last executing test programs: 30m26.554435805s ago: executing program 1 (id=54): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x20002) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair(0x1e, 0x6, 0x9, &(0x7f0000000040)) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000008ff39aabb7182ae9ca7e25ec428c5e77c0b8d5990acaf2462e1e1f8b393a9cfa75792efb7b7bcd21ffa4cf636fae40367e3e4c8f0d826785a855e9f58693b8f85473a8a1c4d804837c60308294b10342eee15c1c19d718f82b2f938ae055513ef9359adc83a931538e90659390b87b9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa}, 0x94) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) stat(&(0x7f0000000580)='./file0\x00', &(0x7f00000028c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000300)='./file0\x00', &(0x7f00000004c0)='system.posix_acl_access\x00', &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0200", @ANYRES32=0x0, @ANYBLOB="0400060067000000c575", @ANYRES32=r3, @ANYBLOB="10000300000000002000000000000000"], 0x44, 0x2) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000900), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 30m25.274748302s ago: executing program 1 (id=56): r0 = fanotify_init(0x1a, 0x800) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0xa8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) fanotify_mark(r0, 0x229, 0x4800001a, r1, 0x0) 30m24.069043175s ago: executing program 1 (id=59): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpgid(0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x380a, 0x2}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1, 0x11, r3, 0x800000000000) sched_setattr(r2, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x4}, 0x20000800) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, 0x0, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$inet(r6, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xa2732}], 0x1}, 0x0) recvmsg(r6, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340), 0x0, &(0x7f0000000000)) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000004c0)=[@ioring_restriction_register_op={0x0, 0x9}], 0x1) 30m21.116479629s ago: executing program 1 (id=67): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0xa05404, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x2b5b093, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 30m20.939903439s ago: executing program 1 (id=70): syz_open_dev$sndctrl(0x0, 0x0, 0x800) socket$packet(0x11, 0x3, 0x300) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x10, 0x700, 0x4, 0x8001, {{0xf, 0x4, 0x0, 0x1, 0x3c, 0x67, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010102, @empty, {[@generic={0x86, 0x10, "11026d34c3279adc3f6e49160ed8"}, @generic={0x44, 0x9, "3cd2a8bb679289"}, @ra={0x94, 0x4}, @lsrr={0x83, 0xb, 0xd7, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x700, 0x20, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x25, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}}}}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x8808c) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = mq_open(&(0x7f00000001c0)='nl80211\x00', 0x8c0, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0xb45, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r4}, 0x38) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x3) ioctl$KVM_SET_IRQCHIP(r7, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x12c, @ioapic={0xffff1000, 0x8000, 0xfffff5a7, 0x7fffffff, 0x0, [{0x1, 0x81, 0xfd, '\x00', 0x4}, {0x7, 0x3, 0x1, '\x00', 0x6}, {0x7, 0x3, 0xe, '\x00', 0x3b}, {0x4a, 0xe, 0xd6, '\x00', 0x86}, {0xd, 0x2, 0x6, '\x00', 0x2}, {0xd, 0x1, 0xf9, '\x00', 0x3}, {0x2, 0xa, 0x7, '\x00', 0x6}, {0x8, 0xd, 0x2a, '\x00', 0x8}, {0x4, 0x0, 0xa, '\x00', 0x2}, {0x8, 0xd6, 0x3, '\x00', 0x8}, {0x9e, 0x6, 0x3}, {0x2, 0x9, 0x0, '\x00', 0x7f}, {0x45, 0x51, 0x6}, {0xe, 0xfc, 0x0, '\x00', 0x1}, {0x8, 0x2, 0x6, '\x00', 0xb}, {0xd, 0x1b, 0xfe, '\x00', 0x3}, {0x2, 0xa, 0xd6, '\x00', 0x8}, {0xa, 0x0, 0xca, '\x00', 0x6}, {0x0, 0x7, 0x4, '\x00', 0x1a}, {0xb, 0x8, 0x81, '\x00', 0xda}, {0x3, 0x7, 0x6, '\x00', 0x7}, {0x9, 0x3, 0x1, '\x00', 0x2}, {0xf9, 0x21, 0x4, '\x00', 0x7}, {0x8, 0x9, 0x0, '\x00', 0x6}]}}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r8 = syz_open_dev$vbi(&(0x7f0000000140), 0x3, 0x2) write(r8, &(0x7f0000000280), 0x0) 30m20.059914554s ago: executing program 1 (id=73): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x20002) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair(0x1e, 0x6, 0x9, &(0x7f0000000040)) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000008ff39aabb7182ae9ca7e25ec428c5e77c0b8d5990acaf2462e1e1f8b393a9cfa75792efb7b7bcd21ffa4cf636fae40367e3e4c8f0d826785a855e9f58693b8f85473a8a1c4d804837c60308294b10342eee15c1c19d718f82b2f938ae055513ef9359adc83a931538e90659390b87b9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa}, 0x94) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0x14}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) stat(&(0x7f0000000580)='./file0\x00', &(0x7f00000028c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000300)='./file0\x00', &(0x7f00000004c0)='system.posix_acl_access\x00', &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0200", @ANYRES32=0x0, @ANYBLOB="0400060067000000c575", @ANYRES32=r3, @ANYBLOB="10000300000000002000000000000000"], 0x44, 0x2) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000900), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 30m19.777574849s ago: executing program 32 (id=73): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x20002) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair(0x1e, 0x6, 0x9, &(0x7f0000000040)) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000008ff39aabb7182ae9ca7e25ec428c5e77c0b8d5990acaf2462e1e1f8b393a9cfa75792efb7b7bcd21ffa4cf636fae40367e3e4c8f0d826785a855e9f58693b8f85473a8a1c4d804837c60308294b10342eee15c1c19d718f82b2f938ae055513ef9359adc83a931538e90659390b87b9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa}, 0x94) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0x14}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) stat(&(0x7f0000000580)='./file0\x00', &(0x7f00000028c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000300)='./file0\x00', &(0x7f00000004c0)='system.posix_acl_access\x00', &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0200", @ANYRES32=0x0, @ANYBLOB="0400060067000000c575", @ANYRES32=r3, @ANYBLOB="10000300000000002000000000000000"], 0x44, 0x2) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000900), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 30m3.120013239s ago: executing program 2 (id=114): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000004500)={0x24, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = getpid() r2 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @desc3}, &(0x7f0000000380)={0x0, "2643dce015fda4df0f646eb478223fd5306ad932a4f9b3b64846c90e9cf83929d66eb19fdb43ff9b894e1ae5078798b0dfc10757a909a1268cb190dcb9c1274a", 0x21}, 0x48, 0xfffffffffffffffc) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000100)={'fscrypt:', @auto=[0x30, 0x54, 0x64, 0x37, 0x34, 0x36, 0x62, 0x63, 0x34, 0x66, 0x32, 0x65, 0x63, 0x34, 0x64, 0x66]}, &(0x7f0000000200)={0x0, "d424fba16b328309de4fba2c9cca2756e8b3b2435639a8a689a6cf00005872e90370c8492f7220d30a6938a77855cdd887eb5b403998eb0176007e5353cfe85d", 0x10}, 0x48, r2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000009000000000000000800000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500020000000000008500000084000000b7000000000000009500"/84], 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_vhci(0x0, 0xe) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003000000018000180140002007665746830"], 0x2c}}, 0x0) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r8 = syz_pidfd_open(r1, 0x0) setns(r8, 0x24020000) syz_clone(0x120e1100, 0x0, 0x13, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) 30m1.331957932s ago: executing program 2 (id=120): socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x3, 0x2, 0x2, 0x7}]}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(0x0, 0x111) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @local}}}}}}, 0x0) close(r1) inotify_init1(0x800) inotify_add_watch(r1, &(0x7f00000000c0)='./control\x00', 0x40000c17) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_FLOW={0x8, 0xb, 0x7}]}, 0x24}}, 0x0) 30m0.056091289s ago: executing program 2 (id=122): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000000000005}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000ffffffff8500000088000000180100002020702500000000002020207b1af80000000000bfa1000000000000"], 0x0, 0x2, 0x0, 0x0, 0x41100}, 0x94) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x211000, 0x1000}, 0x20) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) 29m59.304396918s ago: executing program 2 (id=123): r0 = userfaultfd(0x801) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0x1acc02, 0x148, 0x158, 0x10, 0x1f0, 0x2a8, 0x2a8, 0x1f0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x40000, 0xf0, 0x158, 0x0, {0x0, 0x5803}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x1, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@addrtype1={{0x28}, {0x445, 0x18, 0x8}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x5, 0xfff6, 0x8, 0x9, 'syz1\x00', 'syz0\x00', {0x470}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x410000, 0x0) ioctl$TCSETS2(r4, 0x402c542b, &(0x7f00000000c0)={0x8, 0x5, 0x8, 0xba, 0x8, "837c73ba17582ccac16653f2ba2e59abed4afd", 0x3, 0xe92}) r5 = socket$inet(0x2, 0x2, 0x1) setrlimit(0xd, &(0x7f0000000040)={0xfc7, 0x40}) connect$inet(r5, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000440)}}], 0x2, 0x2004000) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) creat(&(0x7f0000000000)='./file0\x00', 0x14e) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000280)={0x50, 0x0, r7, {0x7, 0x1f, 0x1, 0x8888b1, 0x0, 0x1, 0x2, 0xa, 0x0, 0x0, 0x2, 0x8}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xac901, 0x28) write$tcp_congestion(r8, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r8, r6) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 29m58.443829073s ago: executing program 2 (id=126): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000100)={0x7ff, 0x5b, 0x4, 0x8, 0x134f9ba4, 0x4, 0x7, 0x0, 0x0}, &(0x7f0000000140)=0x20) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000380)={r2, @in={{0x2, 0x4e24, @local}}, 0x9, 0x6}, 0x90) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="20fdff000000960000000000fcdbdf25022001c8", @ANYRES32=r3, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x40000c0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000500)) r4 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='bond_slave_0\x00', 0x10) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(r7, 0x4004556a, 0x1) ioctl$UI_DEV_CREATE(r7, 0x5501) write$uinput_user_dev(r6, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x3, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x0, 0xa9ba, 0xc1f, 0x1, 0x7f5d, 0x3, 0x6, 0x5, 0x10000, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x7, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x0, 0xf, 0xca, 0x5, 0x80, 0x401, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x4, 0x80000000, 0x1, 0x9, 0x7, 0x0, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x5, 0x1000002, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x2, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x1, 0x6, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x1ff, 0x4, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0xfffffff7, 0xa3, 0x3, 0x0, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x2, 0x0, 0x9, 0x13, 0x0, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x6, 0x47, 0xfa1, 0x0, 0x11, 0x3, 0x1, 0x7, 0x7, 0x8000, 0x7ff, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x40, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x40, 0x9, 0x6, 0xc41f, 0x80000001, 0x6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0xffffb027, 0xfffffff8, 0x9, 0x7, 0x6, 0x101, 0x7, 0x7, 0x4, 0x0, 0xb, 0x400, 0x8, 0x0, 0x8, 0x7, 0x9a33247, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) read$hiddev(r7, &(0x7f0000000040)=""/117, 0x75) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x3, @empty}, 0x1c) recvmmsg(r8, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x40005}], 0x1, 0x10022, 0x0) setsockopt$inet6_int(r8, 0x29, 0x46, 0x0, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000200)={0x200000, 0x200000, 0x20000000}) 29m56.59930822s ago: executing program 2 (id=130): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000000000005}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000ffffffff8500000088000000180100002020702500000000002020207b1af80000000000bfa1000000000000"], 0x0, 0x2, 0x0, 0x0, 0x41100}, 0x94) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x211000, 0x1000}, 0x20) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) 29m55.847378599s ago: executing program 33 (id=130): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000000000005}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000ffffffff8500000088000000180100002020702500000000002020207b1af80000000000bfa1000000000000"], 0x0, 0x2, 0x0, 0x0, 0x41100}, 0x94) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x211000, 0x1000}, 0x20) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) 19.535750197s ago: executing program 0 (id=4956): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x400c89c) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x4ac, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x478, 0x2, [@TCA_MATCHALL_ACT={0x474, 0x2, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0x5, 0x4, 0x2, 0x4, 0x5, 0x2234, 0x83, 0x81b, 0x7fe, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x800004, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x1, 0x790, 0x5, 0x1, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x0, 0xffffffff, 0x1, 0x3, 0x3, 0x5b1f, 0x7b0, 0x3, 0x100, 0xfffffffe, 0xd, 0xff, 0x3, 0xfffc, 0x6, 0x10a4, 0x11ff, 0x80, 0x4, 0x7, 0x3, 0x1, 0x3, 0x2, 0x9, 0x81, 0x7, 0x8, 0x5, 0x10001, 0x8f7, 0x3, 0xfffffef9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0xffffca9a, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x0, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x7, 0x80000000, 0x7f, 0x7, 0x9, 0xff, 0x24, 0x5, 0x8, 0x6, 0x10007e, 0x8, 0x0, 0x5, 0x470, 0x7f, 0xe, 0x0, 0x1, 0x0, 0x4, 0x10009, 0x61, 0x200, 0x9, 0x2, 0x2, 0x6, 0x3ff, 0x8, 0x7, 0x11, 0xda56, 0x7ffffffe, 0x180, 0x2f0cb955, 0x7, 0x8, 0xf, 0x6ae, 0x9, 0x0, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0x9, 0x7, 0x6, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0xf7800000, 0x40ac, 0x8, 0x3, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x3, 0xa, 0x3, 0xffffffff, 0x8, 0x9, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0xa, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x3, 0x8, 0x3, 0x2, 0x9, 0xb, 0x399d, 0x5, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x206, 0x5f, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x6, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x4, 0x2, 0x1, 0x200, 0x0, 0x8, 0x7, 0x0, 0x80, 0x5, 0x8, 0x1, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0xafb, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x8, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0xa, 0xb}, {0x6, 0x1, 0xd, 0x800, 0x1}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r5, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 19.139558039s ago: executing program 0 (id=4958): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf, 0xf}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r6, {0xa, 0x4}, {}, {0x10, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xd}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x60008080}, 0x20000000) 18.901736141s ago: executing program 0 (id=4960): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$can_j1939(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/247, 0xf7}, {&(0x7f00000018c0)=""/81, 0x51}], 0x3}, 0x1003) 18.719995361s ago: executing program 0 (id=4961): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18.313196673s ago: executing program 0 (id=4965): mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x5031, 0xffffffffffffffff, 0xc2dcc000) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) recvmmsg(r0, &(0x7f0000005f40)=[{{0x0, 0x0, &(0x7f0000004740)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1}, 0xd}], 0x1, 0x40000021, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000340)={@val={0x8, 0x800}, @val={0x0, 0x1, 0x6, 0x4, 0x7, 0x48}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x5, 0x64, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}}, {0x4e26, 0x4e20, 0x50, 0x0, @gue={{0x1, 0x1, 0x0, 0x8, 0x0, @void}, "6a93a1fc83e4f238473a58586f0eeaf60d610fef1bf2f3953a5b2ad541e076c68b71aebe7cab5d436af11cf80a81ce4fd760aa2f69863bd91ea9714566cabb4b515a9d5e"}}}}, 0x72) 17.177880583s ago: executing program 0 (id=4976): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x8100}, @void, @eth={@broadcast, @local, @val={@void, {0x8100, 0x7, 0x1, 0x2}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x4000, 0xe000, 0x6, 0x2f, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x41}}, {0xa001, 0x880b, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x8, 0x0, @void}}}}}}}}, 0x36) 5.604085761s ago: executing program 4 (id=5007): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000040)={0x7, 0xfffffff8}) 5.443883549s ago: executing program 4 (id=5008): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000180)) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newtaction={0x14, 0x30, 0x9}, 0x14}}, 0x880) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) 5.409363191s ago: executing program 4 (id=5009): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)}], 0x1) sendmmsg$inet6(r0, &(0x7f0000002bc0)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0xffffffff, @local, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f00000001c0)="d7", 0x1}], 0x1}}], 0x1, 0x20044040) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600004e20590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5", 0x3f}], 0x1) capset(&(0x7f0000000140)={0x20080522}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r4 = syz_open_dev$mouse(&(0x7f0000000080), 0x6, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) unshare(0x24020400) r6 = socket$inet_sctp(0x2, 0x1, 0x84) accept4$inet(r6, 0x0, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$dvb_frontend(0x0, 0x101, 0xa0580) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) keyctl$clear(0x3, 0xfffffffffffffffc) ioctl$FS_IOC_GETFSUUID(r4, 0x80111500, 0x0) keyctl$restrict_keyring(0xf, 0xfffffffffffffffc, 0x0, 0x0) 4.930949566s ago: executing program 5 (id=5014): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004070}, 0x4008000) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$kcm(r5, 0x0, 0x5) 4.716701418s ago: executing program 3 (id=5015): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000040)={0x7, 0xfffffff8}) 4.599890194s ago: executing program 3 (id=5016): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newtaction={0x14, 0x30, 0x9}, 0x14}}, 0x880) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) 4.502125509s ago: executing program 3 (id=5017): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000c00)="91f8a9849519def28691bbc4173c3d6f357d0272b7e95a0100000000000000937b7b22a1319130feaab952ac4703caae4be68907eb47fc5393de25000000000000f2ffffff2e3591ceb1757de97fb25500620d0d30506e742937b74945da657f794d5b5bf89588e07b14a17f069912dc0c3f201bff8b9a687b85baa11244632642a9eff0cbb4b5882b738f05eba73221490e2d5c17cf406be2796eec488a5b5268f507ee8d6f3dd131d64abc", 0xac}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000880)="b527ce144a9e865255e6f85f4d18156225c3396c992b47cedd740a6a6c3c82aba6b56bd441a6dd0856d664fb959853821ce9917ed023550816ba4b21413e5e7c41c7e2197da810d26109c4572ec3dfb28073599772cf3e04b596b22fce7db25609f21c6da4db35a48c20cdfa45bba59b", 0x70}, {&(0x7f0000002300)="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", 0x21e}], 0x2}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 4.397607925s ago: executing program 5 (id=5018): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x488d8}, 0x20004804) 4.31578669s ago: executing program 4 (id=5019): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000580)={0x1, 0x0, [{0x40000071, 0x0, 0x8000000000000001}]}) 4.235372004s ago: executing program 3 (id=5020): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1740, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x10, 0x0, 0xfffffffffffffcce}]}) 4.080117222s ago: executing program 5 (id=5021): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x20000800) 3.915863361s ago: executing program 4 (id=5022): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80482, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, 0x0, 0x3a}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000140)='\a', 0x1}], 0x1}, 0x400d5) 3.906777731s ago: executing program 3 (id=5023): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000040)={0x7, 0xfffffff8}) 3.896905032s ago: executing program 5 (id=5024): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newtaction={0x14, 0x30, 0x9}, 0x14}}, 0x880) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) 3.723794981s ago: executing program 3 (id=5025): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004070}, 0x4008000) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$kcm(r5, 0x0, 0x5) 3.679126243s ago: executing program 5 (id=5026): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b0009008000", 0x2c}], 0x1) sendmmsg$inet6(r0, &(0x7f0000002bc0)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0xffffffff, @local, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f00000001c0)="d7", 0x1}], 0x1}}], 0x1, 0x20044040) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600004e20590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5", 0x3f}], 0x1) capset(&(0x7f0000000140)={0x20080522}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r4 = syz_open_dev$mouse(&(0x7f0000000080), 0x6, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) unshare(0x24020400) r6 = socket$inet_sctp(0x2, 0x1, 0x84) accept4$inet(r6, 0x0, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$dvb_frontend(0x0, 0x101, 0xa0580) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) keyctl$clear(0x3, 0xfffffffffffffffc) ioctl$FS_IOC_GETFSUUID(r4, 0x80111500, 0x0) keyctl$restrict_keyring(0xf, 0xfffffffffffffffc, 0x0, 0x0) 2.717615195s ago: executing program 5 (id=5027): mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x5031, 0xffffffffffffffff, 0xc2dcc000) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) recvmmsg(r0, 0x0, 0x0, 0x40000021, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000340)={@val={0x8, 0x800}, @val={0x0, 0x1, 0x6, 0x4, 0x7, 0x48}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x5, 0x64, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}}, {0x4e26, 0x4e20, 0x50, 0x0, @gue={{0x1, 0x1, 0x0, 0x8, 0x0, @void}, "6a93a1fc83e4f238473a58586f0eeaf60d610fef1bf2f3953a5b2ad541e076c68b71aebe7cab5d436af11cf80a81ce4fd760aa2f69863bd91ea9714566cabb4b515a9d5e"}}}}, 0x72) 0s ago: executing program 4 (id=5028): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x488d8}, 0x20004804) kernel console output (not intermixed with test programs): 9] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 1784.967880][T23605] syzkaller0: entered promiscuous mode [ 1785.000359][T23605] syzkaller0: entered allmulticast mode [ 1785.808241][T23636] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1786.241746][T23644] Cannot find del_set index 2 as target [ 1786.933970][T18902] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 1787.161316][T18902] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1787.174305][T18902] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1787.200877][T18902] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1787.229400][T18902] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1787.237132][T18902] usb 5-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 1787.247834][T18902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1787.259615][T18902] usb 5-1: config 0 descriptor?? [ 1787.743081][T18902] usbhid 5-1:0.0: can't add hid device: -71 [ 1787.751838][T18902] usbhid: probe of 5-1:0.0 failed with error -71 [ 1787.792187][T18902] usb 5-1: USB disconnect, device number 3 [ 1791.002923][T23664] tipc: Enabled bearer , priority 0 [ 1791.047666][T23664] tipc: Resetting bearer [ 1791.107176][T23666] Bluetooth: MGMT ver 1.22 [ 1791.160664][T23663] tipc: Disabling bearer [ 1791.204565][T23671] netlink: 'syz.3.4421': attribute type 3 has an invalid length. [ 1791.213242][T23671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4421'. [ 1791.434221][T18902] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1791.643551][T18902] usb 6-1: Using ep0 maxpacket: 8 [ 1791.655189][T18902] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1791.680075][T18902] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1791.712214][T18902] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1791.726810][T18902] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1791.746944][T18902] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1791.762303][T18902] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1791.939769][T23692] syzkaller0: entered promiscuous mode [ 1791.946378][T23692] syzkaller0: entered allmulticast mode [ 1792.013613][T18902] usb 6-1: GET_CAPABILITIES returned 0 [ 1792.025863][T18902] usbtmc 6-1:16.0: can't read capabilities [ 1792.321710][ T9999] usb 6-1: USB disconnect, device number 15 [ 1792.401439][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.411067][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.421208][ T1288] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 1794.765584][T18902] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1794.970090][T18902] usb 6-1: Using ep0 maxpacket: 8 [ 1795.021684][T18902] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 1795.029960][T18902] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1795.040393][T18902] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1795.053552][T18902] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1795.062717][T18902] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1795.070845][T18902] usb 6-1: Product: syz [ 1795.075293][T18902] usb 6-1: Manufacturer: syz [ 1795.079959][T18902] usb 6-1: SerialNumber: syz [ 1795.087704][T18902] usb 6-1: config 0 descriptor?? [ 1795.332347][T18902] usb 6-1: USB disconnect, device number 16 [ 1796.596575][T23698] veth0_virt_wifi: entered allmulticast mode [ 1796.623778][T23702] tipc: Enabling of bearer rejected, failed to enable media [ 1797.032901][T23736] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4441'. [ 1797.118425][T23736] bond1: entered promiscuous mode [ 1797.133950][T23736] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1797.153846][T18902] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1797.205836][T23739] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1797.213081][T23739] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 1797.254285][T23739] bond1: (slave vti0): Error -95 calling set_mac_address [ 1797.337072][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 1797.337090][ T28] audit: type=1326 audit(1777025442.636:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23747 comm="syz.0.4445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07d859cdd9 code=0x7ffc0000 [ 1797.403235][ T28] audit: type=1326 audit(1777025442.636:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23747 comm="syz.0.4445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07d859cdd9 code=0x7ffc0000 [ 1797.426327][T18902] usb 6-1: Using ep0 maxpacket: 8 [ 1797.476617][T18902] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1797.506323][T18902] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1797.543207][ T28] audit: type=1326 audit(1777025442.636:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23747 comm="syz.0.4445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07d859cdd9 code=0x7ffc0000 [ 1797.577918][T18902] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1797.621559][T18902] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1797.667923][T18902] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1797.683651][ T28] audit: type=1326 audit(1777025442.636:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23747 comm="syz.0.4445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07d859cdd9 code=0x7ffc0000 [ 1797.705029][T18902] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1797.762397][T18902] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1797.764004][ T28] audit: type=1326 audit(1777025442.636:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23747 comm="syz.0.4445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f07d859cdd9 code=0x7ffc0000 [ 1797.840385][T23756] tipc: Enabled bearer , priority 0 [ 1797.877984][ T28] audit: type=1326 audit(1777025442.696:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23747 comm="syz.0.4445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f07d855d60e code=0x7ffc0000 [ 1797.906981][ T28] audit: type=1326 audit(1777025442.696:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23747 comm="syz.0.4445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f07d855d60e code=0x7ffc0000 [ 1797.948054][ T28] audit: type=1326 audit(1777025442.696:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23747 comm="syz.0.4445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f07d855d60e code=0x7ffc0000 [ 1798.006984][ T28] audit: type=1326 audit(1777025442.696:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23747 comm="syz.0.4445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f07d855d60e code=0x7ffc0000 [ 1798.038656][T18902] usb 6-1: usb_control_msg returned -32 [ 1798.051828][T18902] usbtmc 6-1:16.0: can't read capabilities [ 1798.059832][T23757] syzkaller0: entered promiscuous mode [ 1798.065939][ T28] audit: type=1326 audit(1777025442.696:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23747 comm="syz.0.4445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f07d855d60e code=0x7ffc0000 [ 1798.089341][T23757] syzkaller0: entered allmulticast mode [ 1798.119792][T23761] tipc: Resetting bearer [ 1798.252553][T18902] usb 6-1: USB disconnect, device number 17 [ 1798.849470][T18902] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1799.054583][T18902] usb 6-1: Using ep0 maxpacket: 32 [ 1799.104656][T18902] usb 6-1: config 0 has an invalid interface number: 4 but max is 0 [ 1799.112857][T18902] usb 6-1: config 0 has no interface number 0 [ 1799.119347][T18902] usb 6-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1799.145932][T18902] usb 6-1: config 0 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1799.174199][T18902] usb 6-1: New USB device found, idVendor=046d, idProduct=c537, bcdDevice= 0.00 [ 1799.199550][T18902] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1799.227699][T18902] usb 6-1: config 0 descriptor?? [ 1799.670621][T18902] logitech-djreceiver 0003:046D:C537.002E: unknown main item tag 0x0 [ 1799.683661][T18902] logitech-djreceiver 0003:046D:C537.002E: unknown main item tag 0x0 [ 1799.694736][T18902] logitech-djreceiver 0003:046D:C537.002E: unknown main item tag 0x0 [ 1799.703083][T18902] logitech-djreceiver 0003:046D:C537.002E: unknown main item tag 0x0 [ 1799.732375][T18902] logitech-djreceiver 0003:046D:C537.002E: unknown main item tag 0x0 [ 1799.751265][T18902] logitech-djreceiver 0003:046D:C537.002E: unknown main item tag 0x0 [ 1799.762659][T18902] logitech-djreceiver 0003:046D:C537.002E: unknown main item tag 0x0 [ 1799.774223][T18902] logitech-djreceiver 0003:046D:C537.002E: hidraw0: USB HID v10.00 Device [HID 046d:c537] on usb-dummy_hcd.5-1/input4 [ 1799.905861][T18902] usb 6-1: USB disconnect, device number 18 [ 1800.779405][T23781] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1803.294539][T23794] netlink: 'syz.5.4457': attribute type 4 has an invalid length. [ 1803.302548][T23794] netlink: 17 bytes leftover after parsing attributes in process `syz.5.4457'. [ 1803.432654][T23755] tipc: Disabling bearer [ 1804.521425][T23838] tipc: Enabled bearer , priority 0 [ 1804.548754][T23838] tipc: Resetting bearer [ 1804.606350][T23835] tipc: Disabling bearer [ 1804.733793][ T5810] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1804.936330][ T5810] usb 4-1: Using ep0 maxpacket: 8 [ 1804.967812][ T5810] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1805.000662][ T5810] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1805.020454][ T5810] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1805.044060][ T5810] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1805.072708][ T5810] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1805.118428][T23851] fuse: Bad value for 'group_id' [ 1805.127819][ T5810] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1805.145924][ T28] kauditd_printk_skb: 56 callbacks suppressed [ 1805.145947][ T28] audit: type=1326 audit(1777025450.436:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23850 comm="syz.5.4474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c46d9cdd9 code=0x7ffc0000 [ 1805.238923][ T28] audit: type=1326 audit(1777025450.436:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23850 comm="syz.5.4474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c46d9cdd9 code=0x7ffc0000 [ 1805.262227][ T28] audit: type=1326 audit(1777025450.436:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23850 comm="syz.5.4474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c46d9cdd9 code=0x7ffc0000 [ 1805.286852][ T28] audit: type=1326 audit(1777025450.436:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23850 comm="syz.5.4474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f5c46d9cdd9 code=0x7ffc0000 [ 1805.348334][ T28] audit: type=1326 audit(1777025450.496:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23850 comm="syz.5.4474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5c46d5d60e code=0x7ffc0000 [ 1805.466923][ T5810] usb 4-1: GET_CAPABILITIES returned 0 [ 1805.472588][ T5810] usbtmc 4-1:16.0: can't read capabilities [ 1805.480394][ T28] audit: type=1326 audit(1777025450.496:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23850 comm="syz.5.4474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5c46d5d60e code=0x7ffc0000 [ 1805.547487][ T28] audit: type=1326 audit(1777025450.506:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23850 comm="syz.5.4474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5c46d5d60e code=0x7ffc0000 [ 1805.586953][ T28] audit: type=1326 audit(1777025450.506:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23850 comm="syz.5.4474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5c46d5d60e code=0x7ffc0000 [ 1805.695096][ T28] audit: type=1326 audit(1777025450.516:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23850 comm="syz.5.4474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5c46d5d60e code=0x7ffc0000 [ 1805.732092][ T28] audit: type=1326 audit(1777025450.516:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23850 comm="syz.5.4474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5c46d5d60e code=0x7ffc0000 [ 1805.767319][ T5810] usb 4-1: USB disconnect, device number 22 [ 1806.111772][T23867] tipc: Enabled bearer , priority 0 [ 1806.154558][T23867] tipc: Resetting bearer [ 1806.196505][T23866] tipc: Disabling bearer [ 1806.743748][ T5810] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1806.957687][T23888] fuse: Bad value for 'group_id' [ 1806.973845][ T5810] usb 6-1: Using ep0 maxpacket: 8 [ 1807.009785][T23890] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 1807.020031][ T5810] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1807.033553][ T5810] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1807.053811][ T5810] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1807.066406][T23890] syzkaller0: entered promiscuous mode [ 1807.071986][T23890] syzkaller0: entered allmulticast mode [ 1807.090666][ T5810] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1807.125838][ T5810] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1807.207936][ T5810] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1807.217753][ T5810] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1807.436834][ T5810] usb 6-1: usb_control_msg returned -32 [ 1807.459126][ T5810] usbtmc 6-1:16.0: can't read capabilities [ 1807.655584][ T5810] usb 6-1: USB disconnect, device number 19 [ 1807.675603][T23898] tipc: Enabled bearer , priority 0 [ 1807.728414][T23898] tipc: Resetting bearer [ 1807.795889][T23897] tipc: Disabling bearer [ 1807.824418][ T9999] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1807.944004][T23905] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4494'. [ 1808.024849][ T9999] usb 1-1: Using ep0 maxpacket: 16 [ 1808.043269][ T9999] usb 1-1: config 0 has no interfaces? [ 1808.079481][ T9999] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1808.121476][ T9999] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1808.142417][ T9999] usb 1-1: Manufacturer: syz [ 1808.163159][ T9999] usb 1-1: config 0 descriptor?? [ 1808.243907][ T5810] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1808.443993][ T5810] usb 6-1: Using ep0 maxpacket: 32 [ 1808.482001][ T5810] usb 6-1: config 0 has an invalid interface number: 4 but max is 0 [ 1808.535369][ T5810] usb 6-1: config 0 has no interface number 0 [ 1808.584227][ T5810] usb 6-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1808.649262][ T5810] usb 6-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1808.770735][T23895] Set syz1 is full, maxelem 6117 reached [ 1808.784046][ T5810] usb 6-1: config 0 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1808.808134][ T23] usb 1-1: USB disconnect, device number 30 [ 1808.853155][ T5810] usb 6-1: New USB device found, idVendor=046d, idProduct=c537, bcdDevice= 0.00 [ 1808.882286][ T5810] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1808.911980][ T5810] usb 6-1: config 0 descriptor?? [ 1809.356888][ T5810] logitech-djreceiver 0003:046D:C537.002F: unknown main item tag 0x0 [ 1809.425869][ T5810] logitech-djreceiver 0003:046D:C537.002F: unknown main item tag 0x0 [ 1809.483732][ T5810] logitech-djreceiver 0003:046D:C537.002F: unknown main item tag 0x0 [ 1809.492048][ T5810] logitech-djreceiver 0003:046D:C537.002F: unknown main item tag 0x0 [ 1809.567244][ T5810] logitech-djreceiver 0003:046D:C537.002F: unknown main item tag 0x0 [ 1809.593077][ T5810] logitech-djreceiver 0003:046D:C537.002F: unknown main item tag 0x0 [ 1809.617753][ T5810] logitech-djreceiver 0003:046D:C537.002F: unknown main item tag 0x0 [ 1809.694117][ T5810] logitech-djreceiver 0003:046D:C537.002F: hidraw0: USB HID v10.00 Device [HID 046d:c537] on usb-dummy_hcd.5-1/input4 [ 1809.773971][ T5810] usb 6-1: USB disconnect, device number 20 [ 1809.940197][T23927] syzkaller0: entered promiscuous mode [ 1809.953600][T23927] syzkaller0: entered allmulticast mode [ 1809.997107][T23923] fido_id[23923]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1810.007584][T23931] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1810.370911][T23937] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4504'. [ 1810.400334][T23940] ip6gre1: entered promiscuous mode [ 1810.413811][T23940] ip6gre1: entered allmulticast mode [ 1810.542278][T23940] syz.5.4506 (23940) used greatest stack depth: 18792 bytes left [ 1811.022678][T23954] netlink: 'syz.5.4512': attribute type 3 has an invalid length. [ 1811.035671][T23954] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4512'. [ 1811.458188][T23975] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 1811.470655][T23975] syzkaller0: entered promiscuous mode [ 1811.476931][T23975] syzkaller0: entered allmulticast mode [ 1811.701965][T23978] binder: BINDER_SET_CONTEXT_MGR already set [ 1811.708521][T23978] binder: 23977:23978 ioctl 4018620d 200000000040 returned -16 [ 1813.119673][T23988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4523'. [ 1813.213403][T23990] netlink: 'syz.4.4524': attribute type 3 has an invalid length. [ 1813.229808][T23990] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4524'. [ 1813.470095][T23994] syzkaller0: entered promiscuous mode [ 1813.477824][T23994] syzkaller0: entered allmulticast mode [ 1814.087113][T23956] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1814.312714][T24012] netlink: 'syz.3.4533': attribute type 3 has an invalid length. [ 1814.321445][T24012] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4533'. [ 1814.365444][ T28] kauditd_printk_skb: 140 callbacks suppressed [ 1814.365462][ T28] audit: type=1326 audit(1777025459.666:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24013 comm="syz.4.4534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f341539cdd9 code=0x7ffc0000 [ 1814.451206][ T28] audit: type=1326 audit(1777025459.666:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24013 comm="syz.4.4534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f341539cdd9 code=0x7ffc0000 [ 1814.491206][ T28] audit: type=1326 audit(1777025459.666:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24013 comm="syz.4.4534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f341539cdd9 code=0x7ffc0000 [ 1814.568507][ T28] audit: type=1326 audit(1777025459.666:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24013 comm="syz.4.4534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f341539cdd9 code=0x7ffc0000 [ 1814.659163][ T28] audit: type=1326 audit(1777025459.716:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24013 comm="syz.4.4534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f341535d60e code=0x7ffc0000 [ 1814.704586][ T28] audit: type=1326 audit(1777025459.716:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24013 comm="syz.4.4534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f341535d60e code=0x7ffc0000 [ 1814.735740][ T28] audit: type=1326 audit(1777025459.726:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24013 comm="syz.4.4534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f341535d60e code=0x7ffc0000 [ 1814.759264][ T28] audit: type=1326 audit(1777025459.726:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24013 comm="syz.4.4534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f341535d60e code=0x7ffc0000 [ 1814.790754][ T28] audit: type=1326 audit(1777025459.726:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24013 comm="syz.4.4534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f341535d60e code=0x7ffc0000 [ 1814.815319][ T28] audit: type=1326 audit(1777025459.726:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24013 comm="syz.4.4534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f341535d60e code=0x7ffc0000 [ 1815.057963][T24027] syzkaller0: entered promiscuous mode [ 1815.064390][T24027] syzkaller0: entered allmulticast mode [ 1815.503578][ T23] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 1815.617393][T24044] netlink: 'syz.4.4543': attribute type 3 has an invalid length. [ 1815.664785][T24044] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4543'. [ 1815.780609][ T23] usb 4-1: config 0 has an invalid interface number: 205 but max is 0 [ 1815.797283][ T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1815.809574][ T23] usb 4-1: config 0 has no interface number 0 [ 1815.820290][ T23] usb 4-1: config 0 interface 205 has no altsetting 0 [ 1815.831958][ T23] usb 4-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 1815.843730][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1815.851938][ T23] usb 4-1: Product: syz [ 1815.889819][ T23] usb 4-1: Manufacturer: syz [ 1815.896099][ T23] usb 4-1: SerialNumber: syz [ 1815.985906][ T23] usb 4-1: config 0 descriptor?? [ 1816.087270][ T23] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 1816.175387][ T23] dvb-usb: bulk message failed: -22 (3/0) [ 1816.240571][ T23] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1816.278051][ T23] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 1816.317476][ T23] usb 4-1: media controller created [ 1816.336914][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1816.371878][ T23] dvb-usb: bulk message failed: -22 (6/0) [ 1816.387854][ T23] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 1816.411805][ T23] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input118 [ 1816.432079][ T23] dvb-usb: schedule remote query interval to 150 msecs. [ 1816.440362][ T23] dvb-usb: bulk message failed: -22 (3/0) [ 1816.474358][ T23] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 1816.593878][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 1816.602060][ T23] dvb-usb: error while querying for an remote control event. [ 1816.794403][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 1816.820330][ T23] dvb-usb: error while querying for an remote control event. [ 1816.916676][T24066] syzkaller0: entered promiscuous mode [ 1816.923048][T24066] syzkaller0: entered allmulticast mode [ 1817.013935][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 1817.026117][ T23] dvb-usb: error while querying for an remote control event. [ 1817.240879][ T9999] dvb-usb: bulk message failed: -22 (1/0) [ 1817.258562][ T9999] dvb-usb: error while querying for an remote control event. [ 1817.434074][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 1817.451011][ T23] dvb-usb: error while querying for an remote control event. [ 1817.653664][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 1817.661452][ T23] dvb-usb: error while querying for an remote control event. [ 1817.801766][T24081] netlink: 'syz.0.4554': attribute type 3 has an invalid length. [ 1817.826221][T24081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4554'. [ 1817.843799][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 1817.856821][ T23] dvb-usb: error while querying for an remote control event. [ 1818.024394][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 1818.067001][ T23] dvb-usb: error while querying for an remote control event. [ 1818.284017][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 1818.289905][ T23] dvb-usb: error while querying for an remote control event. [ 1818.431847][ T5810] usb 4-1: USB disconnect, device number 23 [ 1818.519771][T24092] syzkaller0: entered promiscuous mode [ 1818.526594][ T5810] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 1818.538712][T24092] syzkaller0: entered allmulticast mode [ 1819.712559][T24112] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4565'. [ 1819.762353][T24114] netlink: 'syz.0.4566': attribute type 3 has an invalid length. [ 1819.803801][T24114] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4566'. [ 1820.118828][T24118] ip6gre1: entered promiscuous mode [ 1820.143583][T24118] ip6gre1: entered allmulticast mode [ 1821.042370][T24129] erspan0: entered promiscuous mode [ 1822.461597][T24144] netlink: 'syz.4.4576': attribute type 3 has an invalid length. [ 1822.512048][T24144] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4576'. [ 1822.683894][ T5811] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 1823.820345][T24155] nbd0: detected capacity change from 0 to 63 [ 1823.919919][T17956] block nbd0: Receive control failed (result -104) [ 1823.951054][T11247] block nbd0: Dead connection, failed to find a fallback [ 1823.961041][T11247] block nbd0: shutting down sockets [ 1823.967554][T11247] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 1823.980009][T11247] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1823.988112][T11247] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1823.996205][T11247] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1824.736541][T24166] netlink: 'syz.4.4585': attribute type 3 has an invalid length. [ 1824.760556][T24166] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4585'. [ 1824.947590][ T5811] usb 1-1: unable to read config index 0 descriptor/all [ 1824.967205][ T5811] usb 1-1: can't read configurations, error -71 [ 1826.687193][T24210] netlink: 'syz.4.4598': attribute type 3 has an invalid length. [ 1826.699908][T24210] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4598'. [ 1827.153839][ T23] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 1827.366153][T24224] Cannot find del_set index 2 as target [ 1827.824424][ T5810] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 1827.928829][ T23] usb 4-1: config 0 has an invalid interface number: 205 but max is 0 [ 1827.937306][ T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1827.949498][ T23] usb 4-1: config 0 has no interface number 0 [ 1827.980424][ T23] usb 4-1: config 0 interface 205 has no altsetting 0 [ 1828.423129][ T23] usb 4-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 1828.483738][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1828.533508][ T23] usb 4-1: Product: syz [ 1828.544122][ T23] usb 4-1: Manufacturer: syz [ 1828.605000][ T23] usb 4-1: SerialNumber: syz [ 1828.628414][ T23] usb 4-1: config 0 descriptor?? [ 1828.645127][ T5810] usb 5-1: device descriptor read/64, error -71 [ 1828.820405][ T23] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 1828.923704][ T5810] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 1829.025057][ T23] dvb-usb: bulk message failed: -22 (3/0) [ 1829.103835][ T5810] usb 5-1: device descriptor read/64, error -71 [ 1829.147632][ T23] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1829.244905][ T5810] usb usb5-port1: attempt power cycle [ 1829.280261][ T23] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 1829.345528][ T23] usb 4-1: media controller created [ 1829.394529][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1829.509844][ T23] dvb-usb: bulk message failed: -22 (6/0) [ 1829.546176][ T23] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 1829.650083][ T23] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input119 [ 1829.674229][ T5810] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 1829.755780][ T5810] usb 5-1: device descriptor read/8, error -71 [ 1829.895690][ T23] dvb-usb: schedule remote query interval to 150 msecs. [ 1830.009244][ T23] dvb-usb: bulk message failed: -22 (3/0) [ 1830.033658][ T5810] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 1830.083950][ T23] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 1830.124202][ T5810] usb 5-1: device descriptor read/8, error -71 [ 1830.174336][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 1830.227876][ T23] dvb-usb: error while querying for an remote control event. [ 1830.284297][ T5810] usb usb5-port1: unable to enumerate USB device [ 1830.433577][ T9999] dvb-usb: bulk message failed: -22 (1/0) [ 1830.439643][ T9999] dvb-usb: error while querying for an remote control event. [ 1830.635255][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 1830.641601][ T23] dvb-usb: error while querying for an remote control event. [ 1830.733704][T24252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4609'. [ 1830.893812][ T9999] dvb-usb: bulk message failed: -22 (1/0) [ 1830.899874][ T9999] dvb-usb: error while querying for an remote control event. [ 1831.163717][ T9999] dvb-usb: bulk message failed: -22 (1/0) [ 1831.169763][ T9999] dvb-usb: error while querying for an remote control event. [ 1831.343792][ T5811] dvb-usb: bulk message failed: -22 (1/0) [ 1831.349903][ T5811] dvb-usb: error while querying for an remote control event. [ 1831.441333][ T5811] usb 4-1: USB disconnect, device number 24 [ 1831.541918][ T5811] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 1833.436077][T24299] lo: Caught tx_queue_len zero misconfig [ 1834.234244][T18902] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 1834.667523][T18902] usb 1-1: config 0 has an invalid interface number: 205 but max is 0 [ 1834.728997][T18902] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1834.841223][T18902] usb 1-1: config 0 has no interface number 0 [ 1834.873761][T18902] usb 1-1: config 0 interface 205 has no altsetting 0 [ 1834.954356][T18902] usb 1-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 1835.008164][T18902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1835.073988][T18902] usb 1-1: Product: syz [ 1835.084100][T18902] usb 1-1: Manufacturer: syz [ 1835.098297][T18902] usb 1-1: SerialNumber: syz [ 1835.127767][T18902] usb 1-1: config 0 descriptor?? [ 1835.245320][T18902] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 1835.303926][T18902] dvb-usb: bulk message failed: -22 (3/0) [ 1835.388136][T18902] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1835.669970][T18902] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 1835.729833][T18902] usb 1-1: media controller created [ 1835.746616][T18902] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1835.771843][T24332] syzkaller0: entered promiscuous mode [ 1835.790372][T18902] dvb-usb: bulk message failed: -22 (6/0) [ 1835.797113][T24332] syzkaller0: entered allmulticast mode [ 1835.810066][T18902] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 1835.905591][T18902] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input120 [ 1835.960583][T18902] dvb-usb: schedule remote query interval to 150 msecs. [ 1835.971190][T18902] dvb-usb: bulk message failed: -22 (3/0) [ 1836.014077][T18902] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 1836.123689][T18902] dvb-usb: bulk message failed: -22 (1/0) [ 1836.146319][T18902] dvb-usb: error while querying for an remote control event. [ 1836.324179][T18902] dvb-usb: bulk message failed: -22 (1/0) [ 1836.336882][T18902] dvb-usb: error while querying for an remote control event. [ 1836.403778][T24343] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4632'. [ 1836.526649][T18902] dvb-usb: bulk message failed: -22 (1/0) [ 1836.532506][T18902] dvb-usb: error while querying for an remote control event. [ 1836.765432][T18902] dvb-usb: bulk message failed: -22 (1/0) [ 1836.785906][T18902] dvb-usb: error while querying for an remote control event. [ 1836.973996][T18902] dvb-usb: bulk message failed: -22 (1/0) [ 1836.998035][T18902] dvb-usb: error while querying for an remote control event. [ 1837.204356][T18902] dvb-usb: bulk message failed: -22 (1/0) [ 1837.251007][T18902] dvb-usb: error while querying for an remote control event. [ 1837.443768][T18902] dvb-usb: bulk message failed: -22 (1/0) [ 1837.449636][T18902] dvb-usb: error while querying for an remote control event. [ 1837.598393][ T9] usb 1-1: USB disconnect, device number 33 [ 1837.743366][ T9] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 1837.853586][T24369] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1838.032122][T24376] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4642'. [ 1838.407259][T24390] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1839.076576][T24408] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4652'. [ 1839.263744][ T9] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 1839.526673][ T9] usb 6-1: config 0 has an invalid interface number: 205 but max is 0 [ 1839.583127][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1839.623320][ T9] usb 6-1: config 0 has no interface number 0 [ 1839.651933][ T9] usb 6-1: config 0 interface 205 has no altsetting 0 [ 1839.661213][T24416] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1840.044061][ T9] usb 6-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 1840.080287][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1840.123865][ T9] usb 6-1: Product: syz [ 1840.152012][ T9] usb 6-1: Manufacturer: syz [ 1840.182158][ T9] usb 6-1: SerialNumber: syz [ 1840.245382][ T9] usb 6-1: config 0 descriptor?? [ 1840.513816][T24426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1840.612144][ T9] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 1840.705856][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 1840.834595][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1840.938572][ T9] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 1841.051346][ T9] usb 6-1: media controller created [ 1841.097986][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1841.165932][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 1841.173984][ T9] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 1841.222126][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input121 [ 1841.263030][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 1841.280473][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 1841.335197][ T9] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 1841.435703][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1841.473673][ T9] dvb-usb: error while querying for an remote control event. [ 1841.664937][T24432] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4662'. [ 1841.693667][ T5810] dvb-usb: bulk message failed: -22 (1/0) [ 1841.699519][ T5810] dvb-usb: error while querying for an remote control event. [ 1841.883644][ T5810] dvb-usb: bulk message failed: -22 (1/0) [ 1841.896964][ T5810] dvb-usb: error while querying for an remote control event. [ 1842.086835][ T5810] dvb-usb: bulk message failed: -22 (1/0) [ 1842.110074][ T5810] dvb-usb: error while querying for an remote control event. [ 1842.283731][ T5810] dvb-usb: bulk message failed: -22 (1/0) [ 1842.290920][ T5810] dvb-usb: error while querying for an remote control event. [ 1842.422261][ T5811] usb 6-1: USB disconnect, device number 21 [ 1842.536275][ T5811] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 1842.627145][T24451] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1842.818680][T24455] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4672'. [ 1844.103654][T24479] syzkaller0: entered promiscuous mode [ 1844.109440][T24479] syzkaller0: entered allmulticast mode [ 1844.166589][T18902] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 1844.259880][T24482] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4682'. [ 1844.423532][T18902] usb 5-1: config 0 has an invalid interface number: 205 but max is 0 [ 1844.474073][T18902] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1844.682805][T18902] usb 5-1: config 0 has no interface number 0 [ 1844.781919][T18902] usb 5-1: config 0 interface 205 has no altsetting 0 [ 1844.852421][T18902] usb 5-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 1844.887800][T18902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1844.923232][T18902] usb 5-1: Product: syz [ 1844.934283][T18902] usb 5-1: Manufacturer: syz [ 1844.950226][T18902] usb 5-1: SerialNumber: syz [ 1844.984044][T18902] usb 5-1: config 0 descriptor?? [ 1845.024549][T18902] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 1845.056333][T18902] dvb-usb: bulk message failed: -22 (3/0) [ 1845.097174][T18902] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1845.144339][T18902] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 1845.206015][T18902] usb 5-1: media controller created [ 1845.235369][T18902] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1845.246608][T24500] fuse: Bad value for 'fd' [ 1845.269078][T18902] dvb-usb: bulk message failed: -22 (6/0) [ 1845.280329][ T28] kauditd_printk_skb: 96 callbacks suppressed [ 1845.280341][ T28] audit: type=1326 audit(1777025490.576:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24499 comm="syz.5.4690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c46d9cdd9 code=0x7ffc0000 [ 1845.331052][T18902] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 1845.360948][ T28] audit: type=1326 audit(1777025490.616:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24499 comm="syz.5.4690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c46d9cdd9 code=0x7ffc0000 [ 1845.397310][T18902] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input122 [ 1845.448657][T18902] dvb-usb: schedule remote query interval to 150 msecs. [ 1845.469713][ T28] audit: type=1326 audit(1777025490.616:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24499 comm="syz.5.4690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c46d9cdd9 code=0x7ffc0000 [ 1845.499246][T18902] dvb-usb: bulk message failed: -22 (3/0) [ 1845.572018][T18902] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 1845.630996][ T28] audit: type=1326 audit(1777025490.616:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24499 comm="syz.5.4690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c46d9cdd9 code=0x7ffc0000 [ 1845.669413][T24503] syzkaller0: entered promiscuous mode [ 1845.678142][T18902] dvb-usb: bulk message failed: -22 (1/0) [ 1845.706854][T24503] syzkaller0: entered allmulticast mode [ 1845.715707][T18902] dvb-usb: error while querying for an remote control event. [ 1845.738391][ T28] audit: type=1326 audit(1777025490.616:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24499 comm="syz.5.4690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f5c46d9cdd9 code=0x7ffc0000 [ 1845.837705][ T28] audit: type=1326 audit(1777025490.686:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24499 comm="syz.5.4690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5c46d5d60e code=0x7ffc0000 [ 1845.947770][ T28] audit: type=1326 audit(1777025490.696:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24499 comm="syz.5.4690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5c46d5d60e code=0x7ffc0000 [ 1845.980589][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1845.991685][ T9] dvb-usb: error while querying for an remote control event. [ 1846.062081][ T28] audit: type=1326 audit(1777025490.696:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24499 comm="syz.5.4690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5c46d5d60e code=0x7ffc0000 [ 1846.123259][ T28] audit: type=1326 audit(1777025490.706:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24499 comm="syz.5.4690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5c46d5d60e code=0x7ffc0000 [ 1846.193589][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1846.199452][ T9] dvb-usb: error while querying for an remote control event. [ 1846.440039][ T28] audit: type=1326 audit(1777025490.716:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24499 comm="syz.5.4690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5c46d5d60e code=0x7ffc0000 [ 1846.523525][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1846.529402][ T9] dvb-usb: error while querying for an remote control event. [ 1846.835001][ T5810] dvb-usb: bulk message failed: -22 (1/0) [ 1846.841012][ T5810] dvb-usb: error while querying for an remote control event. [ 1846.960261][T24512] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4694'. [ 1847.044718][ T5810] dvb-usb: bulk message failed: -22 (1/0) [ 1847.050858][ T5810] dvb-usb: error while querying for an remote control event. [ 1847.283592][ T5810] dvb-usb: bulk message failed: -22 (1/0) [ 1847.289654][ T5810] dvb-usb: error while querying for an remote control event. [ 1847.483749][ T5810] dvb-usb: bulk message failed: -22 (1/0) [ 1847.492033][ T5810] dvb-usb: error while querying for an remote control event. [ 1847.693587][ T5810] dvb-usb: bulk message failed: -22 (1/0) [ 1847.699625][ T5810] dvb-usb: error while querying for an remote control event. [ 1847.729798][ T5810] usb 5-1: USB disconnect, device number 8 [ 1847.802814][ T5810] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 1848.149304][T24531] syzkaller0: entered promiscuous mode [ 1848.156040][T24531] syzkaller0: entered allmulticast mode [ 1848.164875][T24533] fuse: Bad value for 'fd' [ 1848.608896][T24539] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4704'. [ 1848.824701][T24548] tipc: Enabled bearer , priority 0 [ 1848.866423][T24548] syzkaller0: entered promiscuous mode [ 1848.872008][T24548] syzkaller0: entered allmulticast mode [ 1848.907974][T24548] tipc: Resetting bearer [ 1848.926310][T24546] tipc: Resetting bearer [ 1849.019287][T24546] tipc: Disabling bearer [ 1849.113829][ T5811] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 1849.397672][ T5811] usb 5-1: config 0 has an invalid interface number: 205 but max is 0 [ 1849.452304][ T5811] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1849.487096][ T5811] usb 5-1: config 0 has no interface number 0 [ 1849.516730][ T5811] usb 5-1: config 0 interface 205 has no altsetting 0 [ 1849.654290][ T5811] usb 5-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 1849.715646][ T5811] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1849.754605][ T5811] usb 5-1: Product: syz [ 1849.761962][ T5811] usb 5-1: Manufacturer: syz [ 1849.774947][ T5811] usb 5-1: SerialNumber: syz [ 1849.795057][ T5811] usb 5-1: config 0 descriptor?? [ 1849.902516][ T5811] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 1849.933808][ T5811] dvb-usb: bulk message failed: -22 (3/0) [ 1849.996202][ T5811] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1850.095260][ T5811] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 1850.149507][ T5811] usb 5-1: media controller created [ 1850.210566][ T5811] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1850.255596][ T5811] dvb-usb: bulk message failed: -22 (6/0) [ 1850.271771][ T5811] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 1850.374224][ T5811] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input123 [ 1850.472235][ T5811] dvb-usb: schedule remote query interval to 150 msecs. [ 1850.504882][ T5811] dvb-usb: bulk message failed: -22 (3/0) [ 1850.573563][ T5811] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 1850.663922][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 1850.674478][ T23] dvb-usb: error while querying for an remote control event. [ 1850.873704][ T5811] dvb-usb: bulk message failed: -22 (1/0) [ 1850.881980][ T5811] dvb-usb: error while querying for an remote control event. [ 1851.153641][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 1851.183802][ T23] dvb-usb: error while querying for an remote control event. [ 1851.613632][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 1851.764386][ T23] dvb-usb: error while querying for an remote control event. [ 1851.803083][T24565] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4715'. [ 1851.906557][T24568] fuse: Bad value for 'fd' [ 1851.936830][ T28] kauditd_printk_skb: 150 callbacks suppressed [ 1851.936849][ T28] audit: type=1326 audit(1777025497.236:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24567 comm="syz.5.4716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c46d9cdd9 code=0x7ffc0000 [ 1851.944124][ T5811] dvb-usb: bulk message failed: -22 (1/0) [ 1852.014680][ T5811] dvb-usb: error while querying for an remote control event. [ 1852.040651][ T28] audit: type=1326 audit(1777025497.236:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24567 comm="syz.5.4716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c46d9cdd9 code=0x7ffc0000 [ 1852.116621][ T28] audit: type=1326 audit(1777025497.266:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24567 comm="syz.5.4716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c46d9cdd9 code=0x7ffc0000 [ 1852.159654][T24574] tipc: Enabled bearer , priority 0 [ 1852.181862][T24574] syzkaller0: entered promiscuous mode [ 1852.202760][T24574] syzkaller0: entered allmulticast mode [ 1852.208717][ T5811] dvb-usb: bulk message failed: -22 (1/0) [ 1852.265091][ T5811] dvb-usb: error while querying for an remote control event. [ 1852.272812][ T28] audit: type=1326 audit(1777025497.266:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24567 comm="syz.5.4716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c46d9cdd9 code=0x7ffc0000 [ 1852.332758][T24574] tipc: Resetting bearer [ 1852.353837][ T28] audit: type=1326 audit(1777025497.266:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24567 comm="syz.5.4716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f5c46d9cdd9 code=0x7ffc0000 [ 1852.382346][T24573] tipc: Resetting bearer [ 1852.448465][ T28] audit: type=1326 audit(1777025497.316:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24567 comm="syz.5.4716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5c46d5d60e code=0x7ffc0000 [ 1852.472225][T24573] tipc: Disabling bearer [ 1852.495990][ T5811] dvb-usb: bulk message failed: -22 (1/0) [ 1852.501915][ T5811] dvb-usb: error while querying for an remote control event. [ 1852.570242][ T28] audit: type=1326 audit(1777025497.326:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24567 comm="syz.5.4716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5c46d5d60e code=0x7ffc0000 [ 1852.606513][ T28] audit: type=1326 audit(1777025497.326:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24567 comm="syz.5.4716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5c46d5d60e code=0x7ffc0000 [ 1852.641673][ T28] audit: type=1326 audit(1777025497.326:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24567 comm="syz.5.4716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5c46d5d60e code=0x7ffc0000 [ 1852.680038][ T28] audit: type=1326 audit(1777025497.326:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24567 comm="syz.5.4716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5c46d5d60e code=0x7ffc0000 [ 1852.703783][ T5811] dvb-usb: bulk message failed: -22 (1/0) [ 1852.709741][ T5811] dvb-usb: error while querying for an remote control event. [ 1852.852491][ T5811] usb 5-1: USB disconnect, device number 9 [ 1853.049334][ T5811] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 1853.613573][ T5810] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1853.814155][ T5810] usb 6-1: device descriptor read/64, error -71 [ 1853.839275][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.846481][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.889919][ T1288] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 1853.980084][T24599] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4726'. [ 1854.112376][ T5810] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1854.283570][ T5810] usb 6-1: device descriptor read/64, error -71 [ 1854.403767][ T5810] usb usb6-port1: attempt power cycle [ 1854.485774][ T55] block nbd0: Possible stuck request ffff888021f48000: control (read@0,1024B). Runtime 30 seconds [ 1854.833589][ T5810] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1854.875553][ T5810] usb 6-1: device descriptor read/8, error -71 [ 1854.953999][ T9999] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 1855.153801][ T5810] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1855.219627][ T5810] usb 6-1: device descriptor read/8, error -71 [ 1855.304138][ T9999] usb 5-1: config 0 has an invalid interface number: 205 but max is 0 [ 1855.312438][ T9999] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1855.373949][ T5810] usb usb6-port1: unable to enumerate USB device [ 1855.401460][ T9999] usb 5-1: config 0 has no interface number 0 [ 1855.440559][T24624] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4735'. [ 1855.499018][ T9999] usb 5-1: config 0 interface 205 has no altsetting 0 [ 1855.561507][ T9999] usb 5-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 1855.660932][ T9999] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1855.684366][ T9999] usb 5-1: Product: syz [ 1855.688660][ T9999] usb 5-1: Manufacturer: syz [ 1855.722142][ T9999] usb 5-1: SerialNumber: syz [ 1855.757180][ T9999] usb 5-1: config 0 descriptor?? [ 1855.862268][ T9999] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 1855.920110][ T9999] dvb-usb: bulk message failed: -22 (3/0) [ 1855.998017][ T9999] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1856.030912][ T9999] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 1856.061564][ T9999] usb 5-1: media controller created [ 1856.103324][ T9999] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1856.157185][ T9999] dvb-usb: bulk message failed: -22 (6/0) [ 1856.173685][ T9999] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 1856.216625][ T9999] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input124 [ 1856.247072][ T9999] dvb-usb: schedule remote query interval to 150 msecs. [ 1856.274488][ T9999] dvb-usb: bulk message failed: -22 (3/0) [ 1856.323933][ T9999] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 1856.433680][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 1856.439739][ T23] dvb-usb: error while querying for an remote control event. [ 1856.626494][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 1856.644762][ T23] dvb-usb: error while querying for an remote control event. [ 1856.863621][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 1856.883664][ T23] dvb-usb: error while querying for an remote control event. [ 1857.073743][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 1857.080181][ T23] dvb-usb: error while querying for an remote control event. [ 1857.273769][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 1857.342270][ T23] dvb-usb: error while querying for an remote control event. [ 1857.533694][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 1857.565655][ T23] dvb-usb: error while querying for an remote control event. [ 1857.743659][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 1857.749493][ T23] dvb-usb: error while querying for an remote control event. [ 1857.983929][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 1858.004394][ T23] dvb-usb: error while querying for an remote control event. [ 1858.183622][ T5811] dvb-usb: bulk message failed: -22 (1/0) [ 1858.202998][ T5811] dvb-usb: error while querying for an remote control event. [ 1858.221019][ T9] usb 5-1: USB disconnect, device number 10 [ 1858.304793][ T9] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 1858.363815][T24648] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4745'. [ 1858.471655][T24654] ip6gre1: entered promiscuous mode [ 1858.480328][T24654] ip6gre1: entered allmulticast mode [ 1859.143557][ T5810] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1859.303914][ T5810] usb 6-1: device descriptor read/64, error -71 [ 1859.593944][ T5810] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1859.603686][ T23] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 1859.823648][ T5810] usb 6-1: device descriptor read/64, error -71 [ 1859.868817][ T23] usb 4-1: config 0 has an invalid interface number: 205 but max is 0 [ 1859.889171][ T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1859.961372][ T5810] usb usb6-port1: attempt power cycle [ 1860.085013][ T23] usb 4-1: config 0 has no interface number 0 [ 1860.091227][ T23] usb 4-1: config 0 interface 205 has no altsetting 0 [ 1860.413769][ T5810] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1860.483133][ T5810] usb 6-1: device descriptor read/8, error -71 [ 1860.522370][ T23] usb 4-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 1860.560064][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1860.580036][ T23] usb 4-1: Product: syz [ 1860.603608][ T23] usb 4-1: Manufacturer: syz [ 1860.608307][ T23] usb 4-1: SerialNumber: syz [ 1860.668196][ T23] usb 4-1: config 0 descriptor?? [ 1860.700457][ T23] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 1860.753690][ T23] dvb-usb: bulk message failed: -22 (3/0) [ 1860.793745][ T5810] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1860.806028][ T23] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1860.850307][ T23] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 1860.867711][ T23] usb 4-1: media controller created [ 1860.876320][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1860.928264][ T5810] usb 6-1: device descriptor read/8, error -71 [ 1860.941012][ T23] dvb-usb: bulk message failed: -22 (6/0) [ 1860.953871][ T23] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 1860.968957][T24683] ip6gre1: entered promiscuous mode [ 1860.974573][T24683] ip6gre1: entered allmulticast mode [ 1860.990320][ T23] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input125 [ 1861.037456][ T23] dvb-usb: schedule remote query interval to 150 msecs. [ 1861.060452][ T23] dvb-usb: bulk message failed: -22 (3/0) [ 1861.127663][ T23] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 1861.193641][ T5810] usb usb6-port1: unable to enumerate USB device [ 1861.214445][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 1861.241447][ T23] dvb-usb: error while querying for an remote control event. [ 1861.443884][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 1861.472143][ T23] dvb-usb: error while querying for an remote control event. [ 1861.663607][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 1861.679852][ T23] dvb-usb: error while querying for an remote control event. [ 1861.863801][ T5811] dvb-usb: bulk message failed: -22 (1/0) [ 1861.877328][ T5811] dvb-usb: error while querying for an remote control event. [ 1862.053609][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 1862.068157][ T23] dvb-usb: error while querying for an remote control event. [ 1862.179333][T24697] Illegal XDP return value 4294967274 on prog (id 178) dev syz_tun, expect packet loss! [ 1862.253683][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 1862.262149][ T23] dvb-usb: error while querying for an remote control event. [ 1862.443712][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 1862.449578][ T23] dvb-usb: error while querying for an remote control event. [ 1862.644499][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 1862.650350][ T23] dvb-usb: error while querying for an remote control event. [ 1862.848186][ T23] usb 4-1: USB disconnect, device number 25 [ 1863.020104][ T23] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 1863.657864][T24724] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1863.672531][T24724] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1863.683933][T24724] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1863.693133][T24724] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1863.701926][T24724] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1863.714051][T24724] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1864.348729][T24722] chnl_net:caif_netlink_parms(): no params data found [ 1864.480859][T24722] bridge0: port 1(bridge_slave_0) entered blocking state [ 1864.488889][T24722] bridge0: port 1(bridge_slave_0) entered disabled state [ 1864.496996][T24722] bridge_slave_0: entered allmulticast mode [ 1864.505096][T24722] bridge_slave_0: entered promiscuous mode [ 1864.523272][T24722] bridge0: port 2(bridge_slave_1) entered blocking state [ 1864.540104][T24722] bridge0: port 2(bridge_slave_1) entered disabled state [ 1864.549105][T24722] bridge_slave_1: entered allmulticast mode [ 1864.563595][ T23] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 1864.569831][T24722] bridge_slave_1: entered promiscuous mode [ 1864.636486][T24742] netlink: 'syz.3.4779': attribute type 4 has an invalid length. [ 1864.649487][T24742] netlink: 17 bytes leftover after parsing attributes in process `syz.3.4779'. [ 1864.700763][T24722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1864.729667][T24722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1864.821299][ T23] usb 6-1: config 0 has an invalid interface number: 205 but max is 0 [ 1864.830335][ T23] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1864.841709][ T23] usb 6-1: config 0 has no interface number 0 [ 1864.861722][ T23] usb 6-1: config 0 interface 205 has no altsetting 0 [ 1864.882311][T24722] team0: Port device team_slave_0 added [ 1864.905643][T24722] team0: Port device team_slave_1 added [ 1864.950698][T24722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1864.958858][T24722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1865.053602][T24722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1865.081398][T24722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1865.094010][T24722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1865.198164][T24722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1865.763779][T17956] Bluetooth: hci1: command tx timeout [ 1865.794949][ T23] usb 6-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 1865.797497][T24749] netlink: 7 bytes leftover after parsing attributes in process `syz.0.4782'. [ 1865.814054][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1865.822794][ T23] usb 6-1: Product: syz [ 1865.848012][ T23] usb 6-1: Manufacturer: syz [ 1865.882798][ T23] usb 6-1: SerialNumber: syz [ 1865.899122][ T23] usb 6-1: config 0 descriptor?? [ 1865.918791][ T23] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 1865.930454][ T23] dvb-usb: bulk message failed: -22 (3/0) [ 1865.934882][T24722] hsr_slave_0: entered promiscuous mode [ 1865.967371][ T23] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1865.987641][T24722] hsr_slave_1: entered promiscuous mode [ 1865.999779][ T23] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 1866.020886][ T23] usb 6-1: media controller created [ 1866.040702][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1866.051350][T24722] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1866.090516][ T23] dvb-usb: bulk message failed: -22 (6/0) [ 1866.098885][T24722] Cannot create hsr debugfs directory [ 1866.193843][ T23] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 1866.473967][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1866.675168][ T23] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input126 [ 1866.919739][ T23] dvb-usb: schedule remote query interval to 150 msecs. [ 1867.194096][ T23] dvb-usb: bulk message failed: -22 (3/0) [ 1867.393849][T19434] dvb-usb: bulk message failed: -22 (1/0) [ 1867.425881][ T23] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 1867.439782][T19434] dvb-usb: error while querying for an remote control event. [ 1867.734601][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 1867.740573][ T23] dvb-usb: error while querying for an remote control event. [ 1867.834029][T17956] Bluetooth: hci1: command tx timeout [ 1867.983792][ T5811] dvb-usb: bulk message failed: -22 (1/0) [ 1867.989652][ T5811] dvb-usb: error while querying for an remote control event. [ 1868.126678][T24722] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1868.244377][ T5811] dvb-usb: bulk message failed: -22 (1/0) [ 1868.250260][ T5811] dvb-usb: error while querying for an remote control event. [ 1868.429056][T24722] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1868.454036][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 1868.463594][ T23] dvb-usb: error while querying for an remote control event. [ 1868.662490][ T5811] dvb-usb: bulk message failed: -22 (1/0) [ 1868.678416][ T5811] dvb-usb: error while querying for an remote control event. [ 1868.705241][T24722] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1868.874178][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 1868.902261][ T23] dvb-usb: error while querying for an remote control event. [ 1868.947728][ T9] usb 6-1: USB disconnect, device number 30 [ 1869.009803][T24722] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1869.127182][ T9] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 1869.199852][T24766] tipc: Enabled bearer , priority 0 [ 1869.223013][T24766] syzkaller0: entered promiscuous mode [ 1869.234073][T24766] syzkaller0: entered allmulticast mode [ 1869.284323][T24766] tipc: Resetting bearer [ 1869.318260][T24765] tipc: Resetting bearer [ 1869.358689][T24765] tipc: Disabling bearer [ 1869.559173][T24722] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1869.572673][T24722] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1869.599159][T24722] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1869.629050][T24722] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1869.895130][T24722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1869.913756][T17956] Bluetooth: hci1: command tx timeout [ 1870.029044][T24722] 8021q: adding VLAN 0 to HW filter on device team0 [ 1870.072535][ T3485] bridge0: port 1(bridge_slave_0) entered blocking state [ 1870.079827][ T3485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1870.161054][ T3485] bridge0: port 2(bridge_slave_1) entered blocking state [ 1870.168358][ T3485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1871.032107][T24722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1871.573766][ T9] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 1871.707085][T24722] veth0_vlan: entered promiscuous mode [ 1871.724828][T24722] veth1_vlan: entered promiscuous mode [ 1871.896984][ T9] usb 1-1: config 0 has an invalid interface number: 205 but max is 0 [ 1871.990049][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1872.004050][T17956] Bluetooth: hci1: command tx timeout [ 1872.215435][ T9] usb 1-1: config 0 has no interface number 0 [ 1872.222173][ T9] usb 1-1: config 0 interface 205 has no altsetting 0 [ 1872.246316][T24722] veth0_macvtap: entered promiscuous mode [ 1872.285057][T24722] veth1_macvtap: entered promiscuous mode [ 1872.319088][T24722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1872.344624][T24722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1872.413699][T24722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1872.475651][T24722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1872.486384][T24722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1872.497173][T24722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1872.510534][T24722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1872.521310][T24722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1872.534081][T24722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1872.723334][T24722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1872.739002][T24722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1872.759342][T24722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1872.778528][T24722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1872.788958][T24722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1872.800504][T24722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1872.818878][T24722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1872.830979][T24722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1872.850589][ T9] usb 1-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 1872.860149][T24722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1872.892795][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1872.918691][ T9] usb 1-1: Product: syz [ 1872.934214][ T9] usb 1-1: Manufacturer: syz [ 1872.945012][ T9] usb 1-1: SerialNumber: syz [ 1872.966686][T24722] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1872.981437][T24722] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1872.998673][ T9] usb 1-1: config 0 descriptor?? [ 1873.009332][T24722] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1873.018333][T24722] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1873.170878][ T9] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 1873.230254][ T6985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1873.253850][ T6985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1873.320043][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 1873.331597][ T3485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1873.352774][ T3485] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1873.395512][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1873.410303][ T9] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 1873.430600][ T9] usb 1-1: media controller created [ 1873.438339][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1873.462221][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 1873.472667][ T9] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 1873.532940][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input127 [ 1873.588423][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 1873.616323][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 1873.652985][ T9] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 1873.773772][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1873.787342][ T9] dvb-usb: error while querying for an remote control event. [ 1873.963686][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1873.972816][ T9] dvb-usb: error while querying for an remote control event. [ 1874.143856][T24806] dvb-usb: bulk message failed: -22 (1/0) [ 1874.149990][T24806] dvb-usb: error while querying for an remote control event. [ 1874.360396][T24806] dvb-usb: bulk message failed: -22 (1/0) [ 1874.387978][T24806] dvb-usb: error while querying for an remote control event. [ 1874.607172][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1874.613150][ T9] dvb-usb: error while querying for an remote control event. [ 1874.843698][T24807] dvb-usb: bulk message failed: -22 (1/0) [ 1874.849527][T24807] dvb-usb: error while querying for an remote control event. [ 1875.092793][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1875.133571][ T9] dvb-usb: error while querying for an remote control event. [ 1875.293926][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1875.299942][ T9] dvb-usb: error while querying for an remote control event. [ 1875.357806][T24822] syzkaller0: entered promiscuous mode [ 1875.372898][ T9999] usb 1-1: USB disconnect, device number 34 [ 1875.424571][T24822] syzkaller0: entered allmulticast mode [ 1875.515721][ T9999] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 1875.593648][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1876.423590][ T9999] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1876.623691][ T9999] usb 1-1: Using ep0 maxpacket: 16 [ 1876.640978][ T9999] usb 1-1: no configurations [ 1876.662615][ T9999] usb 1-1: can't read configurations, error -22 [ 1876.823749][ T9999] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1877.023662][ T9999] usb 1-1: Using ep0 maxpacket: 16 [ 1877.029812][ T9999] usb 1-1: no configurations [ 1877.043514][ T9999] usb 1-1: can't read configurations, error -22 [ 1877.055730][ T9999] usb usb1-port1: attempt power cycle [ 1877.473803][ T9999] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1877.514696][ T9999] usb 1-1: Using ep0 maxpacket: 16 [ 1877.524804][ T9999] usb 1-1: no configurations [ 1877.548450][ T9999] usb 1-1: can't read configurations, error -22 [ 1877.703651][ T9999] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1877.774463][ T9999] usb 1-1: Using ep0 maxpacket: 16 [ 1877.780753][ T9999] usb 1-1: no configurations [ 1877.789941][ T9999] usb 1-1: can't read configurations, error -22 [ 1877.803820][ T9999] usb usb1-port1: unable to enumerate USB device [ 1878.553264][T24845] syz.3.4811 (24845) used greatest stack depth: 17896 bytes left [ 1878.823873][T24854] syzkaller0: entered promiscuous mode [ 1878.843480][T24854] syzkaller0: entered allmulticast mode [ 1879.314604][T24724] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1879.335229][T24724] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1879.357461][T24724] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1879.380013][T24724] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1879.399126][T24724] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1879.407722][T24724] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1879.565740][ T23] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 1879.831292][ T23] usb 6-1: config 0 has an invalid interface number: 205 but max is 0 [ 1879.865888][ T23] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1879.887623][ T23] usb 6-1: config 0 has no interface number 0 [ 1879.916648][ T23] usb 6-1: config 0 interface 205 has no altsetting 0 [ 1879.939576][ T23] usb 6-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 1879.954375][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1879.962821][ T23] usb 6-1: Product: syz [ 1879.972339][ T23] usb 6-1: Manufacturer: syz [ 1879.978458][ T23] usb 6-1: SerialNumber: syz [ 1879.994870][ T23] usb 6-1: config 0 descriptor?? [ 1880.015339][ T23] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 1880.034856][ T23] dvb-usb: bulk message failed: -22 (3/0) [ 1880.066208][ T23] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1880.116146][ T23] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 1880.141692][ T23] usb 6-1: media controller created [ 1880.151380][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1880.171539][ T23] dvb-usb: bulk message failed: -22 (6/0) [ 1880.206216][ T23] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 1880.279351][ T23] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input128 [ 1880.322700][ T23] dvb-usb: schedule remote query interval to 150 msecs. [ 1880.352681][ T23] dvb-usb: bulk message failed: -22 (3/0) [ 1880.394037][ T23] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 1880.504043][ T9999] dvb-usb: bulk message failed: -22 (1/0) [ 1880.513988][ T9999] dvb-usb: error while querying for an remote control event. [ 1880.685145][ T9999] dvb-usb: bulk message failed: -22 (1/0) [ 1880.696425][ T6997] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1880.711799][ T9999] dvb-usb: error while querying for an remote control event. [ 1880.886641][ T6997] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1880.904102][ T9999] dvb-usb: bulk message failed: -22 (1/0) [ 1880.915462][ T9999] dvb-usb: error while querying for an remote control event. [ 1881.070369][ T6997] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1881.083793][ T9999] dvb-usb: bulk message failed: -22 (1/0) [ 1881.089628][ T9999] dvb-usb: error while querying for an remote control event. [ 1881.283970][ T9999] dvb-usb: bulk message failed: -22 (1/0) [ 1881.289820][ T9999] dvb-usb: error while querying for an remote control event. [ 1881.300175][ T6997] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1881.464266][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 1881.487418][ T23] dvb-usb: error while querying for an remote control event. [ 1881.542542][T24724] Bluetooth: hci2: command tx timeout [ 1881.704959][T19434] dvb-usb: bulk message failed: -22 (1/0) [ 1881.721945][ T6997] tipc: Left network mode [ 1881.763840][T19434] dvb-usb: error while querying for an remote control event. [ 1881.973663][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 1882.010088][ T23] dvb-usb: error while querying for an remote control event. [ 1882.193713][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 1882.215920][ T23] dvb-usb: error while querying for an remote control event. [ 1882.313703][ T6997] ip6gretap0 (unregistering): left promiscuous mode [ 1882.443591][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 1882.449437][ T23] dvb-usb: error while querying for an remote control event. [ 1882.490101][T24858] chnl_net:caif_netlink_parms(): no params data found [ 1882.664315][T11761] dvb-usb: bulk message failed: -22 (1/0) [ 1882.670155][T11761] dvb-usb: error while querying for an remote control event. [ 1882.819183][ T9] usb 6-1: USB disconnect, device number 31 [ 1882.994354][ T9] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 1883.363733][T24806] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1883.529725][T24907] syzkaller0: entered promiscuous mode [ 1883.541067][T24907] syzkaller0: entered allmulticast mode [ 1883.564175][T24806] usb 1-1: Using ep0 maxpacket: 16 [ 1883.574359][T24806] usb 1-1: no configurations [ 1883.579055][T24806] usb 1-1: can't read configurations, error -22 [ 1883.594645][T24724] Bluetooth: hci2: command tx timeout [ 1883.784021][T24806] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1883.977153][T24806] usb 1-1: Using ep0 maxpacket: 16 [ 1884.008859][T24806] usb 1-1: no configurations [ 1884.018837][T24806] usb 1-1: can't read configurations, error -22 [ 1884.030614][T24806] usb usb1-port1: attempt power cycle [ 1884.433668][T24806] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1884.504457][T24806] usb 1-1: Using ep0 maxpacket: 16 [ 1884.510824][T24806] usb 1-1: no configurations [ 1884.515629][T24806] usb 1-1: can't read configurations, error -22 [ 1884.564603][ T55] block nbd0: Possible stuck request ffff888021f48000: control (read@0,1024B). Runtime 60 seconds [ 1884.658505][T24806] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1884.696198][T24806] usb 1-1: Using ep0 maxpacket: 16 [ 1884.730792][T24806] usb 1-1: no configurations [ 1884.736261][T24806] usb 1-1: can't read configurations, error -22 [ 1884.743139][T24806] usb usb1-port1: unable to enumerate USB device [ 1885.679101][T24724] Bluetooth: hci2: command tx timeout [ 1887.563909][T24918] syzkaller0: entered promiscuous mode [ 1887.569498][T24918] syzkaller0: entered allmulticast mode [ 1887.758250][T24724] Bluetooth: hci2: command tx timeout [ 1890.509837][ T5138] udevd[5138]: worker [24147] /devices/virtual/block/nbd0 is taking a long time [ 1891.176569][T24858] bridge0: port 1(bridge_slave_0) entered blocking state [ 1891.184180][T24858] bridge0: port 1(bridge_slave_0) entered disabled state [ 1891.191469][T24858] bridge_slave_0: entered allmulticast mode [ 1891.199295][T24858] bridge_slave_0: entered promiscuous mode [ 1891.210566][T24858] bridge0: port 2(bridge_slave_1) entered blocking state [ 1891.227725][T24858] bridge0: port 2(bridge_slave_1) entered disabled state [ 1891.239659][T24858] bridge_slave_1: entered allmulticast mode [ 1891.251847][T24858] bridge_slave_1: entered promiscuous mode [ 1891.411875][T24858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1891.486295][T24858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1891.582994][T24858] team0: Port device team_slave_0 added [ 1891.633053][T24858] team0: Port device team_slave_1 added [ 1891.826073][T24858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1891.888731][T24858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1891.917299][T24858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1892.064356][T24858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1892.071404][T24858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1892.263621][ T9] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 1892.291185][T24858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1892.444432][ T6997] bridge0: left promiscuous mode [ 1892.476092][ T6997] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1892.486774][ T6997] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1892.496182][ T6997] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1892.504124][ T6997] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1892.512413][ T6997] bridge_slave_1: left allmulticast mode [ 1892.519455][ T6997] bridge_slave_1: left promiscuous mode [ 1892.525854][ T6997] bridge0: port 2(bridge_slave_1) entered disabled state [ 1892.539320][ T6997] bridge_slave_0: left allmulticast mode [ 1892.545828][ T6997] bridge_slave_0: left promiscuous mode [ 1892.551668][ T6997] bridge0: port 1(bridge_slave_0) entered disabled state [ 1892.575607][ T6997] veth1_macvtap: left promiscuous mode [ 1892.581192][ T6997] veth0_macvtap: left promiscuous mode [ 1892.592160][ T6997] veth1_vlan: left promiscuous mode [ 1892.598497][ T6997] veth0_vlan: left promiscuous mode [ 1892.636656][ T9] usb 5-1: config 0 has an invalid interface number: 205 but max is 0 [ 1892.745924][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1892.969713][ T9] usb 5-1: config 0 has no interface number 0 [ 1892.983789][ T9] usb 5-1: config 0 interface 205 has no altsetting 0 [ 1893.019811][ T9] usb 5-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 1893.035541][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1893.048996][ T9] usb 5-1: Product: syz [ 1893.053258][ T9] usb 5-1: Manufacturer: syz [ 1893.059438][ T9] usb 5-1: SerialNumber: syz [ 1893.071272][ T9] usb 5-1: config 0 descriptor?? [ 1893.085140][ T9] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 1893.120181][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 1893.161017][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1893.199954][ T9] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 1893.233576][ T9] usb 5-1: media controller created [ 1893.240902][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1893.315075][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 1893.321013][ T9] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 1893.380243][ T6997] bond1 (unregistering): Released all slaves [ 1893.502946][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input129 [ 1893.515442][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1893.544882][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 1893.552003][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 1893.591577][ T9] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 1893.703546][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1893.725192][ T9] dvb-usb: error while querying for an remote control event. [ 1893.945347][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1893.951237][ T9] dvb-usb: error while querying for an remote control event. [ 1894.125846][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1894.131750][ T9] dvb-usb: error while querying for an remote control event. [ 1894.313535][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1894.319487][ T9] dvb-usb: error while querying for an remote control event. [ 1894.483590][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1894.489442][ T9] dvb-usb: error while querying for an remote control event. [ 1894.653534][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1894.674354][ T9] dvb-usb: error while querying for an remote control event. [ 1894.706871][ T6997] team0 (unregistering): Port device team_slave_1 removed [ 1894.790344][ T6997] team0 (unregistering): Port device team_slave_0 removed [ 1894.834029][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1894.839845][ T9] dvb-usb: error while querying for an remote control event. [ 1894.889237][ T6997] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1894.967535][ T6997] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1895.046957][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1895.052915][ T9] dvb-usb: error while querying for an remote control event. [ 1895.223566][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1895.229429][ T9] dvb-usb: error while querying for an remote control event. [ 1895.411522][ T5810] dvb-usb: bulk message failed: -22 (1/0) [ 1895.417946][ T5810] dvb-usb: error while querying for an remote control event. [ 1895.484390][ T9] usb 5-1: USB disconnect, device number 11 [ 1895.517141][ T9] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 1895.751023][ T6997] bond0 (unregistering): Released all slaves [ 1895.967793][T24858] hsr_slave_0: entered promiscuous mode [ 1895.979748][T24858] hsr_slave_1: entered promiscuous mode [ 1896.008573][T24858] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1896.030938][T24858] Cannot create hsr debugfs directory [ 1896.555220][ T6997] IPVS: stop unused estimator thread 0... [ 1897.836332][T25021] syzkaller0: entered promiscuous mode [ 1897.841914][T25021] syzkaller0: entered allmulticast mode [ 1898.347210][T25025] syzkaller0: entered promiscuous mode [ 1898.353099][T25025] syzkaller0: entered allmulticast mode [ 1902.110281][T24858] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1902.159051][T24858] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1902.174657][T24858] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1902.210056][T24858] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1902.709395][T24858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1902.773270][T24858] 8021q: adding VLAN 0 to HW filter on device team0 [ 1902.840102][ T6997] bridge0: port 1(bridge_slave_0) entered blocking state [ 1902.847394][ T6997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1902.894550][ T6997] bridge0: port 2(bridge_slave_1) entered blocking state [ 1902.901845][ T6997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1902.925045][T25074] syzkaller0: entered promiscuous mode [ 1902.932423][T25074] syzkaller0: entered allmulticast mode [ 1903.508911][T25098] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4848'. [ 1903.691245][T25088] syzkaller0: entered promiscuous mode [ 1903.707567][T25088] syzkaller0: entered allmulticast mode [ 1907.945421][T24858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1908.127024][T24858] veth0_vlan: entered promiscuous mode [ 1908.182204][T24858] veth1_vlan: entered promiscuous mode [ 1908.308798][T24858] veth0_macvtap: entered promiscuous mode [ 1908.347326][T24858] veth1_macvtap: entered promiscuous mode [ 1908.437922][T24858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1908.456396][T24858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1908.471950][T24858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1908.485219][T24858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1908.495980][T24858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1908.507260][T24858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1908.518293][T24858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1908.529784][T24858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1908.549052][T24858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1908.599485][T24858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1908.630830][T24858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1908.652602][T24858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1908.673566][T24858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1908.689059][T24858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1908.704131][T24858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1908.723248][T25156] fuse: Unknown parameter '0x0000000000000004' [ 1908.723930][T24858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1908.741016][T24858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1908.755853][T24858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1908.769463][T24858] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1908.781280][T24858] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1908.790759][T24858] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1908.813494][ T28] kauditd_printk_skb: 63 callbacks suppressed [ 1908.813513][ T28] audit: type=1326 audit(1777025554.096:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25155 comm="syz.4.4858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fa999cdd9 code=0x7ffc0000 [ 1908.818498][T24858] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1908.834441][ T28] audit: type=1326 audit(1777025554.096:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25155 comm="syz.4.4858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fa999cdd9 code=0x7ffc0000 [ 1908.917948][ T28] audit: type=1326 audit(1777025554.096:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25155 comm="syz.4.4858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fa999cdd9 code=0x7ffc0000 [ 1909.026619][ T28] audit: type=1326 audit(1777025554.096:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25155 comm="syz.4.4858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fa999cdd9 code=0x7ffc0000 [ 1909.143559][ T28] audit: type=1326 audit(1777025554.096:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25155 comm="syz.4.4858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f7fa999cdd9 code=0x7ffc0000 [ 1909.213771][T23368] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1909.242117][T23368] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1909.282358][ T28] audit: type=1326 audit(1777025554.156:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25155 comm="syz.4.4858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fa999cdd9 code=0x7ffc0000 [ 1909.315243][ T28] audit: type=1326 audit(1777025554.156:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25155 comm="syz.4.4858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7fa995d60e code=0x7ffc0000 [ 1909.350083][ T28] audit: type=1326 audit(1777025554.156:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25155 comm="syz.4.4858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7fa995d60e code=0x7ffc0000 [ 1909.374147][ T28] audit: type=1326 audit(1777025554.156:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25155 comm="syz.4.4858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7fa995d60e code=0x7ffc0000 [ 1909.417426][ T28] audit: type=1326 audit(1777025554.156:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25155 comm="syz.4.4858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7fa995d60e code=0x7ffc0000 [ 1909.564773][ T3485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1909.584735][ T3485] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1909.656898][T25169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4862'. [ 1910.709713][T25208] syzkaller0: entered promiscuous mode [ 1910.715648][T25208] syzkaller0: entered allmulticast mode [ 1911.113660][ T23] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 1911.672277][T25219] hid-generic 0006:0004:0009.0030: unknown main item tag 0x0 [ 1911.696647][T25219] hid-generic 0006:0004:0009.0030: unknown main item tag 0x0 [ 1911.706313][T25219] hid-generic 0006:0004:0009.0030: unknown main item tag 0x0 [ 1911.714531][T25219] hid-generic 0006:0004:0009.0030: unknown main item tag 0x0 [ 1911.722737][T25219] hid-generic 0006:0004:0009.0030: unknown main item tag 0x0 [ 1911.738762][T25219] hid-generic 0006:0004:0009.0030: unknown main item tag 0x0 [ 1911.746412][ T5811] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1911.756427][T25219] hid-generic 0006:0004:0009.0030: unknown main item tag 0x0 [ 1911.765907][T25219] hid-generic 0006:0004:0009.0030: unknown main item tag 0x0 [ 1911.773956][T25219] hid-generic 0006:0004:0009.0030: unknown main item tag 0x0 [ 1911.781558][T25219] hid-generic 0006:0004:0009.0030: unknown main item tag 0x0 [ 1911.802690][T25219] hid-generic 0006:0004:0009.0030: unknown main item tag 0x0 [ 1911.816720][T25219] hid-generic 0006:0004:0009.0030: unknown main item tag 0x0 [ 1911.842708][T25219] hid-generic 0006:0004:0009.0030: unknown main item tag 0x0 [ 1911.862697][T25219] hid-generic 0006:0004:0009.0030: unknown main item tag 0x0 [ 1911.882704][T25219] hid-generic 0006:0004:0009.0030: unknown main item tag 0x0 [ 1911.902910][T25219] hid-generic 0006:0004:0009.0030: unknown main item tag 0x0 [ 1911.910795][T25219] hid-generic 0006:0004:0009.0030: unknown main item tag 0x0 [ 1911.956469][ T5811] usb 1-1: Using ep0 maxpacket: 16 [ 1911.967754][T25219] hid-generic 0006:0004:0009.0030: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1911.978506][T25247] syzkaller0: entered promiscuous mode [ 1911.986143][T25247] syzkaller0: entered allmulticast mode [ 1911.996270][ T5811] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1912.010924][ T5811] usb 1-1: can't read configurations, error -61 [ 1912.120859][T25249] fido_id[25249]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1912.203605][ T5811] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1912.410738][ T5811] usb 1-1: Using ep0 maxpacket: 16 [ 1912.420371][ T5811] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1912.439337][ T5811] usb 1-1: can't read configurations, error -61 [ 1912.451645][ T5811] usb usb1-port1: attempt power cycle [ 1912.463829][T25262] Invalid argument reading file caps for ./file0 [ 1912.672690][T25269] fuse: Unknown parameter '0x0000000000000004' [ 1912.893787][ T5811] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1912.924422][ T5811] usb 1-1: Using ep0 maxpacket: 16 [ 1912.936913][ T5811] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1912.954636][ T5811] usb 1-1: can't read configurations, error -61 [ 1913.067027][T25276] team0: entered promiscuous mode [ 1913.079734][T25276] team_slave_0: entered promiscuous mode [ 1913.092991][T25276] team_slave_1: entered promiscuous mode [ 1913.103745][T25276] team0: left allmulticast mode [ 1913.108708][T25276] team_slave_0: left allmulticast mode [ 1913.123510][ T5811] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1913.138600][T25276] team_slave_1: left allmulticast mode [ 1913.175845][ T5811] usb 1-1: Using ep0 maxpacket: 16 [ 1913.184885][ T5811] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1913.192559][ T5811] usb 1-1: can't read configurations, error -61 [ 1913.206872][ T5811] usb usb1-port1: unable to enumerate USB device [ 1913.373769][T25285] Bluetooth: MGMT ver 1.22 [ 1914.069814][T25305] ip6gre1: entered promiscuous mode [ 1914.083928][T25305] ip6gre1: entered allmulticast mode [ 1914.634396][ T55] block nbd0: Possible stuck request ffff888021f48000: control (read@0,1024B). Runtime 90 seconds [ 1914.943661][T25339] fuse: Unknown parameter '0x0000000000000004' [ 1914.959816][ T28] kauditd_printk_skb: 109 callbacks suppressed [ 1914.959834][ T28] audit: type=1326 audit(1777025560.256:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25338 comm="syz.4.4914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fa999cdd9 code=0x7ffc0000 [ 1914.984102][ T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1915.007295][ T28] audit: type=1326 audit(1777025560.256:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25338 comm="syz.4.4914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fa999cdd9 code=0x7ffc0000 [ 1915.039167][ T28] audit: type=1326 audit(1777025560.256:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25338 comm="syz.4.4914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f7fa999cdd9 code=0x7ffc0000 [ 1915.064341][ T5811] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 1915.074827][ T28] audit: type=1326 audit(1777025560.256:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25338 comm="syz.4.4914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fa999cdd9 code=0x7ffc0000 [ 1915.100108][ T28] audit: type=1326 audit(1777025560.326:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25338 comm="syz.4.4914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7fa995d60e code=0x7ffc0000 [ 1915.132113][ T28] audit: type=1326 audit(1777025560.326:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25338 comm="syz.4.4914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7fa995d60e code=0x7ffc0000 [ 1915.163171][ T28] audit: type=1326 audit(1777025560.326:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25338 comm="syz.4.4914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7fa995d60e code=0x7ffc0000 [ 1915.192749][ T28] audit: type=1326 audit(1777025560.326:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25338 comm="syz.4.4914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7fa995d60e code=0x7ffc0000 [ 1915.227369][ T28] audit: type=1326 audit(1777025560.326:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25338 comm="syz.4.4914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7fa995d60e code=0x7ffc0000 [ 1915.242068][ T9] usb 4-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 1915.253939][ T28] audit: type=1326 audit(1777025560.336:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25338 comm="syz.4.4914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7fa995d60e code=0x7ffc0000 [ 1915.289833][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1915.296462][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1915.306629][ T1288] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 1915.316336][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1915.333679][ T5811] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1915.344177][ T5811] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1915.354948][ T9] usb 4-1: Product: syz [ 1915.361377][ T9] usb 4-1: Manufacturer: syz [ 1915.366672][ T5811] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1915.377401][ T5811] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1915.390023][ T9] usb 4-1: SerialNumber: syz [ 1915.520834][T25342] Cannot find del_set index 2 as target [ 1915.601674][ T5811] usb 1-1: usb_control_msg returned -32 [ 1915.612049][ T5811] usbtmc 1-1:16.0: can't read capabilities [ 1915.724658][ T9] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1915.741737][ T9] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1915.823788][T19434] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 1915.876224][ T9] usb 4-1: USB disconnect, device number 26 [ 1915.972773][T24344] udevd[24344]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1916.028534][T19434] usb 6-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1916.056438][T19434] usb 6-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1916.090352][T19434] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1916.102923][T19434] usb 6-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 1916.121207][T19434] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1916.132176][T19434] usb 6-1: config 0 descriptor?? [ 1916.152444][T19434] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1916.190131][T24807] usb 1-1: USB disconnect, device number 47 [ 1916.307818][T25353] syzkaller0: entered promiscuous mode [ 1916.313349][T25353] syzkaller0: entered allmulticast mode [ 1918.362469][ T5811] usb 6-1: USB disconnect, device number 32 [ 1919.891149][T25375] fuse: Unknown parameter 'fd0x0000000000000004' [ 1919.972534][ T28] kauditd_printk_skb: 126 callbacks suppressed [ 1919.972551][ T28] audit: type=1326 audit(1777025565.266:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25371 comm="syz.0.4924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f07d855d60e code=0x7ffc0000 [ 1920.050011][ T28] audit: type=1326 audit(1777025565.276:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25371 comm="syz.0.4924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f07d855d60e code=0x7ffc0000 [ 1920.122704][ T28] audit: type=1326 audit(1777025565.276:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25371 comm="syz.0.4924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f07d855d60e code=0x7ffc0000 [ 1920.178072][ T28] audit: type=1326 audit(1777025565.276:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25371 comm="syz.0.4924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f07d855d60e code=0x7ffc0000 [ 1920.224448][ T28] audit: type=1326 audit(1777025565.286:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25371 comm="syz.0.4924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f07d855d60e code=0x7ffc0000 [ 1920.239369][T25376] kvm: kvm [25374]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x100001096 [ 1920.268537][ T28] audit: type=1326 audit(1777025565.286:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25371 comm="syz.0.4924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f07d855d60e code=0x7ffc0000 [ 1920.272336][T25376] kvm: kvm [25374]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x2055 [ 1920.310055][ T28] audit: type=1326 audit(1777025565.296:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25371 comm="syz.0.4924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f07d855d60e code=0x7ffc0000 [ 1920.334071][ T28] audit: type=1326 audit(1777025565.296:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25371 comm="syz.0.4924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f07d855d60e code=0x7ffc0000 [ 1920.359636][T25376] kvm: kvm [25374]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x8f4 [ 1920.368230][ T28] audit: type=1326 audit(1777025565.296:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25371 comm="syz.0.4924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f07d855d60e code=0x7ffc0000 [ 1920.368282][ T28] audit: type=1326 audit(1777025565.306:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25371 comm="syz.0.4924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f07d855d60e code=0x7ffc0000 [ 1920.455807][T25376] kvm: kvm [25374]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x8ae4 [ 1920.474405][T25376] kvm: kvm [25374]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x4868 [ 1920.517180][T25376] kvm: kvm [25374]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xfa02 [ 1920.543070][T25376] kvm: kvm [25374]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1920.581412][T25376] kvm: kvm [25374]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xf10b [ 1920.608601][T25376] kvm: kvm [25374]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1920.660833][T25392] syzkaller0: entered promiscuous mode [ 1920.667835][T25392] syzkaller0: entered allmulticast mode [ 1922.150974][T25444] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4944'. [ 1922.175541][T25444] syzkaller0: entered promiscuous mode [ 1922.186752][T25444] syzkaller0: entered allmulticast mode [ 1924.022764][T25482] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4956'. [ 1924.075547][T25482] syzkaller0: entered promiscuous mode [ 1924.081118][T25482] syzkaller0: entered allmulticast mode [ 1925.360956][T25510] netlink: 'syz.4.4968': attribute type 3 has an invalid length. [ 1925.370180][T25510] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4968'. [ 1925.498210][T25518] syzkaller0: entered promiscuous mode [ 1925.506190][T25518] syzkaller0: entered allmulticast mode [ 1925.902051][T25533] syzkaller1: entered promiscuous mode [ 1925.907905][T25533] syzkaller1: entered allmulticast mode [ 1926.621997][T25552] netlink: 'syz.5.4978': attribute type 3 has an invalid length. [ 1926.648321][T25552] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4978'. [ 1927.685076][T17956] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1927.698594][T17956] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1927.707853][T17956] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1927.716775][T17956] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1927.746051][T17956] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1927.757648][T17956] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1928.157088][T25590] netlink: 'syz.3.4990': attribute type 3 has an invalid length. [ 1928.184305][T25590] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4990'. [ 1928.250151][T20434] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1928.367832][T20434] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1928.563069][T20434] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1928.725219][T25595] kvm: kvm [25594]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 1928.734085][T25595] kvm: kvm [25594]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1928.747938][T25595] kvm: kvm [25594]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 1928.756765][T25595] kvm: kvm [25594]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1928.770667][T25595] kvm: kvm [25594]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 1928.779675][T25595] kvm: kvm [25594]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1928.802543][T25595] kvm: kvm [25594]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 1928.829989][T25595] kvm: kvm [25594]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1928.862714][T25595] kvm: kvm [25594]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 1928.871608][T25595] kvm: kvm [25594]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1929.353907][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1929.856288][T17956] Bluetooth: hci0: command tx timeout [ 1931.936942][T17956] Bluetooth: hci0: command tx timeout [ 1932.448246][T20434] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1932.741437][T25580] chnl_net:caif_netlink_parms(): no params data found [ 1932.783667][T20434] tipc: Left network mode [ 1933.383772][ T9] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1933.563729][T25580] bridge0: port 1(bridge_slave_0) entered blocking state [ 1933.603786][T25580] bridge0: port 1(bridge_slave_0) entered disabled state [ 1933.624973][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1933.634494][T25580] bridge_slave_0: entered allmulticast mode [ 1933.649151][ T9] usb 4-1: config 0 has an invalid interface number: 4 but max is 0 [ 1933.669676][T25580] bridge_slave_0: entered promiscuous mode [ 1933.676548][ T9] usb 4-1: config 0 has no interface number 0 [ 1933.690321][ T9] usb 4-1: config 0 interface 4 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1933.705992][T25580] bridge0: port 2(bridge_slave_1) entered blocking state [ 1933.719579][T25580] bridge0: port 2(bridge_slave_1) entered disabled state [ 1933.728953][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c537, bcdDevice= 0.00 [ 1933.740134][T25580] bridge_slave_1: entered allmulticast mode [ 1933.761997][T25580] bridge_slave_1: entered promiscuous mode [ 1933.768288][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1933.814923][ T9] usb 4-1: config 0 descriptor?? [ 1933.831088][ T9] usbhid 4-1:0.4: couldn't find an input interrupt endpoint [ 1934.003890][T24724] Bluetooth: hci0: command tx timeout [ 1934.233501][T25580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1934.265374][T25580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1934.382260][T25580] team0: Port device team_slave_0 added [ 1934.419884][T25580] team0: Port device team_slave_1 added [ 1934.478643][T25580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1934.493354][T25580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1934.522633][T25580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1934.563676][T25580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1934.570843][T25580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1934.596990][T25580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1934.694830][T25580] hsr_slave_0: entered promiscuous mode [ 1934.701893][T25580] hsr_slave_1: entered promiscuous mode [ 1934.708594][T25580] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1934.716868][T25580] Cannot create hsr debugfs directory [ 1934.806023][T20434] IPVS: stopping backup sync thread 19962 ... [ 1935.019398][T20434] hsr_slave_0: left promiscuous mode [ 1935.029611][T20434] hsr_slave_1: left promiscuous mode [ 1935.047485][T20434] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1935.060227][T20434] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1935.072061][T20434] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1935.089592][T20434] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1935.100579][T20434] bridge_slave_1: left allmulticast mode [ 1935.115669][T20434] bridge_slave_1: left promiscuous mode [ 1935.123320][T20434] bridge0: port 2(bridge_slave_1) entered disabled state [ 1935.140077][T20434] bridge_slave_0: left allmulticast mode [ 1935.151290][T20434] bridge_slave_0: left promiscuous mode [ 1935.161548][T20434] bridge0: port 1(bridge_slave_0) entered disabled state [ 1935.227223][T20434] veth1_macvtap: left promiscuous mode [ 1935.237296][T20434] veth0_macvtap: left promiscuous mode [ 1935.243426][T20434] veth1_vlan: left promiscuous mode [ 1935.249277][T20434] veth0_vlan: left promiscuous mode [ 1935.749356][T19434] usb 4-1: USB disconnect, device number 27 [ 1936.003492][T24724] Bluetooth: hci4: command 0x1003 tx timeout [ 1936.003959][T17956] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1936.080673][T25674] Bluetooth: hci0: command tx timeout [ 1937.045554][T20434] team0 (unregistering): Port device team_slave_1 removed [ 1937.109800][T20434] team0 (unregistering): Port device team_slave_0 removed [ 1937.194558][T20434] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1937.260073][T20434] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1937.754324][T20434] bond0 (unregistering): Released all slaves [ 1938.583806][T25706] syzkaller0: entered promiscuous mode [ 1938.589339][T25706] syzkaller0: entered allmulticast mode [ 1939.227914][T20434] IPVS: stop unused estimator thread 0... [ 1939.526058][T25580] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1939.577545][T25580] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1939.628461][T25580] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1939.673348][T25580] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1939.853995][T25730] syzkaller0: entered promiscuous mode [ 1939.859813][T25730] syzkaller0: entered allmulticast mode [ 1943.381232][T25744] syzkaller0: entered promiscuous mode [ 1943.387617][T25744] syzkaller0: entered allmulticast mode [ 1944.721396][ T55] block nbd0: Possible stuck request ffff888021f48000: control (read@0,1024B). Runtime 120 seconds [ 1946.576888][T25580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1946.655869][T25580] 8021q: adding VLAN 0 to HW filter on device team0 [ 1946.728699][ T3485] bridge0: port 1(bridge_slave_0) entered blocking state [ 1946.736017][ T3485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1946.779857][ T3485] bridge0: port 2(bridge_slave_1) entered blocking state [ 1946.787209][ T3485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1946.974372][ T28] kauditd_printk_skb: 63 callbacks suppressed [ 1946.974390][ T28] audit: type=1326 audit(1777025592.276:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25783 comm="syz.3.5032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7faa39cdd9 code=0x7ffc0000 [ 1947.077896][ T28] audit: type=1326 audit(1777025592.276:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25783 comm="syz.3.5032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7faa39cdd9 code=0x7ffc0000 [ 1947.145013][ T28] audit: type=1326 audit(1777025592.306:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25783 comm="syz.3.5032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7faa39cdd9 code=0x7ffc0000 [ 1947.292555][ T28] audit: type=1326 audit(1777025592.306:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25783 comm="syz.3.5032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7faa39cdd9 code=0x7ffc0000 [ 1947.310758][T25795] syzkaller0: entered promiscuous mode [ 1947.330772][T25795] syzkaller0: entered allmulticast mode [ 1947.348755][ T28] audit: type=1326 audit(1777025592.316:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25783 comm="syz.3.5032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f7faa39cdd9 code=0x7ffc0000 [ 1947.392837][ T28] audit: type=1326 audit(1777025592.356:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25783 comm="syz.3.5032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7faa35d60e code=0x7ffc0000 [ 1947.431917][ T28] audit: type=1326 audit(1777025592.356:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25783 comm="syz.3.5032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7faa35d60e code=0x7ffc0000 [ 1947.513486][ T28] audit: type=1326 audit(1777025592.366:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25783 comm="syz.3.5032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7faa35d60e code=0x7ffc0000 [ 1947.563493][ T28] audit: type=1326 audit(1777025592.366:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25783 comm="syz.3.5032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7faa35d60e code=0x7ffc0000 [ 1947.606992][ T28] audit: type=1326 audit(1777025592.376:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25783 comm="syz.3.5032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7faa35d60e code=0x7ffc0000 [ 1951.329548][T25580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1951.393093][T25580] veth0_vlan: entered promiscuous mode [ 1951.421368][T25580] veth1_vlan: entered promiscuous mode [ 1951.490661][T25580] veth0_macvtap: entered promiscuous mode [ 1951.512178][T25580] veth1_macvtap: entered promiscuous mode [ 1951.553349][T25580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1951.572064][T25580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1951.582613][T25580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1951.603733][T25580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1951.621379][T25580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1951.632301][T25580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1951.648764][T25580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1951.661336][T25580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1951.679207][T25580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1951.707921][T25580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1951.718676][T25580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1951.735566][T25580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1951.746956][T25580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1951.757562][T25580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1951.769668][T25580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1951.781129][T25580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1951.791841][T25580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1951.806711][T25580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1951.822856][T25580] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1951.832593][T25580] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1951.842518][T25580] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1951.851843][T25580] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1951.982651][ T6997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1952.011700][ T6997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1952.054814][ T6985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1952.062733][ T6985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1952.204953][T25851] syzkaller0: entered promiscuous mode [ 1952.210661][T25851] syzkaller0: entered allmulticast mode [ 1974.803565][ T55] block nbd0: Possible stuck request ffff888021f48000: control (read@0,1024B). Runtime 150 seconds [ 1976.718391][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.728473][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1989.033798][ T5777] Bluetooth: hci1: command 0x0406 tx timeout [ 2004.113272][ T5138] udevd[5138]: worker [24147] /devices/virtual/block/nbd0 timeout; kill it [ 2004.122922][ T5138] udevd[5138]: seq 28182 '/devices/virtual/block/nbd0' killed [ 2004.393707][ T5777] Bluetooth: hci2: command 0x0406 tx timeout [ 2004.884237][ T55] block nbd0: Possible stuck request ffff888021f48000: control (read@0,1024B). Runtime 180 seconds [ 2007.434521][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2034.957875][ T55] block nbd0: Possible stuck request ffff888021f48000: control (read@0,1024B). Runtime 210 seconds [ 2038.156847][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 2038.163290][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 2050.473597][ T5777] Bluetooth: hci0: command 0x0406 tx timeout [ 2065.035858][ T55] block nbd0: Possible stuck request ffff888021f48000: control (read@0,1024B). Runtime 240 seconds [ 2095.113969][ T55] block nbd0: Possible stuck request ffff888021f48000: control (read@0,1024B). Runtime 270 seconds [ 2099.597453][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.605324][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 2125.202726][ T55] block nbd0: Possible stuck request ffff888021f48000: control (read@0,1024B). Runtime 300 seconds [ 2155.287324][ T55] block nbd0: Possible stuck request ffff888021f48000: control (read@0,1024B). Runtime 330 seconds [ 2155.916614][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2157.833893][ T29] INFO: task udevd:24147 blocked for more than 143 seconds. [ 2157.841277][ T29] Not tainted syzkaller #0 [ 2157.850753][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2157.860633][ T29] task:udevd state:D stack:25680 pid:24147 ppid:5138 flags:0x00004006 [ 2157.872278][ T29] Call Trace: [ 2157.879221][ T29] [ 2157.882211][ T29] __schedule+0x1553/0x45a0 [ 2157.888429][ T29] ? asan.module_dtor+0x20/0x20 [ 2157.896290][ T29] ? mark_lock+0x94/0x320 [ 2157.900766][ T29] ? lock_chain_count+0x20/0x20 [ 2157.906611][ T29] ? _raw_spin_lock_irq+0xbb/0xf0 [ 2157.911819][ T29] ? _raw_spin_lock_irqsave+0x100/0x100 [ 2157.917918][ T29] schedule+0xbd/0x170 [ 2157.922069][ T29] io_schedule+0x80/0xd0 [ 2157.927079][ T29] folio_wait_bit_common+0x714/0xfa0 [ 2157.932501][ T29] ? folio_wait_bit+0x30/0x30 [ 2157.937791][ T29] ? _compound_head+0x120/0x120 [ 2157.942709][ T29] ? filemap_add_folio+0x192/0x3c0 [ 2157.948259][ T29] ? __filemap_get_folio+0x704/0xbb0 [ 2157.954535][ T29] ? blkdev_writepage+0x30/0x30 [ 2157.960129][ T29] do_read_cache_folio+0x1c0/0x7d0 [ 2157.965532][ T29] ? blkdev_writepage+0x30/0x30 [ 2157.970450][ T29] read_part_sector+0xd2/0x340 [ 2157.975540][ T29] adfspart_check_POWERTEC+0x93/0xed0 [ 2157.980978][ T29] ? adfspart_check_ADFS+0x620/0x620 [ 2157.987418][ T29] ? put_partition+0x370/0x370 [ 2157.992250][ T29] ? alloc_pages+0x4dc/0x740 [ 2157.998105][ T29] bdev_disk_changed+0x740/0x1420 [ 2158.003243][ T29] ? bdev_resize_partition+0xf0/0xf0 [ 2158.008689][ T29] ? iput+0x343/0x920 [ 2158.012763][ T29] blkdev_get_whole+0x30d/0x390 [ 2158.017780][ T29] blkdev_get_by_dev+0x279/0x600 [ 2158.022749][ T29] blkdev_open+0x152/0x360 [ 2158.027300][ T29] ? blkdev_mmap+0x1b0/0x1b0 [ 2158.031965][ T29] do_dentry_open+0x8c6/0x1500 [ 2158.036921][ T29] path_openat+0x27f1/0x3230 [ 2158.041604][ T29] ? do_sys_openat2+0xda/0x1d0 [ 2158.046546][ T29] ? verify_lock_unused+0x140/0x140 [ 2158.051932][ T29] ? do_filp_open+0x430/0x430 [ 2158.056746][ T29] ? __virt_addr_valid+0x18c/0x540 [ 2158.062793][ T29] do_filp_open+0x1f5/0x430 [ 2158.067673][ T29] ? vfs_tmpfile+0x490/0x490 [ 2158.072350][ T29] ? _raw_spin_unlock+0x28/0x40 [ 2158.077326][ T29] ? alloc_fd+0x58f/0x630 [ 2158.081707][ T29] do_sys_openat2+0x134/0x1d0 [ 2158.086660][ T29] ? do_sys_open+0xe0/0xe0 [ 2158.091146][ T29] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 2158.098450][ T29] ? lock_chain_count+0x20/0x20 [ 2158.103544][ T29] ? lock_chain_count+0x20/0x20 [ 2158.108459][ T29] __x64_sys_openat+0x139/0x160 [ 2158.113473][ T29] do_syscall_64+0x55/0xa0 [ 2158.117990][ T29] ? clear_bhb_loop+0x40/0x90 [ 2158.122800][ T29] ? clear_bhb_loop+0x40/0x90 [ 2158.127691][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2158.133757][ T29] RIP: 0033:0x7fbcdb4a7407 [ 2158.138227][ T29] RSP: 002b:00007ffca1ab65b0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 2158.146823][ T29] RAX: ffffffffffffffda RBX: 00007fbcdbb72880 RCX: 00007fbcdb4a7407 [ 2158.155410][ T29] RDX: 00000000000a0800 RSI: 000055703fccbdb0 RDI: ffffffffffffff9c [ 2158.165301][ T29] RBP: 000055703fca4910 R08: 0000000000000000 R09: 0000000000000000 [ 2158.173724][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 000055703fcccef0 [ 2158.181753][ T29] R13: 000055703fcbc410 R14: 0000000000000000 R15: 000055703fcccef0 [ 2158.189914][ T29] [ 2158.193035][ T29] [ 2158.193035][ T29] Showing all locks held in the system: [ 2158.202676][ T29] 1 lock held by khungtaskd/29: [ 2158.207815][ T29] #0: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 2158.217902][ T29] 2 locks held by getty/5530: [ 2158.222621][ T29] #0: ffff88802d5450a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2158.234590][ T29] #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390 [ 2158.245225][ T29] 3 locks held by kworker/u4:1/23368: [ 2158.250664][ T29] 1 lock held by udevd/24147: [ 2158.255833][ T29] #0: ffff8881413a64c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 2158.267488][ T29] [ 2158.269878][ T29] ============================================= [ 2158.269878][ T29] [ 2158.278782][ T29] NMI backtrace for cpu 1 [ 2158.283151][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 2158.290362][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2158.300430][ T29] Call Trace: [ 2158.303732][ T29] [ 2158.306675][ T29] dump_stack_lvl+0x18c/0x250 [ 2158.311430][ T29] ? show_regs_print_info+0x20/0x20 [ 2158.316654][ T29] ? load_image+0x420/0x420 [ 2158.321197][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 2158.326180][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 2158.332371][ T29] ? _printk+0xde/0x130 [ 2158.336565][ T29] ? load_image+0x420/0x420 [ 2158.341124][ T29] ? load_image+0x420/0x420 [ 2158.345684][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 2158.351846][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 2158.357882][ T29] watchdog+0xf3d/0xf80 [ 2158.362111][ T29] ? watchdog+0x1e1/0xf80 [ 2158.366481][ T29] kthread+0x2fa/0x390 [ 2158.370616][ T29] ? hungtask_pm_notify+0x90/0x90 [ 2158.375665][ T29] ? kthread_blkcg+0xd0/0xd0 [ 2158.380274][ T29] ret_from_fork+0x48/0x80 [ 2158.384756][ T29] ? kthread_blkcg+0xd0/0xd0 [ 2158.389394][ T29] ret_from_fork_asm+0x11/0x20 [ 2158.394263][ T29] [ 2158.398356][ T29] Sending NMI from CPU 1 to CPUs 0: [ 2158.403849][ C0] NMI backtrace for cpu 0 [ 2158.403862][ C0] CPU: 0 PID: 20434 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 2158.403880][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2158.403891][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 2158.404039][ C0] RIP: 0010:deref_stack_reg+0x1c5/0x240 [ 2158.404060][ C0] Code: c1 4c 39 e0 0f 96 c0 84 c1 74 43 e8 65 bc 4b 00 49 bf 00 00 00 00 00 fc ff df 48 89 ef e8 63 08 00 00 49 89 c6 48 8b 5c 24 20 <48> 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 65 f4 a3 00 [ 2158.404075][ C0] RSP: 0018:ffffc900051d6b58 EFLAGS: 00000293 [ 2158.404089][ C0] RAX: 0000000000000000 RBX: ffffc900051d6cc8 RCX: ffff88802b9f0000 [ 2158.404102][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffc900051d7f20 [ 2158.404113][ C0] RBP: ffffc900051d7f20 R08: ffff88802b9f0000 R09: 0000000000000003 [ 2158.404124][ C0] R10: 0000000000000004 R11: 0000000000000000 R12: ffffc900051d8000 [ 2158.404136][ C0] R13: 1ffff92000a3ad93 R14: 0000000000000000 R15: dffffc0000000000 [ 2158.404148][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 2158.404162][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2158.404174][ C0] CR2: 00005631fddcb168 CR3: 000000000cf32000 CR4: 00000000003506f0 [ 2158.404190][ C0] Call Trace: [ 2158.404196][ C0] [ 2158.404207][ C0] unwind_next_frame+0x1789/0x2970 [ 2158.404230][ C0] ? kthread+0x2fa/0x390 [ 2158.404248][ C0] ? kthread+0x2fa/0x390 [ 2158.404263][ C0] ? stack_trace_save+0x100/0x100 [ 2158.404285][ C0] arch_stack_walk+0x144/0x190 [ 2158.404306][ C0] ? ret_from_fork+0x48/0x80 [ 2158.404329][ C0] stack_trace_save+0xaa/0x100 [ 2158.404350][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 2158.404376][ C0] kasan_set_track+0x4e/0x70 [ 2158.404394][ C0] ? kasan_set_track+0x4e/0x70 [ 2158.404412][ C0] ? __kasan_kmalloc+0x8f/0xa0 [ 2158.404430][ C0] ? __kmalloc+0xb4/0x230 [ 2158.404453][ C0] ? ieee802_11_parse_elems_full+0xb9/0x20c0 [ 2158.404550][ C0] ? ieee80211_inform_bss+0x127/0x1080 [ 2158.404609][ C0] ? rdev_inform_bss+0x106/0x410 [ 2158.404624][ C0] ? cfg80211_inform_bss_frame_data+0xb8b/0x13d0 [ 2158.404651][ C0] ? ieee80211_bss_info_update+0x759/0x9b0 [ 2158.404673][ C0] ? ieee80211_ibss_rx_queued_mgmt+0x18ae/0x2c80 [ 2158.404691][ C0] ? ieee80211_iface_work+0x717/0xc70 [ 2158.404708][ C0] ? cfg80211_wiphy_work+0x225/0x260 [ 2158.404726][ C0] ? process_scheduled_works+0xa5d/0x15d0 [ 2158.404748][ C0] ? worker_thread+0xa55/0xfc0 [ 2158.404767][ C0] ? kthread+0x2fa/0x390 [ 2158.404803][ C0] ? ieee802_11_parse_elems_full+0xb9/0x20c0 [ 2158.404831][ C0] __kasan_kmalloc+0x8f/0xa0 [ 2158.404852][ C0] ? ieee802_11_parse_elems_full+0xb9/0x20c0 [ 2158.404879][ C0] __kmalloc+0xb4/0x230 [ 2158.404904][ C0] ieee802_11_parse_elems_full+0xb9/0x20c0 [ 2158.404932][ C0] ? lock_chain_count+0x20/0x20 [ 2158.404959][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 2158.404982][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 2158.405024][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2158.405045][ C0] ? _raw_spin_unlock+0x40/0x40 [ 2158.405073][ C0] ? __schedule_delayed_monitor_work+0xb6/0x200 [ 2158.405100][ C0] ? kvfree_call_rcu+0x55c/0x790 [ 2158.405122][ C0] ? process_scheduled_works+0xa5d/0x15d0 [ 2158.405147][ C0] ? ieee80211_queue_delayed_work+0x150/0x150 [ 2158.405174][ C0] ? cmp_bss+0x2c4/0xe70 [ 2158.405203][ C0] ieee80211_inform_bss+0x127/0x1080 [ 2158.405229][ C0] ? __cfg80211_bss_update+0x110f/0x21f0 [ 2158.405256][ C0] ? ieee80211_rx_bss_put+0x60/0x60 [ 2158.405285][ C0] ? ieee80211_rx_bss_put+0x60/0x60 [ 2158.405307][ C0] rdev_inform_bss+0x106/0x410 [ 2158.405325][ C0] cfg80211_inform_bss_frame_data+0xb8b/0x13d0 [ 2158.405362][ C0] ? cfg80211_parse_ml_sta_data+0x1ab0/0x1ab0 [ 2158.405411][ C0] ? ieee80211_bss_info_update+0x3ac/0x9b0 [ 2158.405436][ C0] ieee80211_bss_info_update+0x759/0x9b0 [ 2158.405463][ C0] ? ieee80211_inform_bss+0x1080/0x1080 [ 2158.405492][ C0] ? ieee80211_mandatory_rates+0x1cc/0x230 [ 2158.405516][ C0] ieee80211_ibss_rx_queued_mgmt+0x18ae/0x2c80 [ 2158.405543][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xe9d/0x2c80 [ 2158.405563][ C0] ? ieee80211_ibss_rx_no_sta+0x7a0/0x7a0 [ 2158.405585][ C0] ? mark_lock+0x94/0x320 [ 2158.405607][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 2158.405628][ C0] ? lock_chain_count+0x20/0x20 [ 2158.405645][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2158.405670][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 2158.405692][ C0] ? skb_dequeue+0x124/0x160 [ 2158.405771][ C0] ieee80211_iface_work+0x717/0xc70 [ 2158.405791][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 2158.405813][ C0] cfg80211_wiphy_work+0x225/0x260 [ 2158.405833][ C0] ? process_scheduled_works+0x96f/0x15d0 [ 2158.405855][ C0] process_scheduled_works+0xa5d/0x15d0 [ 2158.405891][ C0] ? worker_attach_to_pool+0x380/0x380 [ 2158.405916][ C0] ? assign_work+0x3d2/0x5d0 [ 2158.405940][ C0] worker_thread+0xa55/0xfc0 [ 2158.405980][ C0] kthread+0x2fa/0x390 [ 2158.405996][ C0] ? pr_cont_work+0x560/0x560 [ 2158.406017][ C0] ? kthread_blkcg+0xd0/0xd0 [ 2158.406033][ C0] ret_from_fork+0x48/0x80 [ 2158.406053][ C0] ? kthread_blkcg+0xd0/0xd0 [ 2158.406069][ C0] ret_from_fork_asm+0x11/0x20 [ 2158.406100][ C0] [ 2158.407280][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 2158.924023][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 2158.931245][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2158.941315][ T29] Call Trace: [ 2158.944614][ T29] [ 2158.947557][ T29] dump_stack_lvl+0x18c/0x250 [ 2158.952275][ T29] ? show_regs_print_info+0x20/0x20 [ 2158.957515][ T29] ? load_image+0x420/0x420 [ 2158.962071][ T29] panic+0x2dc/0x730 [ 2158.965985][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 2158.971643][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 2158.976181][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 2158.981790][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 2158.987989][ T29] watchdog+0xf7c/0xf80 [ 2158.992169][ T29] ? watchdog+0x1e1/0xf80 [ 2158.996631][ T29] kthread+0x2fa/0x390 [ 2159.000741][ T29] ? hungtask_pm_notify+0x90/0x90 [ 2159.005779][ T29] ? kthread_blkcg+0xd0/0xd0 [ 2159.010387][ T29] ret_from_fork+0x48/0x80 [ 2159.014842][ T29] ? kthread_blkcg+0xd0/0xd0 [ 2159.019477][ T29] ret_from_fork_asm+0x11/0x20 [ 2159.024295][ T29] [ 2159.027932][ T29] Kernel Offset: disabled [ 2159.032282][ T29] Rebooting in 86400 seconds..