ? __pfx_advance_sched+0x10/0x10 [ 1053.245325][ C1] __hrtimer_run_queues+0x3eb/0xaf0 [ 1053.245350][ C1] hrtimer_run_softirq+0x18f/0x260 [ 1053.245362][ C1] handle_softirqs+0x1d9/0x6c0 [ 1053.245378][ C1] run_ktimerd+0x69/0x100 [ 1053.245390][ C1] smpboot_thread_fn+0x57c/0xa80 [ 1053.245403][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 1053.245418][ C1] kthread+0x388/0x470 [ 1053.245432][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1053.245442][ C1] ? __pfx_kthread+0x10/0x10 [ 1053.245455][ C1] ret_from_fork+0x514/0xb70 [ 1053.245468][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1053.245478][ C1] ? __switch_to+0xc89/0x1420 [ 1053.245495][ C1] ? __pfx_kthread+0x10/0x10 [ 1053.245508][ C1] ret_from_fork_asm+0x1a/0x30 [ 1053.245528][ C1] [ 1053.245533][ C1] task:syz.9.3565 state:R running task stack:24336 pid:16561 tgid:16561 ppid:14662 task_flags:0x40004c flags:0x00080000 [ 1053.245562][ C1] Call Trace: [ 1053.245565][ C1] [ 1053.245570][ C1] __schedule+0x16d8/0x55e0 [ 1053.245605][ C1] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 1053.245620][ C1] ? lapic_next_event+0x11/0x20 [ 1053.245634][ C1] ? __lock_acquire+0x683/0x2cc0 [ 1053.245675][ C1] ? __pfx___schedule+0x10/0x10 [ 1053.245692][ C1] ? lock_acquire+0x106/0x350 [ 1053.245704][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 1053.245719][ C1] preempt_schedule_common+0x82/0xd0 [ 1053.245732][ C1] preempt_schedule_thunk+0x16/0x30 [ 1053.245747][ C1] ? pfn_valid+0x3fd/0x480 [ 1053.245809][ C1] pfn_valid+0x402/0x480 [ 1053.245821][ C1] page_table_check_clear+0x21/0x4f0 [ 1053.245832][ C1] ? vm_normal_page+0xe6/0x1d0 [ 1053.245886][ C1] __zap_vma_range+0x3769/0x4d20 [ 1053.245924][ C1] ? __pfx___zap_vma_range+0x10/0x10 [ 1053.245942][ C1] ? mas_find+0xab1/0xcf0 [ 1053.245955][ C1] ? unmap_vmas+0x1b9/0x550 [ 1053.245970][ C1] unmap_vmas+0x390/0x550 [ 1053.245988][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 1053.246013][ C1] exit_mmap+0x293/0x9f0 [ 1053.246047][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 1053.246068][ C1] ? rt_mutex_slowunlock+0x1cb/0x300 [ 1053.246102][ C1] ? __pfx_exit_aio+0x10/0x10 [ 1053.246140][ C1] ? arch_uprobe_clear_state+0x1c8/0x240 [ 1053.246153][ C1] ? uprobe_clear_state+0x2af/0x3e0 [ 1053.246190][ C1] __mmput+0xcb/0x3d0 [ 1053.246202][ C1] exit_mm+0x1e4/0x2b0 [ 1053.246217][ C1] do_exit+0x6cd/0x2360 [ 1053.246233][ C1] ? __pfx_do_exit+0x10/0x10 [ 1053.246246][ C1] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1053.246262][ C1] ? rt_spin_unlock+0x160/0x200 [ 1053.246274][ C1] do_group_exit+0x22d/0x2f0 [ 1053.246287][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1053.246298][ C1] __x64_sys_exit_group+0x3f/0x40 [ 1053.246310][ C1] x64_sys_call+0x221a/0x2240 [ 1053.246322][ C1] do_syscall_64+0x174/0x580 [ 1053.246356][ C1] ? trace_irq_disable+0x3b/0x140 [ 1053.246391][ C1] ? clear_bhb_loop+0x40/0x90 [ 1053.246403][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1053.246413][ C1] RIP: 0033:0x7fcf79aace59 [ 1053.246425][ C1] RSP: 002b:00007ffe920d3458 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1053.246435][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcf79aace59 [ 1053.246442][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 1053.246448][ C1] RBP: 00007ffe920d34bc R08: 0000000000000000 R09: 00000000000927c0 [ 1053.246454][ C1] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000059 [ 1053.246460][ C1] R13: 00000000000927c0 R14: 00000000000e3e11 R15: 00007ffe920d3510 [ 1053.246475][ C1] [ 1053.246478][ C1] task:kworker/u8:6 state:R running task stack:19896 pid:161 tgid:161 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1053.246505][ C1] Workqueue: bat_events batadv_dat_purge [ 1053.246516][ C1] Call Trace: [ 1053.246520][ C1] [ 1053.246525][ C1] __schedule+0x16d8/0x55e0 [ 1053.246538][ C1] ? ktime_get+0x45/0x220 [ 1053.246562][ C1] ? __pfx___schedule+0x10/0x10 [ 1053.246575][ C1] ? __lock_acquire+0x683/0x2cc0 [ 1053.246593][ C1] preempt_schedule_irq+0x4d/0xa0 [ 1053.246606][ C1] irqentry_exit+0x14f/0x8e0 [ 1053.246618][ C1] ? trace_irq_disable+0x3b/0x140 [ 1053.246631][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1053.246642][ C1] RIP: 0010:lock_acquire+0x221/0x350 [ 1053.246654][ C1] Code: ff ff ff e8 01 1d 77 09 f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 db 07 a8 10 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 00 dd 7a 09 cc 48 8d 3d 38 0e cb [ 1053.246661][ C1] RSP: 0018:ffffc90003927980 EFLAGS: 00000282 [ 1053.246669][ C1] RAX: 055d93fb5e053700 RBX: 0000000000000000 RCX: 0000000000000046 [ 1053.246675][ C1] RDX: 00000000cb681160 RSI: ffffffff8d65af40 RDI: ffffffff8b873ba0 [ 1053.246681][ C1] RBP: ffffffff8b195630 R08: ffffffff8b195630 R09: 0000000000000000 [ 1053.246688][ C1] R10: 0000000000000000 R11: ffffffff8ddc7b60 R12: 0000000000000002 [ 1053.246693][ C1] R13: ffffffff8ddc7b60 R14: 0000000000000000 R15: 0000000000000246 [ 1053.246701][ C1] ? rt_spin_lock+0x1e0/0x400 [ 1053.246712][ C1] ? rt_spin_lock+0x1e0/0x400 [ 1053.246728][ C1] rt_spin_lock+0x1fc/0x400 [ 1053.246738][ C1] ? rt_spin_lock+0x1e0/0x400 [ 1053.246748][ C1] ? __local_bh_enable+0x1e1/0x2f0 [ 1053.246758][ C1] ? __pfx_rt_spin_lock+0x10/0x10 [ 1053.246769][ C1] ? rcu_is_watching+0x15/0xb0 [ 1053.246788][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 1053.246798][ C1] ? __batadv_dat_purge+0xae/0x400 [ 1053.246809][ C1] ? __pfx_batadv_dat_to_purge+0x10/0x10 [ 1053.246821][ C1] __batadv_dat_purge+0x131/0x400 [ 1053.246832][ C1] ? __batadv_dat_purge+0xae/0x400 [ 1053.246841][ C1] ? __pfx_batadv_dat_to_purge+0x10/0x10 [ 1053.246854][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 1053.246864][ C1] batadv_dat_purge+0x20/0x70 [ 1053.246874][ C1] process_scheduled_works+0xa8e/0x14e0 [ 1053.246897][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1053.246910][ C1] ? assign_work+0x3cf/0x5d0 [ 1053.246922][ C1] worker_thread+0xa47/0xfb0 [ 1053.246939][ C1] ? __kthread_parkme+0x71/0x1f0 [ 1053.246955][ C1] kthread+0x388/0x470 [ 1053.246967][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1053.246977][ C1] ? __pfx_kthread+0x10/0x10 [ 1053.246989][ C1] ret_from_fork+0x514/0xb70 [ 1053.247002][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1053.247012][ C1] ? __switch_to+0xc89/0x1420 [ 1053.247027][ C1] ? __pfx_kthread+0x10/0x10 [ 1053.247047][ C1] ret_from_fork_asm+0x1a/0x30 [ 1053.247066][ C1] [ 1053.247070][ C1] task:syz-executor state:R running task stack:21776 pid:5594 tgid:5594 ppid:5593 task_flags:0x400100 flags:0x00080000 [ 1053.247098][ C1] Call Trace: [ 1053.247101][ C1] [ 1053.247107][ C1] __schedule+0x16d8/0x55e0 [ 1053.247131][ C1] ? __lock_acquire+0x683/0x2cc0 [ 1053.247145][ C1] ? __pfx___schedule+0x10/0x10 [ 1053.247156][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1053.247174][ C1] preempt_schedule_irq+0x4d/0xa0 [ 1053.247187][ C1] irqentry_exit+0x14f/0x8e0 [ 1053.247203][ C1] asm_common_interrupt+0x26/0x40 [ 1053.247212][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x80 [ 1053.247222][ C1] Code: 8b 3d 74 48 a6 0b 48 89 de 5b e9 f3 ec 5b 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0d 58 e8 83 10 65 8b 35 79 e8 83 10 81 e6 00 00 ff 00 ba [ 1053.247230][ C1] RSP: 0018:ffffc900043d7430 EFLAGS: 00000283 [ 1053.247237][ C1] RAX: ffffffff8905516a RBX: 1ffff11005177cb0 RCX: ffff888040508000 [ 1053.247244][ C1] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 00000000000008ad [ 1053.247250][ C1] RBP: 0000000000000200 R08: 0000000000000000 R09: 0000000000000000 [ 1053.247256][ C1] R10: 0000000000000000 R11: ffffffff8ddc7b60 R12: 1ffff11005177ce0 [ 1053.247262][ C1] R13: 0000000000001000 R14: ffffea0000fb3c40 R15: 00000000000008ad [ 1053.247272][ C1] ? page_pool_put_unrefed_netmem+0x72a/0xa40 [ 1053.247286][ C1] page_pool_put_unrefed_netmem+0x72a/0xa40 [ 1053.247301][ C1] napi_pp_put_page+0x133/0x1e0 [ 1053.247317][ C1] skb_release_data+0x3ec/0xab0 [ 1053.247334][ C1] ? skb_attempt_defer_free+0x53c/0x7c0 [ 1053.247347][ C1] skb_attempt_defer_free+0x586/0x7c0 [ 1053.247362][ C1] ? rcu_is_watching+0x15/0xb0 [ 1053.247376][ C1] ? __pfx_skb_attempt_defer_free+0x10/0x10 [ 1053.247391][ C1] ? __sk_mem_reduce_allocated+0x267/0x3d0 [ 1053.247403][ C1] tcp_recvmsg_locked+0x232c/0x3840 [ 1053.247435][ C1] ? __pfx_tcp_recvmsg_locked+0x10/0x10 [ 1053.247450][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1053.247463][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 1053.247476][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1053.247490][ C1] ? rt_mutex_slowunlock+0x4aa/0x8d0 [ 1053.247506][ C1] ? __local_bh_enable+0x1e1/0x2f0 [ 1053.247518][ C1] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 1053.247528][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 1053.247543][ C1] tcp_recvmsg+0xf6/0x540 [ 1053.247557][ C1] ? __pfx_tcp_recvmsg+0x10/0x10 [ 1053.247567][ C1] ? __might_fault+0xaf/0x130 [ 1053.247578][ C1] ? sock_rps_record_flow+0x19/0x350 [ 1053.247593][ C1] ? inet_recvmsg+0xb3/0x120 [ 1053.247605][ C1] ? __pfx_inet_recvmsg+0x10/0x10 [ 1053.247618][ C1] sock_recvmsg+0x155/0x1b0 [ 1053.247631][ C1] sock_read_iter+0x24f/0x320 [ 1053.247642][ C1] ? __pfx_sock_read_iter+0x10/0x10 [ 1053.247657][ C1] ? put_timespec64+0xd8/0x130 [ 1053.247700][ C1] ? bpf_lsm_file_permission+0x9/0x20 [ 1053.247732][ C1] ? security_file_permission+0x75/0x260 [ 1053.247830][ C1] vfs_read+0x59e/0xa90 [ 1053.247868][ C1] ? __pfx_vfs_read+0x10/0x10 [ 1053.247880][ C1] ? __pfx_set_user_sigmask+0x10/0x10 [ 1053.247899][ C1] ksys_read+0x156/0x270 [ 1053.247911][ C1] ? __pfx_ksys_read+0x10/0x10 [ 1053.247926][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1053.247937][ C1] do_syscall_64+0x174/0x580 [ 1053.247956][ C1] ? clear_bhb_loop+0x40/0x90 [ 1053.247968][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1053.247978][ C1] RIP: 0033:0x7f96086a7fd7 [ 1053.247986][ C1] RSP: 002b:00007ffedd20a720 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 1053.247995][ C1] RAX: ffffffffffffffda RBX: 000055555a4a1540 RCX: 00007f96086a7fd7 [ 1053.248002][ C1] RDX: 00000000000012cc RSI: 000055555a4c3990 RDI: 0000000000000003 [ 1053.248008][ C1] RBP: 00007ffedd20ac20 R08: 0000000000000000 R09: 0000000000000000 [ 1053.248014][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1053.248020][ C1] R13: 00000000000012cc R14: 00007ffedd20a810 R15: 000055555a4c3990 [ 1053.248034][ C1] [ 1053.248039][ C1] rcu: rcu_preempt kthread starved for 8795 jiffies! g109941 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1053.248050][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1053.248055][ C1] rcu: RCU grace-period kthread stack dump: [ 1053.248059][ C1] task:rcu_preempt state:R running task stack:27328 pid:18 tgid:18 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1053.248086][ C1] Call Trace: [ 1053.248089][ C1] [ 1053.248094][ C1] __schedule+0x16d8/0x55e0 [ 1053.248106][ C1] ? __lock_acquire+0x683/0x2cc0 [ 1053.248132][ C1] ? __pfx___schedule+0x10/0x10 [ 1053.248148][ C1] ? schedule+0x90/0x360 [ 1053.248162][ C1] schedule+0x164/0x360 [ 1053.248175][ C1] schedule_timeout+0x152/0x2c0 [ 1053.248187][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1053.248200][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1053.248212][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1053.248225][ C1] ? prepare_to_swait_event+0x322/0x350 [ 1053.248240][ C1] rcu_gp_fqs_loop+0x30c/0x11f0 [ 1053.248254][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 1053.248267][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1053.248282][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1053.248295][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1053.248310][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1053.248325][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 1053.248339][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1053.248351][ C1] ? __kthread_parkme+0x71/0x1f0 [ 1053.248363][ C1] ? __kthread_parkme+0x196/0x1f0 [ 1053.248376][ C1] kthread+0x388/0x470 [ 1053.248388][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1053.248399][ C1] ? __pfx_kthread+0x10/0x10 [ 1053.248411][ C1] ret_from_fork+0x514/0xb70 [ 1053.248424][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1053.248434][ C1] ? __switch_to+0xc89/0x1420 [ 1053.248449][ C1] ? __pfx_kthread+0x10/0x10 [ 1053.248462][ C1] ret_from_fork_asm+0x1a/0x30 [ 1053.248481][ C1] [ 1053.248484][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1053.248490][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1053.248547][ C0] NMI backtrace for cpu 0 [ 1053.248579][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1053.248601][ C0] Tainted: [L]=SOFTLOCKUP [ 1053.248607][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1053.248617][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1053.248644][ C0] Code: 4b 53 02 e9 43 c4 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 6c 12 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1053.248657][ C0] RSP: 0018:ffffffff8da07dc0 EFLAGS: 00000242 [ 1053.248671][ C0] RAX: 0000000000acad91 RBX: ffffffff8199006a RCX: 0000000080000001 [ 1053.248683][ C0] RDX: 0000000000000001 RSI: ffffffff8d3fdea3 RDI: ffffffff8b873ba0 [ 1053.248695][ C0] RBP: ffffffff8da07eb8 R08: ffff8880b8833e9b R09: 1ffff110171067d3 [ 1053.248707][ C0] R10: dffffc0000000000 R11: ffffed10171067d4 R12: 0000000000000000 [ 1053.248719][ C0] R13: 1ffffffff1b5fdd8 R14: 0000000000000000 R15: 1ffffffff1b5fdd8 [ 1053.248731][ C0] FS: 0000000000000000(0000) GS:ffff8881263a1000(0000) knlGS:0000000000000000 [ 1053.248745][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1053.248757][ C0] CR2: 000055558b4cba38 CR3: 000000000dbb6000 CR4: 00000000003526f0 [ 1053.248771][ C0] Call Trace: [ 1053.248777][ C0] [ 1053.248783][ C0] default_idle+0x9/0x20 [ 1053.248798][ C0] default_idle_call+0x72/0xb0 [ 1053.248814][ C0] do_idle+0x36a/0x5f0 [ 1053.248883][ C0] ? __pfx_do_idle+0x10/0x10 [ 1053.248909][ C0] ? do_idle+0xa/0x5f0 [ 1053.248932][ C0] cpu_startup_entry+0x43/0x60 [ 1053.248956][ C0] rest_init+0x2de/0x300 [ 1053.248974][ C0] start_kernel+0x38a/0x3e0 [ 1053.249079][ C0] x86_64_start_reservations+0x24/0x30 [ 1053.249130][ C0] x86_64_start_kernel+0x137/0x1b0 [ 1053.249148][ C0] common_startup_64+0x13e/0x147 [ 1053.249178][ C0] SYZFAIL: failed to send rpc fd=3 want=1584 sent=0 n=-1 (errno 32: Broken pipe)